How-to
How to Get GovRAMP Certified: Tiers, Core and Authorization
Solomon Amos · 19 Oct 2026 · 9 min read
authorization
FedRAMP evidence across 563 vendors
FedRAMP status is the one compliance state with a daily official data file. CertReports syncs the FedRAMP Marketplace data and its status changelog every day, records the authorization date, impact level, authorization path and 3PAO, and emits a change event when a status moves.
- Verified rows
- 563
- Vendor-stated
- 19
- Expired
- 0
- Last verified
- 4 Nov 2026
Armis
Manufacturing and industrial
Armis is the first agentless, enterprise-class security platform to address the new threat landscape of unmanaged and IoT
Databricks
Data platforms
Databricks offers a unified platform for data, analytics and
Island
Security
Govern human and AI workflows with Island’s Enterprise Agentic Control
Trend Micro
Security
Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital
Proofpoint
Security
Proofpoint, Inc. is an American enterprise cybersecurity company based in Sunnyvale, California that provides software as a service and
Diligent
Compliance and GRC
Diligent's trusted GRC software helps boards and leaders clarify risk, elevate governance, and manage compliance in one secure, AI-powered
Splunk
DevOps and observability
Splunk Inc. is a subsidiary of Cisco Systems that produces software for indexing, searching, and analyzing machine-generated data, allowing
A-LIGN
Compliance and GRC
Find out why A-LIGN is trusted by over 6,400 clients for efficient, reliable audits that meet rigorous compliance
Ramp
Finance and accounting
Make expense management easy with Ramp's spend management
KnowBe4
Education
Everything you need to reduce human risk and secure your agents all in one platform: Security Awareness Training, Email Security, Agent
Halcyon
Security
Halcyon is the cyber resilience platform that Global 2000 companies rely upon to defeat ransomware-as-a-service-borne
Autodesk
Design tools
Autodesk, Inc. is an American multinational software corporation that provides software products and services for the architecture
Palo Alto Networks
Research and data providers
Implement Zero Trust, Secure your Network, Cloud workloads, Hybrid Workforce, Leverage Threat Intelligence & Security
BeyondTrust
Identity and access
BeyondTrust Corporation is an American company that develops privileged access management (PAM) and vulnerability management software
HP
Manufacturing and industrial
Learn about HP printers, laptops, desktops and more at the Official HP®
TeamViewer
IT management
In 2005, a small company based in Southern Germany invented a software to connect to their customers’ computers and showcase new
Egnyte
Cloud storage
Egnyte is the only file sharing platform that adheres to data gravity - the simple idea that not all files were meant to be "up in the
PagerDuty
DevOps and observability
Real-time visibility into critical apps and services all in one place.
Ivanti
IT management
The trusted data authority for AI-driven, autonomous endpoint
Thomson Reuters
thomsonreuters.com
Thomson Reuters delivers technology with purpose — empowering professionals to make faster decisions, gain sharper insights, and deliver
ESRI
Analytics
Esri’s GIS software is the most powerful mapping & spatial analytics technology
LaunchDarkly
Developer tools
LaunchDarkly helps teams safely manage code and AI agents in production with feature flags, progressive delivery, automated rollback, and
Nuance
Productivity
Transform workflows, boost productivity, and drive results more effectively than ever, thanks to industry-leading AI, security, and
Trellix
Media and content
Trellix was a software company whose products allowed web users to set up personal websites with the use of online publishing tools
Statuses in 2026
The marketplace carries FedRAMP Authorized, FedRAMP In Process, Agency In Process and legacy FedRAMP Ready, with 20x authorizations at Low and Moderate appearing alongside Rev5 packages. Legacy Ready is being retired.
What the package contains
The authorization package and agency ATO letters are not public. The data file gives status, dates, impact level, 3PAO and reuse counts.
Guides on FedRAMP
All articlesAnalysis
GovRAMP vs FedRAMP vs StateRAMP: what each one actually checks
Solomon Amos · 18 Oct 2026 · 9 min read