Technical publications and research.
Publications covering cryptography, infrastructure security, hardware attestation, and operational monitoring. Review technical considerations relevant to government cloud deployments.
Cloud Cryptography Standards
What FIPS 140-3 requires of a cloud provider, where its scope begins and ends, and why a validated component is not the same as a validated system.
Accelerating FedRAMP High for SaaS Partners
How a commercial software provider obtained authorization in eleven months by building on an existing authorized platform.
Defending Subsea Fiber Cables with Telemetry
Interference with undersea cables first appears as a network routing issue before it is recognized as a security threat. What monitoring data can reveal, and its limitations.
Hardware Attestation with AMD SEV-SNP
A technical paper on verifying server integrity reports, ensuring they are current, and the operational considerations that emerge at scale.
Securing citizen services with FedRAMP High
A federal health agency moved a public benefits portal to ServLogi secure servers ahead of a firm end-of-support deadline. Because the platform had already been assessed, the agency's review focused on its own application rather than the hosting infrastructure, and authorization was granted in eleven months.
- Sector Federal health agency
- Workload Public benefits portal
- Baseline FedRAMP High, inherited from day one
- Time to ATO 11 months
Put our research into practice
Our publications explain our approach. The following resources will help you apply it.
Request a consultation
A working session with the engineers behind this research, applied to your own workload.
Build a configuration
Select processor, memory, storage, and location to see an indicative price range.
From principles to practice
Our publications explain why. Our documentation explains how, covering provisioning, control mapping, and migration.