Insider Brief
- Cloudflare for Government has achieved FedRAMP High certification and GovRAMP Moderate authorization, expanding access to its security, performance, AI and developer services for public-sector organizations.
- Cloudflare also announced plans to pursue Department of Defense Impact Level 4 authorization for its government platform.
- The platform supports Zero Trust, digital resilience and post-quantum encryption, with more than 100 U.S. government agencies already using Cloudflare services.
Press release – Cloudflare, Inc. (NYSE: NET), the leading connectivity cloud company, today announced that Cloudflare for Government achieved the Federal Risk and Authorization Management Program (FedRAMP®) High certification and GovRAMP™ Moderate authorization. These achievements enable Federal, State and Local government, defense, education and highly-regulated organizations to use Cloudflare’s suite of integrated security, performance, AI and developer services to advance their missions and innovate with efficiency.
As the public sector faces an increasingly complex threat landscape, Cloudflare also confirmed its intent to pursue Department of Defense (DoD) Impact Level 4 (IL4) authorization. By bridging the gap between legacy infrastructure and modern security, Cloudflare is enabling government and defense organizations to leverage a unified suite of security, performance, and developer services—allowing them to innovate with speed without compromising on compliance.
“Federal agencies, the Department of Defense, and highly-regulated organizations face more pressure than ever to modernize technologies, deliver faster, and reduce costs while protecting highly sensitive data from evolving threats,” said David Mihalchik, VP of U.S. Public Sector at Cloudflare. “FedRAMP High, GovRAMP Moderate, and our intent to pursue DoD IL4 let us bring a platform to federal, state, local, and defense teams to advance their missions, retire legacy technologies, and accelerate their shifts to a more secure, efficient, and innovative future.”
Cloudflare for Government is a unified platform that helps organizations adopt Zero Trust security, strengthen digital resilience, accelerate performance, and build and deploy applications quickly. It runs on the same software and architecture as Cloudflare’s global network, which spans more than 335 cities in over 125 countries, using software-defined regionality. Cloudflare for Government gives agencies the same protection, performance, and pace of innovation that Cloudflare delivers across the Internet. Post-quantum cryptography also protects data in transit against emerging threats.
With Cloudflare’s FedRAMP High certification, agencies and their partners can adopt Cloudflare for Government to process High Impact data: the sensitive information tied to national security, critical infrastructure, and financial systems, where a breach could have severe or catastrophic consequences. Cloudflare processes this data within an authorized U.S. boundary, across 15 metro areas positioned close to users, so agencies can scale quickly and reliably while keeping their most sensitive data in the U.S.. Similarly, Cloudflare’s GovRAMP Moderate authorization confirms that Cloudflare for Government can satisfy state and local governments’ mandates to protect their own sensitive workloads and meet state-specific data privacy mandates.
Today, more than 100 U.S. government agencies use Cloudflare to accelerate Zero Trust architectures, deliver resilient digital services, meet TIC 3.0 requirements, and enable Post-Quantum encryption. This includes the Department of Commerce, Department of Energy, Department of Health and Human Services, Department of Homeland Security, Department of the Interior, Department of Justice and Department of State. In addition, several cloud solutions including Workday, New Relic, Armis Federal, Darktrace Federal and GitLab rely on Cloudflare for Government to deliver trustworthy cloud services to their government customers around the globe.
