Checkmarx Achieves FedRAMP High Ready Status for Government Application Security Platform
Checkmarx, a provider of agentic AI-powered application security testing, has announced that its Checkmarx One for Government application security platform has achieved FedRAMP Ready at the High Impact Level. This designation marks the most stringent baseline for FedRAMP cloud systems and positions Checkmarx as the first AppSec platform to reach this Ready status with full coverage for the software development lifecycle (SDLC).
In addition to its recognition on the FedRAMP Marketplace as High Baseline Ready, Checkmarx has completed a comprehensive Security Assessment Report (SAR) through an accredited Third-Party Assessment Organization (3PAO). This SAR provides federal stakeholders with early validation of the platform’s security posture. While a sponsoring agency has not yet been named, the availability of a 3PAO-reviewed SAR aims to accelerate the path toward full FedRAMP authorization. The High Impact Level requires nearly 100 additional security controls over the Moderate Impact Level, underscoring the platform’s rigorous security framework.
The Checkmarx One for Government platform offers a comprehensive suite of security features, including Static Application Security Testing (SAST), Software Composition Analysis (SCA), Malicious Package Detection, Infrastructure as Code (IaC) Security, Container Security, and Application Security Posture Management (ASPM). These capabilities are designed to support the evolving compliance, Zero Trust, and cybersecurity resilience goals of U.
S. federal agencies.
Sandeep Johri, CEO of Checkmarx, commented on the achievement, stating, “The administration’s recent Executive Order on strengthening the nation’s cybersecurity doubles down on the implementation of secure software development practices, highlighting the importance of comprehensive application security. Our pursuit of FedRAMP High underscores our alignment with the Executive Order and signals our long-term commitment to serving the most security-sensitive government workloads while also benefiting our private-sector customers.”
Checkmarx One for Government also integrates Application Security Posture Management (ASPM), which enables developers to prioritize identified vulnerabilities. ASPM provides a unified view of application security risks, facilitating proactive vulnerability management, ensuring compliance, and enhancing security throughout the application lifecycle. The cloud-native platform is purpose-built for federal agencies to empower secure, compliant development from the first line of code to cloud deployment, enforcing consistent policies, reducing tool sprawl, and providing full lifecycle risk visibility.
