Enterprise GRC platform with built-in agents for evidence analysis, control assessment, risk enrichment and findings extraction, plus an Agent Studio for custom GRC agents and agentic TPRM.
FedRAMP (United States)
The US Federal Risk and Authorization Management Program is the government-wide program that provides a standardized approach to security assessment, authorization and continuous monitoring for cloud products used by US federal agencies. Listings tagged here appear as FedRAMP Authorized on the official FedRAMP Marketplace (not merely vendor marketing).
The frameworks tag is used only when the FedRAMP Marketplace lists the product (or the cloud offering the vendor documents as the boundary for the agent) as FedRAMP Authorized. Vendor-only FedRAMP claims, Ready packages, and in-process listings stay in frameworks_claimed. Authorization of a Government Cloud package is not a ranking or an endorsement of the agent.
Use-case comparisons with 2+ listings tagged FedRAMP: US public-sector and FedRAMP AI agents
Agents tagged for FedRAMP
6 listings. Tags indicate relevance for evaluation — not a certification that the vendor “implements” the law.
Generally available Agent Studio for deploying AI agents inside Appian processes that reason over enterprise data and act under platform guardrails; Appian Government Cloud is FedRAMP High authorized.
Continuous controls monitoring platform whose RegML AI agents monitor controls, collect evidence, draft control documentation and trigger remediation for FedRAMP, CMMC and NIST programmes; RegScale CCM is FedRAMP High authorized.
CMMC- and NIST 800-171-focused GRC platform whose AI agents auto-map evidence to assessment objectives (Evan) and run automated control gap assessments with remediation steps (Alfie); FedRAMP 20x Low authorized.
A
Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.
Pre-built Agentforce agents for federal, state and local government, covering complaint management, benefits and licensing, code-violation compliance and internal IT compliance; Salesforce says Agentforce is FedRAMP High authorized in Government Cloud Plus.