Cloud Security Platform powered by Isolation Core

FedRAMP package ID

FR2032665434

Cloud service provider

Menlo Security

Certification status

FedRAMP Certified

Impact level

Moderate

Certification class

Class C (Moderate)

Authorization path

Agency

Certification type

Rev5

Marketplace phase

Ongoing Certification

Deployment model

Government Community Cloud

Register snapshot

September 3, 2026

Service model

SaaS

Independent assessor

Schellman Compliance, LLC

Certification date

January 9, 2023

Status date

January 9, 2023

Annual assessment

November 15, 2011

Agency authorizations

1

Business categories

Cybersecurity & Risk Management

Small business

Flagged on the marketplace record

Milestones on record

3

The marketplace carries Cloud Security Platform powered by Isolation Core under package FR2032665434 with 19 recorded fields. Its certification date is January 9, 2023. Schellman Compliance, LLC is named as the independent assessor, with an annual assessment date of November 15, 2011. 1 agency is listed as having authorized it, among them Department of Energy. It is delivered as SaaS on a government community cloud, filed under 1 business categories including Cybersecurity & Risk Management. Menlo Security is flagged as a small business on the record.

• Zscaler Private Access - Government (Zero Trust Exchange - VPN Replacement)

  Zscaler, Inc.

  FedRAMP Certified, Moderate impact, Agency path, Rev5, certified November 7, 2022.

• Virtru Data Security Platform

  Virtru

  FedRAMP Certified, Moderate impact, Agency path, Rev5, certified May 10, 2023.

• Veracode Online Security Platform for Government

  Veracode

  FedRAMP Certified, Moderate impact, Agency path, Rev5, certified July 18, 2022.

• On-Demand Security Testing Platform

  Synack

  FedRAMP Certified, Moderate impact, Agency path, Rev5, certified December 19, 2023.

• Cisco Catalyst SD-WAN for Government (SDWAN-G)

  Cisco Systems, Inc.

  FedRAMP Certified, Moderate impact, Agency path, Rev5, certified March 14, 2024.

Menlo Security is the pioneer of browser security and stops evasive threats such as phishing and ransomware, delivering on the promise of cloud-based security and enabling zero trust application access. The Menlo Secure Enterprise Browser solution prevents attacks while being invisible to end users who can use their preferred web browser, enhancing productivity. Deploy browser security policies in a single click, securing internet access and protecting organizational data down to the last mile. Menlo Secure Enterprise Browser Solution Instantiated for each browser session, the Menlo Secure Cloud Browser secures access to the web, preventing malware, ransomware, and unauthorized access and ensures that data security policies are enforced to prevent malicious or unintentional data theft with multiple Data Loss Prevention (DLP) features. Defending against highly evasive adaptive threats (HEAT), Menlo leverages machine learning and AI-based URL analysis to identify and block the most sophisticated phishing sites. Menlo remote browser isolation (RBI) offers significant performance enhancements in comparison to all other RBI offerings with patented Adaptive Clientless Rendering (ACR). ACR enables web page rendering, including interactive animations such as scrolling, to be performed on the endpoint browser using optimized desktop hardware and browser software, while the full browser feature set-including copy-paste, find in page, and printing-is maintained. The administrative policy defines whether any site is isolated. Isolation may be managed with traditional categories which should be familiar and easy to use by administrators of Secure Web Gateways (SWG). Unlike a SWG, however, Menlo enables isolation by threat types and/or vulnerable web services. Mitigating the security blindspot posted by mandated transport level encryption (TLS), Menlo Browsing Forensics offers policy-based capture of browsing sessions. Captures are stored in customer data stores, not accessible to Menlo Security. The Browsing Forensics Viewer enables the Security Operations Center (SOC), incident response, and even security awareness training teams to review users' sessions including clicks, scrolls and text inputs. Policy controls manage whether password entries are retained, whether a user is notified of recording and screen capture rates. Files and archives are delivered with browser protocols. The Menlo Secure Cloud Browser includes comprehensive file and archive inspection. Archives are opened, and each file is subject to hash checks and anti-virus examinations. The safe content of both clean and infected files can be presented as a safe PDF to the user. Policy governs whether any original file or archive may be downloaded from the Secure Cloud Browser. File security checks can be selectively bypassed. Traffic steering to the Menlo Cloud supports proxy chaining from, for example, existing SWG or Cloud Access Security Brokers (CASB), as well as PAC file deployment or firewall redirecting. Menlo Browser Security is fully compatible with Secure Access Service Edge (SASE) and Security Service Edge (SSE) deployments. Common use cases for Menlo Browser Security include: comprehensive zero-hour phishing prevention, ransomware prevention, administrative governance of Generative AI, and comprehensive governance of SaaS using workflows similar to CASB, but including SaaS property isolation and comprehensive file upload and download controls applicable on a per-application basis.