# fedramp Published articles for fedramp. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## FIPS 140-2 vs FIPS 140-3, Explained DevFeed: [FIPS 140-2 vs FIPS 140-3, Explained]() Original publisher: [Read original article]() Author: info@goteleport.com (Mayur Pipaliya) Published: 2026-09-09T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [fips 140-3](), [FIPS validation](), [Cryptography](), [Encryption](), [certificates](), [Security](), [Cloud]() Tags: [certificates](), [cloud](), [cmvp](), [cryptography](), [encryption](), [fedramp](), [fips](), [fips-140-3](), [fips-validation](), [security](), [sensitive-data]() ### AI overview This article explains the differences between FIPS 140-2 and FIPS 140-3, including the standards' origins, CMVP validation certificates, applicable requirements for protecting sensitive data, and the transition timeline through September 2026. ### Source excerpt Understand key changes from FIPS 140-2 to FIPS 140-3. ## Announcing Chainguard container images for Go 1.27 DevFeed: [Announcing Chainguard container images for Go 1.27]() Original publisher: [Read original article]() Published: 2026-08-31T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [container images](), [Go Language](), [Cryptography](), [Deployment](), [Security, Privacy and Abuse Prevention](), [Post-Quantum]() Tags: [chainguard](), [container](), [container-images](), [cryptography](), [deployment](), [fedramp](), [fedramp-ato](), [fips](), [go](), [hardening](), [images](), [post-quantum](), [release]() ### AI overview Chainguard announces three Go 1.27 container images: go, go-fips, and go-openssl-fips. The options differ in their FIPS-validated cryptography, including whether cryptography is built in or selected at deployment time. ### Source excerpt Chainguard simplifies Go 1.27 with three images and a new option to choose FIPS-validated cryptography at deployment without recompiling. ## Engineering the Datadog Agent for FedRAMP High® Certification DevFeed: [Engineering the Datadog Agent for FedRAMP High® Certification]() Original publisher: [Read original article]() Author: Srdjan Grubor; Nathan Baker Published: 2026-07-28T00:00:00Z Content type: article Language: en Sources: [Datadog | The Monitor blog]() Topics: [Cryptography]() Tags: [architecture](), [compliance](), [cryptographic](), [cryptography](), [datadog-agent](), [engineering](), [fedramp](), [go](), [infrastructure](), [logs](), [metrics](), [network-configuration](), [observability](), [python](), [security](), [traces]() ### AI overview The article explains how Datadog engineered its Agent to meet FedRAMP High requirements in customer-managed environments, emphasizing cryptographic enforcement across Go and Python runtimes. ### Source excerpt Datadog achieves GovRAMP High authorization, bringing unified observability and security to state and local government agencies for critical systems. ## Announcing the CIS Benchmark for CockroachDB v25.x DevFeed: [Announcing the CIS Benchmark for CockroachDB v25.x]() Original publisher: [Read original article]() Author: Adam Brennick,Ayog Mohanty Published: 2026-07-14T00:00:00Z Content type: release Language: en Sources: [Cockroach Labs]() Topics: [Benchmark](), [CockroachDB](), [Security](), [Cockroach Labs](), [configuration](), [Cybersecurity](), [Database](), [Self-hosted]() Tags: [announce](), [benchmark](), [cockroach-labs](), [cockroachdb](), [compliance](), [configuration](), [fedramp](), [government](), [hipaa](), [pci-dss](), [published](), [security](), [security-best-practices](), [security-research](), [self-hosted](), [standard]() ### AI overview The Center for Internet Security has published the CIS CockroachDB v25.x Benchmark, providing a consensus-driven security configuration guide for self-hosted CockroachDB deployments. The article explains how the benchmark can support standardized security practices, audits, compliance reviews, and production configuration validation. ### Source excerpt We're proud to announce that the Center for Internet Security (CIS) has published the CIS CockroachDB v25.x Benchmark. ## Preparing for OMB M-26-14: How Datadog supports federal logging maturity DevFeed: [Preparing for OMB M-26-14: How Datadog supports federal logging maturity]() Original publisher: [Read original article]() Author: Chris Leffler; Sophie Wang Published: 2026-06-29T00:00:00Z Content type: article Language: en Sources: [Datadog | The Monitor blog]() Topics: [SIEM, Security, Observability](), [log management](), [Monitoring](), [threat detection](), [incident](), [Incident response](), [observability](), [Security](), [Security Operations Center](), [Resilience](), [Cybersecurity]() Tags: [bits-ai](), [cloud-siem](), [compliance](), [cybersecurity](), [fedramp](), [govcloud](), [incident-response](), [log-management](), [logging](), [monitoring](), [observability](), [resilience](), [security](), [security-operations-center](), [soc](), [systems](), [telemetry](), [threat-detection](), [workflow-automation]() ### AI overview This article explains how OMB Memorandum M-26-14 changes federal logging guidance from prescriptive requirements to a risk- and maturity-based model. It describes continuous event monitoring and threat hunting, investigation, response, and forensics, including centralized security telemetry, visibility across IT, OT, and IoT environments, threat detection, searchable and retrievable logs, cross-source correlation, incident response, and forensic analysis. It also presents Datadog as a unified observability and security platform for helping agencies meet these requirements. ### Source excerpt Learn how Datadog helps federal agencies prepare for OMB M-26-14 by providing centralized telemetry data, threat detection, and automated incident response. ## Datadog achieves GovRAMP High authorization DevFeed: [Datadog achieves GovRAMP High authorization]() Original publisher: [Read original article]() Author: Rukshan Gunawardana; Sophie Wang; Jason Hansen Published: 2026-06-29T00:00:00Z Content type: release Language: en Sources: [Datadog | The Monitor blog]() Topics: [Security](), [observability](), [Monitoring](), [systems](), [Cloud](), [Resilience](), [telemetry](), [ai observability]() Tags: [agent-observability](), [ai-observability](), [aws](), [cloud](), [dashboards](), [database-monitoring](), [fedramp](), [government](), [infrastructure-monitoring](), [log-management](), [logs](), [metrics](), [monitoring](), [networks](), [observability](), [resilience](), [security](), [systems](), [telemetry]() ### AI overview Datadog announced GovRAMP High authorization for its government offering, extending its FedRAMP High certification and supporting state, local, tribal, territorial, and education organizations. The article explains how unified observability and security can consolidate monitoring data across applications, logs, networks, databases, infrastructure, and AI initiatives. ### Source excerpt Datadog achieves GovRAMP High authorization, bringing unified observability and security to state and local government agencies for critical systems. ## Chainguard is named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security DevFeed: [Chainguard is named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security]() Original publisher: [Read original article]() Published: 2026-06-18T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [supply-chain-security](), [Security](), [Open Source]() Tags: [2026](), [chainguard](), [chainguard-gartner](), [chainguard-gartner-magic-quadrant](), [cyber-resilience-act](), [fedramp](), [gartner](), [gartner-mq-software-supply-chain](), [nis2](), [provenance](), [sboms](), [secure-by-default](), [security](), [slsa](), [software-supply-chain](), [software-supply-chain-security](), [software-supply-chain-security-gartner]() ### AI overview Chainguard announces that it has been recognized as a Leader in the 2026 Gartner Magic Quadrant for Software Supply Chain Security. The article highlights Chainguard's secure-by-default approach, hardened open source artifacts, cryptographic signatures, signed SBOMs, and SLSA-aligned provenance, along with support for regulatory requirements. ### Source excerpt Chainguard named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security, recognized for vision and secure-by-default innovation. ## Introducing the Chainguard cinc-auditor image: STIG scanning for Chainguard Containers, ready to run DevFeed: [Introducing the Chainguard cinc-auditor image: STIG scanning for Chainguard Containers, ready to run]() Original publisher: [Read original article]() Published: 2026-06-18T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard containers](), [Containers](), [anchore](), [Open Source]() Tags: [anchore](), [anchore-enterprise](), [apache](), [built-from-source](), [chainguard](), [chainguard-containers](), [chainguard-images](), [cinc-auditor](), [compliance](), [fedramp](), [open-source](), [pipeline](), [scanner](), [stig](), [stigs]() ### AI overview Chainguard introduces a ready-to-run cinc-auditor container image for STIG scanning of Chainguard Containers. The image includes a maintained GPOS SRG InSpec profile, removes separate profile and dependency setup, and supports production compliance pipelines, including FedRAMP workflows. ### Source excerpt Chainguard launches a ready-to-run STIG scanner with a built-in GPOS SRG InSpec profile, simplifying compliance scans for containers and FedRAMP workflows. ## Automating Identity and Access for FedRAMP 20x KSIs with Teleport DevFeed: [Automating Identity and Access for FedRAMP 20x KSIs with Teleport]() Original publisher: [Read original article]() Author: info@goteleport.com (Nicolas Morris) Published: 2026-06-17T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [audit trail](), [identity and access management](), [Logging](), [Monitoring](), [Security](), [CI/CD](), [Cloud]() Tags: [audit-trail](), [ci-cd](), [credentials](), [fedramp](), [fedramp-20x](), [hardcoded-credentials](), [identity-and-access-management](), [logging](), [monitoring](), [security]() ### AI overview This article explains how FedRAMP 20x changes identity and access compliance toward persistent validation using machine-readable evidence. It describes how unified identity management and audit trails can help address gaps in machine-to-machine authentication and continuous KSI validation. ### Source excerpt Learn how to automate identity and access for FedRAMP 20x KSIs with a unified audit trail for identities, access, and persistent evidence. ## Canada's CPCSC and Bill C-8 are coming. Here's what you need to do. DevFeed: [Canada's CPCSC and Bill C-8 are coming. Here's what you need to do.]() Original publisher: [Read original article]() Published: 2026-05-14T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Cybersecurity](), [Critical Infrastructure](), [Security](), [Containers](), [Cloud Native Ecosystem]() Tags: [bill-c-8](), [canada-cmmc](), [canadian-program-for-cyber-security-certification](), [chainguard](), [chainguard-containers](), [chainguard-libraries](), [cmmc](), [compliance](), [containers](), [cpcsc](), [critical-infrastructure](), [cybersecurity](), [federal-compliance](), [fedramp](), [nist](), [zero-cve-containers]() ### AI overview This article explains Canada's Canadian Program for Cyber Security Certification (CPCSC) and Bill C-8, focusing on the implications for defence suppliers and organizations in critical infrastructure. It describes the CPCSC as a mandatory cybersecurity certification regime, compares its technical basis with CMMC and NIST Special Publications 800-171 and 800-172, and outlines why organizations should prepare for Level 1 requirements. The article also describes how Chainguard can help Canadian defence suppliers meet those requirements with secure, zero-CVE containers. ### Source excerpt CPCSC compliance is coming fast. Learn how Chainguard helps Canadian defence suppliers meet Level 1 requirements with secure, zero-CVE containers. ## OpenAI available at FedRAMP Moderate DevFeed: [OpenAI available at FedRAMP Moderate]() Original publisher: [Read original article]() Published: 2026-04-27T14:00:00Z Content type: news Language: en Sources: [OpenAI News]() Topics: [AI Chat](), [SDKs]() Tags: [ai](), [api](), [chatgpt](), [deployment](), [enterprise](), [fedramp](), [global-affairs](), [government](), [openai](), [security-privacy]() ### AI overview OpenAI announced FedRAMP 20x Moderate authorization for ChatGPT Enterprise and its API Platform, expanding a path for U.S. federal agencies to use its managed AI products. ### Source excerpt OpenAI is available at FedRAMP Moderate authorization for ChatGPT Enterprise and the OpenAI API, enabling secure AI adoption for U.S. federal agencies. ## How NASA and Chainguard used AI to support secure, compliant Artemis mission readiness DevFeed: [How NASA and Chainguard used AI to support secure, compliant Artemis mission readiness]() Original publisher: [Read original article]() Author: Dimension Published: 2026-04-17T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Artificial Intelligence](), [chainguard](), [data](), [Retrieval-Augmented Generation](), [Model Context Protocol (MCP)](), [datasets](), [cloud-infrastructure](), [User Experience](), [Scalability](), [Grafana]() Tags: [ai](), [ai-in-space](), [artemis-2](), [artemis-ii](), [automated](), [chainguard](), [chainguard-containers](), [compliance](), [data](), [embeddings](), [fedramp](), [mcp](), [pipelines](), [retrieval](), [safety](), [scalability](), [space](), [user-experience]() ### AI overview The article describes how NASA and MRI Technologies partnered with Chainguard to build a secure, continuously compliant software foundation for Artemis and Habitable Worlds Observatory missions. It discusses attempts to use retrieval-augmented generation and MCP with mixed-format safety data, while highlighting unresolved data-fidelity and traceability challenges. ### Source excerpt How NASA Artemis used AI and Chainguard to enable secure, compliant software and faster mission readiness in high-stakes environments. ## Managing third-party images at scale DevFeed: [Managing third-party images at scale]() Original publisher: [Read original article]() Published: 2026-04-16T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [container images](), [Security](), [Vulnerabilities](), [cloud-infrastructure](), [code productivity](), [chainguard]() Tags: [appian](), [chainguard](), [chainguard-containers](), [chainguard-images](), [chainguard-os](), [cloud](), [compliance](), [container-image](), [container-images](), [containers](), [dependencies](), [developer-velocity](), [fedramp](), [hardened-images](), [scale](), [security](), [third-party-container-images](), [vulnerabilities]() ### AI overview This article explains how Appian approached managing third-party container images at scale with Chainguard. It describes the operational burden caused by image dependencies, vulnerabilities, maintenance, and compliance requirements, including the ongoing work needed for regulated environments such as FedRAMP. It also estimates that building a complete internal hardened-image program would require a dedicated team of 15 to 20 engineers. ### Source excerpt Learn how companies can scale third-party container image management with Chainguard to reduce risk, cut toil, and accelerate compliance and developer velocity. ## FedRAMP 20x's cybersecurity requirements for AI-enabled SaaS DevFeed: [FedRAMP 20x's cybersecurity requirements for AI-enabled SaaS]() Original publisher: [Read original article]() Author: info@goteleport.com (George Chamales) Published: 2026-03-13T00:00:00Z Content type: opinion Language: en Sources: [Teleport]() Topics: [Requirements](), [Cybersecurity](), [Software as a service](), [Artificial Intelligence]() Tags: [compliance](), [cybersecurity](), [fedramp](), [fedramp-20x](), [government](), [news](), [product](), [program](), [requirements](), [security](), [team](), [technology]() ### AI overview This commentary examines FedRAMP 20x, a refactor of the US federal government's SaaS compliance standard, and considers how its Key Security Indicators apply to AI features. It argues that AI capabilities intersect with cybersecurity, people, and process requirements. ### Source excerpt FedRAMP 20x: A new player has entered the game. ## Chainguard + Second Front: A faster, more secure path into government markets DevFeed: [Chainguard + Second Front: A faster, more secure path into government markets]() Original publisher: [Read original article]() Published: 2026-02-20T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard containers](), [container images](), [DevSecOps](), [supply-chain-security](), [Vulnerabilities](), [Deployment](), [Cybersecurity]() Tags: [chainguard](), [chainguard-containers](), [chainguard-for-compliance](), [cmmc](), [container-image-compliance](), [container-images](), [cve-remediation](), [cybersecurity](), [devsecops](), [federal-compliance](), [fedramp](), [government](), [iso](), [provenance](), [sbom](), [second-front-systems](), [secure-by-default](), [secure-by-design](), [security](), [soc-2](), [software-supply-chain]() ### AI overview Chainguard and Second Front are partnering to help software companies pursue federal market requirements, including FedRAMP authorization and DoD impact-level accreditations. The article describes combining Chainguard's hardened container images with Second Front's Game Warden DevSecOps platform to support secure application delivery and vulnerability reduction. ### Source excerpt Discover how Chainguard and Second Front are partnering to help build a secure path into government markets for your organization. ## Super SBOMs: See exactly what's inside DevFeed: [Super SBOMs: See exactly what's inside]() Original publisher: [Read original article]() Published: 2026-01-29T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [Containers](), [chainguard](), [Security](), [spdx]() Tags: [chainguard-containers](), [chainguard-sboms](), [containers](), [cyclonedx](), [fedramp](), [sbom](), [sboms](), [security](), [software-bill-of-materials](), [software-supply-chain-security](), [spdx](), [vulnerability]() ### AI overview Chainguard Containers now provide richer SBOMs with binary-level details about embedded libraries and dependencies, along with CycloneDX support in addition to SPDX. The added visibility helps teams trace vulnerabilities and assess license compliance. ### Source excerpt Chainguard Containers ship richer SBOMs with binary-level library details plus new CycloneDX support, making CVE impact and compliance tracing fast and clear. ## Chainguard Releases Ruby 4.0 Packages and Container Images DevFeed: [Chainguard Releases Ruby 4.0 Packages and Container Images]() Original publisher: [Read original article]() Published: 2025-12-26T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [Ruby](), [chainguard](), [chainguard containers](), [Containers]() Tags: [architectures](), [chainguard](), [chainguard-containers](), [chainguard-ruby-image](), [cmvp](), [container-images](), [containers](), [fedramp](), [ruby](), [ruby-programming-language]() ### AI overview Chainguard announces packages and container images for Ruby 4.0, which includes performance improvements and language refinements. The images support x86_64 and ARM64, include stated hardening and runtime-security features, and are available through Chainguard, Docker Hub, and AWS Public ECR. ### Source excerpt Chainguard delivers Ruby 4.0 container images: secure, zero-CVE, FIPS-ready, and available free so developers can adopt the latest Ruby safely and fast. ## Figma Make is now available in Figma for Government DevFeed: [Figma Make is now available in Figma for Government]() Original publisher: [Read original article]() Author: Figma Published: 2025-12-11T00:00:00Z Content type: article Language: en Sources: [Figma Blog]() Topics: [Figma](), [Accessibility](), [User interface design](), [Usability](), [Security]() Tags: [accessibility](), [collaboration](), [design](), [design-consistency](), [executive](), [fedramp](), [figma](), [government](), [prototypes](), [prototyping](), [public-sector](), [resources](), [security](), [speed](), [standards](), [tools](), [tools-and-resources]() ### AI overview Figma Make is now available in Figma for Government, enabling government teams to create interactive prototypes, collaborate securely, and test ideas more quickly while modernizing public services. ### Source excerpt With Figma Make now available in Figma for Government, teams can prototype faster, collaborate securely, and accelerate progress on modernizing public services. ## Get up to Speed on FedRAMP 20x DevFeed: [Get up to Speed on FedRAMP 20x]() Original publisher: [Read original article]() Published: 2025-10-23T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Cloud](), [DevSecOps](), [Security](), [supply-chain-security](), [Vulnerabilities](), [vulnerability management](), [Cloud Native Ecosystem](), [Containers](), [Automation](), [Authorization](), [Software as a service]() Tags: [2025](), [2026](), [ato](), [automation](), [chainguard-compliance](), [chainguard-containers](), [chainguard-fedramp-solution](), [chainguard-for-fedramp](), [cloud](), [cloud-native](), [compliance](), [containers](), [containers-for-fedramp](), [devsecops](), [fedramp](), [fedramp-20x](), [fedramp-containers](), [provenance](), [saas](), [security](), [software-supply-chain](), [standards](), [vulnerability-management]() ### AI overview FedRAMP 20x modernizes cloud authorization through continuous, automation-driven assurance, machine-readable documentation, and streamlined assessment processes. The article explains implications for containerized workloads, vulnerability management, software supply-chain security, ATOs, and organizations transitioning from FedRAMP Rev. 5. ### Source excerpt FedRAMP 20x is transforming cloud compliance with automation and continuous security. Learn how Chainguard Containers simplify 20x readiness with 0-CVE images. ## Chainguard + Booz Allen: Delivering Trusted Open-Source Software to U.S. Government Agencies DevFeed: [Chainguard + Booz Allen: Delivering Trusted Open-Source Software to U.S. Government Agencies]() Original publisher: [Read original article]() Published: 2025-10-15T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard containers](), [container images](), [Containers](), [open-source-security](), [Vulnerabilities](), [Open Source](), [Security]() Tags: [announce](), [ato](), [booz-allen-hamilton](), [chainguard](), [chainguard-booz-partnership](), [chainguard-containers](), [chainguard-dod-partnership](), [chainguard-libraries](), [common-vulnerabilities-and-exposures](), [compliance](), [container-images](), [containers](), [engineering](), [fedramp](), [fips](), [government](), [hardened-containers](), [open-source](), [open-source-software](), [sboms](), [secure-by-default](), [secure-software](), [security](), [stateramp](), [supply-chain](), [vulnerabilities](), [zero-cve-container-images]() ### AI overview Chainguard and Booz Allen announced a partnership to help U.S. government agencies and defense programs secure software supply chains, reduce vulnerabilities, and accelerate compliance. The partnership combines Booz Allen's mission expertise with Chainguard's secure-by-default open-source software, including hardened containers that helped one defense-related program obtain authorization to operate in eight weeks. ### Source excerpt Chainguard and Booz Allen partner to help federal programs eliminate vulnerabilities, save engineering time, and accelerate compliance timelines. ## Simplify Continuous Compliance: How to Stay Audit-Ready and Ship Software Faster DevFeed: [Simplify Continuous Compliance: How to Stay Audit-Ready and Ship Software Faster]() Original publisher: [Read original article]() Published: 2025-10-14T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Application Security](), [open-source-security](), [Open Source](), [Software](), [chainguard]() Tags: [chainguard](), [chainguard-containers](), [chainguard-security](), [cmmc](), [compliance](), [cves](), [fedramp](), [iso-27001](), [open-source-software](), [pci-dss](), [security](), [soc-2](), [stateramp]() ### AI overview This article explains how organizations can treat software compliance as a continuous practice rather than a periodic audit exercise. It describes how open-source components, CVE remediation, provenance, SBOM coverage, and audit evidence affect platform engineering, application security, development velocity, and regulated-market access, while presenting Chainguard as a solution provider. ### Source excerpt Turn compliance into a growth driver with Chainguard. Eliminate CVEs, stay audit-ready, and meet FedRAMP, SOC 2, and ISO 27001 with secure images. ## Announcing Kernel-Independent FIPS for Java DevFeed: [Announcing Kernel-Independent FIPS for Java]() Original publisher: [Read original article]() Published: 2025-08-14T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [Java](), [Cryptography](), [Cybersecurity](), [container images](), [Linux]() Tags: [amazon](), [ato](), [azure](), [chainguard](), [chainguard-containers](), [chainguard-fips-images](), [compliance](), [container-images](), [cos](), [cryptography](), [fedramp](), [fedramp-ato](), [fedramp-containers](), [fips](), [implementation](), [java](), [linux](), [nist](), [openssl](), [security]() ### AI overview Chainguard announces Kernel-Independent FIPS availability across its Java FIPS image catalog. The update uses FIPS-validated cryptography and validated userspace entropy, allowing Java FIPS workloads to run with any host kernel and on platforms including GKE with COS, Amazon Bottlerocket, Flatcar Linux, and Azure Linux. It is intended to simplify production deployment and accelerate FedRAMP authorization to operate. ### Source excerpt Kernel-Independent FIPS is now available across the full catalog of Chainguard FIPS images for Java, simplifying and accelerating compliance for FedRAMP ATO. ## How Collaboration.Ai Saved 2 Years and $2 Million with Chainguard, Second Front, and AWS DevFeed: [How Collaboration.Ai Saved 2 Years and $2 Million with Chainguard, Second Front, and AWS]() Original publisher: [Read original article]() Published: 2025-07-23T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard containers](), [Amazon Web Services](), [DevSecOps](), [Vulnerabilities](), [Security](), [container images](), [cloud-infrastructure]() Tags: [ato](), [authority-to-operate](), [aws](), [chainguard](), [chainguard-containers](), [chainguard-images](), [compliance](), [container-images](), [cost](), [devsecops](), [fedramp](), [fedramp-ato](), [fedramp-containers](), [govcloud](), [hardened-images](), [secondfront](), [vulnerabilities]() ### AI overview Collaboration.Ai used Chainguard Containers, Second Front's Game Warden platform, and AWS GovCloud to accelerate CrowdVector's path toward DoD compliance. The combination reduced vulnerabilities by 97% and lowered compliance costs by $2 million. ### Source excerpt Collaboraton.AI used a combination of Chainguard Containers, Second Front, and AWS to reduce vulnerabilities by 97% and lower compliance costs by $2 million. ## FIPS-Validated Container Images: When, Where, and Why DevFeed: [FIPS-Validated Container Images: When, Where, and Why]() Original publisher: [Read original article]() Published: 2025-07-10T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [Containers](), [Encryption](), [Cryptography](), [Security]() Tags: [chainguard](), [compliance](), [container-images](), [cryptography](), [encryption](), [fedramp](), [financial-services](), [fips](), [fips-validation](), [healthcare](), [nist](), [public-sector](), [security]() ### AI overview This article explains why FIPS-validated cryptography is required at the container image level for workloads subject to FedRAMP and NIST 800-53 requirements. It describes Chainguard's FIPS-validated container images, their cryptographic boundaries, and how they help organizations address compliance and authorization requirements in regulated environments. ### Source excerpt Chainguard's catalog of 1,400+ trusted container images includes 400+ FIPS-validated variants. [Next page]()