Cloudflare to seek DOD IL4 authorization after new FedRAMP, GovRAMP designations

Cloudflare announced Monday it plans to seek Department of Defense Impact Level 4 authorization to bring a platform that can store and process controlled unclassified information to defense agencies.

The connectivity cloud company also achieved FedRAMP High certification, which covers civilian federal agencies, Thursday and GovRAMP Moderate authorization, which covers state and local governments, in April. 

With the FedRAMP High certification, agencies can use Cloudflare for Government to process sensitive information related to national security, critical infrastructure and financial systems, according to a press release. The certification comes shortly after the FedRAMP director warned vendors they should not be allowed to sell products to agencies if they are too slow in patching vulnerabilities.

With the GovRAMP Moderate authorization, state and local governments can similarly use Cloudflare for Government to protect sensitive information and meet state-specific data privacy mandates, the release said.

“FedRAMP High, GovRAMP Moderate, and our intent to pursue DoD IL4 let us bring a platform to federal, state, local, and defense teams to advance their missions, retire legacy technologies, and accelerate their shifts to a more secure, efficient, and innovative future,” David Mihalchik, vice president of U.S. public sector at Cloudflare, said in the release.

The departments of Energy, Health and Human Services, Commerce, Homeland Security, Interior, Justice and State, in addition to other agencies, already use Cloudflare technologies.