Today we are pleased to announce that Acalvio’s cloud-based ShadowPlex Active Defense platform has been awarded FedRAMP Ready status by the US Government’s General Services Administration. This award demonstrates to federal agencies, and the broader security community, Acalvio’s commitment to offering threat management solutions for even the most demanding environments. ShadowPlex is the first Deception solution to attain FedRAMP Ready status in the FedRAMP Marketplace, which gives federal agencies the assurance they need to proceed with evaluations or initial purchases of our solution.
FedRAMP was initiated in 2011 as a national government-wide program to define mandatory security standards for cloud services. The intent was to accelerate federal government cloud adoption by establishing a marketplace for secure cloud service providers (CSPs). “FedRAMP Ready” requires CSPs to submit to an audit of dozens of security controls by an authorized third-party auditor (3PAO). The controls are under NIST 800-53 guidance, one of the most stringent controls sets in existence.
“The United States faces persistent and increasingly sophisticated malicious cyber campaigns that threaten the public sector”, says President Biden’s May 2021 Executive Order. FedRAMP has been tasked with Federal cloud-security strategy for Cloud Services. Federal agencies are under constant attack and require Active Defense strategies that go beyond passive approaches Acalvio ShadowPlex not only adheres to the strict FedRAMP security controls, but also helps implement stronger cyber security standards for Federal departments and agencies by providing Active Defense.
Acalvio has passed the control evaluation at the FedRAMP Moderate level for our SaaS-based ShadowPlex Deception service, placing us in Ready status. The 3PAO has attested to our security capabilities, and a Readiness Assessment Report has been reviewed and deemed acceptable by the FedRAMP Program Management Office. We invite federal agencies and other public sector entities to trial and deploy the solution with confidence.