AI-powered cloud security platform (CNAPP) for agentless workload and cloud posture risk detection.
GovRAMP (formerly StateRAMP)
Quick answer
4 verified listings are tagged for GovRAMP in Agent Index dataset v0.1.27 (generated 2026-10-27).
GovRAMP is a nonprofit membership organization with a standardized, NIST-aligned framework for verifying the security of cloud services and third-party technology used by government (state, local, tribal, education).
Framework tags indicate relevance for evaluation, not certification. This is not a ranking.
GovRAMP is a nonprofit membership organization with a standardized, NIST-aligned framework for verifying the security of cloud services and third-party technology used by government (state, local, tribal, education).
Tag only when GovRAMP's Authorized Product List shows the listed product (or the government boundary the listing already documents) as Authorized. Ready / Core / Provisionally Authorized / Progressing / Pending / In Process and platform-only listings are shown on the hub but not tagged.
Key facts
Official sources
Last checked 2026-10-18. Every sentence links to an official source in the dataset.
- GovRAMP is a nonprofit membership organization with a standardized, NIST-aligned framework for verifying the security of cloud services and third-party technology used by government (state, local, tribal, education). Source
- StateRAMP announced on 14 Feb 2025 that it operates as (dba) GovRAMP; StateRAMP remains the legal entity and existing certifications continue. Source
- Statuses on the Authorized Product List (APL): Core (validated by the GovRAMP PMO), Ready, Provisionally Authorized, Authorized (independent 3PAO assessment; 3PAOs are A2LA-accredited); impact levels Low/Moderate/High; verified providers are continuously monitored. The Progressing Product List (PPL) covers products working toward a status (Active, In Process, Pending, Progressing, Not Progressing). Source
From this dataset
- 4 verified listings on this page, with headquarters in 2 HQ regions and 2 countries.
- Dataset version 0.1.27, generated 2026-10-27.
- GovRAMP is a nonprofit membership organization with a standardized, NIST-aligned framework for verifying the security of cloud services and third-party technology used by government (state, local, tribal, education).
Cite as: Agent Index by Heritage Services, GovRAMP (formerly StateRAMP), dataset v0.1.27 (https://theagentindex.io/frameworks/govramp/)
FAQ (from this dataset)
What is listed on this framework hub?
GovRAMP is a nonprofit membership organization with a standardized, NIST-aligned framework for verifying the security of cloud services and third-party technology used by government (state, local, tribal, education). 4 verified listings from Agent Index dataset v0.1.27.
How many listings are on this page?
4 verified listings in dataset v0.1.27 (2026-10-27).
Which listings are headquartered in India, Asia-Pacific or Australia/NZ?
None of the 4 listings on this page publish an HQ in India, Asia-Pacific or Australia/New Zealand in the dataset.
Is this a ranking?
No. This is not a ranking or score. Order is mechanical (from dataset fields such as name, framework-tag count or table membership), not a paid placement or quality judgement.
Official sources: govramp.org/ · govramp.org/about/ · govramp.org/program-participants · govramp.org/news/blog/stateramp-announces-rebrand-to-govramp-reflecting-mission-to-unite-public-and-private-sectors-in-advancing-cybersecurity
Related US government programs: FedRAMP · CMMC · TX-RAMP · US public-sector and FedRAMP comparison · GovRAMP 3PAO list
Use-case comparisons with 2+ listings tagged GovRAMP: AI SOC and security-analyst agents · US public-sector and FedRAMP AI agents
Agents tagged for GovRAMP
4 listings. Tags indicate relevance for evaluation — not a certification that the vendor “implements” the law.
Enterprise workflow platform whose AI agents (Coach, Knowledge Buddy, Automate, developer agents and the Blueprint design agent) run on Pega's trusted workflows; Pega Cloud for Government, including these gen AI agents, is FedRAMP High authorized.
Agentic AI security analyst in the Singularity platform that runs alert investigations to a verdict and, with Singularity Hyperautomation, triggers response within pre-approved policies; SentinelOne says Purple AI is FedRAMP High authorized.
Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized.
Vendor platform certified; agent scope not stated by the vendor
These GovRAMP records are in official registries but are not tagged on the listing: the certified product is a vendor platform or another product line (scope “platform-only”), or the published status is not Authorized / Level 1 / Level 2 (Ready, Pending, In Process, Provisional). Last checked 2026-10-18.
| Listing | Registry product | Status | Impact / id | Scope | Source |
|---|---|---|---|---|---|
| Appian Agent Studio (AI agents) | Appian Cloud | Authorized | Moderate | Vendor platform; agent scope not stated | Registry |
| Black Kite AI Agent | Black Kite Third Party Risk Intelligence | Ready | Moderate | Vendor platform; agent scope not stated | Registry |
| Box AI Agents (Box Agent, Extract, Classification and custom agents; Box for Government) | Box Enterprise Cloud Content Collaboration Platform | Authorized | High | Vendor platform; agent scope not stated | Registry |
| Check Point Email Security AI agents (Harmony Email & Collaboration, formerly Avanan) | Check Point Infinity Platform for Government | Authorized | Moderate | Vendor platform; agent scope not stated | Registry |
| CrowdStrike Charlotte AI | CrowdStrike Falcon Platform for Government | Authorized | High | Vendor platform; agent scope not stated | Registry |
| Darktrace Cyber AI Analyst | Cyber AI Mission Defense and Email Protection (Darktrace Federal) | In Process (Progressing Product List) | — | Vendor platform; agent scope not stated | Registry |
| Datadog Bits AI Security Analyst | Datadog for Government | Authorized | High | Vendor platform; agent scope not stated | Registry |
| Docusign Iris agents and Agent Studio (Intelligent Agreement Management) | DocuSign Contract Lifecycle Management (CLM) | Authorized | Moderate | Vendor platform; agent scope not stated | Registry |
| GitLab Duo Vulnerability Resolution | GitLab Dedicated for Government | Authorized | Moderate | Vendor platform; agent scope not stated | Registry |
| SecurityScorecard | Ratings Cloud Service | Ready | Moderate | Vendor platform; agent scope not stated | Registry |
| Snyk | Snyk for Government | Pending (Progressing Product List) | Moderate | Vendor platform; agent scope not stated | Registry |
| Tenable One (Hexa AI) | Tenable Government Solutions | Authorized | Moderate | Vendor platform; agent scope not stated | Registry |
| TrendAI Vision One Agentic SIEM and Companion | Trend Micro Vision One for Government | Authorized | Moderate | Vendor platform; agent scope not stated | Registry |
| UiPath Autopilot / agents | UiPath Automation Cloud Public Sector | Authorized | Moderate | Vendor platform; agent scope not stated | Registry |
| Veracode Fix | Veracode Online Security Platform for Government | Authorized | Moderate | Vendor platform; agent scope not stated | Registry |
| Wiz | Wiz Moderate for U.S. Government | Authorized | High | Vendor platform; agent scope not stated | Registry |
| Workiva Agent Studio (finance, audit and GRC agents) | Workiva Platform | Authorized | Moderate | Vendor platform; agent scope not stated | Registry |
Saved
Reference:
We'll email you when a matching listing is added; no other automatic emails. Nothing is sent automatically now.
Best GovRAMP AI agents (mechanical listing order, not a ranking) · All frameworks