FedRAMP Cybersecurity Companies
Cybersecurity vendors holding FedRAMP certification. Compare capability scores, deployment models, and more.
Veracode
United States
Application risk management platform: SAST, DAST, SCA, container and supply chain security, ASPM and AI-powered code remediation, delivered as SaaS.
Checkmarx
United States
Agentic AI application security platform (Checkmarx One): SAST, SCA, supply chain, IaC, container, API, DAST and ASPM for code written by humans and AI.
Illumio
United States
Breach containment platform pairing AI-powered cloud detection and response with microsegmentation to stop lateral movement across hybrid clouds.
Wiz
United States
Agentless cloud-native application protection platform connecting code, cloud and runtime in one security graph, with AI agents; now part of Google Cloud.
Microsoft
United States
Unified security across identity, endpoint, cloud, data, and SIEM/XDR via Microsoft Defender, Sentinel, Entra, and Purview.
Snyk
United States
Developer-first application security platform for code, open source, containers, IaC, APIs and AI-generated code and agents.
Delinea
United States
Cloud-native identity security platform for privileged access: vaulting, privilege control, governance and runtime authorization for AI agents.
HackerOne
United States
Continuous threat exposure management combining a global hacker community and agentic AI: bug bounty, pentest, AI red teaming, VDP and remediation.