Marketplace momentum: Kiro, Asana, Secureframe, Anecdotes, Swimlane, SAP NS2, Siemens, Vasion, Quest Software, Artera, Delinea, OpenAI, Vanta, Sift, Splunk, Checkmarx One, Amazon Managed Grafana, Tenable, CTERA, CoLab, Infoblox, Presage, InfusionPoints, Cohere, IBM Maximo, Vectra AI, and others drive FedRAMP authorizations
Key Questions
Which companies recently achieved new FedRAMP authorizations?
Recent authorizations include Kiro (High + DoD IL-4/5), Asana (Moderate), Secureframe (20x Moderate), Anecdotes (20x Class C), Swimlane (High), SAP NS2 (IL5), OpenAI (Moderate on Azure Gov), Splunk (High), Vanta (20x Class C), Amazon Managed Grafana (High), and Tenable (High + IL5).
How does the Knox partnership accelerate FedRAMP authorizations?
Knox Systems partnered with Microsoft to scale Azure FedRAMP from 20 to 70 customers targeting 100, offering a 90-day path to production-ready environments. It provides managed ATO paths across Classes B/C/D and DoD IL2-IL6 via the ATO Accelerator for Azure Government.
What is the current count of FedRAMP High SaaS providers?
Only 82 High SaaS providers currently exist, underscoring ongoing scarcity despite new entries like Siemens, Vasion, Quest Software, Splunk, and CoLab. This contributes to the marketplace momentum but highlights the 30,000-app gap.
Which new tools support GRC and compliance automation under 20x?
Vanta achieved 20x Class C as a GRC automation platform, Anecdotes launched the first agentic GRC at 20x Class C, and C1Secure introduced SmartRAMP 20x on ServiceNow. These validate 20x for compliance tools and support continuous evidence pipelines.
How do recent authorizations address AI and observability needs?
OpenAI's Moderate authorization on Azure Gov validates 20x for AI like ChatGPT Enterprise, while Swimlane (first AI SOC High), Amazon Managed Grafana (High), and Splunk Victoria Experience (High) add observability and SIEM capabilities to the marketplace.
Cohere FedRAMP High now distributed via Carahsoft, reinforcing federal AI market access. New entries: Tractian High via Knox, VisibleThread, Partos for Government, ElevenLabs, Enablement, Corelight 'In Process', TeamViewer DEX, Acsense, Sierra, Vannevar, Sweet Security, LeapXpert, Freshworks, Minuet, Acquia renewed, Clearview AI GovCloud High 'In Process', Valid8 Financial 'In Process'. New: DSS Health Cloud achieves FedRAMP High (Class D) as first VA solutions provider. Omnissa expands Workspace ONE FedRAMP offerings with DEX, server management, VR/AR/XR. Knox-Microsoft partnership scaling from 20 to 70 customers. Second Front Systems ATO Accelerator for Azure Government. InfusionPoints 20x Class C. Palantir FedStart offers alternative path. Marketplace pipeline strong with nearly 30 listing forms submitted. OpenAI's GPT-5.6 series now live for government under existing FedRAMP Moderate authorization, with OneGov distribution. DoD cloud requirements article reinforces FedRAMP as baseline for DoD market. New: KODE OS achieves FedRAMP High via Palantir FedStart, deployed in 150 GSA buildings under $14.35M contract. New: Pega expands Class D certified capabilities with AI workflow, adding to marketplace momentum. New: IBM Maximo Application Suite achieves FedRAMP authorization, adding to marketplace momentum. New: Vectra AI achieves FedRAMP High authorization via Knox partnership, bringing AI-native security to federal agencies. FedRAMP High supply crisis: $11B FY24 federal cloud spend, 40% High shortages, AI workloads bottlenecked by ATO delays. FSCAC seeks roadmap. Knox-Microsoft partnership and DISA UCM expansion seen as relief.