Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages.
TX-RAMP (Texas)
TX-RAMP is run by the Texas Department of Information Resources (DIR): a standardized approach for security assessment, certification and continuous monitoring of cloud computing services that process the data of Texas state agencies.
Tag only when Texas DIR's TX-RAMP Certified Cloud Products list (updated 13 Oct 2026) shows the listed product (or the documented government boundary) at Level 1 or Level 2. Provisional and platform-only entries are shown on the hub but not tagged. DIR notes publishing issues: products missing from the list may not have lost certification, so this hub never says a vendor is not TX-RAMP certified.
Key facts (official sources)
Last checked 2026-10-18. Every sentence links to an official source in the dataset.
- Run by the Texas Department of Information Resources (DIR): a standardized approach for security assessment, certification and continuous monitoring of cloud computing services that process the data of Texas state agencies. Source
- Applies to state agencies, institutions of higher education and public community colleges (Texas Government Code 2054.003(13)); only cloud computing services as defined in Texas Government Code 2054.0593(a) are in scope. Source
- Level 1: public/non-confidential information or low-impact systems (Level 1 assessment, or evidence of StateRAMP Category 1 / FedRAMP Low). Level 2: confidential/regulated data in moderate or high impact systems (Level 2 assessment, or StateRAMP Category 2 / FedRAMP Moderate). Source
- Provisional status lets an agency contract for a product for up to 18 months without full certification; the product must be certified within that period. Source
- The certified-products spreadsheet was last updated 13 Oct 2026. DIR notes publishing issues: products missing from the list may not have lost certification (verify with TX-RAMP@dir.texas.gov). Source
Official sources: dir.texas.gov/information-security/texas-risk-and-authorization-management-program-tx-ramp · dir.texas.gov/information-security/texas-risk-and-authorization-management-program-tx-ramp/tx-ramp-eligibility · dir.texas.gov/resource-library-item/tx-ramp-certified-cloud-products
Related US government programs: FedRAMP · CMMC · GovRAMP · US public-sector and FedRAMP comparison
Use-case comparisons with 2+ listings tagged TX-RAMP: AI SOC and security-analyst agents · TPRM and vendor-risk AI agents · Privacy operations AI agents · US public-sector and FedRAMP AI agents · Cloud security (CNAPP) AI agents · AI governance agents and platforms
Agents tagged for TX-RAMP
19 listings. Tags indicate relevance for evaluation — not a certification that the vendor “implements” the law.
AI governance platform for policy packs, model risk and responsible AI compliance including EU AI Act and NIST AI RMF oriented programs.
Cloud security / CNAPP platform with agentless visibility, risk prioritization and security graph across cloud environments.
AI-powered cloud security platform (CNAPP) for agentless workload and cloud posture risk detection.
Exposure management platform with Tenable Hexa AI agentic orchestration for vulnerability triage and remediation workflows.
Privacy, GRC and responsible AI governance platform used by large organizations for consent, preference, third-party risk and AI oversight.
Enterprise data security and DSPM platform for discovering, classifying and governing sensitive data including AI data risk use cases.
Cyber risk and third-party risk management platform with published CRPM pricing page.
AI-powered GRC Intelligence Platform (formerly AuditBoard) with domain-trained agents for audit testing, compliance, third-party risk and AI governance.
Agentic SOC platform where the Socrates orchestrator plans and delegates to specialised HyperAgents for alert triage, investigation and response automation.
AI agents for the SOC: an AI SOC Analyst that investigates alerts end to end and shows its reasoning, plus an AI Threat Hunter and AI Threat Intel Analyst.
Continuous controls monitoring platform whose RegML AI agents monitor controls, collect evidence, draft control documentation and trigger remediation for FedRAMP, CMMC and NIST programmes; RegScale CCM is FedRAMP High authorized.
A
Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.
Pre-built Agentforce agents for federal, state and local government, covering complaint management, benefits and licensing, code-violation compliance and internal IT compliance; Salesforce says Agentforce is FedRAMP High authorized in Government Cloud Plus.
Agentic AI for accounts payable, expense audit and card spend: AI agents built from finance SOPs audit expenses and cards, process invoices and escalate uncertain decisions to humans, with explainable, auditable actions.
Enterprise workflow platform whose AI agents (Coach, Knowledge Buddy, Automate, developer agents and the Blueprint design agent) run on Pega's trusted workflows; Pega Cloud for Government, including these gen AI agents, is FedRAMP High authorized.
Agentic AI security operations platform whose six persona-based Agentic Teammates investigate and triage alerts and execute approved containment actions; GreyMatter for Government is FedRAMP Authorized (Moderate).
Agentic AI security analyst in the Singularity platform that runs alert investigations to a verdict and, with Singularity Hyperautomation, triggers response within pre-approved policies; SentinelOne says Purple AI is FedRAMP High authorized.
Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized.
Vendor platform certified; agent scope not stated by the vendor
These TX-RAMP records are in official registries but are not tagged on the listing: the certified product is a vendor platform or another product line (scope “platform-only”), or the published status is not Authorized / Level 1 / Level 2 (Ready, Pending, In Process, Provisional). Last checked 2026-10-18.
| Listing | Registry product | Status | Impact / id | Scope | Source |
|---|---|---|---|---|---|
| Appian Agent Studio (AI agents) | Appian Cloud | Level 2 | TX985366 | Vendor platform; agent scope not stated | Registry |
| Black Duck Signal (agentic AI AppSec) | Black Duck Polaris | Level 2 | TX1910179 · expires 2029-06-23 | Vendor platform; agent scope not stated | Registry |
| Black Kite AI Agent | Black Kite | Level 1 | TX1464698 · expires 2027-03-04 | Vendor platform; agent scope not stated | Registry |
| Claude Code security review | Claude (Claude for Enterprise) | Level 2 | TX1880972 · expires 2029-04-08 | Vendor platform; agent scope not stated | Registry |
| CrowdStrike Charlotte AI | Falcon Platform | Level 2 | TX985428 | Vendor platform; agent scope not stated | Registry |
| Darktrace Cyber AI Analyst | Active AI Security Platform | Provisional (provisional expiry 2027-05-08) | TX1896215 | Vendor platform; agent scope not stated | Registry |
| DataSnipper Alwin | DataSnipper | Level 2 | TX1839020 · expires 2029-03-02 | Vendor platform; agent scope not stated | Registry |
| Fieldguide Field Agents | Fieldguide | Level 2 | TX1906508 · expires 2029-06-04 | Vendor platform; agent scope not stated | Registry |
| GitHub Copilot Autofix | GitHub Enterprise Cloud | Level 2 | TX988014 · expires 2028-03-28 | Vendor platform; agent scope not stated | Registry |
| GitLab Duo Vulnerability Resolution | GitLab Dedicated for Government | Level 2 | TX1549412 | Vendor platform; agent scope not stated | Registry |
| Harvey Agents | Harvey.ai | Level 2 | TX1988168 · expires 2029-09-21 | Vendor platform; agent scope not stated | Registry |
| LEGALFLY agents (Review, Legal Radar and Agent Studio) | LEGALFLY | Level 2 | TX1845403 · expires 2029-04-27 | Vendor platform; agent scope not stated | Registry |
| SAFE TPRM AI Co-Worker | SAFE | Level 2 | TX1741314 · expires 2028-07-06 | Vendor platform; agent scope not stated | Registry |
| SecurityScorecard | SecurityScorecard Security Ratings | Provisional | TX1535552 | Vendor platform; agent scope not stated | Registry |
| ServiceNow Now Assist | ServiceNow Government Community Cloud | Level 2 | TX985554 | Vendor platform; agent scope not stated | Registry |
| Snyk | Snyk Container | Level 1 | TX1510094 · expires 2027-07-10 | Vendor platform; agent scope not stated | Registry |
| Sophos MDR AI Agents (Triage and Case Investigation) | Sophos Cloud | Level 2 | TX1138700 · expires 2029-08-31 | Vendor platform; agent scope not stated | Registry |
| Spellbook Associate | Spellbook | Level 2 | TX1820375 · expires 2029-09-04 | Vendor platform; agent scope not stated | Registry |
| TrendAI Vision One Agentic SIEM and Companion | Trend Micro Vision One for Government | Level 2 | TX1443251 | Vendor platform; agent scope not stated | Registry |
| TrustCloud TrustLens (agentic third-party risk assessments) | TrustCloud Platform | Level 1 | TX1583514 · expires 2027-10-28 | Vendor platform; agent scope not stated | Registry |
| UiPath Autopilot / agents | Automation Cloud Public Sector | Level 2 | TX1082286 | Vendor platform; agent scope not stated | Registry |
| Veracode Fix | Veracode Online Security Platform for Government | Level 2 | TX1009331 | Vendor platform; agent scope not stated | Registry |
| Whistic Automation Orchestrator (agentic assessments) | Whistic - Assess | Level 1 | TX1435648 · expires 2027-01-25 | Vendor platform; agent scope not stated | Registry |
| Workiva Agent Studio (finance, audit and GRC agents) | Workiva Platform | Level 2 | TX985589 | Vendor platform; agent scope not stated | Registry |
Best TX-RAMP AI agents (mechanical listing order, not a ranking) · All frameworks