ThreatModeler Achieves FedRAMP Moderate Authorization Through Partnership with Knox Systems

ThreatModeler Nexus platform brings continuous, living threat modeling to federal agencies

ThreatModeler, a leader in AI-powered threat modeling and continuous security intelligence, announced that ThreatModeler Nexus has achieved FedRAMP Moderate Authorization in partnership with Knox Systems (Knox), the largest, longest-running federal managed cloud.

The authorization allows federal agencies to deploy ThreatModeler’s automated threat modeling and continuous security intelligence in environments handling controlled unclassified information (CUI) and other moderate-impact federal data, giving government customers access to the same continuous, evolving threat modeling capability already relied on by ThreatModeler’s commercial customers.

“Achieving FedRAMP Moderate reflects our commitment to helping federal teams automate continuous threat modeling, without slowing down development,” said Kevin Gallagher, CEO at ThreatModeler. “Agencies can now bring the Secure Design Graph and NexusAI into their most sensitive environments and know threat modeling intelligence is built into their security process, not bolted on.”

Also Read: CIO Influence Interview with John Elliott, Cybersecurity Author Fellow at Pluralsight

For agencies under pressure to build secure software faster without static documentation piling up behind every release, the authorization makes that possible inside an authorized boundary.

“Threat models are only useful if they keep pace with the software they’re meant to protect, and static documentation reviewed annually cannot do that in environments where code changes daily,” said Irina Denisenko, CEO of Knox Systems. “With the support of Knox, federal agencies can now put ThreatModeler’s Nexus platform to work keeping threat models as current the applications they describe, giving teams continuous security intelligence inside environments handling CUI.”

Knox’s managed cloud infrastructure eliminated the FedRAMP Authorization bottleneck and absorbed the complexity of FedRAMP compliance for ThreatModeler, enabling the company to accelerate its authorization faster and more cost-effectively.