AI-powered cloud security platform (CNAPP) for agentless workload and cloud posture risk detection.
GovRAMP (formerly StateRAMP)
GovRAMP is a nonprofit membership organization with a standardized, NIST-aligned framework for verifying the security of cloud services and third-party technology used by government (state, local, tribal, education).
Tag only when GovRAMP's Authorized Product List shows the listed product (or the government boundary the listing already documents) as Authorized. Ready / Core / Provisionally Authorized / Progressing / Pending / In Process and platform-only listings are shown on the hub but not tagged.
Key facts (official sources)
Last checked 2026-10-18. Every sentence links to an official source in the dataset.
- GovRAMP is a nonprofit membership organization with a standardized, NIST-aligned framework for verifying the security of cloud services and third-party technology used by government (state, local, tribal, education). Source
- StateRAMP announced on 14 Feb 2025 that it operates as (dba) GovRAMP; StateRAMP remains the legal entity and existing certifications continue. Source
- Statuses on the Authorized Product List (APL): Core (validated by the GovRAMP PMO), Ready, Provisionally Authorized, Authorized (independent 3PAO assessment; 3PAOs are A2LA-accredited); impact levels Low/Moderate/High; verified providers are continuously monitored. The Progressing Product List (PPL) covers products working toward a status (Active, In Process, Pending, Progressing, Not Progressing). Source
Official sources: govramp.org/ · govramp.org/about/ · govramp.org/program-participants · govramp.org/news/blog/stateramp-announces-rebrand-to-govramp-reflecting-mission-to-unite-public-and-private-sectors-in-advancing-cybersecurity
Related US government programs: FedRAMP · CMMC · TX-RAMP · US public-sector and FedRAMP comparison
Use-case comparisons with 2+ listings tagged GovRAMP: AI SOC and security-analyst agents · US public-sector and FedRAMP AI agents
Agents tagged for GovRAMP
4 listings. Tags indicate relevance for evaluation — not a certification that the vendor “implements” the law.
Enterprise workflow platform whose AI agents (Coach, Knowledge Buddy, Automate, developer agents and the Blueprint design agent) run on Pega's trusted workflows; Pega Cloud for Government, including these gen AI agents, is FedRAMP High authorized.
Agentic AI security analyst in the Singularity platform that runs alert investigations to a verdict and, with Singularity Hyperautomation, triggers response within pre-approved policies; SentinelOne says Purple AI is FedRAMP High authorized.
Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized.
Vendor platform certified; agent scope not stated by the vendor
These GovRAMP records are in official registries but are not tagged on the listing: the certified product is a vendor platform or another product line (scope “platform-only”), or the published status is not Authorized / Level 1 / Level 2 (Ready, Pending, In Process, Provisional). Last checked 2026-10-18.
| Listing | Registry product | Status | Impact / id | Scope | Source |
|---|---|---|---|---|---|
| Appian Agent Studio (AI agents) | Appian Cloud | Authorized | Moderate | Vendor platform; agent scope not stated | Registry |
| Black Kite AI Agent | Black Kite Third Party Risk Intelligence | Ready | Moderate | Vendor platform; agent scope not stated | Registry |
| CrowdStrike Charlotte AI | CrowdStrike Falcon Platform for Government | Authorized | High | Vendor platform; agent scope not stated | Registry |
| Darktrace Cyber AI Analyst | Cyber AI Mission Defense and Email Protection (Darktrace Federal) | In Process (Progressing Product List) | — | Vendor platform; agent scope not stated | Registry |
| GitLab Duo Vulnerability Resolution | GitLab Dedicated for Government | Authorized | Moderate | Vendor platform; agent scope not stated | Registry |
| SecurityScorecard | Ratings Cloud Service | Ready | Moderate | Vendor platform; agent scope not stated | Registry |
| Snyk | Snyk for Government | Pending (Progressing Product List) | Moderate | Vendor platform; agent scope not stated | Registry |
| Tenable One (Hexa AI) | Tenable Government Solutions | Authorized | Moderate | Vendor platform; agent scope not stated | Registry |
| TrendAI Vision One Agentic SIEM and Companion | Trend Micro Vision One for Government | Authorized | Moderate | Vendor platform; agent scope not stated | Registry |
| UiPath Autopilot / agents | UiPath Automation Cloud Public Sector | Authorized | Moderate | Vendor platform; agent scope not stated | Registry |
| Veracode Fix | Veracode Online Security Platform for Government | Authorized | Moderate | Vendor platform; agent scope not stated | Registry |
| Wiz | Wiz Moderate for U.S. Government | Authorized | High | Vendor platform; agent scope not stated | Registry |
| Workiva Agent Studio (finance, audit and GRC agents) | Workiva Platform | Authorized | Moderate | Vendor platform; agent scope not stated | Registry |
Best GovRAMP AI agents (mechanical listing order, not a ranking) · All frameworks