HomeDirectoryFedRAMP 3PAOs

Directory

FedRAMP third-party assessment organizations.

Only an accredited 3PAO can perform a FedRAMP assessment. The FedRAMP Marketplace is the authoritative list; these are the firms with a record here.

Share
Sponsored
Find
help
Consultants  Assessors  Quotes
Matched3 quotesread by a human
The Shortlist is Yoursfrom this directory
Shortlist the Modern WayFedRAMP 3PAOs
01
Verified listings first
Unverified ones follow, labeled
02
Published prices where they exist
“Quote only” where we confirmed it, “Not published” where we have not
03
Up to three quotes, one form
Firms don’t see you until you choose
House ad. This slot is open to firms listed for this page. Get help Advertise here
Showing 6
360 AdvancedOn the public register
What they do
Assessor
Which standards
On the public register for FedRAMP. A Third Party Assessment Organization (3PAO) accredited by A
Standards
FedRAMP
Pricing
Not published
A-LIGNOn the public register
What they do
Assessor
Which standards
On the public register for CSA STAR, FedRAMP, StateRAMP, HITRUST. A HITRUST Authorized External Assessor organization (approve
Standards
CSA STARFedRAMPStateRAMPHITRUST
Pricing
Not published
CoalfireOn the public register
What they do
Assessor
Which standards
On the public register for CSA STAR, FedRAMP, StateRAMP, HITRUST. A HITRUST Authorized External Assessor organization (approve
Standards
CSA STARFedRAMPStateRAMPHITRUST
Pricing
Not published
FortreumOn the public register
What they do
Assessor
Which standards
On the public register for FedRAMP, StateRAMP. A Third Party Assessment Organization (3PAO) accredited by A
Standards
FedRAMPStateRAMP
Pricing
Not published
Prescient SecurityOn the public register
What they do
Assessor
Which standards
On the public register for FedRAMP, StateRAMP, HITRUST. A HITRUST Authorized External Assessor organization (approve
Standards
FedRAMPStateRAMPHITRUST
Pricing
Not published
CoalfireWestminster, CO, USANot yet verified
What they do
Assessor: FedRAMP 3PAO, SOC 2, PCI QSA, CMMC C3PAO
Who they help
Cloud providers and government contractors that need an accredited assessment, not a policy program. Listed because buyers confuse assessors with consultants.
Standards
FedRAMPStateRAMPSOC 2PCI DSSCMMC
Pricing
Not published
Website Claim this listing

Cannot also be your implementation consultant for the same certification.

Need a hand implementing it?

Find a Consultant for FedRAMP

Tell us what you need done and we will point you to firms that do this work. Your details go to a firm only when you choose it.

Not sure where to start?

Get Help with FedRAMP

Tell us what you are trying to put in place. We will point you to the right tool, a consultant who can implement it, or both.

About this data

Pages on this site are compiled with AI from two or more linked sources, rewritten in our words, and reviewed by people in stages. Each record shows its stage and date. Nothing here is legal, audit or tax advice, and policyandcompliance.com accepts no responsibility for errors or for decisions made on it. Read the source, then decide.
How we compile and verify →

Think something is wrong?

[email protected]
Tell us the page and what you found. We check it against the source and fix it.
Corrections log →

Want to advertise here?

[email protected]
A primary ad and a secondary placement, flat fee. Buying one changes nothing else on the page.