What is the official website of FedRAMP® ?

The official website of FedRAMP® is https://www.gsa.gov/technology/government-it-initiatives/fedramp.

What is FedRAMP®'s cybersecurity risk score?

FedRAMP® has an AI-generated cybersecurity risk score of 756 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has FedRAMP® experienced?

According to Rankiteo, FedRAMP® currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has FedRAMP® been affected by any supply chain cyber incidents ?

According to Rankiteo, FedRAMP® has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does FedRAMP® have SOC 2 Type 1 certification ?

According to Rankiteo, FedRAMP® is not certified under SOC 2 Type 1.

Does FedRAMP® have SOC 2 Type 2 certification ?

According to Rankiteo, FedRAMP® does not hold a SOC 2 Type 2 certification.

Does FedRAMP® comply with GDPR ?

According to Rankiteo, FedRAMP® is not listed as GDPR compliant.

Does FedRAMP® have PCI DSS certification ?

According to Rankiteo, FedRAMP® does not currently maintain PCI DSS compliance.

Does FedRAMP® comply with HIPAA ?

According to Rankiteo, FedRAMP® is not compliant with HIPAA regulations.

Does FedRAMP® have ISO 27001 certification ?

According to Rankiteo,FedRAMP® is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does FedRAMP® operate in ?

FedRAMP® operates primarily in the Government Administration industry.

How many employees does FedRAMP® have ?

FedRAMP® employs approximately 3 people worldwide.

Does FedRAMP® own any subsidiaries ?

FedRAMP® presently has no subsidiaries across any sectors.

How many LinkedIn followers does FedRAMP® have ?

FedRAMP®'s official LinkedIn profile has approximately 2,363 followers.

What is the NAICS classification code for FedRAMP® ?

FedRAMP® is classified under the NAICS code 92, which corresponds to Public Administration.

Does FedRAMP® have a Crunchbase profile ?

No, FedRAMP® does not have a profile on Crunchbase.

Does FedRAMP® have a LinkedIn profile ?

Yes, FedRAMP® maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/gsa-fedramp.

How many cybersecurity incidents has FedRAMP® experienced ?

As of June 10, 2026, Rankiteo reports that FedRAMP® has not experienced any cybersecurity incidents.

How many peer or competitor companies does FedRAMP® have ?

FedRAMP® has an estimated 12,853 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

FedRAMP®

Boost Score +25 with badge (5 left)

756

/1000

Fair

781

/1000

Fair

FedRAMP® Vendor Cyber Rating & Cyber Score

gsa.gov

Add Your Compliance Badge

The Federal Risk and Authorization Management Program sets security rules for cloud service adoption by the U.S. govt.

FedRAMP® A.I CyberSecurity Scoring

Scoring History

FedRAMP®

FedRAMP® CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

FedRAMP® Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for FedRAMP®

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for FedRAMP® in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for FedRAMP® in 2026.

Incident Types FedRAMP® vs Government Administration Industry Avg (This Year)

No incidents recorded for FedRAMP® in 2026.

Incident History - FedRAMP® (X = Date, Y = Severity)

Loading…

SUBSIDIARY

FedRAMP® Subsidiaries

Parent Company

FedRAMP®

Government Administration

Website: https://www.gsa.gov/technology/government-it-initiatives/fedramp

Company Size: 3

No subsidiary data available for this company.

Loading…

FedRAMP® Similar Companies

UK Home Office

www.gov.uk

At the Home Office, we help to ensure that the country is safe and secure. We’ve been looking after UK citizens since 1782. We are responsible for: - working on the problems caused by illegal drug use - shaping the alcohol strategy, policy and licensing conditions - keeping the United Kingdom safe from the threat of terrorism - reducing and preventing crime, and ensuring people feel safe in their homes and communities - securing the UK border and controlling immigration - considering applications to enter and stay in the UK - issuing passports and visas - supporting visible, responsible and accountable policing by empowering the public and freeing up the police to fight crime - fire prevention and rescue These organisations are all part of the Home Office: - Border Force - HM Passport Office (HMPO) - Immigration Enforcement - UK Visas and Immigration (UKVI)

State of Tennessee

tn.gov

State government is the largest employer in Tennessee, with approximately 43,500 employees in the three branches of government. The State of Tennessee has approximately 1,300 different job classifications in areas such as administrative, health services, historic preservation, legal, agriculture, counseling, and medical. If you are interested in becoming a data scientist, attorney, nurse, wildlife officer, physician, education consultant, trooper, computer programmer or an epidemiologist, explore all of the job opportunities the State of Tennessee has to offer. The State is looking to recruit, retain, and reward a talented workforce through the implementation of a merit-based pay system. Stop back often for news, updates and opportunities -- thanks for visiting!

US Environmental Protection Agency (EPA)

cb epa.gov

U.S. Environmental Protection Agency’s (EPA) mission is to protect human health and the environment. EPA works to ensure that: - Americans have clean air, land and water; - National efforts to reduce environmental risks are based on the best available scientific information; - Federal laws protecting human health and the environment are administered and enforced fairly, effectively and as Congress intended; - Environmental stewardship is integral to U.S. policies concerning natural resources, human health, economic growth, energy, transportation, agriculture, industry, and international trade, and these factors are similarly considered in establishing environmental policy; - All parts of society--communities, individuals, businesses, and state, local and tribal governments--have access to accurate information sufficient to effectively participate in managing human health and environmental risks; - Contaminated lands and toxic sites are cleaned up by potentially responsible parties and revitalized; and - Chemicals in the marketplace are reviewed for safety. The agency was founded in 1970 and is headquartered in Washington, District of Columbia with ten additional regional headquarters offices (Boston, New York, Philadelphia, Atlanta, Chicago, Dallas, Kansas City, Denver, San Francisco, and Seattle) as well as more than a dozen laboratories, and other regional and programmatic offices.

U.S. Census Bureau

census.gov

The Census Bureau serves as the nation’s leading provider of quality data about its people and economy. We have been headquartered in Suitland, Maryland since 1942, and currently employ about 4,285 staff members. We are part of the U.S. Department of Commerce and overseen by the Economics and Statistics Administration (ESA). We honor privacy, protect confidentiality, share our expertise globally, and conduct our work openly. We are guided on this mission by our strong and capable workforce, our readiness to innovate, and our abiding commitment to our customers. View our comment policy: https://www.census.gov/about/contact-us/comment-policy.html View our privacy policy: https://www.census.gov/about/policies/privacy/privacy-policy.html

State of Ohio

ohio.gov

Employment with the State of Ohio is more than ‘just a job’ – it is a privilege to serve our families, friends and neighbors who rely on us throughout our great state. We are a team of dedicated public servants committed to high performance, innovative thinking, and delivering excellent and efficient services. Our goal is to recruit and retain the best talent for our positions, because when we have the best talent, we get the best results for our community. We are #TeamOhio.

State of Maryland

jobapscloud.com

Maryland is on the path to becoming the best state in the nation. Referred to as “America in Miniature”, Maryland embodies the very spirit of the United States. Maryland is home to ethnic groups of every origin, just about every natural feature, and much like our country, opportunity! If you are interested in a rewarding career in public service, consider the following: Full-time employment Part-time employment Contractual work Internships Seasonal work Maryland, where your work truly matters… Join us! State Jobs: https://www.jobaps.com/md/ State of Maryland homepage: http://www.maryland.gov/Pages/default.aspx

City of Amsterdam

amsterdam.nl

Working for Amsterdam means working for the most beautiful city in the world. Think of its rich history, the role Amsterdam plays internationally, and events such as Sail, Gay Pride and King’s Day. Of course everybody wants to visit Amsterdam, or work or live here. As you can probably imagine, working for Amsterdam is a challenge every day. How do we handle the growing bustle in the inner city? Or the high demand for new homes? Or obesity among young children? At the municipality of Amsterdam we work daily on challenging projects like these. Good for Amsterdam, good for you Each field of work, ranging from social affairs, customer and information services to environmental planning and economy, has its own challenges. You have to deal with the interests of many parties, often conflicting. Each day you will be looking for solutions that suit the needs of residents, entrepreneurs and visitors. This can make working for the city difficult sometimes, but it is what characterises the job. We work in an open, active, honest, ethical and fair manner, so that is what we would expect from you as well.

NOAA: National Oceanic & Atmospheric Administration

cb noaa.gov

Welcome! We're the National Oceanic & Atmospheric Administration or NOAA. From daily weather forecasts, severe storm warnings and climate monitoring to fisheries management, coastal restoration and supporting marine commerce, our products and services support economic vitality and affect more than one-third of America’s gross domestic product. NOAA’s dedicated scientists use cutting-edge research and high-tech instrumentation to provide citizens, planners, emergency managers and other decision makers with reliable information they need when they need it. *Looking for your official local weather forecast? Enter your zip code at www.weather.gov or mobile.weather.gov for mobile device users. *Interested in working for NOAA? Find job openings by typing "NOAA" in the search field at www.USAjobs.gov. Connect with us on social media: X: @NOAA Bluesky: noaa.gov Facebook: www.facebook.com/noaa Instagram: www.instagram.com/noaa YouTube: www.youtube.com/noaa LinkedIn: www.linkedin.com/company/noaa For a list of NOAA's major social media channels by mission area, please visit www.noaa.gov/stay-connected

Swiss Federal Administration

admin.ch

Seven departments, the Federal Chancellery and around 70 administrative units make up the Federal Administration. With around 38,000 employees, we are one of the largest employers in Switzerland. Everyone who works for the Federal Administration actively contributes to Switzerland's well-being and shapes the future of our country. We are as varied as Switzerland itself – we stand for active diversity and inclusion. Our employees come from all over the country and the Federal Administration is present throughout Switzerland. With us, you can expect diverse, challenging and unique tasks in all kinds of subject areas and specialist fields. As a modern employer, the Federal Administration enables its employees to combine work and private life with flexible forms of work and promotes their personal development with practical training and continuing professional development. * Vacancies in the administrative units can be found on their LinkedIn pages or at stelle.admin.ch.

Loading…

NEWS

FedRAMP® CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-9754

SUMMARY

An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command

Published

Date2026-06-09

Updated

Date2026-06-09

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://jira.mongodb.org/browse/SERVER-122207

CVE-2026-9753

SUMMARY

The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. $_internalApplyOplogUpdate can be executed by any authenticated user with access to the aggregate command.

Published

Date2026-06-09

Updated

Date2026-06-09

RISK INFORMATION (Score: 8.1)

cvss3

Base Score: 8.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

cvss4

Base Score: 7.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.2

Exploitability

2.8

REFERENCES

https://jira.mongodb.org/browse/SERVER-124959

CVE-2026-9752

SUMMARY

An authorized user could trigger a server crash by running a query with a 2dsphere index on a field that stores a GeoJSON GeometryCollection containing a Polygon with a strict-winding CRS. Strict-winding polygons are intentionally unsupported for indexing, but the guard that rejects them does not inspect members of a GeometryCollection, allowing the unsafe path to be reached which ends with an ensuing null-pointer dereference.

Published

Date2026-06-09

Updated

Date2026-06-09

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://jira.mongodb.org/browse/SERVER-123440

CVE-2026-9751

SUMMARY

The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text.

Published

Date2026-06-09

Updated

Date2026-06-09

RISK INFORMATION (Score: 5.5)

cvss3

Base Score: 5.5

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 6.8

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

1.8

REFERENCES

https://jira.mongodb.org/browse/SERVER-123370

CVE-2026-9750

SUMMARY

An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain execution paths.

Published

Date2026-06-09

Updated

Date2026-06-09

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://jira.mongodb.org/browse/SERVER-123633

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…