{"id":"FR2528033654","name":"Knox Systems FedRAMP High Managed Platform","provider":"Knox Systems","providerSlug":"knox-systems","status":"FedRAMP Authorized","impact":"High","authType":"Agency","authDate":"2026-03-30","serviceModel":["SaaS"],"deployment":"Government Community Cloud","businessFunctions":["Analytics","Collaboration","Communication","Content Management System (CMS)","Cybersecurity & Risk Management","Education & Training","Operations Management","System Administration"],"assessor":"Coalfire Systems, Inc.","assessorId":"138514","smallBusiness":true,"website":"https://www.knoxsystems.com","description":"Knox Systems provides a multi-tenant cloud platform for delivering commercial software to federal government customers. Customer applications deploy on Knox's managed infrastructure across AWS, Azure, and Google Cloud Platform using Kubernetes containers, serverless functions, or virtual machines. Knox provides 24/7 Security Operations Center and Network Operations Center management, continuous security monitoring, vulnerability scanning, patch management, and incident response for all customer workloads. This includes:\r\n\r\nAdobe Connect is designed for immersive synchronous online meeting experiences for training, large-scale webinars, and virtual classroom meetings for a distributed workforce.\r\n\r\nBackupta is a Resilience Platform for Okta that ensures uninterrupted identity and access management. It delivers secure backup, disaster recovery, and rapid restoration of tenants or objects. Tenant cloning and failover strengthen business continuity, while proactive monitoring and audit logs enhance security.\r\n\r\nPeregrine enables public safety and government agencies to integrate, model, and access data from agency and authorized partner systems within a unified platform, allowing information about people, places, and events to be understood in context across systems. Peregrine supports workflows such as search, analysis, reporting, alerting, relationship mapping, and operational monitoring by providing a secure, continuously updated, permission-aware view of agency data for authorized users.\r\n\r\nSift is a SaaS platform for time-series telemetry ingestion, storage, visualization, and rule-based monitoring of mission-critical hardware systems. It serves mission operators, test engineers, and data analysts across federal agencies and their defense and aerospace contractors, providing interactive dashboards and programmatic query access to machine telemetry and associated operational metadata.\r\n\r\nAltana Product Network (APN) is a SaaS offering in AWS GovCloud that uses artificial intelligence to create a single source of truth for the global supply chain. It integrates customer and external datasets to map suppliers, shipments, compliance, and risk, and is used by customer administrators and end users through a web portal with SAML 2.0 federation. The boundary is supported by EKS-based microservices, Databricks data pipelines, and core AWS services such as RDS, S3, OpenSearch, and ElastiCache.\r\n\r\nSierra is a multi-tenant SaaS Cloud Service Offering (CSO) that enables Federal agencies to build, deploy, and operate conversational AI agents that interact with the agency's constituents and employees across chat, voice, email, and other channels primarily to handle customer support, case intake, benefits inquiries, and similar service workflows autonomously so agencies can resolve high-volume citizen interactions at scale economically.\r\n\r\nThe Acsense IAM Resilience Platform is a cloud-based SaaS solution that serves as an Identity Control Plane, providing unified backup & recovery, disaster recovery on a separate remote tenant, configuration management, and compliance assurance capabilities for enterprise identity and access management (IAM) environments. The platform is IDP-agnostic by design, primarily supporting both Okta (Workforce and CIAM) and Microsoft Entra ID deployments.The system enables authorized administrators to back up enterprise identity infrastructure (including human and non-human identities/machine identities), track and compare configuration changes with full role attribution, map dependencies, detect configuration drift in approximately 10 minutes, and leverage Continuous Resilience Validation to ensure a tested ~10-minute Recovery Time Objective (RTO) during operational incidents, ransomware attacks, or outages. The authorization boundary includes the Acsense SaaS application, supporting management services, application APIs, data processing services, and storage components operated in cloud infrastructure environments. The platform is used by enterprise and government administrators, security teams, and IT operations personnel to process identity-related business data and limited personally identifiable information (PII) associated with IAM objects and user accounts. The service is delivered as a multi-tenant SaaS platform with customer-isolated data storage (or as a single, separated tenant) and relies on external identity provider APIs and cloud infrastructure services to perform authorized backup, synchronization, monitoring, and recovery operations.\r\n\r\nSwimlane's Turbine is a multi-tenant SaaS agentic AI security automation platform which uses low-code technology to unify disparate cybersecurity tools into a centralized system of action. By utilizing agentic AI (Hero AI) alongside a visual, drag-and-drop playbook builder, the platform automates complex Security Operations Center (SOC) workflows, vulnerability management, and incident triage without requiring extensive custom coding. This comprehensive AI SOC orchestration eliminates alert fatigue for security teams, tracks compliance, and provides real-time ROI reporting to accelerate threat responses and protect large organizations globally.\r\n\r\nDeterminate is an SDLC collaboration and deployment automation platform. It specifically caters to the Nix ecosystem for reproducible and declarative software projects. Determinate processes and delivers software source code (FlakeHub, a source artifact repository) and compiled artifacts (FlakeHub Cache, a binary artifact repository) to end users as multi-tenant SaaS. Users publish their software via the customer's coding forge, like GitHub or GitLab.\r\n\r\nThe Vannevar platform supports government agencies and other authorized government users by running guided, agent-assisted workflows across disparate datasets and proprietary data to reduce the time required to turn raw information into investigative outputs. Within the platform, users can ingest and analyze digital artifacts and other government-provided data, correlate and search across those sources, and leverage agents to generate consistent work products. These workflows enable digital forensic sensemaking, investigative development and enrichment, and the production of shareable products for downstream action.\r\n\r\nTractian is an asset health monitoring platform that gives government agencies the intelligence to keep critical physical assets running in support of mission readiness, with security and compliance built for U.S. federal requirements. Wireless sensors and AI analytics support the whole asset health lifecycle, detecting developing failures, tracking how they progress, and guiding teams through to resolution before an issue becomes downtime or a safety event. The platform is deployed within Knox’s FedRAMP High Authorized environment on AWS GovCloud, and it helps agencies and contractors get more output and reliability from the equipment they already have, without adding headcount, capital expense, or new risk.\r\n\r\nMissionML Studio is a platform used to build, prototype, and productionize AI-enabled government workflow applications and securely host and monitor them. It is deployed as a secure, fully managed, single-tenant cloud platform where government program managers build and prototype custom AI workflow applications tailored to their mission needs and process operational, analytical, and mission data, while ensuring isolation for each customer environment.\r\n\r\nVectra AI delivers AI-native security and observability that helps federal security teams build and demonstrate resilience against modern cyber threats. The platform provides unified observability across on-premises networks, identity, cloud, SaaS, IoT/OT, edge, and AI infrastructure to identify active threats, prioritize investigation and response, and help agencies proactively reduce cyber risk and strengthen security posture. Federal security analysts, incident responders, administrators, and security leaders use the platform to monitor activity, investigate suspicious behavior, hunt for threats, contain compromised identities or devices, and assess gaps in security coverage. The platform provides contextual investigation, natural-language assistance, attack-path visualization, operational reporting, and evidence that supports continuous monitoring, compliance, and SOC optimization. More than 2,000 organizations use Vectra AI, which was named a Leader in the 2025 and 2026 Gartner® Magic Quadrant™ for Network Detection and Response.","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Knox%20Logo2.png","inMarketplace":true,"agencies":["22-002-06","22-044"],"reuseCount":1,"leverages":["F1603047866","FR1807853629A","F1305072116"],"leveragedBy":[],"timeline":[{"date":"2025-08-15","to":"FedRAMP Ready","certType":"Rev5"},{"date":"2026-03-12","to":"Agency Authorization In Process","certType":"Rev5"},{"date":"2026-03-30","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","secureConfigUrl":"https://knoxsystems.com/secure-configuration-guides","nextOcr":"2027-03-09","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Coalfire Systems, Inc."},"sponsor":"22-002-06","trustCenterCheck":null}