Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages.
TX-RAMP (Texas)
Quick answer
24 verified listings are tagged for TX-RAMP in Agent Index dataset v0.1.27 (generated 2026-10-27).
TX-RAMP is run by the Texas Department of Information Resources (DIR): a standardized approach for security assessment, certification and continuous monitoring of cloud computing services that process the data of Texas state agencies.
Framework tags indicate relevance for evaluation, not certification. This is not a ranking.
TX-RAMP is run by the Texas Department of Information Resources (DIR): a standardized approach for security assessment, certification and continuous monitoring of cloud computing services that process the data of Texas state agencies.
Tag only when Texas DIR's TX-RAMP Certified Cloud Products list (updated 13 Oct 2026) shows the listed product (or the documented government boundary) at Level 1 or Level 2. Provisional and platform-only entries are shown on the hub but not tagged. DIR notes publishing issues: products missing from the list may not have lost certification, so this hub never says a vendor is not TX-RAMP certified.
Key facts
Official sources
Last checked 2026-10-18. Every sentence links to an official source in the dataset.
- Run by the Texas Department of Information Resources (DIR): a standardized approach for security assessment, certification and continuous monitoring of cloud computing services that process the data of Texas state agencies. Source
- Applies to state agencies, institutions of higher education and public community colleges (Texas Government Code 2054.003(13)); only cloud computing services as defined in Texas Government Code 2054.0593(a) are in scope. Source
- Level 1: public/non-confidential information or low-impact systems (Level 1 assessment, or evidence of StateRAMP Category 1 / FedRAMP Low). Level 2: confidential/regulated data in moderate or high impact systems (Level 2 assessment, or StateRAMP Category 2 / FedRAMP Moderate). Source
- Provisional status lets an agency contract for a product for up to 18 months without full certification; the product must be certified within that period. Source
- The certified-products spreadsheet was last updated 13 Oct 2026. DIR notes publishing issues: products missing from the list may not have lost certification (verify with [email protected]). Source
From this dataset
- 24 verified listings on this page, with headquarters in 3 HQ regions and 4 countries.
- Dataset version 0.1.27, generated 2026-10-27.
- TX-RAMP is run by the Texas Department of Information Resources (DIR): a standardized approach for security assessment, certification and continuous monitoring of cloud computing services that process the data of Texas state agencies.
Cite as: Agent Index by Heritage Services, TX-RAMP (Texas), dataset v0.1.27 (https://theagentindex.io/frameworks/tx-ramp/)
FAQ (from this dataset)
What is listed on this framework hub?
TX-RAMP is run by the Texas Department of Information Resources (DIR): a standardized approach for security assessment, certification and continuous monitoring of cloud computing services that process the data of Texas state agencies. 24 verified listings from Agent Index dataset v0.1.27.
How many listings are on this page?
24 verified listings in dataset v0.1.27 (2026-10-27).
Which listings are headquartered in India, Asia-Pacific or Australia/NZ?
1 of 24 listings on this page publish an HQ in India, Asia-Pacific or Australia/New Zealand: UpGuard (Australia).
Is this a ranking?
No. This is not a ranking or score. Order is mechanical (from dataset fields such as name, framework-tag count or table membership), not a paid placement or quality judgement.
Official sources: dir.texas.gov/information-security/texas-risk-and-authorization-management-program-tx-ramp · dir.texas.gov/information-security/texas-risk-and-authorization-management-program-tx-ramp/tx-ramp-eligibility · dir.texas.gov/resource-library-item/tx-ramp-certified-cloud-products
Related US government programs: FedRAMP · CMMC · GovRAMP · US public-sector and FedRAMP comparison
Use-case comparisons with 2+ listings tagged TX-RAMP: AI SOC and security-analyst agents · Email security and phishing-response AI agents · TPRM and vendor-risk AI agents · Privacy operations AI agents · US public-sector and FedRAMP AI agents · Cloud security (CNAPP) AI agents · AI governance agents and platforms
Agents tagged for TX-RAMP
24 listings. Tags indicate relevance for evaluation — not a certification that the vendor “implements” the law.
AI governance platform for policy packs, model risk and responsible AI compliance including EU AI Act and NIST AI RMF oriented programs.
Cloud security / CNAPP platform with agentless visibility, risk prioritization and security graph across cloud environments.
AI-powered cloud security platform (CNAPP) for agentless workload and cloud posture risk detection.
Exposure management platform with Tenable Hexa AI agentic orchestration for vulnerability triage and remediation workflows.
Privacy, GRC and responsible AI governance platform used by large organizations for consent, preference, third-party risk and AI oversight.
Data security, privacy and DSPM platform whose AgentIQ agentic layer runs data-risk work from a request: four BigID agents at launch (Remediate Sensitive Data, AI Governance Enforcement, Access Exposure Analysis, Privacy Operations) investigate, prioritise and act, e.g. revoking access, remediating exposure, applying retention, quarantining data and fulfilling data subject requests.
Cyber risk and third-party risk management platform with published CRPM pricing page.
AI-powered GRC Intelligence Platform (formerly AuditBoard) with domain-trained agents for audit testing, compliance, third-party risk and AI governance.
Agentic SOC platform where the Socrates orchestrator plans and delegates to specialised HyperAgents for alert triage, investigation and response automation.
AI agents for the SOC: an AI SOC Analyst that investigates alerts end to end and shows its reasoning, plus an AI Threat Hunter and AI Threat Intel Analyst.
Continuous controls monitoring platform whose RegML AI agents monitor controls, collect evidence, draft control documentation and trigger remediation for FedRAMP, CMMC and NIST programmes; RegScale CCM is FedRAMP High authorized.
A
Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.
Pre-built Agentforce agents for federal, state and local government, covering complaint management, benefits and licensing, code-violation compliance and internal IT compliance; Salesforce says Agentforce is FedRAMP High authorized in Government Cloud Plus.
Agentic AI for accounts payable, expense audit and card spend: AI agents built from finance SOPs audit expenses and cards, process invoices and escalate uncertain decisions to humans, with explainable, auditable actions.
Enterprise workflow platform whose AI agents (Coach, Knowledge Buddy, Automate, developer agents and the Blueprint design agent) run on Pega's trusted workflows; Pega Cloud for Government, including these gen AI agents, is FedRAMP High authorized.
Agentic AI security operations platform whose six persona-based Agentic Teammates investigate and triage alerts and execute approved containment actions; GreyMatter for Government is FedRAMP Authorized (Moderate).
Agentic AI security analyst in the Singularity platform that runs alert investigations to a verdict and, with Singularity Hyperautomation, triggers response within pre-approved policies; SentinelOne says Purple AI is FedRAMP High authorized.
Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized.
Suite of AI agents for human risk management that automatically generate and deliver personalised phishing simulations, training, remedial and policy-quiz content per user; the FedRAMP Moderate KnowBe4 Platform covers AIDA (except AIDA Deepfakes).
IBM's agent platform to build, deploy, orchestrate and govern AI agents (IBM, custom and partner agents for HR, procurement and other domains); watsonx Orchestrate for Government is in scope of IBM Data Services for Government, FedRAMP Moderate.
Archer Evolv AI Operators (Evolv Foundation and Evolv Workplace)
Archer (Archer Technologies LLC)
United States
Governed GRC agents ('AI Operators') inside the Archer system of record: identity-bound, scope-limited, human-supervised agents for control generation and assurance, regulatory change, reportable-event review and record hygiene; the Archer Evolv product is TX-RAMP Level 2 certified.
Vulcan Justinian (AI agent for government legal, regulatory and permitting work; VulcanGov)
Vulcan Technologies (Vulcan Technologies, Inc.)
United States
AI agent for US government knowledge workers, grounded in a large corpus of federal and state statutes, regulations, court cases and fiscal data. It runs 50-state research in parallel with citations, monitors legal changes, reviews permit applications against the code, drafts memos and comment responses, and builds internal tools inside the agency boundary.
CLEAR Investigate (agentic AI investigations for government, risk and fraud teams)
Thomson Reuters
Canada
Agentic investigation tool built on Thomson Reuters CLEAR public-records data. From a plain-language question it plans and runs searches across CLEAR data and the open web, resolves conflicting records and returns concise cited findings with a record of the searches it ran, for AML, fraud, program-integrity and law-enforcement investigators.
Vendor platform certified; agent scope not stated by the vendor
These TX-RAMP records are in official registries but are not tagged on the listing: the certified product is a vendor platform or another product line (scope “platform-only”), or the published status is not Authorized / Level 1 / Level 2 (Ready, Pending, In Process, Provisional). Last checked 2026-10-18.
| Listing | Registry product | Status | Impact / id | Scope | Source |
|---|---|---|---|---|---|
| Appian Agent Studio (AI agents) | Appian Cloud | Level 2 | TX985366 | Vendor platform; agent scope not stated | Registry |
| Arctic Wolf Aurora Agentic SOC (Swarm of Experts agents) | Managed Detection and Response/Managed Risk | Level 2 | TX1151665 · expires 2027-05-10 | Vendor platform; agent scope not stated | Registry |
| Barracuda Integrated Email Protection agentic threat investigation and clawback (BarracudaONE) | Impersonation Protection / Incident Response | Provisional | TX1332609 | Vendor platform; agent scope not stated | Registry |
| Black Duck Signal (agentic AI AppSec) | Black Duck Polaris | Level 2 | TX1910179 · expires 2029-06-23 | Vendor platform; agent scope not stated | Registry |
| Black Kite AI Agent | Black Kite | Level 1 | TX1464698 · expires 2027-03-04 | Vendor platform; agent scope not stated | Registry |
| Box AI Agents (Box Agent, Extract, Classification and custom agents; Box for Government) | Box Enterprise Cloud Content Collaboration Platform | Level 2 | TX985384 | Vendor platform; agent scope not stated | Registry |
| Check Point Email Security AI agents (Harmony Email & Collaboration, formerly Avanan) | Check Point Harmony | Level 2 | TX1598637 · expires 2028-01-27 | Vendor platform; agent scope not stated | Registry |
| Claude Code security review | Claude (Claude for Enterprise) | Level 2 | TX1880972 · expires 2029-04-08 | Vendor platform; agent scope not stated | Registry |
| CrowdStrike Charlotte AI | Falcon Platform | Level 2 | TX985428 | Vendor platform; agent scope not stated | Registry |
| Darktrace Cyber AI Analyst | Active AI Security Platform | Provisional (provisional expiry 2027-05-08) | TX1896215 | Vendor platform; agent scope not stated | Registry |
| Datadog Bits AI Security Analyst | Datadog for Government | Level 2 | TX985429 | Vendor platform; agent scope not stated | Registry |
| DataSnipper Alwin | DataSnipper | Level 2 | TX1839020 · expires 2029-03-02 | Vendor platform; agent scope not stated | Registry |
| Docusign Iris agents and Agent Studio (Intelligent Agreement Management) | DocuSign Cloud | Level 2 | TX999107 · expires 2027-01-26 | Vendor platform; agent scope not stated | Registry |
| Fieldguide Field Agents | Fieldguide | Level 2 | TX1906508 · expires 2029-06-04 | Vendor platform; agent scope not stated | Registry |
| Freshservice Freddy AI Agent and Freddy AI Agent Studio (IT and HR service agents) | FreshService | Level 2 | TX1114772 · expires 2027-07-12 | Vendor platform; agent scope not stated | Registry |
| GitHub Copilot Autofix | GitHub Enterprise Cloud | Level 2 | TX988014 · expires 2028-03-28 | Vendor platform; agent scope not stated | Registry |
| GitLab Duo Vulnerability Resolution | GitLab Dedicated for Government | Level 2 | TX1549412 | Vendor platform; agent scope not stated | Registry |
| Harvey Agents | Harvey.ai | Level 2 | TX1988168 · expires 2029-09-21 | Vendor platform; agent scope not stated | Registry |
| Icertis Vera agents (Redline, Risk Review, Playbook Creation, Composer, Fulfillment and Insights agents) | Icertis Contract Intelligence (ICI) for Government | Level 2 | TX1045023 | Vendor platform; agent scope not stated | Registry |
| LEGALFLY agents (Review, Legal Radar and Agent Studio) | LEGALFLY | Level 2 | TX1845403 · expires 2029-04-27 | Vendor platform; agent scope not stated | Registry |
| ManageEngine ServiceDesk Plus Zia Agents (L1 service desk, Entra ID user manager, PIR and KB agents, Agent Studio) | ServiceDesk Plus Cloud | Level 1 | TX1539241 · expires 2027-06-20 | Vendor platform; agent scope not stated | Registry |
| SAFE TPRM AI Co-Worker | SAFE | Level 2 | TX1741314 · expires 2028-07-06 | Vendor platform; agent scope not stated | Registry |
| SecurityScorecard | SecurityScorecard Security Ratings | Provisional | TX1535552 | Vendor platform; agent scope not stated | Registry |
| ServiceNow Now Assist | ServiceNow Government Community Cloud | Level 2 | TX985554 | Vendor platform; agent scope not stated | Registry |
| Snyk | Snyk Container | Level 1 | TX1510094 · expires 2027-07-10 | Vendor platform; agent scope not stated | Registry |
| Sophos MDR AI Agents (Triage and Case Investigation) | Sophos Cloud | Level 2 | TX1138700 · expires 2029-08-31 | Vendor platform; agent scope not stated | Registry |
| Spellbook Associate and Autonomous Contract Management (ACM) | Spellbook | Level 2 | TX1820375 · expires 2029-09-04 | Vendor platform; agent scope not stated | Registry |
| Sublime Security ASA and ADÉ (Autonomous Security Analyst and Autonomous Detection Engineer) | Sublime Security Platform | Level 2 | TX1903681 · expires 2029-07-05 | Vendor platform; agent scope not stated | Registry |
| Synack Sara AI Pentesting | On-Demand Security Testing Platform | Level 2 | TX1009325 | Vendor platform; agent scope not stated | Registry |
| TrendAI Vision One Agentic SIEM and Companion | Trend Micro Vision One for Government | Level 2 | TX1443251 | Vendor platform; agent scope not stated | Registry |
| TrustCloud TrustLens (agentic third-party risk assessments) | TrustCloud Platform | Level 1 | TX1583514 · expires 2027-10-28 | Vendor platform; agent scope not stated | Registry |
| UiPath Autopilot / agents | Automation Cloud Public Sector | Level 2 | TX1082286 | Vendor platform; agent scope not stated | Registry |
| Veracode Fix | Veracode Online Security Platform for Government | Level 2 | TX1009331 | Vendor platform; agent scope not stated | Registry |
| Vulcan Justinian (AI agent for government legal, regulatory and permitting work; VulcanGov) | VulcanGov (Justinian for Government) | Provisional (provisional expiry 2027-10-01) | TX1988256 | listing | Registry |
| Whistic Automation Orchestrator (agentic assessments) | Whistic - Assess | Level 1 | TX1435648 · expires 2027-01-25 | Vendor platform; agent scope not stated | Registry |
| Workiva Agent Studio (finance, audit and GRC agents) | Workiva Platform | Level 2 | TX985589 | Vendor platform; agent scope not stated | Registry |
Saved
Reference:
We'll email you when a matching listing is added; no other automatic emails. Nothing is sent automatically now.
Related alternatives (relevance grouping, not a ranking): Secureframe alternatives
Best TX-RAMP AI agents (mechanical listing order, not a ranking) · All frameworks