Independent FedRAMP-cost research, read by teams pricing authorization. Not affiliated with GSA or the FedRAMP PMO.Sponsor this site →
DOC-REF: FRC-2026-04-28Rev 04 / 2026

Section 8.0 - Register

DOC-REF: FRC-MKT-000

FedRAMP Marketplace register

Every cloud service offering the FedRAMP Marketplace publishes, read from the same JSON feed the marketplace itself loads, and set against what an authorization at that impact level costs to reach. 730 offerings, 728 with their own page, as of September 28, 2026.

Offerings listed

730

58 providers list more than one

FedRAMP Certified

538

FedRAMP's own status wording

In process

58

Agency and FedRAMP in-process statuses

On the 20x track

63

667 are Rev5

Section A. Three ways into the register

Status, impact level and authorization path

These are the three axes the marketplace itself filters on. Each row below opens the full list for that group, with the cost of reaching it.

Counts are taken from the 730 product records in the feed. The marketplace also publishes its own headline metrics, computed on a narrower basis, so a figure quoted here will not always match the number on the front of the marketplace. Where a status carries fewer than five offerings it stays a row here rather than becoming a page of its own.

Section B. What each level costs to reach

Register counts against our published budget ranges

The counts are the marketplace's. The money is ours, published on the cost pages linked in each row, and it describes what a provider spends to reach that level rather than anything a listed provider has disclosed.

Impact level / listed offerings / our cost range
Impact levelListedInitial authorizationContinuous monitoringTimeline
Low25$350,000 to $500,000$60,000 to $120,000 a year9 to 12 months
Moderate463$800,000 to $2,000,000$150,000 to $350,000 a year12 to 18 months
High124$2,500,000 to $5,000,000+$300,000 to $600,000+ a year18 to 24 months
LI-SaaS41Not published hereNot published hereNot published here

LI-SaaS carries no range because this site does not publish one for the tailored low baseline. The 77 offerings the marketplace lists without an impact level carry none either. Full workings sit on the impact level reference, methodology and the cost worksheet.

Section C. Most recent certifications

The last 12 offerings to reach FedRAMP Certified

Ordered by the certification date the marketplace records.

Recently certified
Cloud service offeringProviderImpact levelTypeDated
Bizzdesign GovCloudBizzdesign USModerateRev5September 1, 2026
Butterfly Network UltrasoundButterfly Network Inc.ModerateRev5August 26, 2026
Tyler Federal Cloud Platform (TFCP)Tyler Federal, LLCModerateRev5August 25, 2026
The ArmoryStackArmorHighRev5August 21, 2026
Coralogix U.S. GovOpsCoralogix Inc.ModerateRev5August 14, 2026
Cloudflare for GovernmentCloudflare, Inc.HighRev5August 6, 2026
Cisco Security Cloud for GovernmentCisco Systems Inc.HighRev5August 6, 2026
Atlas by LMILMI SolutionsModerateRev5July 31, 2026
DSS Health Cloud (DSSHC)Document Storage Systems, Inc. (DSS, Inc.)HighRev5July 27, 2026
GreyMatter for GovernmentReliaQuestModerateRev5July 8, 2026
Lexis+® for GovernmentLexisNexis Legal and ProfessionalModerateRev5July 6, 2026
Elekta ProKnow FederalElekta SolutionsModerateRev5June 25, 2026

Section D. Who is on the register

Providers, categories, assessors and agencies

Everything in this section is a count over the same product records, not a ranking or a recommendation.

Providers with more than one offering (58)
  • IBM10
  • Adobe8
  • Oracle6
  • Microsoft5
  • Cisco Systems Inc.4
  • Palo Alto Networks, Inc.4
  • Zscaler, Inc.4
  • CGI Federal3
  • Cisco Systems, Inc.3
  • Databricks, Inc.3
  • Google3
  • OpenText3
Most common business categories
  • Data Management257
  • Cybersecurity & Risk Management244
  • Analytics238
  • Collaboration206
  • Operations Management178
  • Communication126
  • Legal & Policy91
  • Research83
  • Network Management79
  • System Administration78
  • Development Tools77
  • Content Management System (CMS)75
Assessors named most often
Agencies appearing on the most authorization lists
  • Department of Veterans Affairs129
  • Department of Agriculture87
  • Department of State71
  • General Services Administration64
  • Department of Energy57
  • Federal Deposit Insurance Corporation57
  • Internal Revenue Service56
  • Department of Health and Human Services54
  • Defense Information Systems Agency50
  • United States Patent and Trademark Office50
  • Tennessee Valley Authority47
  • Department of Education44

The assessor field is free text on the marketplace, so the same firm can appear under more than one spelling and 3 records use it for a note rather than a firm name. Those are left out of the count above. Where we hold a fee benchmark page for an assessor the name links to it. Service models across the register run SaaS 683, PaaS 78, IaaS 25; deployment models run Government Community Cloud 381, Public Cloud 278, Hybrid Cloud 50, Government-Only Cloud 20, Community Cloud 1.

Section E. Questions

What the register does and does not tell you

How many cloud services are on the FedRAMP Marketplace?

The marketplace feed lists 730 cloud service offerings as of September 28, 2026. 538 carry the status FedRAMP Certified, 58 are in process, and 62 carry Legacy FedRAMP Ready.

What does it cost to reach the impact level most listed offerings hold?

Moderate is the most common impact level on the register, held by 463 offerings. Our Moderate cost guide puts a first authorization at $800,000 to $2,000,000 over 12 to 18 months, with $150,000 to $350,000 a year in continuous monitoring after that. High runs $2,500,000 to $5,000,000 and up. Low runs $350,000 to $500,000.

Does a FedRAMP listing mean the government recommends the product?

No. GSA's own disclaimers page states that FedRAMP content about a specific commercial product or service does not constitute endorsement, recommendation, or favoring by the General Services Administration. A listing records that a security package exists for agencies to review, and FedRAMP does not issue the ATO itself.

How many offerings are on the 20x track?

63 of the 730 offerings carry the 20x certification type; the other 667 are Rev5. Our 20x page puts an early estimate of $100,000 to $300,000 on a Low or Moderate authorization under 20x, against $500,000 to $2,000,000 and up on the traditional path.

Which agencies authorize the most cloud services?

On the current register the Department of Veterans Affairs appears against 129 offerings, followed by Department of Agriculture with 87 and Department of State with 71.

Next step

Price your own authorization

The register shows who has been through it. The worksheet estimates what the same path costs for your impact level, security posture and organization size.

Provenance and independence

Source: the FedRAMP Marketplace product feed, produced by the General Services Administration. The feed's own last-change stamp is September 28, 2026; this copy was taken on October 3, 2026.

GSA's disclaimers page states that FedRAMP content about a specific commercial product or service is provided for the information and convenience of the public and “does not constitute endorsement, recommendation, or favoring by the General Services Administration”. A listing here is a record of a certification status, not a judgment about the product.

FedRAMPCost.com is an independent cost reference. We are not affiliated with FedRAMP, the GSA, any provider listed on this page, or any assessment organization, and no provider pays to appear in this register.

DOC-REF: FRC-2026-04-28 / Updated 2026-04-28