Anomali Security Operations Platform (ASOP)

FedRAMP package ID

FR2527234065

Cloud service provider

Anomali

Certification status

FedRAMP In Process

Impact level

Moderate

Certification class

Class C (Moderate)

Authorization path

Agency

Certification type

Rev5

Marketplace phase

Initial Implementation

Deployment model

Public Cloud

Register snapshot

September 3, 2026

Service model

SaaS

Independent assessor

A-LIGN Compliance and Security, Inc. dba A-LIGN

Status date

July 27, 2026

Business categories

Analytics, Cybersecurity & Risk Management

Small business

Flagged on the marketplace record

Milestones on record

2

The marketplace carries Anomali Security Operations Platform (ASOP) under package FR2527234065 with 16 recorded fields. Its current status was set on July 27, 2026. A-LIGN Compliance and Security, Inc. dba A-LIGN is named as the independent assessor. No agency authorizations are listed against it in the current feed. It is delivered as SaaS on a public cloud, filed under 2 business categories including Analytics and Cybersecurity & Risk Management. Anomali is flagged as a small business on the record.

• Vantage for Government

  Nozomi Networks Inc.

  FedRAMP In Process, Moderate impact, Agency path, Rev5.

• Alation Cloud Service

  Alation

  Agency Authorization In Process, Moderate impact, Agency path, Rev5.

• Coralogix U.S. GovOps

  Coralogix Inc.

  FedRAMP Certified, Moderate impact, Agency path, Rev5, certified August 14, 2026.

• TrackVia Government

  TrackVia, Inc

  FedRAMP In Process, Moderate impact, Agency path, Rev5.

• Butterfly Network Ultrasound

  Butterfly Network Inc.

  FedRAMP Certified, Moderate impact, Agency path, Rev5, certified August 26, 2026.

The Anomali Cloud Service Offering consists of two integrated components: Security Analytics and ThreatStream, delivered as a unified cloud-native security platform. Security Analytics provides AI and cloud-native security information and event management (SIEM) capabilities including data collection and normalization from network devices, endpoints, applications, and cloud services; real-time event correlation and threat detection using machine learning algorithms; behavioral analytics and anomaly detection; incident response workflows; and query capabilities across petabytes of historical data stored in an integrated security data lake with configurable retention periods up to 7+ years. The platform supports ingestion of 30TB+ of data within hours and enables sub-second query response times across petabyte-scale datasets using natural language processing and AI-supported interfaces. ThreatStream provides threat intelligence management capabilities including automated collection, normalization, and curation of threat intelligence from commercial feeds, open source intelligence, and information sharing centers; management of indicators of compromise (IOCs) and indicators of attack (IOAs) with automated deduplication and confidence scoring; correlation of external threat intelligence with internal security telemetry; distribution of actionable intelligence to integrated security tools via APIs and standard protocols; threat analysis and enrichment with MITRE ATT&CK framework mapping; and secure community-based threat sharing. The service operates as a multi-tenant Software-as-a-Service solution with role-based access controls, data encryption in transit and at rest, comprehensive audit logging, and RESTful APIs for integration with existing security infrastructure. Service boundaries include all data ingestion interfaces, processing engines, storage systems, user interfaces, APIs, and integration points necessary to deliver security analytics and threat intelligence management capabilities.