Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Tenable Blog

Subscribe
  • Twitter
  • Facebook
  • LinkedIn

Tenable.io and Tenable.io WAS Achieve FedRAMP Authorization

Tenable.io and Tenable.io WAS Achieve FedRAMP Authorization

Six reasons why FedRAMP authorization for Tenable.io and Tenable.io Web App Scanning (WAS) is important for our customers and partners.

After lengthy and rigorous testing under the U.S. Federal Risk and Authorization Management Program (FedRAMP), we are excited to announce that Tenable.io and Tenable.io Web App Scanning have received FedRAMP Moderate authorization. FedRAMP authorization is a key milestone for Tenable as we continue to invest in our cloud offerings and prove our commitment to the highest level of cybersecurity for government agencies. 

Six reasons why FedRAMP authorization is important

  1. It's key for federal agencies. FedRAMP is a government-wide program that simplifies cloud security for the digital age and accelerates the adoption of secure cloud solutions in the government. It is mandatory for all cloud-based technologies used by the government. Rather than allow agencies to use individual cloud security requirements, FedRAMP provides a standardized approach to security assessment, authorization and continuous monitoring for all cloud products. This improves the security of federal agency data while streamlining and reducing the costs of security assessments. With FedRAMP in place, a cloud solution does not have to be evaluated multiple times by individual agencies. FedRAMP's "do once, use many times" framework allows agencies to reuse the assessments and authorizations previously conducted, so that a cloud service provider can be certified once but used by multiple agencies. 
  2. FedRAMP demonstrates adherence to strict security testing and standards. FedRAMP authorization involves a long and rigorous testing process to ensure authorized solutions meet the high security standards of the federal government. The three-step authorization process can often take 12 months or more to complete. FedRAMP's security controls are based on the National Institute of Standards and Technology (NIST) SP 800-53 controls with certain modifications and controls above the NIST baseline to address the unique risks of cloud computing. With Tenable's FedRAMP certification you can trust that the appropriate security measures are in place to effectively protect your data. Further, FedRAMP-compliant solutions must also maintain compliance with ongoing security monitoring and assessments, so you know that Tenable.io and Tenable.io Web App Scanning will always be up to date on FedRAMP standards. 
  3. It offers support for web application scanning. Web applications are a common attack vector causing data breaches today. Now, federal agencies have the ability to scan and protect their web applications with FedRAMP-authorized Tenable.io Web App Scanning. Tenable.io Web App Scanning delivers safe, scalable and automated vulnerability scanning to cover an entire web application estate, with high detection rates and fewer false positives, ensuring government agencies understand the true risks in their web applications.
  4. It streamlines and accelerates the approval of Tenable.io for federal agencies. Tenable's FedRAMP certification makes it easier for federal agencies to quickly get up and running with Tenable.io and Tenable.io Web App Scanning. With FedRAMP's "do once, use many times" framework, agencies are able to reuse the security assessments from other agencies, reducing due diligence burdens while also saving time and cutting costs.
  5. It offers federal agencies a choice of deployment models. Federal agencies now have a choice in how to deploy their Tenable Risk-based Vulnerability Management (RBVM) solution. As an industry leader in RBVM, Tenable supports FedRAMP's goal of increasing cloud adoption and security in the federal government. Now, with FedRAMP-authorized Tenable.io and Tenable.io Web App Scanning, customers can quickly and confidently harness the benefits of a cloud environment. For customers who prefer an on-premises solution, Tenable.sc is also available.
  6. It can help agencies resolve cybersecurity challenges arising from the shift to a remote workforce. A massive move to remote workforces globally has resulted in cybersecurity leaders facing a sudden expansion of the attack surface. FedRAMP Authorized Tenable.io and Tenable.io Web App Scanning allow government agencies and private-sector companies to securely utilize the cloud to gain visibility into remote assets not accessible from on-premises vulnerability solutions.

Learn more

Visit the Government Solutions page: https://www.tenable.com/solutions/government/us-fed


Related Articles

Are You Vulnerable to the Latest Exploits?

Enter your email to receive the latest cyber exposure alerts in your inbox.

Try for Free Buy Now
Tenable.io FREE FOR 30 DAYS

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Sign up now.

Tenable.io BUY

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.

65 assets

Choose Your Subscription Option:

Buy Now
Try for Free Buy Now

Try Nessus Professional Free

FREE FOR 7 DAYS

Nessus® is the most comprehensive vulnerability scanner on the market today. Nessus Professional will help automate the vulnerability scanning process, save time in your compliance cycles and allow you to engage your IT team.

Buy Nessus Professional

Nessus® is the most comprehensive vulnerability scanner on the market today. Nessus Professional will help automate the vulnerability scanning process, save time in your compliance cycles and allow you to engage your IT team.

Buy a multi-year license and save. Add Advanced Support for access to phone, community and chat support 24 hours a day, 365 days a year. Full details here.

Try for Free Buy Now

Try Tenable.io Web Application Scanning

FREE FOR 30 DAYS

Enjoy full access to our latest web application scanning offering designed for modern applications as part of the Tenable.io platform. Safely scan your entire online portfolio for vulnerabilities with a high degree of accuracy without heavy manual effort or disruption to critical web applications. Sign up now.

Buy Tenable.io Web Application Scanning

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.

5 FQDNs

$3,578

Buy Now

Try for Free Contact Sales

Try Tenable.io Container Security

FREE FOR 30 DAYS

Enjoy full access to the only container security offering integrated into a vulnerability management platform. Monitor container images for vulnerabilities, malware and policy violations. Integrate with continuous integration and continuous deployment (CI/CD) systems to support DevOps practices, strengthen security and support enterprise policy compliance.

Buy Tenable.io Container Security

Tenable.io Container Security seamlessly and securely enables DevOps processes by providing visibility into the security of container images – including vulnerabilities, malware and policy violations – through integration with the build process.

Try for Free Contact Sales

Try Tenable Lumin

FREE FOR 30 DAYS

Visualize and explore your Cyber Exposure, track risk reduction over time and benchmark against your peers with Tenable Lumin.

Buy Tenable Lumin

Contact a Sales Representative to see how Lumin can help you gain insight across your entire organization and manage cyber risk.