--- title: Simplify FedRAMP compliance description: FedRAMP requires organizations follow NIST 800-70. This means Vulnerability Scanning for Containers requires CSPs use “hardened” images. image: https://get.chainguard.dev/hubfs/Brand%20Assets/Logos/Chainguard%20Logos/Hubspot%20Social%20Sharing%20Image%20-%20Logo%20in%20Blurple.png --- [![Blurple](https://get.chainguard.dev/hubfs/Blurple.png)](https://www.chainguard.dev/) [Contact](https://www.chainguard.dev/contact) # Fast Track FedRAMP Compliance with Chainguard Images Our Images help organizations achieve FedRAMP compliance at record speed by eliminating entire classes of vulnerabilities and verifying the code your engineers rely on meets federal requirements. Our Images come with: **FIPS:** We offer FIPS 140-2 and 140-3 validation. **0-known CVEs:** We patch daily – so you don’t have to wait on upstream distributions. **STIG:** Streamline your compliance process by pairing our STIG with FIPS-ready Images. **SBOMs:** All Images come with a Software Bill of Materials or SBOM. **Cryptographic Signatures:** To establish provenance and verify integrity.  Trusted by ![Precisely Logo black](https://get.chainguard.dev/hubfs/Images/Logos/Customer%20and%20Partner%20Logos/Precisely%20Logo%20black.svg) ![Dell](https://get.chainguard.dev/hubfs/Images/Logos/Customer%20and%20Partner%20Logos/Dell.svg) ![Snowflake Logo black](https://get.chainguard.dev/hubfs/Images/Logos/Customer%20and%20Partner%20Logos/Snowflake%20Logo%20black.svg) ![GitGuardian Logo black](https://get.chainguard.dev/hubfs/Images/Logos/Customer%20and%20Partner%20Logos/GitGuardian%20Logo%20black.svg) ![GitLab Logo black](https://get.chainguard.dev/hubfs/Images/Logos/Customer%20and%20Partner%20Logos/GitLab%20Logo%20black.svg) ![HPE Logo](https://get.chainguard.dev/hubfs/Images/Logos/Customer%20and%20Partner%20Logos/HPE%20Logo.svg) ![Canva Logo](https://get.chainguard.dev/hubfs/Images/Logos/Customer%20and%20Partner%20Logos/Canva%20Logo.svg) ![Elastic Logo](https://get.chainguard.dev/hubfs/Images/Logos/Customer%20and%20Partner%20Logos/Elastic%20Logo.svg) ![Dexcom Logo](https://get.chainguard.dev/hubfs/Images/Logos/Customer%20and%20Partner%20Logos/Dexcom%20Logo.svg) “Adoption of Chainguard Images has transformed the way our team builds securely with open source software across the organization and has helped to streamline and strengthen our FedRAMP certifications by providing fast open source vulnerability remediation.” Senior Manager, Product Security at Snowflake Brandon Sterne STIG Images ## Chainguard STIG Hardened FIPS Images: Simplify FedRAMP Compliance Chainguard FIPS Images are STIG (Security Technical Implementation Guide) hardened to streamline the FedRAMP compliance process. The STIG is delivered in the form of an OSCAP (Open Security Content Automation Protocol) profile and scanned against the GPOS (General Purpose Operating System) SRG, providing a clear path to achieving or enhancing your FedRAMP compliance status. You can use Chainguard’s dedicated STIG with: - Chainguard FIPS-ready Images that meet the GPOS SRG - Dedicated Wolfi STIG for easy container hardening verification - Simple html OSCAP scan report which you can share with your auditor to prove compliance - Expert support team to assist with STIG and FedRAMP compliance questions ## Chainguard Images achieve CVE accumulation rate that is 80% lower than industry alternatives. Why Chainguard Images ## Reach 'inbox zero' for your CVEs ## **91 M** **images pulled to date ** ## **97.6%** **reduction in CVEs** ## **2,000** **hr/y saved on CVE management** ## **0** **known CVEs** # Download Your Free FedRAMP Checklist See the steps you can take to proactively prepare for your FedRAMP journey, which can help speed up compliance for container security requirements and simplify the ongoing operations and management of your FedRAMP service. [![Download](https://no-cache.hubspot.com/cta/default/21744766/interactive-154188542037.png)](https://get.chainguard.dev/hs/cta/wi/redirect?encryptedPayload=AVxigLLVYtARCQ9DZrWwr0Aw1VshvyGh%2BqJAaPmdxPFCT7kn9py4t0Hi2uZMyWWwcNJNHsAwJ1kv%2ByQgxYKdIVOoFUlGqmMHLcBCRi4aW7K3gx9wqK2u2Ec7bVQNj2GWVw562uICn9ryKDo%2F8qUf3mcvYO0Znvgk6s9CIhmxr2Cy7nFcYUmBJ2DuZ%2FycBu2mtGTLgrpiEzaSrI0Xb17khGYcO6Y%2BgUIzfYN8SvpWCy23QtK4QwMuhl70huFMmvfy8lH22jSh9h1YxwFowmyDR0LO5vK0UMoHoe6X%2F4lCB80dfyHTWMz0zsNxtm9lkMGfe5FK&webInteractiveContentId=154188542037&portalId=21744766&hsLang=en) ## Additional Resources Research #### [Hardened Container Images: Images for a Secure Supply Chain](https://www.chainguard.dev/unchained/hardened-container-images-images-for-a-secure-supply-chain) Customer story #### [Securing trust in the data cloud: Snowflake’s journey with Chainguard](https://www.chainguard.dev/case-studies/securing-trust-in-the-data-cloud-snowflakes-journey-with-chainguard) Docs #### [FIPS-enabled Chainguard Images](https://edu.chainguard.dev/chainguard/chainguard-images/working-with-images/fips-images/)   Blog #### [STIG hardening container images](https://www.chainguard.dev/unchained/stig-hardening-container-images) Security #### [Is your container security FedRAMP Rev 5 ready?](https://www.chainguard.dev/unchained/is-your-container-security-fedramp-rev-5-ready) Blog #### [Kernel-Independent FIPS Images](https://www.chainguard.dev/unchained/kernel-independent-fips-images) [![Blurple](https://get.chainguard.dev/hubfs/Blurple.png)](https://www.chainguard.dev/) ### Product - [Chainguard Containers](https://www.chainguard.dev/containers) - [Chainguard Libraries](https://www.chainguard.dev/libraries) - [Images Directory](https://images.chainguard.dev/?__hstc=1638499.28ae2c3f6250d5fb45a8c5717cebddd2.1754588305518.1762446997419.1762527640864.76&__hssc=1638499.1.1762527640864&__hsfp=1735182700&_gl=1*12d2f7v*_gcl_au*ODgwMjA2MjM3LjE3NjIyMjE1OTQ.) - [Integrations](https://www.chainguard.dev/scanners) - [Pricing](https://www.chainguard.dev/pricing) ### Solutions - [Fedramp](https://www.chainguard.dev/solutions/fedramp) - [PCI DSS](https://www.chainguard.dev/solutions/pci) - [CMMC 2.0](https://www.chainguard.dev/solutions/cmmc) - [Golden Images](https://www.chainguard.dev/solutions/golden-images) - [CVE Remediation](https://www.chainguard.dev/solutions/cve-remediation) - [Public Sector](https://www.chainguard.dev/solutions/public-sector) ### Resources - [Events & Webinars](https://www.chainguard.dev/events) - [Supply Chain Security 101](https://www.chainguard.dev/supply-chain-security-101) - [Chainguard Courses](https://courses.chainguard.dev/?__hstc=1638499.28ae2c3f6250d5fb45a8c5717cebddd2.1754588305518.1762446997419.1762527640864.76&__hssc=1638499.1.1762527640864&__hsfp=1735182700&_gl=1*vance2*_gcl_au*ODgwMjA2MjM3LjE3NjIyMjE1OTQ.) - [Documentation](https://edu.chainguard.dev/?__hstc=1638499.28ae2c3f6250d5fb45a8c5717cebddd2.1754588305518.1762446997419.1762527640864.76&__hssc=1638499.1.1762527640864&__hsfp=1735182700&_gl=1*vance2*_gcl_au*ODgwMjA2MjM3LjE3NjIyMjE1OTQ.) - [Trust Center](https://security.chainguard.dev/?_gl=1*1y9qaoo*_gcl_au*ODgwMjA2MjM3LjE3NjIyMjE1OTQ.) - [Slack Community](https://communityinviter.com/apps/chainguardcommunity/invite) ### Company - [About Us](https://www.chainguard.dev/about-us) - [Blog](https://www.chainguard.dev/unchained) - [Partners](https://www.chainguard.dev/partners) - [Newsroom](https://www.chainguard.dev/newsroom) - [Careers](https://www.chainguard.dev/careers) - [Legal](https://www.chainguard.dev/legal/acceptable-use-policy) © 2026 Chainguard All rights reserved [Privacy Policy](https://www.chainguard.dev/privacy-notice)