Agentic trust and compliance automation platform for continuous evidence collection, control monitoring, policies, and security questionnaire responses.
FedRAMP (United States)
Quick answer
19 verified listings are tagged for FedRAMP in Agent Index dataset v0.1.27 (generated 2026-10-27).
The US Federal Risk and Authorization Management Program is the government-wide program that provides a standardized approach to security assessment, authorization and continuous monitoring for cloud products used by US federal agencies. Listings tagged here appear as FedRAMP Authorized on the official FedRAMP Marketplace (not merely vendor marketing).
Framework tags indicate relevance for evaluation, not certification. This is not a ranking.
The US Federal Risk and Authorization Management Program is the government-wide program that provides a standardized approach to security assessment, authorization and continuous monitoring for cloud products used by US federal agencies. Listings tagged here appear as FedRAMP Authorized on the official FedRAMP Marketplace (not merely vendor marketing).
The frameworks tag is used only when the FedRAMP Marketplace lists the product (or the cloud offering the vendor documents as the boundary for the agent) as FedRAMP Authorized. Vendor-only FedRAMP claims, Ready packages, and in-process listings stay in frameworks_claimed. Authorization of a Government Cloud package is not a ranking or an endorsement of the agent.
Key facts
From this dataset
- 19 verified listings on this page, with headquarters in 2 HQ regions and 2 countries.
- Dataset version 0.1.27, generated 2026-10-27.
- The US Federal Risk and Authorization Management Program is the government-wide program that provides a standardized approach to security assessment, authorization and continuous monitoring for cloud products used by US federal agencies. Listings tagged here appear as FedRAMP Authorized on the official FedRAMP Marketplace (not merely vendor marketing).
Cite as: Agent Index by Heritage Services, FedRAMP (United States), dataset v0.1.27 (https://theagentindex.io/frameworks/fedramp/)
FAQ (from this dataset)
What is listed on this framework hub?
The US Federal Risk and Authorization Management Program is the government-wide program that provides a standardized approach to security assessment, authorization and continuous monitoring for cloud products used by US federal agencies. Listings tagged here appear as FedRAMP Authorized on the official FedRAMP Marketplace (not merely vendor marketing). 19 verified listings from Agent Index dataset v0.1.27.
How many listings are on this page?
19 verified listings in dataset v0.1.27 (2026-10-27).
Which listings are headquartered in India, Asia-Pacific or Australia/NZ?
None of the 19 listings on this page publish an HQ in India, Asia-Pacific or Australia/New Zealand in the dataset.
Is this a ranking?
No. This is not a ranking or score. Order is mechanical (from dataset fields such as name, framework-tag count or table membership), not a paid placement or quality judgement.
Related US government programs: CMMC · GovRAMP · TX-RAMP · How to verify a FedRAMP 3PAO · GovRAMP 3PAO list
Use-case comparisons with 2+ listings tagged FedRAMP: AI SOC and security-analyst agents · Email security and phishing-response AI agents · TPRM and vendor-risk AI agents · US public-sector and FedRAMP AI agents · Enterprise agent platforms
Related audit-firm listings (facts, not endorsements): FedRAMP auditors in the United States
Agents tagged for FedRAMP
19 listings. Tags indicate relevance for evaluation — not a certification that the vendor “implements” the law.
Compliance and trust management platform with AI-assisted evidence collection, continuous control monitoring, and multi-framework programs.
Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages.
Cloud security / CNAPP platform with agentless visibility, risk prioritization and security graph across cloud environments.
Enterprise GRC platform with built-in agents for evidence analysis, control assessment, risk enrichment and findings extraction, plus an Agent Studio for custom GRC agents and agentic TPRM.
Generally available Agent Studio for deploying AI agents inside Appian processes that reason over enterprise data and act under platform guardrails; Appian Government Cloud is FedRAMP High authorized.
Continuous controls monitoring platform whose RegML AI agents monitor controls, collect evidence, draft control documentation and trigger remediation for FedRAMP, CMMC and NIST programmes; RegScale CCM is FedRAMP High authorized.
CMMC- and NIST 800-171-focused GRC platform whose AI agents auto-map evidence to assessment objectives (Evan) and run automated control gap assessments with remediation steps (Alfie); FedRAMP 20x Low authorized.
A
Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.
Pre-built Agentforce agents for federal, state and local government, covering complaint management, benefits and licensing, code-violation compliance and internal IT compliance; Salesforce says Agentforce is FedRAMP High authorized in Government Cloud Plus.
Enterprise workflow platform whose AI agents (Coach, Knowledge Buddy, Automate, developer agents and the Blueprint design agent) run on Pega's trusted workflows; Pega Cloud for Government, including these gen AI agents, is FedRAMP High authorized.
Agentic AI security operations platform whose six persona-based Agentic Teammates investigate and triage alerts and execute approved containment actions; GreyMatter for Government is FedRAMP Authorized (Moderate).
Agentic AI security analyst in the Singularity platform that runs alert investigations to a verdict and, with Singularity Hyperautomation, triggers response within pre-approved policies; SentinelOne says Purple AI is FedRAMP High authorized.
Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized.
Agent platform with security integrations: AWS's agentic IDE and autonomous agent, with Kiro Powers for Snyk, Aikido, SonarQube and Sonatype scanning.
Agentic cyber assurance and continuous compliance platform whose AI agents collect evidence, test controls, find gaps against 50+ frameworks (FISMA, NIST 800-53, FedRAMP, CMMC) and generate ATO artifacts; the platform is FedRAMP High authorized.
Suite of AI agents for human risk management that automatically generate and deliver personalised phishing simulations, training, remedial and policy-quiz content per user; the FedRAMP Moderate KnowBe4 Platform covers AIDA (except AIDA Deepfakes).
IBM's agent platform to build, deploy, orchestrate and govern AI agents (IBM, custom and partner agents for HR, procurement and other domains); watsonx Orchestrate for Government is in scope of IBM Data Services for Government, FedRAMP Moderate.
Permissions-aware AI agents on Box's content platform: the Box Agent plans multi-step work across files, Extract agents turn documents into structured metadata, a Classification agent labels sensitive content, and Box AI Studio builds custom agents; Box AI sits inside Box's FedRAMP High boundary per the Marketplace listing.
Saved
Reference:
We'll email you when a matching listing is added; no other automatic emails. Nothing is sent automatically now.
Related alternatives (relevance grouping, not a ranking): Secureframe alternatives
Best FedRAMP AI agents (mechanical listing order, not a ranking) · All frameworks