[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHHn-nRauiaE_71j60zWHWQxnfYnPt9TJngljmUDnJso":3},{"article":4,"iocs":53,"watch_terms":54,"solutions":55,"lesson":58},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"dd9b8fcc-0420-430a-af2d-0f1b89e5769d","Secure Your Mission-Critical Application Estate: Qualys TotalAppSec is Now FedRAMP High Authorized (FedRAMP Certified Class D)","secure-your-mission-critical-application-estate-qualys-totalappsec-is-now-fedram-8eedfb","Key Takeaways Qualys TotalAppSec is now FedRAMP High Authorized on the Qualys Government Platform (FedRAMP Certified Class D, package FR2231052341). Federal AI use cases more than doubled in a year (3,611 use cases across 56 agencies), and most AI interactions are delivered through APIs; expanding an estate traditional IP-based inventory was never designed to measure. […]","Qualys TotalAppSec has achieved FedRAMP High authorization on the Qualys Government Platform, addressing the growing complexity of federal application estates, particularly with the rise of AI and API usage. This authorization allows government agencies and contractors to manage and secure their mission-critical applications and APIs within a high-impact security boundary, helping them meet evolving compliance directives like CISA BOD 26-04 and NIST SP 800-228.","Qualys TotalAppSec achieves FedRAMP High authorization for government application security.","https:\u002F\u002Fblog.qualys.com\u002Fproduct-tech\u002F2026\u002F10\u002F05\u002Ftotalappsec-fedramp-high-federal-application-security","https:\u002F\u002Fik.imagekit.io\u002Fqualys\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FBlog-Images-1080x1080.Cloud_.Agent_.2025.Updates-1-8.png","2026-10-05T16:29:39+00:00","2026-10-05T18:00:17.009355+00:00",7,[17,20,23,26,28],{"name":18,"type":19},"TotalAppSec","product",{"name":21,"type":22},"Qualys","vendor",{"name":24,"type":25},"API","technology",{"name":27,"type":25},"AI",{"name":29,"type":19},"Qualys Government Platform","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":30,"icon":32,"name":33,"slug":34},null,"Policy","policy",[36,41,46,48],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"217d3263-c763-41ca-875e-06901f522fe0","NIST","nist",{"category":42},{"id":43,"icon":32,"name":44,"slug":45},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":47},{"id":30,"icon":32,"name":33,"slug":34},{"category":49},{"id":50,"icon":32,"name":51,"slug":52},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",[],[21,18,29],{"controls":56,"vendors":57},[],[],{"slug":59,"title":60,"body":61,"framework_refs":62,"framework_notes":71},"fedramp-high-authorization-highlights-federal-app-api-security-imperatives","FedRAMP High Authorization Highlights Federal App & API Security Imperatives","As federal agencies increasingly rely on complex application estates encompassing AI-driven services and APIs, maintaining a certified, high-impact security boundary is no longer optional — it is a compliance mandate. The achievement of FedRAMP High authorization by Qualys TotalAppSec underscores that unmanaged or under-secured APIs and applications represent significant attack surfaces within government environments. Directives like CISA BOD 26-04 and NIST SP 800-228 reflect regulators' recognition that application-layer risks are growing faster than traditional security programs can address. Without continuous visibility and authorized tooling, agencies risk non-compliance penalties and exposure of mission-critical data. This development serves as a signal to all federal entities and contractors to audit their application security posture against current compliance requirements.",[63,64,65,66,67,68,69,70],"NIST SP 800-228 (Application Security)","NIST SP 800-53 Rev 5 – CA-2 (Control Assessments), RA-5 (Vulnerability Monitoring)","CISA BOD 26-04","FedRAMP High Baseline Security Requirements","FISMA (Federal Information Security Modernization Act)","CIS Control 16 – Application Software Security","CIS Control 7 – Continuous Vulnerability Management","NIST CSF 2.0 – GV.OC (Organizational Context), ID.AM (Asset Management)",{}]