AI-powered cloud security platform (CNAPP) for agentless workload and cloud posture risk detection.
Best GovRAMP compliance AI agents
GovRAMP is a nonprofit membership organization with a standardized, NIST-aligned framework for verifying the security of cloud services and third-party technology used by government (state, local, tribal, education).
Official hub with sources and tag rules: GovRAMP framework hub. Tag only when GovRAMP's Authorized Product List shows the listed product (or the government boundary the listing already documents) as Authorized. Ready / Core / Provisionally Authorized / Progressing / Pending / In Process and platform-only listings are shown on the hub but not tagged.
Key facts (official sources)
Last checked 2026-10-18.
- GovRAMP is a nonprofit membership organization with a standardized, NIST-aligned framework for verifying the security of cloud services and third-party technology used by government (state, local, tribal, education). Source
- StateRAMP announced on 14 Feb 2025 that it operates as (dba) GovRAMP; StateRAMP remains the legal entity and existing certifications continue. Source
- Statuses on the Authorized Product List (APL): Core (validated by the GovRAMP PMO), Ready, Provisionally Authorized, Authorized (independent 3PAO assessment; 3PAOs are A2LA-accredited); impact levels Low/Moderate/High; verified providers are continuously monitored. The Progressing Product List (PPL) covers products working toward a status (Active, In Process, Pending, Progressing, Not Progressing). Source
Listed: agents tagged GovRAMP in our dataset, compliance-category first, then by number of framework tags. Tags mean relevance, not certification; check each vendor's claims. Order is mechanical, not a paid ranking.
Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized.
Enterprise workflow platform whose AI agents (Coach, Knowledge Buddy, Automate, developer agents and the Blueprint design agent) run on Pega's trusted workflows; Pega Cloud for Government, including these gen AI agents, is FedRAMP High authorized.
Agentic AI security analyst in the Singularity platform that runs alert investigations to a verdict and, with Singularity Hyperautomation, triggers response within pre-approved policies; SentinelOne says Purple AI is FedRAMP High authorized.
Vendor platform certified; agent scope not stated by the vendor
These GovRAMP registry records are not tagged on the listing (platform-only or a status that is not Authorized / Level 1 / Level 2). Full sources are on the GovRAMP hub.
- Appian Agent Studio (AI agents) — Appian Cloud: Authorized · vendor platform; agent scope not stated
- Black Kite AI Agent — Black Kite Third Party Risk Intelligence: Ready · vendor platform; agent scope not stated
- CrowdStrike Charlotte AI — CrowdStrike Falcon Platform for Government: Authorized · vendor platform; agent scope not stated
- Darktrace Cyber AI Analyst — Cyber AI Mission Defense and Email Protection (Darktrace Federal): In Process (Progressing Product List) · vendor platform; agent scope not stated
- GitLab Duo Vulnerability Resolution — GitLab Dedicated for Government: Authorized · vendor platform; agent scope not stated
- SecurityScorecard — Ratings Cloud Service: Ready · vendor platform; agent scope not stated
- Snyk — Snyk for Government: Pending (Progressing Product List) · vendor platform; agent scope not stated
- Tenable One (Hexa AI) — Tenable Government Solutions: Authorized · vendor platform; agent scope not stated
- TrendAI Vision One Agentic SIEM and Companion — Trend Micro Vision One for Government: Authorized · vendor platform; agent scope not stated
- UiPath Autopilot / agents — UiPath Automation Cloud Public Sector: Authorized · vendor platform; agent scope not stated
- Veracode Fix — Veracode Online Security Platform for Government: Authorized · vendor platform; agent scope not stated
- Wiz — Wiz Moderate for U.S. Government: Authorized · vendor platform; agent scope not stated
- Workiva Agent Studio (finance, audit and GRC agents) — Workiva Platform: Authorized · vendor platform; agent scope not stated
Use-case comparisons
- AI SOC and security-analyst agents — 20 listings
- US public-sector and FedRAMP AI agents — 15 listings
Popular comparisons
- Abnormal AI Security Mailbox (Abnormal AI for Government) vs Orca Security
- Abnormal AI Security Mailbox (Abnormal AI for Government) vs SentinelOne Purple AI (agentic AI security analyst)
- Orca Security vs SentinelOne Purple AI (agentic AI security analyst)