FedRAMP-Compliant Security Vendors
Security vendors that hold FedRAMP certification
Okta
21/32Identity and access management platform providing secure authentication, authorization, and single sign-on for enterprises.
FedRAMP High and Moderate authorized
CrowdStrike
17/32Cloud-native endpoint protection platform providing threat intelligence, incident response, and cybersecurity solutions.
FedRAMP High authorized
Wiz
13/32Cloud-native application protection platform (CNAPP) for cloud security.
High
Splunk
11/32Data platform for security, observability, and IT operations (SIEM, log analytics), owned by Cisco.
Moderate and High
Netskope
11/32Security service edge (SSE) and cloud security platform (CASB, SWG, ZTNA).
High
Palo Alto Networks
10/32Cybersecurity platform spanning network security, cloud security, and SOC automation.
Proofpoint
10/32Email security, threat protection, and data loss prevention platform.
Orca Security
10/32Agentless cloud security platform (CNAPP) for cloud workload and configuration risk.
Moderate
Keeper
9/32Password management and privileged access security platform.
SentinelOne
8/32AI-powered endpoint, cloud, and identity security (XDR) platform.
High
KnowBe4
8/32Security awareness training and simulated phishing platform.
Moderate ATO since Nov 2023
Snyk
7/32Developer security platform for finding and fixing vulnerabilities in code, containers, and cloud infrastructure.
FedRAMP Rev. 5
Rapid7
7/32Vulnerability management, detection, and response (SIEM/XDR) security platform.
FedRAMP In Process / Authorization achieved for InsightGovCloud specifically, per separate press releases
Tenable
6/32Exposure management and vulnerability management platform.
Tenable One VM and Web App Scanning, since 2021
Trend Micro
6/32Cybersecurity platform for endpoint, cloud, and network security.
Trend Cloud One / Vision One for Government
Ivanti
4/32IT and unified endpoint management, security, and service management software.
Veracode
3/32Application security testing platform (SAST, DAST, SCA).
Keeper Security
2/32Password manager and privileged access management platform for enterprises.
High Authorization
Cisco Duo
1/32Multi-factor authentication (MFA) and zero-trust access security platform from Cisco.
FedRAMP Authorized, FIPS-compliant via DHS CDM program
These security vendors do not currently hold FedRAMP certification:
- 1Password
- Zscaler (not documented)
- Fortinet (not documented)
- Check Point (not documented)
- Qualys (not documented)
- Mimecast (not documented)
- Auth0 (not documented)
- OneLogin (not documented)
- Ping Identity (not documented)
- JumpCloud (not documented)
- LastPass (not documented)
- Dashlane (not documented)
- Bitwarden (not documented)
- Lacework (not documented)
- Darktrace (not documented)
- Varonis (not documented)
- Cybereason (not documented)
- VMware Carbon Black (not documented)
- McAfee (not documented)
- Symantec (not documented)
- Sophos (not documented)
- Bitdefender (not documented)
- ESET (not documented)
- Malwarebytes (not documented)
- Tailscale (not documented)
- Checkmarx (not documented)
- GitGuardian (not documented)
- Semgrep (not documented)
- Clerk (not documented)
- WorkOS (not documented)
Know a vendor we're missing?