StateRAMP a nonprofit membership organization, was established in 2020 to support State and Local Governments (SLG) as well as Education institutions seeking secure and compliant Cloud Solution Offerings (CSOs). Modeled after the Federal Risk and Authorization Management Program (FedRAMP), StateRAMP is built on the trusted NIST SP 800-53 framework, providing a robust, standardized approach to security assessment, authorization and continuous monitoring.
StateRAMP allows SLG organizations to opt into the program to enhance their cloud security posture and uses the “verify once, use many” approach to authorization, significantly reducing the assessment burden for Cloud Service Providers (CSPs) and Government agencies. Therefore, CSOs from Carahsoft’s partner portfolio that have been verified once can be utilized by multiple agencies, ensuring security is standardized and consistent across jurisdictions.
The StateRAMP marketplace is divided into Authorized Product List (APL) and the Progressing Product List. Each list categorizes products based on their compliance status with StateRAMP security requirements.
Authorized Product List (APL)
The APL distinguishes products based on the following verified status designations:
Provisionally Authorized
Products eligible for authorization where an interconnected technology may not be StateRAMP or FedRAMP authorized, provided that the interconnected technology holds a current StateRAMP Security Snapshot per the StateRAMP Authorization Boundary Guidance.
Authorized
The highest level of authorization for products that have demonstrated compliance with all required security controls.
Progressing Product List
The Progressing Product List categorizes products into these five stages of readiness:
Security Snapshot:
Enrolled
Products enrolled in the Progressing Snapshot Program working towards their initial snapshot score.
Progressing
Products that have submitted artifacts to receive snapshot scores.
Security Product Review:
Active
Products actively working towards achieving ‘Ready’ status.
In Process
Products on the path to Authorized status.
Pending
Products currently under review by the StateRAMP PMO, awaiting a status determination.
Explore Carahsoft’s portfolio of StateRAMP approved solutions below.
Interested in scheduling a briefing or requesting a quote? Call us at (844) 722-8436 or email us at Accela@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (888) 662-2724 or email us at Appian@carahsoft.com.
Authorium offers a scalable, transformative platform designed for government agencies with document-heavy processes such as procurement, budgeting, policies, HR, and grant management. It speeds up results while ensuring compliance, providing insights, and enhancing oversight visibility. Government agencies select Authorium to support data-driven decision-making and swiftly implement a user-friendly platform that can be tailored to meet specific workflows. Leveraging advanced technologies, Authorium automates and streamlines complex processes dependent on scattered data, documents, and outdated systems. It unlocks valuable information hidden within documents, converting it into structured data for integration with mission-critical systems, thereby improving visibility and driving data-informed actions.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (833) 597-5570 or email us at Backblaze@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us at (703) 673-3570 or email us at betterup@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us at (703) 871-8548 or email us at Binti@carahsoft.com.
BlackBerry’s AtHoc is a networked crisis communication platform enabling corporations and government agencies to communicate and collaborate securely with their personnel and with other organizations through multiple devices during times of crises. BlackBerry’s AtHoc platform addresses critical communications needs including: Account: AtHoc Account enables real-time visibility into location and status for effective personnel accountability and crisis handling before, during, and after emergencies. This integrated approach to personnel accountability enables inputs from managers about their team, call center operators, data streams from HR and travel systems, as well as self-reporting by individuals. Alert: AtHoc Alert provides a comprehensive crisis communication solution that unifies all channels and devices, empowering organizations, people, and communities to collaborate during critical events. AtHoc’s flexible deployment options safeguards important personal information and enables enterprise-level command and control. Connect: AtHoc Connect empowers organizations to create their own permission-based network to establish interoperable communication and information sharing with organizations in their community. Collect: AtHoc Collect empowers your personnel in the field to be the "eyes and ears" of the operations center. AtHoc Collect enables on-scene personnel to report events, work progress, along with rich geo-tagged media that are worth a thousand words.
BlackBerry Government Mobility Suite (BGMS) is a cloud-based endpoint management solution. BGMS provides customers the ability to utilize a single, integrated view of users, devices, applications, and policies within their IT environment. Customers can use BGMS to unify multi-OS endpoints across all ownership models while securing sensitive data. BGMS is deployed in Microsoft Azure FedRAMP approved Government cloud as a multi-tenant, government-only community cloud deployment model. The BGMS architecture will serve as the baseline infrastructure for BlackBerry FedRAMP authorized productivity applications such as BlackBerry Work and BlackBerry Workspaces; these solutions will provide mobile access to key business tools like email, calendars, contacts, and tasks as well provide secure access to enterprise file repositories.
The Box Enterprise Content Cloud Collaboration Platform enables business to easily share, manage and secure their content. In today’s mobile-first, cloud-first world, providing employees with secure access to content at any time using any device is critical to creating a more productive, connected workforce and improved customer experiences. Beyond secure file sharing, Box enables easy access to content and collaboration tools from any device with the security, scalability and administrative controls that IT requires.
Interested in scheduling a briefing or requesting a quote? Call us at (703) 871-8548 or email us at Cloudera@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (703) 871-8505 or email us at Cohesity@carahsoft.com.
Collabware’s solution is compliant with the strict FedRAMP guidelines, offering federal agencies and contractors an enterprise-grade data management platform they can rely on. Ensure Data Protection and Privacy Collabware has robust security and compliance processes that provide the protections necessary for government-related services. The system makes it easier to keep sensitive data under control so that businesses are meeting federal regulations without losing productivity. Collabware paired with FedRAMP access means agencies can store, access and manage data with ease of security and compliance in an evolving digital world.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (888) SAP-1GOV or email us at SAP@carahsoft.com.
Quzara Cybertorch™ (Cybertorch) is a Managed Detection and Response (MDR) Platform providing Soc-As-A-Service (SocaaS). The system is intended solely for use by United States Federal, State, Local, and Tribal Governments, Government Consultants, and Federally Funded Research and Development Centers (FFRDC) (referred to throughout the following sections as “customers”) delivered through a Government Community Cloud Deployment Model. Cybertorch delivers Managed Vulnerability Management and Security Monitoring solutions and services. The security monitoring capabilities extend to cloud, datacenters, on-premises, IoT, OT signals converging to a single correlation, aggregation and analysis fusion capability driven and built on Zero trust principles, purpose-built to FedRAMP HIGH and DoD Security Requirements Guide (SRG). These services are delivered through a Platform which leverages components of Software-as-a-Service (SaaS) and Platform-as-a-Service (PaaS) as defined in NIST SP 800-145 (NIST Definition of Cloud Computing. Cybertorch services and security architecture are based on Zero Trust Architecture principles described in NIST SP 200-207 (Zero Trust Architecture) for Enclave-based deployments and Enhanced Identity Government. Further, concepts of control plane and data plane are used throughout the architecture to segregate and isolate customers data.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (833) ISV-APPS or email us at SalesforceISV@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (877) 733-2007 or email us at DocuSign@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (571) 591-6250 or email us at dynatrace@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us at (703) 871-8545 or email us at Eightfold@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (844) 747-6222 or email us at Equifax@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (888) 662-2724 or email us at StateRAMP@Carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (888) 662-2724 or email us at SalesforceISV@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (866) 468-3868 or email us at Fortinet@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (866) 468-3868 or email us at Fortinet@carahsoft.com.
New offering listed as progressing.
Interested in scheduling a briefing or requesting a quote? Call us at (844) 554-6645 or email us at Google-sales@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (888) 662-2724 or email us at ProjectHosts@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us at (703) 889-9710 or email us at iboss@carahsoft.com.
B1TD Federal Cloud enables users to defend their networks, investigate and research potential threats, and correlate and contextualize data to minimize the time it takes for incident response. B1TD Federal Cloud contains millions of verified threat indicators in vendor-agnostic formats that may be exported to aid in detection, blocking, and containment of modern malware (e.g., Advanced Persistent Threats (APTs), ransomware, phishing, exploits). This is done via an open application programming interface (API) and an analyst research portal.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (703) 581-6638 or email us at IronMountain@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (703) 581-6638 or email us at IronMountain@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us at (833) 478-1740 or email us at SalesforceISVMarketing@Carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (888) 662-2724 or email us at StateRAMP@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (888) 662-2724 or email us at StateRAMP@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (888) 662-2724 or email us at StateRAMP@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (888) 662-2724 or email us at StateRAMP@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (888) 662-2724 or email us at StateRAMP@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (888) 662-2724 or email us at StateRAMP@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (844) 673-8468 or email us at Microsoft@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (844) 673-8468 or email us at Microsoft@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us at (703) 230-7577 or email us at Mimecast@Carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us at (703) 673-3570 or email us at NetDocuments@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (855) 618-3114 or email us at Oracle@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (855) 618-3114 or email us at Oracle@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (844) 445-5688 or email us at Orca@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at 855-6NEXTGN or email us at PaloAltoNetworks@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at 855-6NEXTGN or email us at PaloAltoNetworks@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at 855-6NEXTGN or email us at PaloAltoNetworks@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (844) 673-8468or email us at Pulselight@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us at (703) 871-8587 or email us at RGS@Carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (888) 662-2724 or email us at Rubrik@Carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (844) 722-8436 or email us at samsara@carahsoft.com.
New offering listed as progressing.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (888) SAP-1GOV or email us at SAP@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (703) 889-9808 or email us at SecurityScorecard@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (833) ISV-APPSor email us at SalesforceISV@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (855) 3-SPLUNK or email us at Splunk@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (844) 673-8468 or email us at Microsoft@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (833) 478-1740 or email us at Talkdesk@carahsoft.com.
Tanium Cloud for US Government (TC-USG) provides a cloud-hosted, Software as a Service (SaaS) platform that revolutionizes endpoint management and security. With an agent-based approach, the Tanium Core Platform and its suite of services are automatically configured and maintained, ensuring seamless operation. The TC-USG services, encompassing Tanium Interact, Asset, Comply, Connect, Deploy, Discover, Enforce, Impact, Integrity Monitor, Map, Patch, Performance, Provision, Reveal, Risk, Threat Response, and Trends, are all included within the authorization boundary. These services can be availed individually or in combination, as per the agency's requirements. With TC-USG, agencies can effectively manage their specific challenges, ensuring robust endpoint security and efficient management. For more details, please visit https://tanium.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (866)-462-2333 or email us at Trellix@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (866)-462-2333 or email us at Trellix@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (888) 554-7468 or email us at TrendMicro@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (888) 554-7468 or email us at TrendMicro@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (866)-421-4683 or email us at Trustwave@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (866) 421-4683 or email us at TylerTech@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (571) 662-3962 or email us at Verkada@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (844) 722-8436 or email us at Vexcel@carahsoft.com.
New offering listed as progressing.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (888)-6VMWARE or email us at VMware@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us at (571) 662-4701 or email us at wiz@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (888) 662-2724 or email us at WoltersKluwer@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (888) 662-2724 or email us at WoltersKluwer@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (888) 662-2724 or email us at WoltersKluwer@carahsoft.com.
Interested in scheduling a briefing or requesting a quote? Call us toll-free at (866) 421-4683 or email us at zscaler@carahsoft.com.
As of October 2024, StateRAMP is active in 28 states, 13 local governments, and 6 higher education institutions. Explore the interactive map below to discover which agencies are participating in StateRAMP.
Carahsoft’s team of experts provide State and Local Government agencies with access to our extensive StateRAMP approved solutions portfolio and provide guidance to our partner ecosystem on how to become StateRAMP certified. Explore our help desk resources and contact our team to obtain the support you need to achieve mission success.
Education organizations are using StateRAMP to establish security standards for their cloud solutions. Higher Education institutions working with StateRAMP include Fayetteville State University, NC and the University of North Carolina System. Additionally, StateRAMP partners with the non-profit K12 Security Information eXchange (K12 SIX) to deliver cybersecurity best practices for K-12 schools.
March 9th, 2023
With the introduction of Security Snapshot, CSPs can ease their concerns, knowing they will receive detailed, personalized support to help them qualify for StateRAMP's verification.
March 14th, 2022
Learn ways state and local government agencies can turn to StateRAMP to provide education and cost-effective solutions for verifying multicloud security.
March 8th, 2021
Learn about StateRAMP's goal to create a framework for continuous improvement in cybersecurity for governments and providers on Carahsoft's Community Blog.