Press release · November 11, 2026 · prnewswire.com
Black Duck lists Polaris Platform on FedRAMP Marketplace
Summary
Black Duck’s Polaris Platform is now listed on the FedRAMP Marketplace in the Initial Implementation phase. The listing is part of the company’s pursuit of FedRAMP 20x Class C Certification and represents a step toward bringing Polaris to the federal government.
FedRAMP 20x, introduced in 2025, modernizes how the federal government evaluates cloud security. Rather than relying primarily on written control narratives, it measures security through 46 Key Security Indicators validated with automated checks. The approach emphasizes continuous monitoring and measurable outcomes. Class C is designed for cloud services that handle sensitive federal information, including Controlled Unclassified Information (CUI).
CISA’s Binding Operational Directive 26-04 replaces CVSS severity scores with a risk-based model for prioritizing remediation, with deadlines as short as three days for the most urgent vulnerabilities. Polaris identifies and remediates vulnerabilities across proprietary code, open source, containers, and cloud infrastructure. Agencies can use it to accelerate secure software delivery, support continuous ATO, and gain agency-wide visibility into software risk.
Polaris will also undergo an independent assessment against the FedRAMP Rev5 Moderate baseline, adding evidence for organizations that evaluate cloud services at the control level. The effort is also intended to facilitate GovRAMP certification for the state, local and education (SLED) market and a DISA Impact Level 2 (IL2) for the Department of War. Black Duck works with stackArmor on its path to FedRAMP certification.
“AI is changing how fast software gets written, and federal agencies need security that keeps pace,” said Dipto Chakravarty, Chief Product & Technology Officer at Black Duck.
The company plans to share regular progress updates on the FedRAMP Marketplace as certification advances.
Our summary. The original keeps its own byline.