GitHub
FedRAMP evidence
GitHub is a proprietary developer platform that allows developers to create, store, manage, and share their code
VerifiedGitHub and FedRAMP
GitHub is listed in the FedRAMP Marketplace for FedRAMP (FedRAMP Authorized), dated 4 Oct 2018, assessed by Coalfire Systems, Inc.. CertReports last verified this on 19 Sep 2026 from the registry.
Evidence
- Kind
- authorization
- Issued or listed
- 4 Oct 2018
- Auditor or assessor
- Coalfire Systems, Inc.
- Impact level
- LI-SaaS
- Products in scope
- GitHub Enterprise Cloud
- Scope
- Public Cloud
| Source | Captured | Quote | Links |
|---|---|---|---|
FedRAMP Marketplace Official registry · HTTP 200 | 19 Sep 2026 | GitHub - GitHub Enterprise Cloud: FedRAMP Authorized | Live pagesha256 b2bb3e031f |
What is not public
- Impact level and authorization path come from the FedRAMP data file; the package itself and the agency ATO letters are not public.
What FedRAMP means, and what it does not
Status changes often and the official Marketplace data file and its daily changelog are the source of truth. Under the FedRAMP Consolidated Rules for 2026 (in force since 4 July 2026) the official label is "FedRAMP Certified"; Marketplace rows still carry the status text as published, and "Ready" became a legacy status on 28 July 2026.
Read the FedRAMP guide and browse all vendors with evidenceQuestions buyers ask
Is GitHub FedRAMP authorized?
GitHub is listed in the FedRAMP Marketplace with status "FedRAMP Authorized" at impact level LI-SaaS as of 19 Sep 2026.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 19 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Alternatives with FedRAMP evidence
Similar vendors (shared product tags or the Developer tools category) whose FedRAMP row is verified or vendor-stated, ranked by similarity.
