{"id":"FR2134635186","name":"On-Demand Security Testing Platform","provider":"Synack","providerSlug":"synack","status":"FedRAMP Authorized","impact":"Moderate","authType":"Agency","authDate":"2023-12-19","serviceModel":["SaaS"],"deployment":"Government Community Cloud","businessFunctions":["Cybersecurity & Risk Management"],"assessor":"Schellman Compliance, LLC","assessorId":"136571","smallBusiness":false,"website":"https://www.synack.com/platform/fedramp/","description":"The Synack Platform is a multi-tenant SaaS that delivers continuous security testing, vulnerability management and a managed Vulnerability Disclosure Program (VDP) supported by a network of vetted security researchers. Synack's security testing products include on-demand penetration testing of web, host, cloud, APIs, LLM (AI) and mobile assets – covering both internal and external assets for most federal use cases. \n\nSynack Platform users are able to identify the total amount of vulnerabilities found, get analysis on which are most severe, review stats from testing performed and receive patch efficacy data - providing observability data that can then be correlated with SOC workflows. Synack enables efficient remediation, helping security leaders identify the root cause of vulnerabilities so they can prioritize and eliminate them. Synack combines human and automated test findings with compliance checklists to enhance security posture and provide audit-ready reports that can help meet compliance, including FISMA/NIST 800-53 and BOD 20-01. Synack365, a popular offering on the Synack platform, provides around-the-clock security testing 365 days a year. ","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Synack%20Logo.png","inMarketplace":true,"agencies":["22-022","22-005","22-042","22-062"],"reuseCount":3,"leverages":["FR1823149273","FR1805751477","F1206081364","F1209051525","F1512167750","FR1913470600","F1607197917","FR1821856903"],"leveragedBy":[],"timeline":[{"date":"2022-02-04","to":"Agency Authorization In Process","certType":"Rev5"},{"date":"2023-01-04","to":"FedRAMP In Process","certType":"Rev5"},{"date":"2023-12-19","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Schellman Compliance, LLC"},"sponsor":"22-005","trustCenterCheck":null}