{"id":"F1506096710","name":"Skyhigh Security Service Edge (SSE) Government Cloud Services (Cloud Access Security Broker (CASB) & Secure Web Gateway (SWG) for Cloud)","provider":"Skyhigh Security","providerSlug":"skyhigh-security","status":"FedRAMP Authorized","impact":"High","authType":"JAB","authDate":"2020-04-29","serviceModel":["SaaS"],"deployment":"Government Community Cloud","businessFunctions":["Analytics","Communication","Content Management System (CMS)","Cybersecurity & Risk Management","Data Management","Legal & Policy","Network Management","Operations Management"],"assessor":"Kratos","assessorId":"137255","smallBusiness":false,"website":"skyhighsecurity.com","description":"Skyhigh Security Service Edge (SSE) GovCloud, is a FedRAMP-authorized, Zero Trust, cloud-native security platform purpose-built for U.S. federal agencies. It enables fast, secure, direct-to-internet access across websites, email, SaaS applications, IaaS environments, and even shadow IT, all governed through a single, unified enforcement point. The result is a simpler, more resilient architecture that protects highly sensitive data while staying ahead of increasingly sophisticated, cloud-driven threats.\r\n\r\nRather than stitching together disconnected tools, Skyhigh SSE GovCloud consolidates essential security capabilities into one cohesive platform, providing real-time visibility, threat prevention, and data protection across every vector, all managed through a centralized console. Its integrated capabilities include:\r\n\r\n●        Skyhigh Secure Web Gateway (SWG) for Cloud\r\n●        Skyhigh Cloud Access Security Broker (CASB)\r\n●        Skyhigh Data Security Posture Management (DSPM)\r\n●        Skyhigh Advanced Data Loss Prevention (Adv DLP)\r\n●        Skyhigh Data Loss Prevention (DLP)\r\n●        Skyhigh Remote Browser Isolation (RBI)\r\nBuilt to meet the most rigorous federal security standards, Skyhigh SSE GovCloud invites agencies to rethink how they defend, detect, and respond. It accelerates Zero Trust adoption while supporting compliance with Executive Order 14028 and other critical cybersecurity mandates, enabling agencies not just to keep up with the threat landscape, but to get ahead of it.\r\n\r\nSkyhigh Data Security Posture Management (DSPM) - Authorized March, 2026\r\n\r\nThe greatest risk to federal data is not always lack of control, but the false sense of control created by fragmented environments.\r\n\r\nFederal agencies and contractors today are engaged in protecting ever-expanding volumes of mission-critical data, while operating under rigorous mandates like NIST and CMMC. Yet beyond compliance the real challenge is clarity. Fragmented security tools, hidden pockets of shadow data and AI usage, and rapidly evolving cloud vulnerabilities create an environment where visibility is partial and control is reactive.\r\n\r\nSkyhigh DSPM confronts this reality by unifying what has long been disconnected. Embedded within a broader Secure Service Edge (SSE) framework, it brings together data classification and real-time policy enforcement across SaaS, IaaS, web, email, and private applications. The result is comprehensive visibility backed by meaningful insight, reducing false positives while strengthening control over sensitive data.\r\n\r\nCrucially, this approach extends to emerging risks, including generative AI, ensuring sensitive information is not unintentionally exposed or ingested into AI models. It shifts the paradigm from chasing risk to anticipating it, giving agencies the ability to see, understand, and act with confidence in an increasingly complex digital landscape.\r\n\r\nThis translates into:\r\n\r\n●        Continuous compliance monitoring aligned with federal mandates (NIST, CMMC).\r\n●        Centralized visibility into data usage, movement and residence across cloud environments.\r\n●        Advanced protection of sensitive data (CUI/PII) using OCR and data matching.\r\n●        Granular access controls based on user, device, and location.\r\n●        Real-time threat detection, response, and remediation for stronger security posture.\r\nWith unified intelligence, decisions shift from reactive defense to proactive action, protecting data, ensuring compliance, and mitigating data risks.\r\n\r\nSkyhigh Remote Browser Isolation (RBI)\r\n\r\nThe safest web session is the one where untrusted content never reaches the endpoint. \r\n\r\nSkyhigh Remote Browser Isolation (RBI) achieves this reality by fundamentally changing how agencies interact with the web. Rather than allowing web content to execute directly on user devices, RBI renders browsing sessions in a secure, isolated cloud environment and delivers only a safe visual stream to the endpoint. \r\n\r\nEmbedded within the broader Skyhigh Security Service Edge (SSE) framework, RBI extends security beyond simple URL filtering and malware detection. It enables agencies to safely access unknown, risky, or uncategorized websites without compromising sensitive systems or data. Combined with integrated DLP, CASB, and SWG capabilities, RBI provides granular control over user interactions, preventing unauthorized downloads, uploads, copy-and-paste actions, and data exfiltration attempts.\r\n\r\nCrucially, this isolation-first model protects against both known and unknown threats, including zero-day malware, malicious scripts, ransomware, and sophisticated phishing attacks.\r\n\r\nThis translates into:\r\n\r\n●        Complete isolation of web content from agency devices and networks.\r\n●        Secure access to unknown, risky, or uncategorized websites.\r\n●        Integrated DLP controls for downloads, uploads, copy/paste, and data sharing.\r\n●        Reduced attack surface without impacting user productivity or browsing experience.\r\n●        Consistent Zero Trust enforcement across users, devices, and web destinations.\r\n●        With RBI, agencies move beyond reactive web security toward proactive threat prevention, ensuring users can safely access the internet while protecting mission-critical systems, sensitive data, and operational continuity.\r\n\r\nSkyhigh Secure Web Gateway (SWG) for Cloud\r\n\r\nWhat if every click, every web request, every cloud interaction, was inspected, understood, and secured in real-time?\r\n\r\nSkyhigh SWG for Cloud redefines how federal agencies protect users in an increasingly borderless digital environment. Acting as a powerful, cloud-native enforcement layer, it sits inline between users and the internet, continuously analyzing traffic to block malicious destinations, stop zero-day threats before they take hold, and prevent sensitive data from ever leaving the organization.\r\n\r\nWith 99.999% uptime and seamless integration of Remote Browser Isolation (RBI), Gateway Anti-Malware (GAM), CASB (Cloud Access Security Broker), Data Loss Prevention (DLP), and Data Security Posture Management (DSPM), Skyhigh SWG delivers uninterrupted, high-assurance connectivity without compromising security. Flexible deployment options ensure agencies can rapidly transition to the cloud while maintaining compliance with existing proxy infrastructures and legacy protocols.\r\n\r\nKey capabilities include:\r\n\r\n●        Intelligent web filtering that enables secure, policy-driven access to the web and cloud, from any device, anywhere\r\n●        Risk-free browsing with RBI, rendering web sessions via visual stream to eliminate malware exposure and reduce false positives\r\n●        Integrated DLP within RBI sessions, providing full visibility and control over how sensitive data is accessed and shared\r\n●        Advanced threat protection, leveraging machine learning, zero-day detection, GAM, and Global Threat Intelligence (GTI)\r\n●        SSL decryption for deep inspection of encrypted traffic, and more. \r\n●        Skyhigh SWG for Cloud doesn’t just secure web access, it challenges the assumption that speed, usability, and security must be trade-offs. Instead, it delivers all three, empowering agencies to move faster while staying firmly in control.\r\n\r\nSkyhigh Advanced DLP\r\n\r\nSecurity gaps aren’t obvious, but they’re where federal data is truly at risk.\r\n\r\nThe real data challenge today is not just securing sensitive data, it is doing so with precision and confidence across increasingly complex hybrid environments. Traditional DLP solutions often leave blind spots, generate excessive false positives, and struggle to enforce consistent policies, creating gaps in protection that can put mission-critical data at risk.\r\n\r\nSkyhigh Advanced DLP, transforms how federal organizations protect sensitive data across cloud, web, email, and applications. By combining Exact Data Matching (EDM) and Indexed Document Matching (IDM), it fingerprints structured and unstructured data with high accuracy, while AI-driven classifiers automate policy creation and reduce noise. OCR-enabled scanning ensures even large files and images are accurately analyzed, leaving no critical data overlooked.\r\n\r\nThis unified approach extends across sanctioned and shadow environments, providing consistent enforcement and centralized incident management. Advanced DLP helps agencies enforce risk-based access, prevent sensitive data from flowing into unsanctioned SaaS and AI tools, and reduce the attack surface, all in real-time.\r\n\r\nThis leads to:\r\n\r\n●        Proactive Threat Prevention detects and stops sensitive data misuse before it becomes a breach.\r\n●        Automated Policy Management streamlines policy creation and enforcement, reducing administrative overhead and human error.\r\n●        Consistent Enforcement Across Shadow IT monitors unsanctioned applications and services to eliminate blind spots.\r\n●        Enhanced Incident Response centralized visibility and automated remediation accelerate threat response and reduce risk exposure.\r\n●        Unified Data Protection enforces consistent DLP policies across cloud, SaaS, web, and email from a single platform.\r\n●        Skyhigh Advanced DLP enables federal teams to move beyond reactive protection, ensuring sensitive data is accurately identified, consistently safeguarded, and never unintentionally exposed, even in the face of evolving AI and cloud risks.\r\n\r\nSkyhigh Cloud Access Security Broker (CASB)\r\n\r\nSkyhigh CASB offers a powerful lens into how you can truly operate in the cloud. \r\n\r\nIt provides a comprehensive view into how cloud environments are actually being used and managed. In complex, multi-cloud ecosystems, it moves beyond basic visibility to correlate user activity, behavior, and data movement, surfacing patterns that are critical to security, compliance, and operational resilience. Its readiness ratings equip system and data owners with objective, evidence-based insights, enabling them to assess cloud risk with greater confidence and accountability.\r\n\r\nWhen potential threats or anomalies emerge, Skyhigh CASB provides the contextual intelligence needed for rapid, informed decision-making. This is essential in environments where timely response is critical to protecting sensitive data and maintaining operational integrity. Control is not static; through inline deployment options such as forward proxy, reverse proxy, and cloud app isolation, agencies can enforce real-time access policies across both authorized applications and the wide range of unsanctioned tools that often enter the environment.\r\n\r\nFor sanctioned cloud services, API-based integrations extend visibility deeper into user activity, data flows, and system interactions. This supports advanced capabilities such as user and entity behavior analytics (UEBA), tenant-level controls, collaboration governance, and both continuous and on-demand scanning. Together, these capabilities help federal organizations strengthen data protection, enforce policy, and maintain oversight across increasingly dynamic environments.\r\n\r\nIts feature set reflects a broader shift in security thinking:\r\n\r\n●        Scaling trust through deep visibility, delivering measurable insights grounded in comprehensive, end-to-end visibility.\r\n●        Extensive cloud service registry, 40,000+ cloud services enables broad visibility into tools and dependencies across the environment.\r\n●        Granular and adaptive data protection, driven by sophisticated classification and a mature DLP engine.\r\n●        Quantifiable risk across applications and users through machine learning and behavioral analytics.\r\n●        AI augments human judgment, from generating complex classification patterns to detecting subtle anomalies.\r\nIn cloud-first federal environments, success depends on real-time visibility, understanding, and response, moving beyond blocking to intelligent, adaptive security and compliance.\r\n\r\nAvailable Products from Skyhigh Security: \r\n●        Skyhigh Security Service Edge (SSE)\r\n●        Skyhigh Secure Web Gateway for Cloud (SWG Cloud) \r\n●        Skyhigh Cloud Access Security Broker for Gov Cloud (CASB Gov Cloud)\r\n●        Skyhigh Data Security Posture Management (DSPM) \r\n●        Skyhigh Advanced Data Loss Prevention (Adv DLP)\r\n●        Skyhigh Data Loss Prevention (DLP)\r\n●        Skyhigh Remote Browser Isolation (RBI)\r\n\r\nRequest a Demo: https://www.skyhighsecurity.com/forms/demo-request-form.html\r\nVisit Skyhigh Security for Public Sector for further details\r\n","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Skyhigh%20Logo2.png","inMarketplace":true,"agencies":["22-011","22-011-02","22-011-03","22-007-06","22-007-07","22-007-29","22-032"],"reuseCount":6,"leverages":["F1603047866"],"leveragedBy":["FR2427142353","FR1730842236"],"timeline":[{"date":"2019-09-06","to":"FedRAMP Ready","certType":"Rev5"},{"date":"2019-12-13","to":"JAB Review","certType":"Rev5"},{"date":"2020-04-29","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Kratos"},"sponsor":"22-011","trustCenterCheck":null}