GSA Blog

GSA Blog Logo
 Photo of people holding paper clouds becomes first fully open source FedRAMP solution

| FedRAMP Team
Post filed in: Cloud  |  FedRAMP  |  Technology Transformation Services

Today GSA announced that 18F's has obtained a Provisional Authority to Operate (P-ATO) from the FedRAMP Joint Authorization Board (JAB). is the second CSP to successfully complete FedRAMP Accelerated in less than six months.'s authorization was 23 weeks from date kicked off with the JAB until the formally signed P-ATO. Of the 23 weeks, eight weeks were dedicated to the team's efforts to improve some technical and operational aspects, including additional monitoring and alerting, team training, automation, and formalized policies and procedures. By our calculations the JAB review time spent authorizing was only 15 weeks, which mirrors the same time it took for Microsoft CRMOL, the first vendor to obtain a JAB P-ATO through FedRAMP Accelerated. gives federal teams a fast and easy way to host and update websites (and other web applications), so they can focus on their missions instead of wrangling the infrastructure and compliance requirements common to federal systems.'s P-ATO with the JAB will drastically reduce the time an agency spends in order to review's security and compliance to issue an authorization. This means an agency will be able to host and update websites and other web applications in the fraction of the time it would take with traditional solutions. Additionally, is the first completely open source service with FedRAMP Authorization, which agencies and stakeholders are invited to reuse and contribute to. is also a building block for vendors and contractors that supply services to federal agencies. They can submit proposals to agencies for services to be built on top of, which benefit from these reduced technical and compliance burdens. For more information about this, ask your agency partners to evaluate this option or get in touch with the 18F team.

To learn more about FedRAMP, or to view the security authorization package, please visit

To learn more about using, please see 18F's blog post, get in touch with the 18F team, or learn more on the website.