Xacta SaaS

FedRAMP package ID

FR2403936773

Cloud service provider

Telos Corporation

Certification status

FedRAMP Certified

Impact level

High

Certification class

Class D (High)

Authorization path

Agency

Certification type

Rev5

Marketplace phase

Ongoing Certification

Deployment model

Government Community Cloud

Register snapshot

September 3, 2026

Service model

SaaS

Independent assessor

SecureIT

Certification date

July 14, 2025

Status date

July 14, 2025

FedRAMP Ready date

January 25, 2024

Annual assessment

June 5, 2011

Agency authorizations

3

Recorded reuses

2

Business categories

Cybersecurity & Risk Management, Governance, Risk, and Compliance (GRC)

SAM.gov UEI

JLW7WAKPEKD4

Milestones on record

4

The marketplace carries Xacta SaaS under package FR2403936773 with 21 recorded fields. Its certification date is July 14, 2025, and a FedRAMP Ready date of January 25, 2024. SecureIT is named as the independent assessor, with an annual assessment date of June 5, 2011. 2 agencies are listed as having authorized it, among them Department of the Interior and National Endowment for the Arts, and the feed records 2 reuses of the package. It is delivered as SaaS on a government community cloud, filed under 2 business categories including Cybersecurity & Risk Management and Governance, Risk, and Compliance (GRC). Its SAM.gov unique entity identifier is JLW7WAKPEKD4.

• RegScale CCM

  RegScale

  FedRAMP Certified, High impact, Agency path, Rev5, certified June 24, 2025.

• 2F Game Warden

  Second Front Systems

  FedRAMP Certified, High impact, Agency path, Rev5, certified August 12, 2025.

• The Data Cloud on Azure Government (High)

  Snowflake Inc.

  FedRAMP Certified, High impact, Agency path, Rev5, certified June 17, 2025.

• Qualys Government Platform

  Qualys, Inc.

  FedRAMP Certified, High impact, Agency path, Rev5, certified August 14, 2025.

• Wiz for U.S. Government

  Wiz, Inc.

  FedRAMP Certified, High impact, Agency path, Rev5, certified September 25, 2025.

Xacta® is a cyber GRC automation platform that supports assessment and authorization, remediation, and continuous monitoring. Xacta.ai builds on the platform with advanced AI capabilities that accelerate decision-making, reduce manual effort, and increase operational efficiency. Designed for IT risk and security compliance teams, Xacta operationalizes key security indicators (KSIs) across risk and compliance frameworks. The FedRAMP Class D (High) Certificated SaaS platform of Xacta includes Xacta 360™ with the Propagation Utility (PU) and, optionally, Xacta.io™ and Xacta.ai™. Together, Xacta 360, Xacta.io, and Xacta.ai form a complementary suite of solutions that supports compliance and authorization for a variety of frameworks including, but not limited to, FISMA, NIST RMF, CNSSI 1253, NIST 800-53, NIST CSF, FedRAMP, COBIT 5, PCI-DSS, and ISO. The platform draws on a knowledgebase of over 5,000 security requirements and associated test procedures, cross-referenced across more than 100 security policies and standards, and produces artifacts in both human-readable office documents and machine-readable digital formats such as the Open Security Controls Assessment Language (OSCAL). In addition to FedRAMP Class D (High) Certification, the SaaS version of Xacta is authorized at GovRAMP High, CMMC Level 2, CUI, and ISO 27001. Xacta 360 streamlines security, risk, and compliance programs using a project-based workflow. It features out-of-the-box cyber risk management templates, customizable in a no-code/low-code UI, and automated workflows with prerequisites, role-based approvals, and intelligent capabilities. Users can conduct asset inventory and risk assessments, generate required compliance documentation and audit artifacts in real time, and automate compliance for over 100 regulations and policies. Additionally, the Xacta 360 Propagation Utility allows administrators to easily update multiple active projects with changes from an assessment project workflow template. Xacta.io correlates results from multiple security products across your organization into a single view, and maps them to the relevant controls for security and risk management. IT risk and security compliance teams can then use these results to create reports for analysis and to understand trending security issues in their environment. Included with Xacta.io is Xacta MetriX™, which offers additional powerful, modular reporting capabilities that allow compliance teams to easily build and edit custom widgets and dashboards. Xacta.ai™ is the artificial intelligence capability at the core of the Xacta platform, empowering IT risk and security compliance teams to work more efficiently and make informed decisions. Xacta.ai can be customized by integrating your organization's data to enable faster, more informed decisions and accelerate your GRC initiatives. Use Xacta.ai to draft control implementation statements and automatically check them for accuracy, generate targeted test procedures aligned to your environment, run queries on project artifacts, and more. Deployment options include Public SaaS up to FedRAMP Class D (High) and user provided infrastructure. In AWS environments, Xacta 360 can inherit common security controls from the underlying platform to reduce duplication of effort and accelerate authorization.