Home / Compare / US public-sector and FedRAMP AI agents

US public-sector and FedRAMP AI agents

Name: Agent Index auditors.json
Creator: Heritage Services
License: https://creativecommons.org/licenses/by/4.0/

Quick answer

US public-sector and FedRAMP AI agents lists 25 verified listings for US government, FedRAMP and public-sector compliance or security operations in dataset v0.1.27 (generated 2026-10-27).

Verified listings with registry-verified FedRAMP Authorized status or a government-compliance tag.

This is not a ranking or score.

Verified listings with registry-verified FedRAMP Authorized status or a government-compliance tag. This update adds Halo AI Agents (FedRAMP 20x Moderate FR2621445678; the Marketplace row is recorded as platform-only on the listing). FedRAMP product and impact for each listing come from the authorizations field (Marketplace records). Appian Agent Studio, Salesforce Agentforce for Public Sector, Pega AI agents, IBM watsonx Orchestrate, Kiro and Box are agent platforms, not dedicated security tools. Workiva Agent Studio, Halo AI Agents, Check Point Harmony Email and Sublime Security keep FedRAMP or TX-RAMP as vendor-claimed or platform-only where the registry row does not place the listed agents inside the authorized boundary. Ironclad CLM is FedRAMP Ready only. Fields come from the open dataset. This is not a ranking or score.

Key facts

From this dataset

25 verified listings on this page, with headquarters in 3 HQ regions and 4 countries.
Dataset version 0.1.27, generated 2026-10-27.
US government, FedRAMP and public-sector compliance or security operations

Cite as: Agent Index by Heritage Services, US public-sector and FedRAMP AI agents, dataset v0.1.27 (https://theagentindex.io/compare/government-fedramp-agents/)

FAQ (from this dataset)

What is listed on this use-case table?

US government, FedRAMP and public-sector compliance or security operations 25 verified listings from Agent Index dataset v0.1.27.

How many listings are on this page?

25 verified listings in dataset v0.1.27 (2026-10-27).

Which listings are headquartered in India, Asia-Pacific or Australia/NZ?

None of the 25 listings on this page publish an HQ in India, Asia-Pacific or Australia/New Zealand in the dataset.

Is this a ranking?

No. This is not a ranking or score. Order is mechanical (from dataset fields such as name, framework-tag count or table membership), not a paid placement or quality judgement.

Field	Appian Agent Studio (AI agents)	RegScale RegML AI agents (RegScale CCM)	IntelliGRC Evan and Alfie AI agents	AAndesite Human-AI SOC (Azimuth for Government)	Agentforce for Public Sector	Workiva Agent Studio (finance, audit and GRC agents)	Pega AI agents (Pega Cloud for Government)	ReliaQuest GreyMatter Agentic Teammates (GreyMatter for Government)	SentinelOne Purple AI (agentic AI security analyst)	Abnormal AI Security Mailbox (Abnormal AI for Government)	Anecdotes Agentic GRC (Agent Library and Agent Studio)	Vanta	Drata	Secureframe	Wiz	Cav Compliance OS agents (formerly Caveonix)	KnowBe4 AIDA (AI Defense Agents)	IBM watsonx Orchestrate (incl. watsonx Orchestrate for Government)	Kiro (agent platform with security integrations)	Box AI Agents (Box Agent, Extract, Classification and custom agents; Box for Government)	Archer Evolv AI Operators (Evolv Foundation and Evolv Workplace)	Deep Fathom Compliance Readiness Platform (agentic CMMC / NIST SP 800-171 readiness)	Vulcan Justinian (AI agent for government legal, regulatory and permitting work; VulcanGov)	CLEAR Investigate (agentic AI investigations for government, risk and fraud teams)	Halo AI Agents (service management with FedRAMP GRC module)
Vendor	Appian	RegScale	IntelliGRC	Andesite	Salesforce	Workiva	Pegasystems	ReliaQuest	SentinelOne	Abnormal AI	Anecdotes	Vanta Inc.	Drata	Secureframe	Wiz	Cav (Caveonix Inc.)	KnowBe4	IBM	Amazon Web Services	Box	Archer (Archer Technologies LLC)	Deep Fathom, Inc.	Vulcan Technologies (Vulcan Technologies, Inc.)	Thomson Reuters	Halo (Halo Service Solutions Limited)
HQ	United States · North America	United States · North America	United States · North America	United States · North America	United States · North America	United States · North America	United States · North America	United States · North America	United States · North America	United States · North America	Israel · Middle East	United States · North America	United States · North America	United States · North America	United States · North America	United States · North America	United States · North America	United States · North America	United States · North America	United States · North America	United States · North America	United States · North America	United States · North America	Canada · North America	United Kingdom · Europe
Primary category	Business operations	Compliance	Compliance	Security	Business operations	Compliance	Business operations	Security	Security	Security	Compliance	Compliance	Compliance	Compliance	Security	Compliance	Security	Business operations	Code security	Business operations	Compliance	Compliance	Compliance	Risk	Business operations
Also listed in	Business operations, Compliance	Compliance, Risk	Compliance	Security, Compliance	Business operations, Compliance	Compliance, Business operations, Risk	Business operations, Compliance	Security, Compliance	Security, Compliance	Security, Compliance	Compliance, Risk	Compliance, Security	Compliance, Risk	Compliance, Security	Security, Risk	Compliance, Risk	Security, Compliance	Business operations, Compliance	Code security	Business operations, Compliance	Compliance, Risk	Compliance	Compliance, Business operations	Risk, Compliance	Business operations, Compliance
Summary	Generally available Agent Studio for deploying AI agents inside Appian processes that reason over enterprise data and act under platform guardrails; Appian Government Cloud is FedRAMP High authorized.	Continuous controls monitoring platform whose RegML AI agents monitor controls, collect evidence, draft control documentation and trigger remediation for FedRAMP, CMMC and NIST programmes; RegScale CCM is FedRAMP High authorized.	CMMC- and NIST 800-171-focused GRC platform whose AI agents auto-map evidence to assessment objectives (Evan) and run automated control gap assessments with remediation steps (Alfie); FedRAMP 20x Low authorized.	Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.	Pre-built Agentforce agents for federal, state and local government, covering complaint management, benefits and licensing, code-violation compliance and internal IT compliance; Salesforce says Agentforce is FedRAMP High authorized in Government Cloud Plus.	No-code agent builder and prebuilt agents on Workiva's reporting, audit and GRC platform, used for finance tie-outs and roll-forwards and for evidence collection, control testing and remediation, with configurable review and approval steps.	Enterprise workflow platform whose AI agents (Coach, Knowledge Buddy, Automate, developer agents and the Blueprint design agent) run on Pega's trusted workflows; Pega Cloud for Government, including these gen AI agents, is FedRAMP High authorized.	Agentic AI security operations platform whose six persona-based Agentic Teammates investigate and triage alerts and execute approved containment actions; GreyMatter for Government is FedRAMP Authorized (Moderate).	Agentic AI security analyst in the Singularity platform that runs alert investigations to a verdict and, with Singularity Hyperautomation, triggers response within pre-approved policies; SentinelOne says Purple AI is FedRAMP High authorized.	Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized.	Enterprise GRC platform with built-in agents for evidence analysis, control assessment, risk enrichment and findings extraction, plus an Agent Studio for custom GRC agents and agentic TPRM.	Agentic trust and compliance automation platform for continuous evidence collection, control monitoring, policies, and security questionnaire responses.	Compliance and trust management platform with AI-assisted evidence collection, continuous control monitoring, and multi-framework programs.	Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages.	Cloud security / CNAPP platform with agentless visibility, risk prioritization and security graph across cloud environments.	Agentic cyber assurance and continuous compliance platform whose AI agents collect evidence, test controls, find gaps against 50+ frameworks (FISMA, NIST 800-53, FedRAMP, CMMC) and generate ATO artifacts; the platform is FedRAMP High authorized.	Suite of AI agents for human risk management that automatically generate and deliver personalised phishing simulations, training, remedial and policy-quiz content per user; the FedRAMP Moderate KnowBe4 Platform covers AIDA (except AIDA Deepfakes).	IBM's agent platform to build, deploy, orchestrate and govern AI agents (IBM, custom and partner agents for HR, procurement and other domains); watsonx Orchestrate for Government is in scope of IBM Data Services for Government, FedRAMP Moderate.	Agent platform with security integrations: AWS's agentic IDE and autonomous agent, with Kiro Powers for Snyk, Aikido, SonarQube and Sonatype scanning.	Permissions-aware AI agents on Box's content platform: the Box Agent plans multi-step work across files, Extract agents turn documents into structured metadata, a Classification agent labels sensitive content, and Box AI Studio builds custom agents; Box AI sits inside Box's FedRAMP High boundary per the Marketplace listing.	Governed GRC agents ('AI Operators') inside the Archer system of record: identity-bound, scope-limited, human-supervised agents for control generation and assurance, regulatory change, reportable-event review and record hygiene; the Archer Evolv product is TX-RAMP Level 2 certified.	CMMC and NIST SP 800-171 readiness platform for US defence contractors where AI agents interpret obligations, plan and advance routine readiness work, continuously map the CMMC boundary and collect evidence, with human review gates on consequential decisions.	AI agent for US government knowledge workers, grounded in a large corpus of federal and state statutes, regulations, court cases and fiscal data. It runs 50-state research in parallel with citations, monitors legal changes, reviews permit applications against the code, drafts memos and comment responses, and builds internal tools inside the agency boundary.	Agentic investigation tool built on Thomson Reuters CLEAR public-records data. From a plain-language question it plans and runs searches across CLEAR data and the open web, resolves conflicting records and returns concise cited findings with a record of the searches it ran, for AML, fraud, program-integrity and law-enforcement investigators.	ITSM/ESM platform (formerly HaloITSM) with AI agents: conversational agents for end users and fulfillers, and process agents (Dispatch, 1st Line Support, Major Incident, Knowledge, Change Management) that act on their own within role-based permissions. The platform, including a FedRAMP/CMMC GRC module, is FedRAMP 20x Moderate.
Frameworks (vendor-stated)	SOC 2, ISO 27001, HIPAA, FedRAMP	FedRAMP, TX-RAMP, CMMC	FedRAMP, SOC 2, ISO 27001, CMMC	FedRAMP, SOC 2, ISO 27001, HIPAA, TX-RAMP	FedRAMP, TX-RAMP	—	FedRAMP, GovRAMP, TX-RAMP	FedRAMP, TX-RAMP	FedRAMP, GovRAMP, TX-RAMP	FedRAMP, GovRAMP, TX-RAMP	FedRAMP, ISO 27001, HIPAA	SOC 2, ISO 27001, HIPAA, FedRAMP, CMMC	SOC 2, ISO 27001, HIPAA, FedRAMP, CMMC	SOC 2, ISO 27001, HIPAA, FedRAMP, TX-RAMP, CMMC	SOC 2, ISO 27001, FedRAMP, TX-RAMP	FedRAMP	FedRAMP, TX-RAMP	FedRAMP, TX-RAMP	FedRAMP	FedRAMP	TX-RAMP	—	TX-RAMP	TX-RAMP	—
FedRAMP (Marketplace, listing scope)	Appian Government Cloud - High · FedRAMP Authorized · FR2318051429 · High · authorized 2025-04-03	RegScale CCM · FedRAMP Authorized · FR2414158717 · High · authorized 2025-06-24	IntelliGRC · FedRAMP Authorized · FR2605341343 · 20x Low · authorized 2025-12-05	Andesite Azimuth for Government · FedRAMP Authorized · FR2520950455 · High · authorized 2026-02-26	Salesforce Government Cloud Plus · FedRAMP Authorized · FR2003061248 · High · authorized 2020-05-27	—	Pega Cloud for Government · FedRAMP Authorized · F1306282198A · High · authorized 2025-03-18	GreyMatter for Government · FedRAMP Authorized · FR2428740308 · Moderate · authorized 2026-07-08	SentinelOne Singularity Platform High · FedRAMP Authorized · FR1919071020A · High · authorized 2024-09-10	Abnormal AI for Government · FedRAMP Authorized · FR2425960757 · Moderate · authorized 2025-04-11	Anecdotes · FedRAMP Authorized · FR2620235600 · 20x Moderate · authorized 2026-06-23	Vanta Trust Management Platform · FedRAMP Authorized · FR2525556241 · 20x Low · authorized 2025-07-25; Vanta Government Cloud · FedRAMP Authorized · FR2525556241XM · 20x Moderate · authorized 2026-04-24	Drata Trust Management Platform · FedRAMP Authorized · FR2600167032 · 20x Low · authorized 2025-12-05	Secureframe Platform · FedRAMP Authorized · FR2529360449 · 20x Moderate · authorized 2026-06-23	Wiz for U.S. Government · FedRAMP Authorized · FR2308034636A · High · authorized 2025-09-25	Caveonix · FedRAMP Authorized · FR2530025267 · High · authorized 2026-04-06	KnowBe4 Platform · FedRAMP Authorized · FR2201340492 · Moderate · authorized 2023-11-14	IBM Data Services for Government (watsonx Orchestrate for Government) · FedRAMP Authorized · FR2524349489 · Moderate · authorized 2026-02-10	AWS GovCloud (Kiro in scope) · FedRAMP Authorized · F1603047866 · High · authorized 2016-06-21	Box Enterprise Cloud Content Collaboration Platform (BoxAI in boundary) · FedRAMP Authorized · F1212191840A · High · authorized 2025-03-25	—	—	VulcanGov · FedRAMP Ready · FR2619254906 · Moderate · authorized 2026-06-09	—	—
Frameworks (vendor-claimed)	SOC 2, ISO 27001, HIPAA, PCI DSS, FedRAMP	FedRAMP, CMMC, NIST SP 800-53, NIST SP 800-171, ISO 27001, SOC 2	CMMC, NIST SP 800-171, NIST SP 800-53, SOC 2, ISO 27001, HIPAA, CJIS, NIST CSF, CIS Controls	NIST SP 800-53, NIST CSF, ISO 42001, PCI DSS, HITRUST, CSA STAR	FedRAMP	FedRAMP, GovRAMP, TX-RAMP, SOC 2, ISO 27001, HIPAA	FedRAMP, GovRAMP, TX-RAMP, DoD IL5	FedRAMP, TX-RAMP, FISMA, CMMC, SOC 2, ISO 27001, HIPAA, PCI DSS	FedRAMP, GovRAMP, TX-RAMP	FedRAMP, GovRAMP, TX-RAMP	FedRAMP, ISO 27001, HIPAA, NIST, NIS2	SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, CMMC, NIST, FedRAMP	SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS, NIST, CMMC, EU Cyber Resilience Act, AIUC-1	SOC 2, ISO 27001, PCI DSS, CMMC, HIPAA	—	FedRAMP, CMMC, NIST SP 800-53, FISMA	FedRAMP, TX-RAMP	FedRAMP, TX-RAMP	FedRAMP	FedRAMP, GovRAMP, TX-RAMP, DoD IL4, CJIS, HIPAA	TX-RAMP	CMMC, NIST SP 800-171	FedRAMP Ready	FedRAMP (In Process)	FedRAMP, CMMC
Capabilities / tasks	process automation, agentic ops, workflow automation, government compliance	control monitoring, evidence collection, remediation, gap analysis, government compliance	evidence collection, gap analysis, control mapping, government compliance	security operations, alert triage, incident response, government compliance	workflow automation, case investigation, government compliance	audit management, evidence collection, control testing, remediation, workflow automation, government compliance	process automation, agentic ops, workflow automation, government compliance	security operations, alert triage, incident response, threat detection, government compliance	security operations, alert triage, case investigation, threat detection, government compliance	phishing triage, email security, security operations, alert triage, incident response, remediation, government compliance	evidence collection, control monitoring, risk management, vendor risk, audit management	evidence collection, control monitoring, questionnaire automation, policy management, trust center	evidence collection, control monitoring, questionnaire automation, vendor risk, trust center	evidence collection, policy management, questionnaire automation, vendor risk, trust center	cloud security, vulnerability management, risk prioritization	evidence collection, control monitoring, gap analysis, remediation, government compliance	email security, policy management, workflow automation, risk assessment, government compliance	process automation, agentic ops, workflow automation, government compliance	agent platform with security integrations, appsec, pr review	workflow automation, process automation, agentic ops, contract review, government compliance	control mapping, control testing, policy management, risk assessment, audit management, government compliance	evidence collection, gap analysis, control mapping, remediation, government compliance	government compliance, policy management, workflow automation, agentic ops	case investigation, aml, fraud detection, government compliance	it service, incident response, workflow automation, government compliance
Integrations (vendor-listed)	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	AWS, Azure, GCP, GitHub, Microsoft 365 / Entra	AWS, Azure, GCP, GitHub, Okta, Jira	AWS, Azure	AWS, Azure, GCP, GitHub, Google Workspace, Microsoft 365 / Entra, Jira, Slack	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet
Pricing (as published)	Not published	Not published	Not published	Not published	Not published for Public Sector editions (30-day Public Sector Solutions trial offered)	Not published	Not published	Not published (vendor says pricing is based on endpoint count with no AI usage meter).	Purple AI pricing not published; Singularity platform tiers listed from $179.99 per endpoint/year (Complete) and $229.99 (Commercial) on sentinelone.com/pricing.	Not published	Not published	Quote-based. AWS Marketplace lists Essentials from $14,000/year for 1–20 employees (12-month contracts); modules priced separately.	Quote-based. AWS Marketplace Foundation Package listed at $15,000/year for 1–50 employees (third-party census of marketplace listing). Drata says Agentic TPRM is not priced by vendor count: every vendor gets a free inherent-risk assessment and customers pay only when a vendor needs a full security review (amounts not published).	Quote-based. Public page lists Fundamentals / Complete / Defense feature packages without dollar amounts on the pricing page at last check.	Custom quote (wiz.io/pricing).	Not published	Published MSRP on knowbe4.com (May 2026 list, per seat per month, 3-year term): SAT Advanced, which includes AIDA, from $3.75 (25–50 seats) down to $2.79 (501–1,000 seats); 1,001+ seats by quote.	Published on ibm.com (commercial SaaS): 30-day free trial; Essentials from $530/month; Standard from $6,360/month. Government offering pricing not published.	Published: Free $0 (50 credits); Pro $20/user/month (1,000 credits); Pro+ $40 (2,000 credits); Pro Max $100 (5,000 credits); Power $200; extra credits $0.04 each (kiro.dev/pricing at last check).	Not published for agents. Box lists custom AI agents, agentic workflows and Box Agent Pro Mode under the Enterprise Advanced plan (box.com/agents); plan price not captured.	Not published	Not published (a 'Start free' option for Platform Commercial is offered; paid pricing via sales).	Not published	Not published	Published on usehalo.com/pricing (UK view): £66 per agent (service-desk seat) per month; AI Agents are included across all plans.
Pricing model	quote	quote	quote	quote	quote	quote	quote	quote	quote	quote	quote	annual-contract	annual-contract	quote	quote	quote	published-tiers	published-tiers	freemium	quote	quote	quote	quote	quote	published-tiers
Primary source	https://appian.com/products/platform/artificial-intelligence/ai-agents	https://regscale.com/ai-driven-compliance-automation-with-regml/	https://intelligrc.com/insights/blog/introducing-evan-and-alfie/	https://andesite.ai/product/	https://www.salesforce.com/government/artificial-intelligence/	https://www.workiva.com/platform/agent-studio	https://www.pega.com/technology/agentic-workflows	https://reliaquest.com/security-operations-platform/greymatter-agentic-teammates/	https://www.sentinelone.com/platform/purple/	https://abnormal.ai/products/ai-security-mailbox	https://www.anecdotes.ai/agent-library	https://www.vanta.com/pricing	https://drata.com/	https://secureframe.com/pricing	https://www.wiz.io/pricing	https://cavhq.ai/	https://www.knowbe4.com/products/aida	https://www.ibm.com/products/watsonx-orchestrate	https://kiro.dev/powers/	https://www.box.com/agents	https://www.archerirm.com/press-releases/archer-launches-archer-evolv-foundation-and-archer-evolv-workplace	https://www.deepfathom.ai/platform	https://vulcan.ai/justinian	https://legal.thomsonreuters.com/en/products/clear-investigate	https://www.usehalo.com/halo-ai
Last checked	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-23	2026-10-18	2026-10-20	2026-10-20	2026-10-21	2026-10-20	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-18
Official site	https://appian.com/products/platform/artificial-intelligence/ai-agents	https://regscale.com/ai-driven-compliance-automation-with-regml/	https://intelligrc.com/insights/blog/introducing-evan-and-alfie/	https://andesite.ai/product/	https://www.salesforce.com/government/artificial-intelligence/	https://www.workiva.com/platform/agent-studio	https://www.pega.com/technology/agentic-workflows	https://reliaquest.com/security-operations-platform/greymatter-agentic-teammates/	https://www.sentinelone.com/platform/purple/	https://abnormal.ai/products/ai-security-mailbox	https://www.anecdotes.ai/agent-library	https://www.vanta.com/	https://drata.com/	https://secureframe.com/	https://www.wiz.io/	https://cavhq.ai/	https://www.knowbe4.com/products/aida	https://www.ibm.com/products/watsonx-orchestrate	https://kiro.dev/powers/	https://www.box.com/agents	https://www.archerirm.com/evolv-ai-workplace	https://www.deepfathom.ai/platform	https://vulcan.ai/justinian	https://legal.thomsonreuters.com/en/products/clear-investigate	https://www.usehalo.com/halo-ai

Related US government program hubs (registry status, not rankings): FedRAMP · CMMC · GovRAMP · TX-RAMP. FedRAMP product and impact in the table come from Marketplace records stored on each listing.

Side-by-side data is generated from the open dataset. “Vendor-claimed” frameworks are as marketed by each vendor and not verified by Agent Index; framework tags indicate relevance, not certification. Request current quotes from each vendor before buying. This page does not rank or score vendors. Sponsored comparisons, if any, will be labelled.

Use-case comparisons

AML and transaction-monitoring AI agents — 57 listings (Anti-money-laundering, transaction monitoring and financial-crime investigation)
AI SOC and security-analyst agents — 51 listings (Security operations, alert investigation and threat detection)
Email security and phishing-response AI agents — 16 listings (Triage of user-reported phishing, autonomous email threat remediation and AI-run phishing simulation)
TPRM and vendor-risk AI agents — 40 listings (Third-party risk, vendor assessments, security ratings and questionnaire automation)
Cloud security (CNAPP) AI agents — 9 listings (Cloud and container security posture, exposure and remediation)
Enterprise agent platforms — 8 listings (Build, orchestrate and govern AI agents for business-process automation)
IT service-management AI agents — 7 listings (IT service desk, employee support and service-workflow automation)