360 AdvancedOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2024. Has assessed up to Moderate impact.
- Standards
- Pricing
- Not published
FedRAMP assessors and advisors.
Every recognized FedRAMP assessor (3PAO), and the advisors FedRAMP lists, checked against the FedRAMP Marketplace and each firm's own site. The Marketplace remains the authoritative list.
Share
Ad from the publisher
Find
help
help
Consultants Assessors Quotes
Matched3 quotesone form
The Shortlist is Yoursfrom this directory
Shortlist the Modern WayFedRAMP 3PAOs
01
Listings sourced
A card shows a public register or the date we read the firm’s website
02
Published prices where they exist
“Quote only” where we confirmed it, “Not published” where we have not
03
Up to three quotes, one form
Firms don’t see you until you choose
House ad. This slot is open to firms listed for this page.
Get help →Advertise here →
Who can do what
A FedRAMP assessment can only be performed by a third party assessment organization (3PAO) that FedRAMP recognizes. Each one is accredited by A2LA as an inspection body under ISO/IEC 17020 and appears on the FedRAMP Marketplace. Firms that help a cloud provider get ready are advisors. Since August 2026 FedRAMP also lists them, on its Advisors tab.
The independence rule
Some 3PAOs sell advisory work as well as assessments. A2LA’s FedRAMP requirements, R311, set the limits:
- A 3PAO must be a Type A inspection body, which only inspects, or a Type C body, which may also consult. Type B bodies are not permitted.
- A 3PAO may not assess a cloud system it gave consulting services on “within the previous two years”.
- A 3PAO may not assess a cloud product of its own organization.
- A tool a 3PAO owns and a cloud provider uses, for example to write its FedRAMP documentation, counts as consulting. The 3PAO cannot then assess that provider.
If one firm helped you prepare, choose a different 3PAO for the assessment.
Listed in random order, reshuffled each time the page loads. Firms that pay for a listing are shown at the top, labeled Sponsored.
Recognized FedRAMP assessors (3PAOs)
On the FedRAMP Marketplace, checked September 24, 2026. Only these firms can assess a cloud service for authorization. 35 listed.
AARC-360On the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2025.
- Standards
- Pricing
- Not published
Anthony TimbersHerndon, VAOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2025.
- Standards
- Pricing
- Not published
AprioAtlanta, GAOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2023.
- Standards
- Pricing
- Not published
Baker TillyOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2024. Has assessed up to Moderate impact. Also sells FedRAMP advisory.
- Standards
- Pricing
- Not published
bladestack.ioOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2024. Recognized 3PAO that sells advisory only and does not perform assessments.
- Standards
- Pricing
- Not published
Booz Allen HamiltonMcLean, VAOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2014. Has assessed up to Moderate impact.
- Standards
- Pricing
- Not published
COACTOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2016. Also sells FedRAMP advisory.
- Standards
- Pricing
- Not published
CoalfireOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2015. Has assessed up to High impact. Also sells FedRAMP advisory, and states it never provides advisory and assessment for the same authorization.
- Standards
- Pricing
- Not published
CyberQRTOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2026.
- Standards
- Pricing
- Not published
databracketsOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2025.
- Standards
- Pricing
- Not published
DataLock Consulting GroupOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2021. Has assessed up to Moderate impact.
- Standards
- Pricing
- Not published
Earthling SecurityOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2012.
- Standards
- Pricing
- Not published
Emagine ITOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2015. Has assessed up to High impact. Type C 3PAO, also listed as a FedRAMP Advisor.
- Standards
- Pricing
- Not published
ExcentiumOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2015. Has assessed up to High impact.
- Standards
- Pricing
- Not published
FITS (First Information Technology Services)Arlington, VAOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2016. Has assessed up to High impact.
- Standards
- Pricing
- Not published
FortreumLeesburg, VAOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2021. Has assessed up to High impact.
- Standards
- Pricing
- Not published
GMS RegistrarCleveland, OHOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2015.
- Standards
- Pricing
- Not published
Information Technology Company (ITC)On the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2015.
- Standards
- Pricing
- Not published
Insight AssuranceOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2025.
- Standards
- Pricing
- Not published
KompleyeOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2022. Has assessed up to Moderate impact.
- Standards
- Pricing
- Not published
KratosOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2012. Has assessed up to High impact.
- Standards
- Pricing
- Not published
Lazarus AllianceOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2022. Has assessed up to Moderate impact.
- Standards
- Pricing
- Not published
Linford & CompanyOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2017. Has assessed up to Moderate impact.
- Standards
- Pricing
- Not published
LunarlineOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2012. Has assessed up to High impact. Also sells FedRAMP consulting and training.
- Standards
- Pricing
- Not published
MegaplanITOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2021. Has assessed up to Low impact.
- Standards
- Pricing
- Not published
MindPoint Group (Tyto Athene)On the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2015. Has assessed up to Moderate impact.
- Standards
- Pricing
- Not published
NCC GroupOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2017. Has assessed up to Low impact.
- Standards
- Pricing
- Not published
Prescient SecurityNashville, TNOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2024. Has assessed up to Moderate impact.
- Standards
- Pricing
- Not published
SchellmanOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2012. Has assessed up to High impact. Type A 3PAO: performs assessments only, no consulting.
- Standards
- Pricing
- Not published
SecureITReston, VAOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2013. Has assessed up to High impact. Also sells FedRAMP advisory, through a separate advisory team.
- Standards
- Pricing
- Not published
SecuriseaOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2020. Has assessed up to Moderate impact. Also sells FedRAMP advisory.
- Standards
- Pricing
- Not published
SentarOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2020. Has assessed up to High impact.
- Standards
- Pricing
- Not published
Sera BrynnPlano, TXOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2017.
- Standards
- Pricing
- Not published
SteelToadCatonsville, MDOn the public register
- What they do
- FedRAMP 3PAO
- Which standards
- Recognized FedRAMP assessor since 2025. Has assessed up to Moderate impact. Also sells FedRAMP consulting.
- Standards
- Pricing
- Not published
FedRAMP Advisors
Listed on the FedRAMP Marketplace Advisors tab. They prepare cloud providers for FedRAMP and do not assess. 5 listed.
38North SecurityWashington, DCOn the public register
- What they do
- FedRAMP Advisor
- Who they help
- Listed as a FedRAMP Advisor since September 16, 2026.
- Standards
- Pricing
- Not published
FortineticsVirginiaOn the public register
- What they do
- FedRAMP Advisor
- Who they help
- Listed as a FedRAMP Advisor since August 27, 2026.
- Standards
- Pricing
- Not published
Skirret ConsultingOn the public register
- What they do
- FedRAMP Advisor
- Who they help
- Listed as a FedRAMP Advisor since September 11, 2026.
- Standards
- Pricing
- Not published
Steel Patriot PartnersPittsburgh, PAOn the public register
- What they do
- FedRAMP Advisor
- Who they help
- Listed as a FedRAMP Advisor since September 11, 2026.
- Standards
- Pricing
- Not published
WorkstreetOn the public register
- What they do
- FedRAMP Advisor
- Who they help
- Listed as a FedRAMP Advisor since September 21, 2026.
- Standards
- Pricing
- Not published
Other firms offering FedRAMP readiness
Not on the FedRAMP Advisors list. Their own sites say they prepare clients for FedRAMP. 49 listed.
8 ConsultingShenandoah, Virginia, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Ace of Cloud
- What they do
- FedRAMP readiness
- Who they help
- FedRAMP and GovRAMP advisory. Also a CMMC C3PAO.
- Standards
- Pricing
- Not published
AmomittoUSA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Armavel, LLCTacoma, WA, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Assured InformationUSA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Audit Liaison, LLCTampa, FL, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
BD EmersonRichmond, VA, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Blue MantleSterling, VA, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
CMMC Advisors, IncUSA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
CognisysLeeds, UK, UK
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Concordant LLCLaramie, WY, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Crafted Compliance, Inc.Ormond Beach, Florida, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Cyber Defense AdvisorsTampa, FL, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
CyberCrestEncinitas, CA, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
CyberEyePalm Harbor, FL, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
DTSArlington, VA, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
ForgePath SecurityNorfolk, Virginia, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Gigit SecurityBoulder, CO, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Glocal Insight LLCKansas City, MO, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
HanaByteAtlanta, GA, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness. Its FedRAMP page mentions gap assessments and remediation.
- Standards
- Pricing
- Not published
I-Visionet, Inc.Silver Spring, Maryland, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
IBSSSilver Spring, Maryland, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
InterSecHerndon, VA, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
ITASC SolutionsCalifornia, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
JMA Resources, Inc.Mechanicsburg, PA, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Jones ITSan Francisco, CA, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Koniag CyberAlaska
- What they do
- FedRAMP readiness
- Who they help
- FedRAMP readiness and gap assessment. Also a CMMC C3PAO.
- Standards
- Pricing
- Not published
Microminder Cyber SecurityStanmore, London, UK
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Mildeeng SystemsBeltsville, MD, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Mirai SecuritySeattle, WA, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
My ISO ConsultantsCrestline, CA, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
principia/RAIDWashington, DC, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Procellis Technology IncMinneapolis, MN, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Prodigy 13New York, NY, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Quest Consultants Llc Dba Aerstone
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Ridge IT CyberTampa, FL, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
RiveronDallas, Texas, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Riverstone Solutions, Inc.Huntsville, AL, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Rule4 Inc.Boulder, CO, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Secured IT SolutionsNevada, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
SecureSoft Technologies LLC (SST)Greenbelt, Maryland, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Starks Technology ServicesAddison, TX, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
SurakshaNowDelhi, India
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness. Its FedRAMP page mentions SSP and POA&M preparation.
- Standards
- Pricing
- Not published
SysAudits, LLCWilliamsburg, VA, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
TRIFIDENTOldsmar, FL, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Vimy Services LlcSaint Louis, Missouri, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
WingSweptGarner, NC, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Wintersmith Advisory LLCUSA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
YGI SolutionsNew York, New York, USA
- What they do
- FedRAMP readiness
- Who they help
- Its website offers FedRAMP readiness.
- Standards
- Pricing
- Not published
Need a hand implementing it?
Find a Consultant for FedRAMP
Tell us what you need done and we will point you to firms that do this work. Your details go to a firm only when you choose it.
Not sure where to start?
Get Help with FedRAMP
Tell us what you are trying to put in place. We will point you to the right tool, a consultant who can implement it, or both.