{"id":"FR1802451335","name":"Federal High Impact Virtualized Environment (FedHIVE)","provider":"Human Resources Technologies, Inc. (HRTec)","providerSlug":"human-resources-technologies-inc-hrtec","status":"FedRAMP Authorized","impact":"High","authType":"JAB","authDate":"2020-12-07","serviceModel":["IaaS","PaaS","SaaS"],"deployment":"Government Community Cloud","businessFunctions":["Customer Service","Cybersecurity & Risk Management","Data Management","Human Resources","Network Management","Operations Management","Storage","System Administration","Virtual Private Network (VPN)"],"assessor":"Lunarline, Inc.","assessorId":"137004","smallBusiness":true,"website":"https://www.fedhive.com/","description":"FedHIVE® is the only FedRAMP High Authorized accelerator platform delivering Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS) capabilities within a single High-impact authorization boundary. Originally granted a Joint Authorization Board (JAB) Provisional Authority to Operate (P-ATO) at the FedRAMP High baseline, FedHIVE enables broad reuse across Federal and DoD agencies and significantly reduces redundant security assessment efforts. FedHIVE implements and continuously manages over 400 NIST SP 800-53 Rev. 5 High baseline security controls within its boundary, including 24/7 Security Operations Center (SOC) operations, automated continuous monitoring, vulnerability management, patching, incident response, and independent third-party validation activities. The environment is designed to protect Controlled Unclassified Information (CUI) and Personally Identifiable Information (PII) at the FIPS PUB 199 High level and currently supports multiple federal agencies, including DoD, U.S. Space Force, TSA, and the Department of State. FedHIVE also holds a DISA Provisional Authorization at IL4 and IL5, is GovRAMP (StateRAMP) authorized, and meets the Cybersecurity Maturity Model Certification(CMMC) Level 2.\r\nFedHIVE accelerates the authorization process by providing sponsorship and enabling full High baseline control inheritance, allowing SaaS providers to achieve FedRAMP High ATO status significantly faster and at substantially lower total cost than building and sustaining a High environment independently. Unlike models that require containerization or major re-architecture, FedHIVE supports lift-and-shift migration of legacy systems, COTS applications, and complex enterprise stacks with minimal re-engineering; containers are supported but not required. The platform enables hybrid architectures spanning private GovCloud and hyperscaler environments such as AWS, Google Cloud, and Azure within the same authorized boundary, eliminating the need to re-initiate compliance when scaling. By managing the full security stack—including infrastructure, platform services, data protection, identity, and continuous monitoring—FedHIVE reduces compliance duplication, lowers long-term operational burden, and provides an economically efficient alternative to multi-million-dollar DIY FedRAMP High builds. Its compliance team includes former working-level FedRAMP and DISA personnel who have executed authorization and assessment activities within the federal ecosystem, strengthening implementation rigor and operational readiness.\r\nFedHIVE enables the secure federal deployment of commercial and enterprise solutions and mission applications within its authorized High-impact environment including:\r\n1Kosmos Platform - Powered by biometric verification, government-issued credential validation, and advanced liveness detection, the 1Kosmos Platform ensures the right person accesses the right systems. Purpose-built for high-impact federal systems, it also delivers phishing-resistant authentication and a digital identity wallet. Deploy as a complete identity solution or modular components: identity verification, digital wallet, or passwordless MFA. Zero passwords. Zero shared secrets. Zero trust, verified.\r\n \r\nACF Customer Experience Platform - ACF Customer Experience Platform is a cloud-based SaaS solution hosted on Microsoft Azure that helps enterprise organizations manage customer interactions through appointment scheduling, queue management, automated communications, and AI-powered analytics. Serving 500+ clients across healthcare, government, banking, retail, and education sectors.\r\n \r\nAllocore ULP-UGP-UFP Software - Allocore’s ULP, UGP, and UFP platforms provide FedRAMP High–authorized, cloud‑based lifecycle management for federal loans and grants, delivering advanced origination, workflow automation, servicing, compliance, and auditability aligned with federal program requirements. Together, they integrate AI‑driven fraud detection, real‑time risk assessment, and cross‑program data intelligence to help agencies prevent improper payments and strengthen program integrity across lending and grant operations.\r\n \r\nArcher Risk and Resilience Management (RRM) - Archer Risk and Resilience Management enables organizations to strengthen resilience by identifying critical products, services, and dependencies, defining impact tolerances, and coordinating risk‑driven actions across business, IT, operational risk, and cyber teams. It provides integrated visibility into resiliency risks, supports preparation for disruptions such as natural disasters or cyber events, and helps organizations adapt, withstand, and recover through structured scenario analysis and operational resilience workflows.\r\n \r\nContegix TrueStack (TSX) - a secure, FedRAMP-authorized, and DoD-compliant managed application platform designed to help government and regulated agencies deploy collaborative tools like Atlassian (Jira, Confluence), GitLab, and MatterMost. It focuses on Zero Trust security, handling compliance, hosting, and maintenance to streamline secure DevSecOps. \r\n \r\nContegix TrustStack Atlassian Confluence - Delivered on Contegix’s FedRAMP High authorized cloud platform, providing secure, compliant hosting of Atlassian Confluence for federal agencies.\r\n \r\nContegix TrustStack Atlassian JIRA - Hosted within Contegix’s FedRAMP High authorized cloud environment to enable secure Jira use and migration for agencies requiring high‑impact compliance.\r\n \r\nContegix TrustStack Mattermost - A secure collaboration platform offered through Contegix’s FedRAMP‑certified DevSecOps ecosystem, supporting high‑impact environments and compliant deployment of Mattermost.\r\n \r\nDell PowerStore - Dell PowerStore delivers high‑performance, all‑flash storage with advanced data reduction and automation to support mission‑critical government workloads. Its secure, efficient NVMe architecture and always‑on protection help agencies modernize infrastructure, improve resilience, and meet evolving demands across hybrid environments.\r\n \r\nDell PowerSwitch - Dell PowerSwitch provides flexible, high‑performance Ethernet switching from edge to core, helping government agencies modernize networks with open architectures, scalable designs, and secure, reliable connectivity. Its agility and efficiency support mission‑ready operations across data centers, campuses, and cloud environments.\r\n \r\nFirst Due Fire and EMS RMS Software - First Due and E-9 Corporation deliver a FedRAMP HIGH -authorized solution unifying Fire incident reporting, ePCR, fire prevention, scheduling, analytics, and response. Trusted by over 3,000 civilian jurisdictions, every DoW branch, and a growing number of Federal Civilian agencies, the all-in-one suite streamlines operations and protects mission-critical data.\r\n \r\nFormAssembly Gov Cloud Fed – Provides a FedRAMP High–authorized, no‑code platform to securely manage and automate sensitive data collection. It modernizes processes from simple paper forms to sophisticated, multi-respondent processes through role‑based access controls, encryption, audit trails, and integrations with gov‑preferred systems such as Salesforce Government Cloud, Microsoft 365 Government, and Google Workspace FedRAMP.\r\n \r\nHitachi - Hitachi’s government‑ready storage platforms deliver mission‑focused performance, cyber‑resilience, and scalability across core data centers and edge environments. Designed for secure, compliant, and hybrid‑cloud operations, they support AI‑driven workloads while ensuring high availability and robust data protection for critical agency needs.\r\n \r\nHPE Greenlake - HPE GreenLake for Government delivers a secure, on‑premises, pay‑per‑use cloud platform that scales with public‑sector demand. It provides data sovereignty, strong security, simplified procurement, and hybrid‑cloud agility—modernizing IT while preserving control and ensuring resilient, compliant service delivery for agencies.\r\n \r\nHPE Mist - Simplified network operations delivering the best user experiences. Mist and the Marvis AI engine across all networking domains—wireless, wired, SD-WAN, Location Services, IOT and Access Control with an end-to-end approach that simplifies IT operations—from deployment to proactive troubleshooting and rapid issue resolution—to boost productivity with fewer trouble tickets, reduce OpEx, and optimize end-user experiences.\r\nHorizon3.ai Node Zero Federal - NodeZero delivers FedRAMP High-authorized autonomous security testing and validation. Continuously hack, fix, and verify exploitable attack paths across your entire infrastructure, from weak credentials and misconfigurations to exposed data, failed controls, and weak policies without disrupting missions. Accelerate ATO readiness, prioritize remediation, and harden defenses beyond CVEs and patchable vulnerabilities.\r\n \r\nOneNet Emergency Management Platform – Platform as a Service (PaaS) cloud-native Emergency Management Platform providing Computer-Aided Dispatch OneNet CAD, ESRI native OneNet MAP, OneNet MOBILE and OneNet Revere (iOS and Android). Purpose-built for federal and DoW force protection and public safety, its microservices architecture ensures high availability, real-time multi-agency coordination, and mission-critical resilience. OneNet was designed for and is FedRAMP HIGH authorized having been deployed for years within DoW components.\r\n \r\nPortworx - Portworx delivers a secure, Kubernetes‑native data platform that helps government agencies modernize mission‑critical applications with resilient, scalable, and automated container storage. It simplifies operations across hybrid and multi‑cloud environments, providing robust data protection, disaster recovery, and encryption to support compliant, high‑availability digital services.\r\n \r\nRed Hat OpenShift - Red Hat OpenShift provides a secure, enterprise‑grade Kubernetes platform that helps government agencies modernize applications across on‑prem, hybrid, and multi‑cloud environments. With built‑in automation, CI/CD, and consistent operations, it strengthens mission agility, accelerates modernization, and supports compliant, resilient service delivery.\r\n \r\nRegScale Continuous Controls Monitoring – Streamline your governance, risk, and compliance processes with shift-left security and compliance as code. RegScale’s CCM platform delivers constant audit-readiness and continuously self-updating paperwork. Designed as a cloud-native solution, RegScale also delivers hybrid and on-premises options, enabling integration of compliance as code into the CI/CD pipelines, speeding up certification, reducing costs, and future-proofing security posture.\r\n \r\nTungsten TotalAgility® (formerly Kofax TotalAgility) is an AI-powered automation platform that enables U.S. government agencies to securely process documents, automate workflows, and manage case-driven operations. The platform combines intelligent document processing (IDP), agent-driven automation, and knowledge discovery to help agencies streamline and optimize content-intensive processes. Within the FedRAMP authorization boundary, TotalAgility is implemented as a scalable SaaS solution hosted in a government-authorized Microsoft Azure environment and incorporates security controls aligned with FedRAMP High requirements.\r\n \r\nVMware - VMware enables government agencies to modernize mission‑critical IT with secure, scalable virtualization and private‑cloud architecture. Its solutions support Zero Trust, application modernization, resilient infrastructure, and seamless workload mobility—helping agencies protect citizen data, improve efficiency, and accelerate digital transformation across hybrid environments.\r\n","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/FedHive%20Logo2.png","inMarketplace":true,"agencies":["22-034","22-007-17","22-007-11","22-005-11"],"reuseCount":4,"leverages":[],"leveragedBy":[],"timeline":[{"date":"2018-07-11","to":"FedRAMP Ready","certType":"Rev5"},{"date":"2020-08-18","to":"JAB Review","certType":"Rev5"},{"date":"2020-12-07","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Lunarline, Inc."},"sponsor":"22-007-17","trustCenterCheck":null}