Skip to content

Standard

FedRAMP

US government program that certifies cloud services meet federal security standards, enabling agencies to adopt vendors' cloud offerings.

Known aliases

  • Federal Risk and Authorization Management Program
  • FedRAMP authorization
  • FedRAMP-authorized
  • FedRAMP High
  • FedRAMP Marketplace

Current stories

buildOne report1 publisher

Tranquility puts its investigative AI on Knox's FedRAMP High cloud for federal teams

Tranquility AI says federal investigators can now use its investigative tools through Knox Systems' FedRAMP High cloud. The listing names Knox's platform alone, so agencies still have to check how TimePilot and HelioTrace run inside its authorization boundary.

Publishers:runtimewire.com

Reality

Evidence45
Adoption10
Hype gap+35
Incentives75
Confidence55
securityOne report1 publisher

SailPoint's agent tools trade permanent access keys for temporary permissions

SailPoint added AI agent discovery and automated access cleanup to its identity platform, aimed at the 79% of enterprises it says run agents in production. Existing customers can bring agent credentials under the platform that governs their staff, on SailPoint's evidence alone so far.

Reality

Evidence25
Adoption
Not scored
Hype gap+55
Incentives85
Confidence35
buildConfirmed4 publishers

Anthropic sells FedRAMP High Claude to US agencies in prepaid blocks under a hard cap

Anthropic made Claude for Government generally available to US federal and state agencies under FedRAMP High, sold in prepaid blocks with no seat fees. A hard cap fixes the bill, so teams now plan for blocks running out mid-month and for chat records kept on agency devices.

Perspective Coverage

4 publishers
Builder
Builder 30%
Operator
Operator 50%
Investor
Investor 20%

Reality

Evidence62
Adoption
Not scored
Hype gap+15
Incentives65
Confidence60
productConfirmed3 publishers

Investors value Flow Engineering at $750 million for AI agents that check hardware designs

Flow Engineering raised a $50 million Series B at a $750 million valuation for AI agents that check hardware designs against requirements. The months-to-days speedup is Flow's own figure, so buyers should test it against how long their own design changes take to verify.

Perspective Coverage

3 publishers
Builder
Builder 30%
Operator
Operator 27%
Investor
Investor 43%

Reality

Evidence55
Adoption58
Hype gap+30
Incentives70
Confidence60
investConfirmed3 publishers

Flow Engineering's $750 million valuation leans on customer signal from Rivian and other clients

Flow Engineering raised $50 million at a $750 million valuation to sell AI agents that track and verify hardware design changes. Its only quantified usage comes from Rivian and counts seats and API calls, while the promised cut in design cycles from months to days is still a stated goal.

Perspective Coverage

3 publishers
Builder
Builder 31%
Operator
Operator 22%
Investor
Investor 47%

Reality

Evidence25
Adoption45
Hype gap+40
Incentives80
Confidence55
securityOne report1 publisher

FedRAMP's December 7 rules shrink the worst-case remediation window to 12 hours

FedRAMP will require daily vulnerability scans at Class D and fixes in as little as 12 hours from December 7, 2026, with a grace period to March 7, 2027. Failures in the detection pipeline now count as vulnerabilities themselves.

Reality

Evidence62
Adoption
Not scored
Hype gap+18
Incentives68
Confidence55
buildOne report1 publisher

Eleven variants of one shell script launched years-old images into a FedRAMP cluster

The fix was a single new image tag, and it had to land on hundreds of laptops with no channel back to them. That requirement is what pushed a platform team off bash and onto a self-updating Go binary.

Publishers:dev.to

Reality

Evidence34
Adoption22
Hype gap+8
Incentives26
Confidence44
leadershipOne report1 publisher

FedRAMP's staffing conditions make federal SaaS revenue a hiring decision

Corelight's CISO writes that customers now grade suppliers on how their own security operations use AI, while FedRAMP gates federal SaaS sales on round-the-clock support and US-based employees. A June directive adds a 72-hour clock.

Publishers:forbes.com

Reality

Evidence33
Adoption
Not scored
Hype gap+22
Incentives76
Confidence54
productOne report1 publisher

Amazon's cure for shadow AI ships on the desktop from outside its European sovereign cloud

AWS has made the Quick desktop assistant generally available on macOS and Windows and pitched it to IT as the sanctioned answer to shadow AI. It runs in Frankfurt, London and Ireland, and not in the Brandenburg sovereign cloud.

Publishers:thenextweb.com

Reality

Evidence55
Adoption34
Hype gap+28
Incentives74
Confidence55
buildOne report1 publisher

Amazon pitches the Quick desktop app to IT as containment for shadow AI

The argument AWS makes to IT for its newly general desktop assistant is that unapproved tools already move data out of controlled environments, and its answer is audit trails in CloudWatch and CloudTrail plus four named certifications.

Publishers:aws.amazon.com

Reality

Evidence26
Adoption24
Hype gap+46
Incentives93
Confidence62
productOne report1 publisher

CloudNC raises $20mn for commercial expansion, with pricing agent due later this year

CAM Assist already runs in more than 1,000 machine shops, where a machinist checks its work before anything is cut. The new money funds Quote Agent, whose output nobody inspects until the invoice.

Publishers:thenextweb.com

Reality

Evidence44
Adoption52
Hype gap+14
Incentives72
Confidence55
buildOne report1 publisher

Anthropic's federal ban falls on a record that failed the supply-chain statute

Judge Rita Lin ordered the administration to restore Anthropic's eligibility for federal agencies. The availability of a model vendor is now something a court can review. This review ran from March into August.

Publishers:runtimewire.com

Reality

Evidence54
Adoption52
Hype gap+12
Incentives66
Confidence50
productOne report1 publisher

MinIO went dark on 13 February. Docker will keep patching it until 2031, for a fee.

Archiving a project with a billion Docker pulls turned an object store into an audit finding. Docker's extended support does not remove the migration, it moves the deadline out to 2031.

Publishers:docker.com

Reality

Evidence28
Adoption24
Hype gap+34
Incentives92
Confidence32
securityOne report1 publisher

CMMC Phase 2 Assessments Are Paused. The False Claims Act Is Not.

Kiteworks found 96% of defense contractors trust their self-attested SPRS score and 29% can substantiate it. The DFARS duty to attest accurately never stopped when the third-party audits did.

Publishers:securityweek.com

Reality

Evidence54
Adoption63
Hype gap+22
Incentives80
Confidence55