{"id":"FR2230451369","name":"Snyk for Government","provider":"Snyk","providerSlug":"snyk","status":"FedRAMP Authorized","impact":"Moderate","authType":"Agency","authDate":"2025-04-07","serviceModel":["SaaS"],"deployment":"Public Cloud","businessFunctions":["Cybersecurity & Risk Management"],"assessor":"Coalfire Systems, Inc.","assessorId":"138514","smallBusiness":false,"website":"https://snyk.io/","description":"Snyk for Government (https://app.snykgov.io/) is a cloud driven, developer security platform that  scans code early in the software development lifecycle, providing developers with vulnerability information about their projects directly in the IDE and PR Checks, as well as providing actionable fix advice. Powered by an industry-leading security intelligence database, Snyk for Government analyzes code, open-source dependencies, containers, and IaC (Infrastructure as Code) to find, prioritize, and automatically fix vulnerabilities in projects. Snyk users can interact with the service via the Snyk for Government Web UI, the Snyk CLI, in the IDE, or with an API.\nSnyk for Government is hosted within AWS US East as the Cloud Service Provider (CSP) which assures product lines are maintained in a secure and trusted environment. Snyk for Government boundary includes the Production environment consisting of virtual compute, storage, databases, and internal management web applications.\nThe Snyk for Government environment is designed and operated based on security compliance and operations best practice by automating the build and operational processes as much as possible using Infrastructure as Code (IaC), CIS benchmarks, vulnerability scanning, continuous monitoring of critical security controls and a managed system development process to obtain initial and continuous FedRAMP Moderate Approval to Operate (ATO).","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Snyk%20Logo.png","inMarketplace":true,"agencies":["22-007-22","22-005-06"],"reuseCount":1,"leverages":["AGENCYAMAZONEW","FR1807853629A","FR1834740315","FR1812058188","F1206081364","FR2122150307","F1512167750","FR1823447014","FR1809360201"],"leveragedBy":["FR1916254386"],"timeline":[{"date":"2023-01-31","to":"Agency Authorization In Process","certType":"Rev5"},{"date":"2024-08-08","to":"FedRAMP In Process","certType":"Rev5"},{"date":"2025-04-07","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Coalfire Systems, Inc."},"sponsor":"22-005-06","trustCenterCheck":null}