{"id":"F1403283529A","name":"GSS One - Azure","provider":"Project Hosts Inc.","providerSlug":"project-hosts-inc","status":"FedRAMP Authorized","impact":"High","authType":"Agency","authDate":"2026-03-16","serviceModel":["PaaS","SaaS"],"deployment":"Hybrid Cloud","businessFunctions":["Collaboration","Communication","Content Management System (CMS)","Customer Service","Cybersecurity & Risk Management","Data Management","Development Tools","Network Management","Operations Management","Storage"],"assessor":"Lunarline, Inc.","assessorId":"137004","smallBusiness":true,"website":"https://www.projecthosts.com/","description":"The GSSOne Azure is a General Support System (GSS) operated by Project Hosts and deployed within Azure Government. The platform is designed as a secure, multi-tenant PaaS/SaaS environment that enables federal, DoD, state, local, and tribal agencies, as well as government contractors, members of the DIB and the public to deploy and operate applications in compliance with federal security requirements. \r\nThe GSSOne Azure Core provides a standardized set of centrally managed services that support secure application deployment and operations, including access control, authentication, auditing, monitoring, scanning, patching, configuration management, malware prevention, intrusion prevention, incident response, backup, and disaster recovery.\r\nThese capabilities are implemented and managed by Project Hosts and are leveraged by applications deployed on the platform to meet security and compliance requirements.\r\nThe GSSOne Azure supports two primary application deployment models:\r\n1. Applications Included Within the GSS One Authorization Boundary\r\nCertain SaaS applications are incorporated directly into the GSSOne Azure authorization boundary and are assessed and certified as part of the GSSOne Azure system.\r\n2. Applications Supported on the Platform\r\nGSSOne Azure also supports customer and Independent Software Vendor (ISV) applications that are deployed on the platform but maintain their own authorization boundary (e.g., agency ATO or ISV-owned system).\r\nIn this model, Project Hosts provides the underlying infrastructure, security services, and operational support, while the application owner maintains responsibility for their system authorization and application-specific controls. \r\nThis flexible deployment model allows agencies to either leverage existing SaaS capabilities or deploy their own applications within a secure, FedRAMP-authorized environment.\r\nApplications Included Within the GSS One Authorization Boundary\r\nThese applications are deployed, secured, and operated as part of the GSSOne Azure system and certification.\r\n-\tGSSOne Azure Portal/Admin Page\r\nProvided by Project Hosts this application provides user and administrative interfaces for account management, access provisioning, and operational support activities.\r\n-\tGSSOne Command Center (GSSOCC)\r\nThe GSS One Azure Command Center is a one stop shop for agency and CSP customers to view relevant information for their system and aid in implementing and maintaining ConMon requirements including a document repo for SSP and appendixes, POA&Ms and vulnerability scans, allows them to manage training, track incidents, track vulnerabilities and other corrective actions, track red teaming activities, view availability monitoring alerts, change control ticketing, link controls to artifacts and evidence to speed up ATO times and provide continuous monitoring/ Trust Center views for agencies leveraging their systems.\r\n\r\n-\tGSS One Azure Support Center: Project Hosts has configured a customer-facing support portal for creating and managing support tickets powered by Atlassian Jira. This allows customers to view all of their relevant tickets, create tickets, upload screenshots and communicate with PH staff through a secure channel. \r\n-\tQuest Security Management Platform (Quest-SMP):\r\nThe Quest-SMP is a browser-based application with different agents that can be deployed on the agency devices/systems based on their individual use case. \r\nThe Quest-SMP contains two major components:\r\n-\tQuest Identity Recovery for Entra ID: Quest Identity Recovery for Entra ID is a SaaS-based backup and recovery solution for Microsoft Entra ID and Microsoft 365 that extends protection beyond native Microsoft tools. It enables fast, secure restoration of users, groups, attributes, and memberships from a single cloud interface. Administrators can compare backups, view changes, and recover only what’s needed—reducing manual errors and downtime. All recovery actions are logged and auditable to support compliance requirements. Hybrid Active Directory and Entra ID recovery is also supported through built-in integration with on-premises Quest Recovery Manager for Active Directory. Delivered as a secure, high-availability cloud service, Quest Identity Recovery for Entra ID helps federal agencies simplify directory recovery, maintain continuity, and meet governance standards without the need for on-premises infrastructure.\r\n-\tQuest Identity Defense: Quest Identity Defense is a hybrid Active Directory and Microsoft Entra ID security and audit platform that helps federal agencies strengthen identity threat detection, containment, and response while reducing risk of exposure and downtime. It identifies Tier Zero and other privileged objects across Active Directory and Entra ID to pinpoint where the greatest risks reside. The platform continually assesses identity environments for problematic configurations and drift from best-practice baselines, helping maintain compliance and operational integrity. Quest Identity Defense provides enhanced threat detection and observability for directory changes and protects Tier Zero assets from malicious in-memory modification—supporting zero trust and mission continuity across hybrid identity systems.\r\nApplications Supported on the Platform\r\nGSSOne Azure also supports customer and Independent Software Vendor (ISV) applications that are deployed on the platform but maintain their own authorization boundary (e.g., agency ATO or ISV-owned system). Each of the systems below have been vetted and meets the FedRAMP requirements and are ready to pursue FedRAMP certification or have been certified under their own listing and are viewable under the dependent product list.\r\nExamples of supported applications include:\r\n-\tAI Enabled Wordpress\r\n-\tArchive360 (Archive360 Platform)\r\n-\tAudioCodes (AudioCodes Live Platform)\r\n-\tAvePoint (AvePoint Online Services for US Government)\r\n-\tAztec (Aztec Learning System)\r\n-\tBingli (Bingli)\r\n-\tBlue Prism (Blue Prism)\r\n-\tBrightWork (BrightWork SharePoint-based Project Management)\r\n-\tC3 AI (C3 AI Suite)\r\n-\tCTERA Networks (CTERA Edge Filer, CTERA Drive, CTERA Portal)\r\n-\tCloudApper (Cloudapper.ai)\r\n-\tConga (Contract Lifecycle Management, X-Author and Conga Approvals)\r\n-\tCreative Veteran Productions (Fed ILMS)\r\n-\tCyberSTAR Software (CyberSTAR™)\r\n-\tDistributed Solutions Inc. (AEON)\r\n-\tDrupal (Drupal CMS)\r\n-\tEminent IT (Drupal Enclave)\r\n-\tFeith Systems and Software Inc. (RMA iQ™)\r\n-\tFlowVU (FlowVU Collaboration)\r\n-\tIdea Entity (RhyBus Platform)\r\n-\tImage Trend (Elite, Report Writer (RW), Continuum (CT), Licensure, Slate)\r\n-\tInvoke (UiPath Orchestrator and RPA)\r\n-\tIvanti (MDM, Access, Neurons)\r\n-\tLMI (ATLAS by LMI)\r\n-\tLibrestream Technology (Onsight Now)\r\n-\tMicrosoft (Office, Dynamics, Power BI Server, Project Server, SharePoint, SSRS)\r\n-\tNIBS/ OM Group Inc. (ProjNet™)\r\n-\tNintex (K2 Five, Workflow Cloud, DocGen)\r\n-\tNintex (Nintex Automation GE Platform)\r\n-\tNuance (Dragon Suite, DAX CoPilot)\r\n-\tOnePlan.ai (OnePlan)\r\n-\tOneSpan (OneSpan Sign)\r\n-\tOrbus Software (OrbusINFINITY)\r\n-\tPermuta (Defense Ready)\r\n-\tPower Settlements Consulting and Software, LLC (PowerCore™)\r\n-\tProSymmetry\r\n-\tRelocation Management Worldwide (Virtual Employee Network)\r\n-\tSynergist Technology, LLC (AFFIRM Solution for AI Compliance, SAS® VIYA®)\r\n-\tTeamviewer (TeamViewer Digital Employee Experience (TMV DEX) for Government)\r\n-\tUMT360 (SharePoint-based Enterprise Portfolio Management)\r\n-\tUnison Software (Program Management Suite (PMSuite)\r\n-\tWellspring (Accolade Enterprise Innovation Management, Sophia, Evolve)\r\n-\tWordPress (WordPress CMS)\r\n-\tWordPress As a Service (WPaaS)\r\nFor each of these applications, Project Hosts provides deployment, security, and operational support services for these applications, enabling customers to leverage the GSSOne Azure platform while maintaining flexibility in how their systems are authorized and managed. Performing these functions on the partner’s behalf allows the software vendors to focus on their core business model in delivering a secure, highly functional application to the agency while Project Hosts handles the security/ compliance requirements.\r\nFor customers not deployed on the GSS One Azure, Project Hosts offers dedicated continuous monitoring services leveraging the GSS One Azure Command Center and scanners operated by Project Hosts engineers to configure, scan and provide continuous monitoring services to those external customers and their respective agencies to meet FedRAMP requirements.\r\n","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Project%20Hosts%20Logo1.png","inMarketplace":true,"agencies":["22-016-11","22-016-01","22-016-25","22-016-48","22-016-07","22-007-04"],"reuseCount":5,"leverages":["F1603087869","F1209051525"],"leveragedBy":["FR2025827270","FR2430123303","FR2416856649","FR1805752046","FR2427818523","FR2133141131","FR2102036897","FR1828848692","FR2524416446","FR2432218524","FR1815547467","FR1924344515","FR2401742096"],"timeline":[{"date":"2024-01-29","to":"Agency Authorization In Process","certType":"Rev5"},{"date":"2026-02-26","to":"FedRAMP In Process","certType":"Rev5"},{"date":"2026-03-16","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","nextOcr":"2026-12-21","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"}],"assessor":"Lunarline Inc."},"sponsor":"22-016-01","trustCenterCheck":null}