Sponsors
FedHIVE helps technology companies securely bring their solutions to government, navigate complex certification and authorization requirements, and sustain the security and compliance operations required for long-term success in the federal market. Built on a trusted multi-agency authorization foundation reflecting one of the highest levels of federal security review, FedHIVE supports organizations pursuing FedRAMP Class D (High), DoW (DoD) Impact Level 4 and 5, CMMC, and other government security requirements. Our flexible platform supports IaaS, PaaS, and SaaS capabilities across private cloud, hyperscaler, and hybrid environments. FedHIVE extends beyond certification through Compliant Security Operations—an always-on operating approach that integrates security, compliance, infrastructure, evidence, governance, and government accountability. This moves organizations from periodic compliance to continuous accountability while giving government customers greater transparency into how systems and data are protected, monitored, and verified. By taking on more of the infrastructure, compliance, security, and operational heavy lift, FedHIVE enables technology companies to focus on innovation, customers, mission, and growth. The result is reduced burden and risk, greater cost predictability, and a more efficient path from certification to agency adoption, pipeline growth, federal revenue, and long-term ROI. FedHIVE. Built for what comes next.
Knox Systems operates the largest managed federal cloud, trusted by leading agencies and partners across the defense and civilian sectors. Built for speed, resilience, and compliance, Knox delivers a faster path to government authorization, unlocking access to best-in-class technology for the U.S. Government. Knox serves leading AI and SaaS providers to accelerate the delivery of mission-ready innovation across the federal landscape.
Mycroft helps organisations achieve and maintain compliance across CMMC, FedRAMP, FedRAMP 20x, SOC 2, and ISO 27001. Its AI-powered platform and security experts handle the operational work, from implementing controls and configuring systems to collecting evidence, preparing documentation, and supporting audits. Mycroft replaces fragmented tools and manual processes with one integrated approach to security, compliance, and risk, helping teams stay secure and audit-ready without adding significant internal overhead.
Persona provides modern identity verification for public sector organizations, helping expand access to digital services while keeping privacy and security at the forefront. As a FedRAMP® Certified Class C (Moderate) platform, Persona helps agencies safeguard sensitive data while combating fraud across citizen services, benefits programs, and workforce verification. Teams can consolidate data, automate decisions, and manage identity workflows in one place. Backed by Kantara IAL2, SOC 2 Type II, and ISO 27001 credentials, Persona helps agencies deliver secure, efficient digital services at scale.
RegScale is a Continuous Controls Monitoring (CCM) platform that is a next generation cyber GRC, purpose built for the CISO as an operational risk tool to bridge security, risk, and compliance operations in a seamless mesh architecture. RegScale starts with a foundation of compliance as code, leverages its native connectors and APIs to support integrations with existing security tools to generate self-updating documentation, and deploys a fleet of AI agents to reduce manual labor requirements for risk assessments, auditing, and workflow management. Heavily regulated organizations, including Fortune 500 enterprises and the federal government, report 60% faster time preparing for and completing audits, significant risk reduction via our dynamic controls assurance platform, and up to 80% reductions in manual labor to support risk and compliance business processes.
Schellman is a leading global provider of attestation and compliance services and the industry’s #1 FedRAMP Independent Assessor as the first to assess over 200 cloud service offerings on the FedRAMP Marketplace. Combining technical depth, worldwide reach, and operational discipline, Schellman’s services span CMMC, NIST, SOC, ISO, PCI, AI governance, and more, helping technology companies demonstrate compliance and obtain the independent assessments required for government authorization.
Second Front (2F) is a public-benefit company powering software for the free world. 2F Game Warden is a pre-accredited DevSecOps platform that carries commercial software into the government’s most restricted networks. Onboard once and your application inherits up to 80% of the control baseline, cutting time to ATO from months to weeks, with Day-2 monitoring from there. FedRAMP Class A–D, DoW IL2–6+, GovRAMP Low–High. Commercial capability, wherever the mission needs it.
stackArmor, a Quantum Sky company, provides cloud security and compliance solutions for organizations serving regulated and government markets. Its services and ThreatAlert Security Platform help customers accelerate FedRAMP, FISMA/RMF, CMMC, StateRAMP, CJIS, and DoD compliance. With experience supporting federal cloud programs across AWS and other major cloud platforms, stackArmor focuses on reducing the cost, complexity, and time required to achieve an Authority to Operate.
Vanta is the leading Agentic Trust Platform. Vanta unifies compliance, risk, vendor risk, and customer trust on a single platform. It is used by over 16,000 companies that need trust that can keep pace with growth. Founded in 2018 and headquartered in San Francisco, Vanta helps teams automate evidence collection, monitor risk in real time, and streamline audits without stitching together a stack of point solutions.
Shaping the future of secure trusted resilient scalable cloud adoption
September 29-30, 2026
Fuse at Mason Square
3401 Fairfax Drive
Arlington, VA 22201
USA
The CSP-AB Summit is a high-impact forum bringing together Federal policy leaders, industry stakeholders, and security experts around a single mission: accelerating secure cloud adoption across the Federal enterprise.