{"id":"FR2618648262","name":"Midwatch","provider":"Defense Cybersecurity Group","providerSlug":"defense-cybersecurity-group","status":"FedRAMP Ready","impact":"Moderate","authType":"Agency","serviceModel":["IaaS","SaaS"],"deployment":"Government Community Cloud","businessFunctions":["Collaboration","Communication","Cybersecurity & Risk Management","Data Management","Design & Multimedia","Development Tools","Mobile Device Management (MDM)","Operations Management","Research","Storage"],"assessor":"Coalfire Systems, Inc.","assessorId":"138514","smallBusiness":true,"website":"cybersecgru.com","description":"Midwatch is a secure enclave engineered for the protection of Controlled Unclassified Information (CUI). It provides Federal Agencies and the Defense Industrial Base (DIB) with a secure environment to handle and share sensitive data requiring moderate security controls. Through the use of Virtual Desktop Infrastructure (VDI), Midwatch ensures strict logical separation between secure workloads and an organization’s broader enterprise information systems.\n\nMidwatch enables secure, high-performance collaboration across several critical workflows, including:\nSensitive Data Collaboration: Secure co-authoring and collaboration on sensitive information and complex documentation stacks.\nAdvanced Engineering: Specialized support for CAD workflows and AI/ML GPU-accelerated workloads.\nSoftware Engineering: Secure Software Development and DevSecOps via an integrated Gitflow platform, implemented in alignment with the Secure Software Development Framework (SSDF).\nOperational Management: Integrated project management and secure task orchestration.\nRemote Device Management: Midwatch ViPR provides a secure gateway between the VDI infrastructure and physical office or workshop floors, facilitating controlled and audited file transfers to engineering peripheral devices.\n\nThe Midwatch authorization boundary consists of a DevSecOps platform, VDI infrastructure, Midwatch ViPR remote access services, workflow automation, and vulnerability management tools, all hosted within a dedicated cloud organization. The environment is hardened through a segmented VPC architecture with Google Cloud Armor edge protection, the implementation of a Zero Trust Network Architecture (ZTNA) for all access requests, and robust data protection featuring centralized logging and Customer-Managed Encryption Keys (CMEK).\n\nMidwatch is deployed as a government-community cloud within the Google Cloud Platform (GCP) using US-only data centers. The system utilizes a microservices-based architecture powered by Docker and K3s/K8s/GKE Autopilot.","inMarketplace":true,"agencies":[],"reuseCount":0,"leverages":[],"leveragedBy":[],"timeline":[{"date":"2026-04-16","to":"FedRAMP Ready","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Coalfire Systems, Inc."},"trustCenterCheck":null}