SecurityScorecard Reaffirms FedRAMP and Achieves StateRAMP Ready Status

February 10, 2025 at 09:00 AM EST

U.S. federal, state and local agencies to adopt SecurityScorecard SCDR to secure supply chains with confidence

SecurityScorecard announced today that it has achieved State Risk and Authorization Management (StateRAMP) Ready status and again achieved Federal Risk and Authorization Management Program (FedRAMP) Ready designation. As a FedRAMP StateRAMP provider, SecurityScorecard can help government agencies eliminate threats in their vast and growing supply chains.

SecurityScorecard’s Supply Chain Detection and Response (SCDR) empowers government agencies to proactively identify and remediate third-party vulnerabilities, ensuring stronger security for their organization and suppliers. SCDR actively identifies critical vulnerabilities and issues across the supplier ecosystem, and drives collaborative remediation with robust response capabilities.

SecurityScorecard is a trusted partner for government agencies as they work to identify and resolve supply chain risks. The company empowers hundreds of public sector organizations to deliver their missions and be more resilient.

Steve Cobb, CISO at SecurityScorecard, stated: “Government agencies at every level are at a pivotal moment — supply chain vulnerabilities are too significant to ignore. Tackling these challenges demands a clear understanding of the complexities of modern governance and the complicated cyber landscape. SecurityScorecard delivers the visibility and accountability governments need to take decisive action and secure their supply chains with confidence."

FedRAMP is a U.S. government-sponsored security compliance and certification that sets an extremely high bar for security controls. At the end of 2022, the U.S. Congress codified FedRAMP as the authoritative standard governing the deployment of cloud computing products for the U.S. federal government.

StateRAMP covers each state's needs, making it possible for organizations like SecurityScorecard to meet all states' complex security cloud requirements. This certification provides agencies with a transparent, cost-effective way of selecting a cloud provider that aligns with their mission.

Visit the SecurityScorecard website for more information on SecurityScorecard for StateRAMP and FedRAMP.

About SecurityScorecard

Funded by world-class investors, including Evolution Equity Partners, Silver Lake Partners, Sequoia Capital, GV, Riverwood Capital, and others, SecurityScorecard is the global leader in cybersecurity ratings, response, and resilience, with more than 12 million companies continuously rated.

Founded in 2014 by security and risk experts Dr. Aleksandr Yampolskiy and Sam Kassoumeh, SecurityScorecard’s patented security ratings technology is used by over 25,000 organizations for enterprise risk management, third-party risk management, board reporting, due diligence, cyber insurance underwriting, and regulatory oversight.

SecurityScorecard makes the world safer by transforming how companies understand, improve, and communicate cybersecurity risks to their boards, employees, and vendors. SecurityScorecard achieved the Federal Risk and Authorization Management Program (FedRAMP) Ready designation, highlighting the company’s robust security standards to protect customer information, and is listed as a free cyber tool and service by the U.S. Cybersecurity & Infrastructure Security Agency (CISA). Every organization has the universal right to its trusted and transparent Instant SecurityScorecard rating. For more information, visit securityscorecard.com or connect with us on LinkedIn.