Fortinet Achieves GovRAMP Security Authorization

SUNNYVALE, Calif., April 23, 2025 (GLOBE NEWSWIRE) --

News Summary

®, the global cybersecurity leader driving the convergence of networking and security, today announced that and have received GovRAMP, previously known as StateRAMP, authorization at a moderate impact level from the Government Risk and Authorization Management Program (GovRAMP®).

“Fortinet’s GovRAMP authorization underscores our commitment to delivering trusted security solutions for state and local government agencies, educational institutions, and other public sector partners,” said John Whittle, Chief Operating Officer at Fortinet. “With Fortinet, state and local government institutions have access to robust threat intelligence and security support, facilitating the effective detection and mitigation of risks, and faster incident response.”

GovRAMP standardizes cybersecurity technology delivery for state and local organizations, and provides accreditation to vendors that meet the collective security requirements of such entities. Fortinet’s designation as a GovRAMP-authorized vendor provides public sector organizations with the comprehensive threat intelligence and analysis required to proactively address security gaps and vulnerabilities.



“We congratulate Fortinet on achieving GovRAMP Authorization at the Moderate Impact Level for its FortiCare and FortiGuard services,” said Leah McGrath, Executive Director, GovRAMP. “This milestone reflects Fortinet’s continued leadership and commitment to meeting the high security and transparency standards required to serve the public sector. GovRAMP is proud to support providers who prioritize risk reduction, continuous monitoring, and cybersecurity resilience across government.”

FortiGuard AI-Powered Security Services, natively integrated into the Fortinet Security Fabric, delivers comprehensive, actionable threat intelligence enabling teams to detect and counter evasive and never-seen-before threats. FortiGuard services, which are continuously updated with the latest intelligence data and telemetry from Fortinet’s broad sensor base and research discoveries, ensure heightened efficacy against complex cyberthreats.

The GovRAMP authorization of FortiCare Services also helps government organizations with the deployment and sustainment of their security operations. Agencies often lack the in-house expertise and resources to support security initiatives, FortiCare Support Services provides users with global technical support 24x7 and access to over 1,900 experts to ensure efficient operation and maintenance of Fortinet capabilities.

GovRAMP validation requirements for vendors are built on the National Institute of Standards and Technology (NIST) Special Publication 800-53 Rev. 4 framework, modeled in part after FedRAMP. To obtain GovRAMP authorization at a moderate impact level, Fortinet fulfilled the security requirements outlined in this framework, and completed a successful independent audit conducted by a third-party assessing organization (3PAO).

Fortinet has a long history of leadership within the public sector security community. The company works closely with government agencies to define security requirements and deliver leading solutions to serve its departments and organizations. To further build on these efforts, Fortinet intends to also pursue Federal Risk and Authorization Management Program (FedRAMP) certification as part of the company’s ongoing commitment to meet the rigorous security standards required to serve government entities.

Additional Resources

• Visit to learn more about Fortinet innovation, collaboration partners, product security processes, and enterprise-grade products. 
• Learn more about , including its responsible product development and vulnerability disclosure approach and policies. 
• Learn about Fortinet’s , which includes broad cyber awareness and product training. The Fortinet Training Institute also provides training and certification through the , , and programs.
• Learn more about threat intelligence and research and , which provide timely steps to mitigate breaking cybersecurity attacks.
• Learn more about Fortinet’s portfolio.
• Read about how are securing their organizations.
• Follow Fortinet on , , , and . Subscribe to Fortinet on our or .
  
  

About Fortinet ()

(Nasdaq: FTNT) is a driving force in the evolution of cybersecurity and the convergence of networking and security. Our mission is to secure people, devices, and data everywhere, and today we deliver cybersecurity everywhere our customers need it with the largest integrated portfolio of over 50 enterprise-grade products. Well over half a million customers trust Fortinet's solutions, which are among the most deployed, most patented, and most validated in the industry. The , one of the largest and broadest training programs in the industry, is dedicated to making cybersecurity training and new career opportunities available to everyone. Collaboration with from both the public and private sectors, including Computer Emergency Response Teams (“CERTS”), government entities, and academia, is a fundamental aspect of Fortinet’s commitment to enhance cyber resilience globally. , Fortinet’s elite threat intelligence and research organization, develops and utilizes leading-edge machine learning and AI technologies to provide customers with timely and consistently top-rated protection and actionable threat intelligence. Learn more at , the , and .

Copyright © 2025 Fortinet, Inc. All rights reserved. The symbols ® and ™ denote respectively federally registered trademarks and common law trademarks of Fortinet, Inc., its subsidiaries and affiliates. Fortinet’s trademarks include, but are not limited to, the following: Fortinet, the Fortinet logo, FortiGate, FortiOS, FortiGuard, FortiCare, FortiAnalyzer, FortiManager, FortiASIC, FortiClient, FortiCloud, FortiMail, FortiSandbox, FortiADC, FortiAgent, FortiAI, FortiAIOps, FortiAgent, FortiAntenna, FortiAP, FortiAPCam, FortiAuthenticator, FortiCache, FortiCall, FortiCam, FortiCamera, FortiCarrier, FortiCASB, FortiCentral, FortiCNP, FortiConnect, FortiController, FortiConverter, FortiCSPM, FortiCWP, FortiDAST, FortiDB, FortiDDoS, FortiDeceptor, FortiDeploy, FortiDevSec, FortiDLP, FortiEdge, FortiEDR, FortiEndpoint FortiExplorer, FortiExtender, FortiFirewall, FortiFlex FortiFone, FortiGSLB, FortiGuest, FortiHypervisor, FortiInsight, FortiIsolator, FortiLAN, FortiLink, FortiMonitor, FortiNAC, FortiNDR, FortiPAM, FortiPenTest, FortiPhish, FortiPoint, FortiPolicy, FortiPortal, FortiPresence, FortiProxy, FortiRecon, FortiRecorder, FortiSASE, FortiScanner, FortiSDNConnector, FortiSEC, FortiSIEM, FortiSMS, FortiSOAR, FortiSRA, FortiStack, FortiSwitch, FortiTester, FortiToken, FortiTrust, FortiVoice, FortiWAN, FortiWeb, FortiWiFi, FortiWLC, FortiWLM, FortiXDR and Lacework FortiCNAPP. Other trademarks belong to their respective owners. Fortinet has not independently verified statements or certifications herein attributed to third parties and Fortinet does not independently endorse such statements. Notwithstanding anything to the contrary herein, nothing herein constitutes a warranty, guarantee, contract, binding specification or other binding commitment by Fortinet or any indication of intent related to a binding commitment, and performance and other specification information herein may be unique to certain environments.