{"id":"FR2427142353","name":"AutoRABIT for Public Sector - CodeScan, Guard, & ARMOR","provider":"AutoRABIT Holding, Inc.","providerSlug":"autorabit-holding-inc","status":"FedRAMP Authorized","impact":"Moderate","authType":"Agency","authDate":"2025-11-24","serviceModel":["SaaS"],"deployment":"Government Community Cloud","businessFunctions":["Development Tools"],"assessor":"Schellman Compliance, LLC","assessorId":"136571","smallBusiness":true,"website":"https://www.autorabit.com/solutions/public-sector/","description":"CodeScan is a static code analysis tool that seamlessly integrates with the development and deployment processes of Salesforce and scans for code vulnerability and quality checks along the process. Besides that, to improve and enforce code standardization, it also allows you to define the quality profiles and the quality gates, which gives you the ability to enforce standards and use this tool to educate your developers.\n\nCodeScan is a company-built application and developed using Amazon RDS for PostgreSQL and has capabilities to integrate with external systems.\nCodeScan offers more than 700 built-in rules for security and quality along with the provision to define your own rules.\n\nGuard provides enterprises with an automated, proactive approach to Salesforce security. Instead of relying on manual reviews and reactive fixes, Guard continuously monitors for security gaps, enforces policies at scale, and automatically remediates issues before they become critical threats. With AutoRABIT Guard, enterprises can transform their Salesforce environments from a security liability into a well-governed, compliant, and resilient system without slowing down innovation or burdening teams with manual processes. By making security seamless, AutoRABIT Guard ensures that organizations can confidently scale their Salesforce investment while meeting the highest security and compliance.\n\nARMOR is a centralized DevSecOps and Release Management platform for Salesforce that unifies CI/CD, environment management, and data migration into a secure pipeline. It enforces governance through policy-driven automation, pre-deployment security analysis, and immutable audit trails, ensuring strict configuration control and metadata integrity across the software development lifecycle.","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Autorabit%20Logo.png","inMarketplace":true,"agencies":["22-036"],"reuseCount":0,"leverages":["F1603047866","FR2004446306","FR2201340492","MSO365MT","FR2001619337","FR2231052341","FR2003061248","F1506096710"],"leveragedBy":[],"timeline":[{"date":"2025-06-30","to":"Agency Authorization In Process","certType":"Rev5"},{"date":"2025-10-21","to":"FedRAMP In Process","certType":"Rev5"},{"date":"2025-11-24","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Schellman Compliance, LLC"},"sponsor":"22-036","trustCenterCheck":null}