Skip to content
Find Cloud Security

Cloud security tools for FedRAMP (2026): which vendors' facts fit

The vendor states public-sector authorization, not an authorization in progress.

How we match

By The Cloud Map Desk. Published , updated .

Desk research from public vendor pages. Vendor facts read September 2026, updated 2026-11-03. Profiles follow our published method; we did not run the products.

Aqua Security

aquasec.com

Categories described4 of 6
CNAPPYes
CSPMYes
CWPPYes
CIEMNot found*
DSPMNot found*
Vulnerability managementYes
AgentsAgentless + agent
Clouds namedAWS, Azure, GCP, OCI, Alibaba
Code scanningYes
AI securityYes
FedRAMPHigh
Air-gappedYes
On-premisesYes
Open sourceTrivy
Public priceBy quote

* Not found on the pages we read; it may exist. Facts as the vendor states them on its own pages and marketplace listings, read September 2026, checked 3 Nov 2026. Not a measure of how well anything works.

Aqua Security

FedRAMP: High

States FedRAMP High Authorization.

Source: Aqua cloud native security platform, read .

CrowdStrike Falcon Cloud Security

crowdstrike.com

Categories described6 of 6
CNAPPYes
CSPMYes
CWPPYes
CIEMYes
DSPMYes
Vulnerability managementYes
AgentsAgentless + agent
Clouds namedAWS, Azure, GCP, OCI
Code scanningPartly
AI securityYes
FedRAMPHigh
Air-gappedNot stated
On-premisesNot stated
Open sourceNone named
Public priceMarketplace listing

* Not found on the pages we read; it may exist. Facts as the vendor states them on its own pages and marketplace listings, read September 2026, checked 3 Nov 2026. Not a measure of how well anything works.

CrowdStrike Falcon Cloud Security

FedRAMP: High

CrowdStrike lists Falcon Cloud Security, Falcon Cloud Security for Containers and for Managed Containers among its FedRAMP High authorized products.

Source: Securing Critical Systems: CrowdStrike Achieves FedRAMP High Authorization, read .

Microsoft Defender for Cloud

azure.microsoft.com

Categories described6 of 6
CNAPPYes
CSPMYes
CWPPYes
CIEMYes
DSPMYes
Vulnerability managementYes
AgentsAgentless + agent
Clouds namedAzure, AWS, GCP
Code scanningPartly
AI securityPartly
FedRAMPHigh
Air-gappedNot stated
On-premisesYes
Open sourceNone named
Public pricePublished

* Not found on the pages we read; it may exist. Facts as the vendor states them on its own pages and marketplace listings, read September 2026, checked 3 Nov 2026. Not a measure of how well anything works.

Microsoft Defender for Cloud

FedRAMP: High

Microsoft lists Defender for Cloud in FedRAMP High audit scope for Azure and Azure Government.

Source: Azure and other Microsoft cloud services compliance scope, read .

Orca Security

orca.security

Categories described6 of 6
CNAPPYes
CSPMYes
CWPPYes
CIEMYes
DSPMYes
Vulnerability managementYes
AgentsAgentless core
Clouds namedAWS, Azure, GCP, OCI, Alibaba, Tencent
Code scanningYes
AI securityYes
FedRAMPModerate
Air-gappedNot stated
On-premisesYes
Open sourceNone named
Public priceMarketplace listing

* Not found on the pages we read; it may exist. Facts as the vendor states them on its own pages and marketplace listings, read September 2026, checked 3 Nov 2026. Not a measure of how well anything works.

Orca Security

FedRAMP: Moderate

Orca states it is FedRAMP Authorized at the Moderate Impact Level for its cloud security platform.

Source: Orca glossary: FedRAMP, read .

SentinelOne Singularity Cloud

sentinelone.com

Categories described6 of 6
CNAPPYes
CSPMYes
CWPPYes
CIEMYes
DSPMYes
Vulnerability managementYes
AgentsAgentless core
Clouds namedAWS, Azure, GCP
Code scanningYes
AI securityYes
FedRAMPHigh
Air-gappedNot stated
On-premisesNot stated
Open sourceNone named
Public priceNot published

* Not found on the pages we read; it may exist. Facts as the vendor states them on its own pages and marketplace listings, read September 2026, checked 3 Nov 2026. Not a measure of how well anything works.

SentinelOne Singularity Cloud

FedRAMP: High

SentinelOne states Singularity Cloud Security is available as a FedRAMP High authorized service; the FedRAMP Marketplace listing includes Singularity Cloud Native Security.

Source: SentinelOne Singularity Platform High, FedRAMP Marketplace, read .

Wiz

wiz.io

Categories described6 of 6
CNAPPYes
CSPMYes
CWPPYes
CIEMYes
DSPMYes
Vulnerability managementYes
AgentsAgentless core
Clouds namedAWS, Azure, GCP, OCI, Alibaba
Code scanningYes
AI securityYes
FedRAMPHigh
Air-gappedNot stated
On-premisesNot stated
Open sourceNone named
Public priceMarketplace listing

* Not found on the pages we read; it may exist. Facts as the vendor states them on its own pages and marketplace listings, read September 2026, checked 3 Nov 2026. Not a measure of how well anything works.

Wiz

FedRAMP: High

Wiz for Government is described as a FedRAMP High authorized platform; Wiz for Gov also achieved GovRAMP High authorization (10 September 2026).

Source: Wiz for Government, read .

Not stated by

Palo Alto Networks Cortex Cloud, Sysdig Secure, Upwind

Not stated in our sources does not mean the capability is unavailable.