{"id":"FR2629041584","name":"Siteimprove Federal Platform","provider":"Siteimprove Inc","providerSlug":"siteimprove-inc","status":"FedRAMP Ready","impact":"Moderate","authType":"Agency","serviceModel":[""],"deployment":"Public Cloud","businessFunctions":["Analytics","Content Management System (CMS)","Data Management","Governance, Risk, and Compliance (GRC)","Marketing & Sales"],"assessor":"Securisea, Inc.","assessorId":"200865","smallBusiness":false,"website":"https://www.siteimprove.com","description":"Siteimprove Federal Platform is delivered as a Software as a Service (SaaS) offering hosted within Amazon Web Services (AWS) and made available to United States federal government agencies. The platform provides automated scanning, analysis, and reporting on federal agency website content, covering Section 508 accessibility compliance, content quality and broken-link detection. A crawler ingests content from agency websites for analysis, and findings, compliance scores, and remediation tracking are presented to agency users through a web portal. The offering processes, stores, and transmits federal customer data, including controlled unclassified information (CUI) and associated federal metadata. The production environment is deployed across a dedicated multi-account AWS organization and is built on Amazon Elastic Kubernetes Service (EKS) for container orchestration, with self-managed Oracle databases running on Amazon EC2 dedicated hosts as the primary data store and Amazon S3 for object storage. Cryptographic protection of federal data at rest and in transit uses FIPS 140-validated modules, with key management provided through AWS Key Management Service (KMS). Service model: Software as a Service (SaaS). Deployment model: Public Cloud (AWS us-east-2 commercial region, dedicated federal AWS Organization). Customer scope: U.S. federal agencies, with a single-tenant-per-agency architecture (per-tenant AWS account and VPC).","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Siteimprove%20Logo.png","inMarketplace":true,"agencies":[],"reuseCount":0,"leverages":[],"leveragedBy":[],"timeline":[{"date":"2026-07-30","to":"FedRAMP Ready","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Securisea, Inc."},"trustCenterCheck":null}