How-to
How to Get GovRAMP Certified: Tiers, Core and Authorization
Solomon Amos · 19 Oct 2026 · 9 min read
authorization
FedRAMP evidence across 563 vendors
FedRAMP status is the one compliance state with a daily official data file. CertReports syncs the FedRAMP Marketplace data and its status changelog every day, records the authorization date, impact level, authorization path and 3PAO, and emits a change event when a status moves.
- Verified rows
- 563
- Vendor-stated
- 19
- Expired
- 0
- Last verified
- 4 Nov 2026
Asana
Project management
From the small stuff to the big picture, Asana organizes work so teams know what to do, why it matters, and how to get it
Cyera
Security
The Cyera Data Security system allows organizations to discover data categories and ensure that they are protected according to
Qualtrics
Form builders and surveys
Qualtrics is a Software-as-a-Service (SaaS) who provides a platform for creating and distributing online surveys, performing employee
Qualys
Compliance and GRC
Qualys, Inc. is an American technology firm based in Foster City, California, specializing in cloud security, compliance and related
GitLab
Developer tools
A complete DevOps platform delivered as a single application.
Workday
HR and HRIS
Experience a new way to work with Sana and agentic AI from
Lookout
Security
Lookout is a private IT security company headquartered in San Francisco
Figma
Design tools
Figma is a design platform for teams who build products
MongoDB
Data platforms
MongoDB is a source-available, cross-platform, document-oriented database program
Zscaler
Security
Zscaler was founded in 2008 on a simple but powerful concept: as applications move to the cloud, security needs to move there as
VA
Varonis
varonis.com
Varonis (Nasdaq: VRNS) secures AI and the data that powers
Axon
Government and public sector
Axon Enterprise, formerly known as TASER International, creates connected technologies for truth in public
F5
Logistics and supply chain
F5 is a global leader in application delivery and security, offering services that optimize, protect, and ensure the availability of apps
Mimecast
Security
Mimecast provides email management as a single service in the cloud that helps customers slash on-premise email storage requirements
SentinelOne
Security
SentinelOne is redefining cybersecurity by pushing the boundaries of autonomous
Ironclad
Legal tech
AI-powered contract management
Iron Mountain
Cloud storage
Offsite storage facility of the United States National Archives and Records Administration
Dynatrace
DevOps and observability
Dynatrace considers itself as the leader in digital performance management (DPM) and the innovator behind digital performance
New Relic
DevOps and observability
New Relic is a software analytics company that makes sense of billions of metrics about millions of applications in real
Rubrik
Security
Rubrik is a cybersecurity company, and our mission is to secure the world’s
UKG
HR and HRIS
HR, Payroll, & Workforce Management
Netskope
Security
Netskope™, the leading cloud access security broker (CASB), helps enterprises find, understand and secure sanctioned and unsanctioned cloud
Red Hat
Cloud and hosting
OpenShift is Red Hat's free, auto-scaling Platform as a Service (PaaS) for
AvePoint
Cloud storage
AvePoint is a public company headquartered in Jersey City, New Jersey, United States
Statuses in 2026
The marketplace carries FedRAMP Authorized, FedRAMP In Process, Agency In Process and legacy FedRAMP Ready, with 20x authorizations at Low and Moderate appearing alongside Rev5 packages. Legacy Ready is being retired.
What the package contains
The authorization package and agency ATO letters are not public. The data file gives status, dates, impact level, 3PAO and reuse counts.
Guides on FedRAMP
All articlesAnalysis
GovRAMP vs FedRAMP vs StateRAMP: what each one actually checks
Solomon Amos · 18 Oct 2026 · 9 min read