{"id":"FR2134455708","name":"Nucleus for Government (NucleusGov)","provider":"Nucleus Security, Inc","providerSlug":"nucleus-security-inc","status":"FedRAMP Authorized","impact":"Moderate","authType":"Agency","authDate":"2024-02-29","serviceModel":["SaaS"],"deployment":"Government Community Cloud","businessFunctions":["Cybersecurity & Risk Management"],"assessor":"Linford & Company","assessorId":"140531","smallBusiness":true,"website":"https://nucleussec.com/government/","description":"Nucleus for Government (NucleusGov) is a risk-based vulnerability management platform purpose-built to streamline vulnerability and risk management within government entities and cloud service providers. By consolidating vulnerability data from all scanning tools (Network scanners, CSPM, ASPM, SAST, DAST and more) Nucleus creates a unified repository for vulnerability and asset information across the entire enterprise. Its workflow engine automates dozens of manual, repetitive, and error-prone tasks such as vulnerability risk assessment, prioritization, ticketing, and reporting to speed up vulnerability remediation and minimize the level of effort required.  Nucleus's unique features for compliance reporting, access control and vulnerability intelligence address the government's compliance requirements, all while modernizing your organization’s vulnerability management program and reducing the risk of data breaches.","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Nucleus%20Logo.png","inMarketplace":true,"agencies":["22-007","22-005-06"],"reuseCount":1,"leverages":["F1603047866","MSO365MT","F1209051525","FR2102652499","FR1823447014","FR1814276801"],"leveragedBy":[],"timeline":[{"date":"2022-05-04","to":"Agency Authorization In Process","certType":"Rev5"},{"date":"2023-04-19","to":"FedRAMP In Process","certType":"Rev5"},{"date":"2024-02-29","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Linford & Company"},"sponsor":"22-005-06","trustCenterCheck":null}