Kratos logo

Kratos

Herndon, VA·Founded 1994·FedRAMP-recognized since 2012
High Impact
1994Year founded
2012FedRAMP-recognized since
63Products currently assessing
#5 of 48Rank by active volume

About Kratos

Kratos has over 10 years of experience serving as a trusted independent FedRAMP 3PAO partner for Cloud Service Providers (CSPs) seeking to obtain or maintain FedRAMP Authorization for their cloud service offerings. Services include: • Readiness Assessment (33 completed as of August 2024) • Initial Assessment (71 completed as of August 2024) • Annual Assessment (146 completed as of August 2024) • Significant Change Request (SCR) validation and assessment • Service Onboarding validation and assessment • FedRAMP Baseline and DoD Impact Level uplift assessment • Gap Assessment • Continuous Monitoring Validation • Penetration Testing • Red Teaming • Secure Software Development Framework (SSDF) Attestation • Multi-framework Assessment and Attestation Service Models supported: IaaS, PaaS, SaaS Impact Levels supported: FedRAMP Tailored Li-SaaS, Low, Moderate, and High; DoD Impact Levels 2, 4, 5, and 6 (Secret) AO Stakeholders supported: FedRAMP Board and PMO, DoD JVT and DSAWG, and over 30 civilian and DoD agency sponsors Kratos delivers 3PAO assessment services, including readiness assessments, initial assessments, annual assessments, significant change request (SCR) assessments, penetration testing, red teaming, and continuous monitoring validation & attestation. Kratos provides full scope support from assessment planning, execution of testing, evaluating risk, and submission of a final report to accompany the complete Authority to Operate (ATO) package.

With 63 active assessment engagements in the current export, this firm ranks #5 of 48 by volume (top 92%) — above the field average of 17 active CSOs per firm.

Frameworks and adjacent accreditations

Beyond FedRAMP, the Marketplace export lists this firm as offering assessment or certification services for:

• CMMC / Joint Surveillance• DoD SRG• HITRUST• IA-Pre• StateRAMP• FedRAMP Equivalence• Commercial Solutions for Classified (CSfC)• Other Attestations: CJIS, DoD DIU, FedRAMP, FERPA, FISMA, HIPAA, IRS Publication 1075, MARS-E, NIST CSF, NIST SP 800-53, NIST SP 800-171, NIST SP 800-218, NNPI, SSDF