{"id":"FR2621733550","name":"Wallarm Federal Cloud","provider":"Wallarm, Inc.","providerSlug":"wallarm-inc","status":"FedRAMP Ready","impact":"Moderate","authType":"Agency","serviceModel":["SaaS"],"deployment":"Hybrid Cloud","businessFunctions":["Cybersecurity & Risk Management"],"assessor":"Fortreum, LLC","assessorId":"201664","smallBusiness":true,"website":"https://wallarm.com","description":"The Wallarm Federal Cloud (WFC) is a Software as a Service (SaaS) application programming interface (API) security platform that provides real-time traffic inspection and Web Application Firewall (WAF) capabilities for federal agencies. It is deployed in a single-tenant, Government-Only Cloud architecture on Google Cloud Platform (GCP).\n\nFunctionality and Use Case:\nThe system is designed to analyze incoming network traffic, mitigate malicious requests, and upload security metrics. The Wallarm Federal Cloud component processes this filtering node data, compiles custom security rules, builds API structure models, and provides the Wallarm Console user interface (UI) for configuration and security event investigation.1\n\nType of Federal Data:\nThe system is categorized at the Moderate security impact level. The federal data and information stored, processed, or transmitted includes:\n- Full HTTP/HTTPS request and response bodies and headers for WAF analysis, which may contain customer API data.\n- Security events, WAF rules, user profile and session data, and audit logs.\nThe system does not process, store, or transmit information requiring special protective measures beyond the standard FedRAMP Moderate baseline, such as Sensitive Compartmented Information (SCI).","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Wallarm%20Logo.png","inMarketplace":true,"agencies":[],"reuseCount":0,"leverages":[],"leveragedBy":[],"timeline":[{"date":"2026-05-13","to":"FedRAMP Ready","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Fortreum, LLC"},"trustCenterCheck":null}