{"id":"F1206111371","name":"Knox Systems","provider":"CoSo Cloud, LLC.","providerSlug":"coso-cloud-llc","status":"FedRAMP Authorized","impact":"Moderate","authType":"Agency","authDate":"2017-06-21","serviceModel":["SaaS"],"deployment":"Government Community Cloud","businessFunctions":["Analytics","Collaboration","Communication","Content Management System (CMS)","Cybersecurity & Risk Management","Development Tools","Education & Training","Learning Management","Operations Management","System Administration"],"assessor":"Coalfire Systems, Inc.","assessorId":"138514","smallBusiness":true,"website":"http://www.knoxsystems.com/","description":"Knox Systems provides a multi-tenant cloud platform for delivering commercial software to federal government customers. Customer applications deploy on Knox's managed infrastructure across AWS, Azure, and Google Cloud Platform using Kubernetes containers, serverless functions, or virtual machines. Knox provides 24/7 Security Operations Center and Network Operations Center management, continuous security monitoring, vulnerability scanning, patch management, and incident response for all customer workloads. This includes:\r\n\r\nAdobe Connect is designed for immersive synchronous online meeting experiences for training, large-scale webinars, and virtual classroom meetings for a distributed workforce.\r\n\r\nAdobe Learning Manager (ALM) is an asynchronous Learning Management System that enables Learning and Development teams to drive personalized learning experiences across multiple devices.\r\n\r\nClass Technologies Inc. (class.com) is the next generation virtual learning environment that enables active learning, collaboration, and engagement in online classes and virtual instructor-led training.\r\n\r\nSpacelift delivers a FedRAMP-compliant IaC automation platform for secure and efficient cloud infrastructure management. It streamlines OpenTofu, Terraform, Pulumi, and Kubernetes workflows with robust policy enforcement and secret management for government agencies.\r\n\r\nTovuti LMS and Tovuti Waypoints: Best of Class Compliance Training and AI Course Authoring in Minutes not Months - Tovuti LMS is a FedRAMP Moderate authorized platform built for federal agencies, delivering secure learner management, automated compliance tracking, role-based access controls, and real-time reporting across your workforce. For AI course authoring, Tovuti Waypoints converts your agency’s source materials into interactive, Section 508-compliant SCORM courses. Instantly transform policy PDFs and procedures into ready-to-deploy training, accelerating your response to new mandates with a platform built for both speed and security.\r\n\r\nCelonis Process Mining (CPM4) is the world’s leading data-driven process optimization platform that helps organizations automatically discover inefficiencies, ensure compliance, and identify improvement opportunities across business processes through real-time analytics and visualization.\r\n\r\nBackupta is a Resilience Platform for Okta that ensures uninterrupted identity and access management. It delivers secure backup, disaster recovery, and rapid restoration of tenants or objects. Tenant cloning and failover strengthen business continuity, while proactive monitoring and audit logs enhance security.\r\n\r\nKovr.AI accelerates compliance authorizations (FedRAMP, CMMC, DOD SRG) from months to minutes by automating gap assessments and ATO package generation, instantly identifying compliant controls and remediation needs, then auto-generating required authorization documentation including SSPs, POA&Ms, and policies. The platform connects to environments via read-only integrations—or accepts direct evidence uploads—enabling teams to rapidly and continuously monitor and assess their security configurations, logs, policies, evidence, and artifacts using state-of-the-art Large Language Models (LLMs).\r\n\r\nOutSystems enables federal agencies to rapidly build, manage, and scale mission-critical digital solutions with government-grade security, reliability, and governance built in. The platform supports the entire software development lifecycle, including integrated DevSecOps capabilities, enabling teams to deliver better frontline digital services and modernize core mission systems significantly faster. Agencies can accelerate delivery without extensive re-skilling, expanding development teams, or taking on the risks and costs associated with vendor lock-in.\r\n\r\nArmis APEX Manage provides federal administrators a \"single pane of glass\" to aggregate operational data across multi-tenant Armis Centrix deployments. It eliminates manual per-tenant logins by centralizing health metrics and consolidated reporting into a unified oversight interface.\r\n\r\nResilinc Supply Chain Risk and Compliance Platform - Resilinc provides federal agencies with enterprise-level visibility and risk management across multi-tier supplier networks. The platform utilizes AI-driven workflows to automate disruption monitoring, forced labor compliance assessments (including UFLPA), and trade impact analysis. This SaaS solution streamlines oversight, allowing organizations to proactively identify and mitigate vulnerabilities within the global supply chain.\r\n\r\nBigID provides an automated foundation for data security, privacy, and governance across the federal enterprise. The platform proactively discovers, architectures, and inventories sensitive data and AI assets across all environments—including multi-cloud, on-premises data centers, and data pipelines. By utilizing advanced machine learning for deep data classification, BigID enables agencies to automatically identify PII, PHI, and CUI. This visibility allows organizations to mitigate risk, enforce granular access controls, and ensure regulatory compliance. From automating data lifecycle management to securing the data fed into AI models, BigID transforms fragmented information into a secure, searchable, and compliant asset.\r\n\r\nProcurement Sciences offers a secure, end-to-end AI platform purpose-built for government contractors to find, qualify, manage, and win federal and SLED opportunities. The Awarded AI platform uses advanced generative and agentic AI to identify and surface relevant opportunities, evaluate bid/no-bid fit, manage capture and pipeline activities, extract and shred requirements, generate structured proposal outlines and first drafts, and automate compliance review and quality checks prior to submission. With human-in-the-loop oversight embedded across AI-powered workflows, the platform accelerates response timelines, strengthens compliance accuracy, improves proposal quality, and drives revenue growth without compromising security.\r\n\r\nPresage Technologies delivers a contactless physiological and behavioral assessment platform leveraging advanced video-based capture and analysis across in-person and fully remote environments. The platform identifies physiological signals and micromovements from video input, surfacing actionable response patterns and real-time indicators through an intuitive interface that empowers expert analysts to observe, annotate, and interpret findings with speed and confidence. Purpose-built for federal agencies and authorized mission partners, the system supports a broad range of high-value use cases and decision-making workflows requiring non-contact assessment at scale.\r\n\r\nBrightfin is a ServiceNow-native telecom and IT financial management application that consolidates enterprise wireless, wireline, and cloud spend into a single platform for invoice processing, cost allocation, asset lifecycle management, and carrier integrations. Brightfin provides finance, IT, and procurement teams with authoritative control over telecom and technology costs directly within their ServiceNow environment.\r\n\r\nServal is an AI-native enterprise service management platform that automates employee requests, onboarding/offboarding, just-in-time access, and more. Serval allows IT, Security, HR, and other functions to eliminate repetitive work with AI agents while maintaining enterprise-grade security and governance.\r\n\r\nGovEagle is a purpose-built software-as-a-service (SaaS) platform that helps U.S. government contractors plan, analyze, draft, and manage responses to federal solicitations, addressing the mission need for faster, higher-quality, and more compliant proposal development. The authorization boundary is a multi-tenant SaaS application hosted in AWS GovCloud (US) with logical isolation between customer tenants, used by contractors' business development, capture, and proposal teams to process business and proposal data that may include Controlled Unclassified Information (CUI).","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Knox%20Logo2.png","inMarketplace":true,"agencies":["22-011-05","22-016-01","22-005-09","22-005-01","22-002-03","22-027-01","22-014-02"],"reuseCount":7,"leverages":["FR1832870021","F1206061353","AGENCYAMAZONEW","FR1805751477","F1603087869","F1512167750","FR1825941347A"],"leveragedBy":[],"timeline":[{"date":"2012-09-12","to":"Agency Authorization In Process","certType":"Rev5"},{"date":"2015-07-29","to":"FedRAMP In Process","certType":"Rev5"},{"date":"2017-06-21","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","secureConfigUrl":"https://knoxsystems.com/secure-configuration-guides","nextOcr":"2026-11-01","ocrOverdue":true,"valid":true,"findings":[{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"next Ongoing Certification Report date is in the past","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Coalfire Systems, Inc."},"sponsor":"22-005-01","trustCenterCheck":null}