9line
No trust center linked in FedRAMP's data as of Nov 2, 2026. TrustBox builds and hosts trust centers for FedRAMP providers. Get started
Not yet on the Marketplace listing · Provider website · JSON
9line tells agencies which vulnerabilities in their software and AI supply chain actually affect them, with evidence an assessor can re-check. A customer submits a repository or container image through the web application or API. 9line generates a CycloneDX SBOM, inventories the AI models and agents it contains, matches components against vulnerability data, and determines whether each vulnerable code path is reachable using a deterministic call-graph engine. It returns a VEX document in which every statement carries its evidence. An in-boundary model (Amazon Bedrock in AWS GovCloud) explains…
Facts
- FedRAMP ID
- FR2701857797
- Status
- Initial Implementation
- Impact level
- Not yet listed
- Authorization path
- Program
- Service model
- SaaS
- Deployment
- Government Community Cloud
CR26 trust center
- Package
- FedRAMP 20x
- Trust center
- Not listed
- Next ongoing report
- Not stated
- Schema check
- Passes FedRAMP's schema
Gaps found
- No trust center link; CR26 requires one with access instructions CDS-CSO-UTC
- No link to secure configuration guidance SCG-CSO-RSC
- No next Ongoing Certification Report date CDS-CSO-PUB
- No FedRAMP Recognized assessor listed CDS-CSO-PUB
- No service list; CR26 requires the services in scope CDS-CSO-SVC
Status history
- Oct 19, 2026 Initial Implementation 20x