OpenRMF Professional -- Automate Cyber Compliance
OpenRMF® Professional is revolutionizing the RMF, FedRAMP, and Cyber Compliance landscape.
With our solution your team has a web-based collaborative environment for all RMF, FedRAMP, StateRAMP and NIST 800-53 based compliance information. Load your raw scan data, checklists, and compliance statements and easily generate and track your overall compliance. As scans and data are uploaded or bulk edited, your POAM stays up-to-date instantaneously. This enables near real-time continuous monitoring and reporting capability.
Show updates in vulnerability status, checklists, compliance, and POAM automatically with built in history and auditing capabilities. Your team uses a single source-of-truth for all the information they need to achieve and maintain your ATO faster and simpler. Use bulk editing and bulk locking for easier editing and configuration management of your data. And integrate other commercial or custom code applications with the API to automate ingest and export of data simply and easily.
With our solution your team has a web-based collaborative environment for all RMF, FedRAMP, StateRAMP and NIST 800-53 based compliance information. Load your raw scan data, checklists, and compliance statements and easily generate and track your overall compliance. As scans and data are uploaded or bulk edited, your POAM stays up-to-date instantaneously. This enables near real-time continuous monitoring and reporting capability.
Show updates in vulnerability status, checklists, compliance, and POAM automatically with built in history and auditing capabilities. Your team uses a single source-of-truth for all the information they need to achieve and maintain your ATO faster and simpler. Use bulk editing and bulk locking for easier editing and configuration management of your data. And integrate other commercial or custom code applications with the API to automate ingest and export of data simply and easily.
- Multi-Tenant System Packages Approach to track all checklists, scans, and vulnerability data for your entire team with proper permissions and roles
- Automatically generate SSP, SAR, RAR, POAM and other documentation, including a PPTX summary slide deck for your system package in seconds
- Upload SCAP or Audit Compliance scans (DISA or CIS benchmark) and automatically create Checklists, or upload Checklists directly
- A living, breathing POAM is automatically updated and linked to checklists, scans, and other vulnerabilities that caused a POAM entry
- Automatically track checklist Score (# of vulnerabilities by severity and status) per checklist, system package, and the history of changes
- Create custom checklists for manual processes, procedures, and documentation as well as IT products
- Use DISA, Tenable Nessus / ACAS, OpenSCAP, Rapid7 Nexpose SCAP, HBSS SCAP or Tanium SCAP CSV results for checklist vulnerabilities.
- Add Compliance Statements per Control -- CCI for detailed compliance information detail required for full compliance generation
- Automatically track host scan/patch Score (# of vulnerabilities by severity and status) per checklist, system package, and the history of changes
- Generate Compliance across all checklists, statements, vulnerabilities, CCI items matched to your NIST / RMF controls and subcontrols with the click of a button
- Use Tenable Nessus / ACAS Patch Vulnerability or Rapid7 Nexpose Full Audit scan for patch vulnerabilities.
- Team Subpackages allow you to group checklists and hardware devices into smaller teams -- they only see and edit that data, nothing else
- Automatically track other Vulnerability Scores from software scans (i.e. Fortify or SonarQube), container scans, log scans, or other scans
- Track all history and changes of checklist and scan data
- Data Reports to view data from the lens of vulnerabilities, checklists, system package, controls, activity or tracking trends
- API to allow integration, automation of data upload and download, as well as linking to external processes to track cyber compliance from the start
- Audit, Logging, and Metrics to track changes, performance, errors, and usage of the software
- Use on your IT resources locally, disconnected, in a virtual private cloud, or even a laptop as you see fit
- Export proper Checklist (CKL/CKLB) files individually or download multiple as a ZIP for submission to your system of record
- Generate and export your POAM SSP, SAR, RAR and CCRI to an MS Excel spreadsheet for your government or corporate system of record
- Full text searching of all checklist vulnerability data and metadata
- In use at a major US Army Command as well as Space Force, USMC and other federal agencies
- US Navy DADMS Approved #134221
- Can use anywhere you need to comply with NIST 800-53 controls
Category Products