FedRAMP

Arch Systems and Knox Systems made Arch’s factory data platform and AI applications available to qualified defense and regulated manufacturers inside Knox’s FedRAMP High (Class D) environment, with single-tenant and customer private-cloud deployment options. The offering creates a platform option for CUI-related factory workloads, but buyers must assess shared security responsibilities and AI-agent authorization; no contract vehicle, pricing, solicitation, or award was disclosed.

More than 550 FedRAMP-certified cloud providers must adopt risk- and exposure-based vulnerability detection and reporting by December 7, 2026, with a March 7, 2027 compliance milestone for providers using corrective action plans. Federal buyers should monitor provider authorization and remediation status as the rule may affect supplier eligibility and drive demand for cybersecurity tools and implementation support.

Fortreum has made its annual-subscription VDR/VER service, powered by Kovr, generally available to help FedRAMP-certified cloud service providers evaluate, remediate, and report vulnerabilities under requirements effective December 7, 2026. The change creates a near-term need for vulnerability assessment and compliance implementation support, with a grace period ending March 7, 2027.

Thomson Reuters says Westlaw, Practical Law and CLEAR have achieved FedRAMP certification, sponsored by the Department of Veterans Affairs and the Department of Health and Human Services. The status gives agencies additional cloud offerings to evaluate for legal research, investigations and risk management, but the announcements disclose no new solicitation, pricing or acquisition timeline.

Marlin Equity Partners made a strategic growth investment in Insight Assurance to support international expansion and growth in federal cybersecurity compliance and AI governance services. The development signals potential growth in independent assurance capacity, including CMMC- and FedRAMP-related services, but does not identify a government solicitation, award, or contract value.

Nozomi Networks announced that its cloud-based Vantage for Government OT/IoT security platform achieved FedRAMP Moderate certification, making it available for federal agencies to consider. The announcement signals market availability—not a solicitation or contract award—and provides no pricing or procurement terms.

Atlassian targets submitting its Rovo AI product for FedRAMP Moderate authorization in Atlassian Government Cloud by June 2027, followed by Impact Level 5 and FedRAMP High submissions in 2028 and 2029. These are submission targets—not authorization or availability dates—and Rovo is currently unavailable to Atlassian Government organizations.

Dropzone AI’s AI SOC Analyst achieved FedRAMP High (Class D) certification through Second Front Systems’ 2F Game Warden platform, making it eligible for federal agencies to evaluate for security operations and alert investigation. Agencies still need their own authorization and acquisition steps; no contract, funding, or procurement deadline was reported.

FedRAMP confirmed Perplexity Enterprise and API Platform as the first fully compliant 20x Class C (Moderate) service, making it available for eligible federal use. Agencies can access Enterprise Pro for Government through GSA’s OneGov offer for $0.25 per agency through March 31, 2027, but the certification does not automatically authorize every workload or CUI use case.

Saviynt announced FedRAMP Class D (High) certification for a single-boundary platform covering identity governance, privileged access management, and application access governance. The authorization adds a product option for federal agencies and contractors evaluating identity security and tool consolidation, but does not represent a contract award or active solicitation.

Veylo is pursuing FedRAMP High authorization for its AI-enabled legacy modernization platform, with federal cloud-service availability expected in early 2027. Agencies can deploy the platform within their own environments today, but the authorization is not yet held; Veylo says it plans to pursue DoD Impact Level 5 and 6 authorizations afterward.

Rep. Rich McCormick introduced legislation directing NIST to update cloud security standards, including guidance on AI-based threat detection, device-linked identity protections, and third-party software monitoring. If enacted, the bill would align FedRAMP with revised standards and create a voluntary certification program, but it is not a procurement opportunity and specifies no funding or implementation timeline.

DigiCert for Government has entered the FedRAMP Marketplace at initial implementation status, listing three DigiCert ONE services as the company pursues FedRAMP 20x Class C certification. The listing is not an authorization or contract award; acquisition teams should verify current status and service scope before relying on the offerings for federal requirements.

The proposed EU Cloud and AI Development Act would create four cloud-sovereignty assurance levels for public-sector procurement, with potential requirements for data location, foreign access, and service continuity. Contractors serving European and U.S. markets should assess the proposal separately from U.S. FOCI and FedRAMP obligations; the analysis also notes proposed FOCI-related provisions for certain unclassified Department of War work above $5 million.

Trimble for Government is listed on the FedRAMP Marketplace at Initial Implementation status for Class C (Moderate), a milestone for agencies assessing its cloud software. Trimble is still pursuing full FedRAMP and GovRAMP authorization; the announcement includes no contract award, solicitation, or procurement commitment.

Dynatrace says it has reached Initial Implementation status for FedRAMP Class D High, a step that could strengthen its positioning for federal workloads involving sensitive data. This is not a completed authorization or an active procurement: the report identifies no solicitation, award, contract value, or acquisition timeline.

Palantir Technologies and Knox Systems announced a partnership to help deliver commercial software to U.S. government customers in FedRAMP- and IL5-regulated cloud environments. Knox says its authorization path can achieve FedRAMP authorization in 90 days or less, but the announcement disclosed no government award, solicitation, or contract value.

Anthropic's Claude for Government is now available for U.S. federal and state agencies, authorized under FedRAMP High. This allows agencies to utilize AI capabilities in secure environments with a usage-based pricing model and no seat fees, providing significant procurement flexibility.

Leidos is extending its partnership with ServiceNow, deploying their AI Platform to fully automate IT workflows. This initiative is expected to save the company **$3 million annually**, reduce incident resolution times, and automate **60% of IT tickets** while ensuring compliance with **FedRAMP** standards.

CISO Global has automated and expanded its FedRAMP-certified TiGRIS platform to address complex compliance needs of federal clients. The integration of generative AI capabilities positions TiGRIS as a critical tool for contractors looking to enhance compliance operations and reduce risks in line with evolving federal standards.

Vanta has achieved FedRAMP 20x Class C certification for its Government Cloud platform, improving access for federal agencies. The certification supports IT modernization efforts and enhances compliance for contractors and resellers focused on cybersecurity and risk management.

Bentley Systems has received FedRAMP authorization for its ProjectWise and OpenGround platforms, thanks to sponsorship from the U.S. Army Corps of Engineers (USACE). This important certification streamlines procurement for federal agencies looking to leverage secure cloud-based solutions in their construction and infrastructure projects.

Schellman is the first FedRAMP 3PAO to assess 200 cloud services, enhancing its role in federal cybersecurity. This achievement is critical for federal agencies and contractors as it signals trusted options for navigating FedRAMP compliance and authorization processes.

Carahsoft Technology Corp. has launched a FedRAMP Buyer’s Guide that outlines critical updates related to OMB Memorandum M-24-15. This resource will assist procurement professionals in navigating FedRAMP requirements and authorization pathways, promoting effective cloud adoption in federal agencies while ensuring compliance with security standards.