FedRAMP Trust Center Index

CR26 mandatory in 60 days · Jan 1, 2027

Ready for FedRAMP CR26?

790 offerings, 248 agencies and 49 assessors, updated daily from FedRAMP data.

Authorized offerings
533
CR26 packages
775
Trust centers linked
117
Answering our check
110 of 113 · 4 block checks

3%

of authorized offerings list a trust center in their CR26 package

15 of 533

Most authorized offerings don't list a trust center yet

523 authorized offerings have a CR26 package record, but 508 of those don't link a trust center. FedRAMP publishes 775 package records in all (667 Rev5 and 108 20x).

Trust center links in 775 CR26 packages

  • Public trust center 53
  • Sign-in required 64
  • No trust center link 658

See every trust center and its checks →What CR26 requires →How this is changing →

Most common CR26 gaps

774 of 775 packages pass FedRAMP's schema. Fields they still leave out:

  1. No documentation overview (repositories) listed CDS-CSO-PUB 723
  2. No next Ongoing Certification Report date CDS-CSO-PUB 703
  3. No link to secure configuration guidance SCG-CSO-RSC 690
  4. No service list; CR26 requires the services in scope CDS-CSO-SVC 665
  5. No trust center link; CR26 requires one with access instructions CDS-CSO-UTC 658
  6. No business category listed CDS-CSO-PUB 639
  7. No UEI number; include it if you have one CDS-CSO-PUB 417
  8. No FedRAMP Recognized assessor listed CDS-CSO-PUB 71

Most-leveraged infrastructure

Offerings built on each.

  1. AWS US East/West Amazon 204
  2. AWS GovCloud Amazon 192
  3. Okta IDaaS Regulated Cloud Okta 140
  4. Google Workspace Google 103
  5. Azure Commercial Cloud Microsoft 81
  6. Slack Slack Technologies 74
  7. Qualys Cloud Platform Qualys 72
  8. Azure Government (includes Dynamics 365) Microsoft 66
  9. Microsoft 365 Government Community Cloud & Supporting Services Microsoft 65
  10. Google Services (Google Cloud Platform Products and underlying Infrastructure) Google 62

New authorizations per year

0100200 2013 2015 2017 2019 2021 2023 138 2025 77 2026
2026 is year to date.
Show as table
YearOfferings authorized
20133
20147
20159
201615
201716
201820
201942
202041
202134
202247
202339
202445
2025138
202677

How long authorization takes

Median days from in process to certified, by year. Overall: 309 days.

0300600 2015 555 2017 2019 2021 2023 2025 209 2026
Years with fewer than 5 certifications are left out.
Show as table
YearMedian days
2014319 days
2015385 days
2016351 days
2017555 days
2018197 days
2019307 days
2020290 days
2021229 days
2022251 days
2023407 days
2024516 days
2025316 days
2026209 days

Agencies with the most ATOs

  1. Department of Veterans Affairs 130
  2. Department of Agriculture 89
  3. Department of State 72
  4. General Services Administration 66
  5. Department of Energy 57
  6. Federal Deposit Insurance Corporation 57
  7. Internal Revenue Service 56
  8. Department of Health and Human Services 54
  9. United States Patent and Trademark Office 52
  10. Defense Information Systems Agency 50

All agencies →

Busiest assessors

  1. Schellman Compliance, LLC 181
  2. A-LIGN Compliance and Security, Inc. dba A-LIGN 108
  3. Coalfire Systems, Inc. 107
  4. Fortreum, LLC 67
  5. Kratos 51
  6. Lunarline, Inc. 47
  7. Emagine IT 22
  8. Ignyte Platform Inc. 19
  9. First Information Technology Services, Inc. 14
  10. Prescient Security, LLC. 13

All assessors →

Impact levels

  1. Moderate 448
  2. High 125
  3. LI-SaaS 44
  4. 20x Low 14
  5. 20x Moderate 14
  6. Low 11

What they do

  1. Data Management 264
  2. Analytics 254
  3. Cybersecurity & Risk Management 248
  4. Collaboration 216
  5. Operations Management 186
  6. Communication 128
  7. Legal & Policy 93
  8. Development Tools 89
  9. Research 86
  10. Network Management 83

Latest status changes

DateOfferingNew statusTrack
Oct 29, 2026CLDigital 360 FedGov
Continuity Logic L.L.C.		Initial Implementation20x
Oct 29, 2026SentiLink
SentiLink Corp		FedRAMP In ProcessRev5
Oct 29, 2026SkyShaper Technologies
Acumen, LLC		FedRAMP In ProcessRev5
Oct 29, 2026ThreatLocker Zero Trust Platform for Government
ThreatLocker, Inc.		FedRAMP In ProcessRev5
Oct 29, 2026ESChat - High
San Luis Aviation, Inc.		FedRAMP In ProcessRev5
Oct 29, 2026Supply Chain Command
BlueVoyant Government Services		FedRAMP In ProcessRev5
Oct 29, 2026Icertis Contract Intelligence (ICI) for Government
Icertis Inc.		FedRAMP In ProcessRev5
Oct 29, 2026Patlytics AI Platform
Patlytics, Inc.		FedRAMP In ProcessRev5
Oct 29, 2026CLEAR1 Gov
Alclear Healthcare LLC (d/b/a CLEAR)		FedRAMP In ProcessRev5
Oct 29, 2026Critical Event Management - GovCloud
Everbridge		FedRAMP In ProcessRev5
Oct 29, 2026JupiterOne GovCloud
JupiterOne, Inc.		FedRAMP In Process20x
Oct 29, 2026Unified Acquisition Platform
Rohirrim, Inc.		FedRAMP In Process20x
Oct 29, 2026Casco for Government
Transmittr, Inc.		FedRAMP In Process20x
Oct 29, 2026Cursor
Anysphere, Inc.		FedRAMP Certified20x
Oct 28, 2026ZL Unified Archive (ZL UA)
ZL Technologies, Inc.		FedRAMP CertifiedRev5