Section 8.4 - Register entry
DOC-REF: FRC-MKT-FR1918740338
Sumo Logic
Sumo Logic lists Sumo Logic on the FedRAMP Marketplace with the status FedRAMP Certified, at Moderate impact, on the Agency path under the Rev5 process. Package FR1918740338, read from the marketplace feed as of September 3, 2026.
Section A. Register entry
What the marketplace records
- FedRAMP package ID
- FR1918740338
- Cloud service provider
- Sumo Logic
- Certification status
- FedRAMP Certified
- Impact level
- Moderate
- Certification class
- Class C (Moderate)
- Authorization path
- Agency
- Certification type
- Rev5
- Marketplace phase
- Ongoing Certification
- Deployment model
- Public Cloud
- Register snapshot
- September 3, 2026
- Service model
- SaaS
- Independent assessor
- Kratos
- Certification date
- January 29, 2021
- Status date
- January 29, 2021
- FedRAMP Ready date
- May 31, 2019
- Annual assessment
- November 13, 2011
- Agency authorizations
- 3
- Recorded reuses
- 132
- Business categories
- Analytics, Collaboration, Content Management System (CMS), Cybersecurity & Risk Management, Data Management, Development Tools, Fleet Management, Mobile Device Management (MDM), Network Management, Operations Management
- Dependent offerings
- 24
- Milestones on record
- 4
The marketplace carries Sumo Logic under package FR1918740338 with 21 recorded fields. Its certification date is January 29, 2021, and a FedRAMP Ready date of May 31, 2019. Kratos is named as the independent assessor, with an annual assessment date of November 13, 2011. 3 agencies are listed as having authorized it, among them Department of Housing and Urban Development, Office of Navajo and Hopi Indian Relocation and United States Geological Survey, and the feed records 132 reuses of the package. It is delivered as SaaS on a public cloud, filed under 10 business categories including Analytics, Collaboration, Content Management System (CMS) and 7 more. 24 other offerings on the register are listed as dependent on this one, among them Armis FedRAMP Edition (AFE), Masterworks Cloud Platform and Boomi Enterprise Platform.
Section B. Milestones
4 entries in the marketplace event log
Most recent first, as recorded by FedRAMP.
| Date | Category | Recorded |
|---|---|---|
| January 29, 2021 | Status Change | Status changed from PMO Review to FedRAMP Certified |
| November 13, 2020 | Status Change | Status changed from FedRAMP Ready to FedRAMP In Process |
| May 31, 2019 | Status Change | Status changed from Agency Review to Legacy FedRAMP Ready |
| April 11, 2019 | Status Change | Status set to Agency Authorization In Process |
Section C. Cost context
What reaching Moderate costs
Our own published ranges for a provider going through this level. Nothing here is a figure this provider has disclosed.
Cost context
Budget for a Moderate authorization
Our published planning range for a provider pursuing Moderate. It is not a figure any listed provider has disclosed.
Read the FedRAMP Moderate cost guide / annual assessment cost / continuous monitoring cost
Path
Agency Authorization is the route for 578 of the offerings on the marketplace. Our cost pages put it at $800,000 to $2,000,000 over 12 to 18 months for Moderate. Agency authorization cost
Assessment and monitoring
An annual assessment date of November 13, 2011 is on the record, and that assessment recurs for as long as the package stays listed. Annual assessment cost / continuous monitoring cost
Section E. Agencies on the record
3 agencies listed against this package
As published on the marketplace. An agency named here has issued its own authorization to operate; FedRAMP does not issue ATOs itself.
- Department of Housing and Urban Development
- Office of Navajo and Hopi Indian Relocation
- United States Geological Survey
Section F. Dependent offerings
24 listed offerings build on this package
From the marketplace's dependent products view. A provider that inherits controls from a package below it carries a narrower assessment boundary of its own, which is one of the larger levers on authorization cost.
- Armis FedRAMP Edition (AFE)
- Masterworks Cloud Platform
- Boomi Enterprise Platform
- Terra
- Civis Platform
- Copado GovCloud
- Coupa Spend Management for Federal
- Replicon Cloud Platform (Enterprise Time Tracking Platform)
- Critical Event Management Suite
- Genesys Cloud CX
- HackerOne Continuous Security Testing Platform
- Huddle Enterprise Cloud Content Collaboration and File Sharing Portal for Government
- GO.gov
- Ideagen Government Cloud
- Juniper Mist
- MARi
- Beacon
- PagerDuty Operations Cloud
- Actus
- Socure for Government (SocureGov)
- Unqork for Government
- Veracode Online Security Platform for Government
- Vyond for Government
- Zscaler Private Access - Government (Zero Trust Exchange - VPN Replacement)
Inheritance is why boundary scope moves a budget more than headcount does. The hidden costs page sets out where scope creeps back in.
Section G. Nearest entries on the register
Comparable offerings
Scored on impact level, path, status, shared business categories and how close the two entries sit in the register's own timeline.
- CorityOne
Cority Software Inc.
FedRAMP Certified, Moderate impact, Agency path, Rev5, certified August 29, 2022.
- Sunflower Asset Management Cloud (SAMC)
CGI Federal
FedRAMP Certified, Moderate impact, Agency path, Rev5, certified November 6, 2023.
- NetDocuments Document Management System (DMS)
NetDocuments Software, Inc.
FedRAMP Certified, Moderate impact, Agency path, Rev5, certified May 7, 2021.
- SPROUT
MDRC
FedRAMP Certified, Moderate impact, Agency path, Rev5, certified October 7, 2020.
- Armedia Content Cloud
Armedia, LLC
FedRAMP Certified, Moderate impact, Agency path, Rev5, certified September 24, 2024.
Section H. Description
As published on the marketplace
The provider's own description of the service, reproduced from the FedRAMP feed without edits.
Sumo Logic is a cloud-native SaaS log analytics platform helping customers enable application reliability, secure and protect against modern threats, gain insights into cloud infrastructures, and obtain comprehensive visibility across their threat landscape. Sumo Logic provides the following solutions within our FedRAMP Moderate product offering: Cloud Security Incident and Event Management (SIEM) - Full-featured SIEM automates alert triage, correlation, and threat detection at scale to speed investigation and response times while reducing analyst alert fatigue. Community analytics delivers machine learning (ML) predicted true positive Global Confidence scores, along with global threat benchmarking. Cloud Security Monitoring & Analytics - Sumo Logic supports the entire spectrum of security use cases - from centrally logging compliance data to monitoring and securing public and hybrid clouds, to delivering market-leading DevSecOps capabilities. Application Modernization and Observability - Reduce downtime by finding, investigating, and resolving customer-impacting issues faster with real-time alerting and dashboards for all data - logs, metrics, and traces. Infrastructure Monitoring - On-call teams can reduce mean-time-to-resolution (MTTR) by simplifying the work required to validate issues, identify suspects, and quickly remediate. Reduce downtime and solve customer-impacting issues faster with an integrated observability platform for all application data. Compliance Monitoring - Security and configuration analytics provide the data monitoring, dashboards, analyses, and reporting capabilities necessary to achieve rapid, cost-effective continuous compliance readiness for many industry leading cybersecurity frameworks and programs - NIST 800-53, FISMA, FedRAMP, PCI, SOC2, ISO, HIPAA and more. Multi-cloud support - Unify and monitor logs, metrics, and traces from multi-cloud or hybrid cloud environments. Sumo Logic enables real-time visibility into AWS, Azure, and GCP cloud applications and infrastructure. Moreover, 150 apps and native integrations give out-of-the-box visibility into the technologies that power your applications. Service Maps - The Sumo Logic service visualizes all service dependencies to give you insights into end-to-end execution of your mission critical transactions with open standard compatible distributed tracing data. Application and service dashboards break down latency, load, and errors to identify services contributing to application slowdowns Advanced Alert Analytics - Advanced analytics are applied across a unified repository of telemetry data to surface noteworthy insights that guide on-call teams to the root cause.
Next step
What the same authorization would cost you
The worksheet turns an impact level, an existing security posture and an organization size into a line-by-line budget, with the 3PAO fee split out.
Provenance and independence
Source: the FedRAMP Marketplace product feed, produced by the General Services Administration. The feed's own last-change stamp is September 3, 2026; this copy was taken on September 5, 2026.
GSA's disclaimers page states that FedRAMP content about a specific commercial product or service is provided for the information and convenience of the public and “does not constitute endorsement, recommendation, or favoring by the General Services Administration”. A listing here is a record of a certification status, not a judgment about the product.
FedRAMPCost.com is an independent cost reference. We are not affiliated with FedRAMP, the GSA, any provider listed on this page, or any assessment organization, and no provider pays to appear in this register.