# Paramify

> Paramify is a compliance automation platform that generates and maintains security documentation for FedRAMP, CMMC, DoD ATO, FISMA, GovRAMP and commercial frameworks. It builds System Security Plans (SSPs), manages Plans of Action and Milestones (POA&Ms) and produces machine-readable OSCAL packages from a single source of truth.

Paramify serves SaaS companies pursuing federal authorization, defense contractors pursuing CMMC certification, enterprise security teams, and the advisors and assessors who support them. Its platform maps people, processes, technology and inventory to security capabilities, so a change in one place updates controls, documentation and remediation plans together. Paramify supports both FedRAMP 20x and FedRAMP Legacy Rev 5, including Key Security Indicators (KSIs) and the CR26 deliverables.

## Platform

- [SSP Management](https://www.paramify.com/products/ssp): Build complete System Security Plans and export to Word, PDF, eMASS or OSCAL
- [POA&M Management](https://www.paramify.com/products/poam): Import scan results, track remediation and manage continuous monitoring (ConMon)
- [Automated Evidence Collection and Validation](https://www.paramify.com/products/automated-evidence-collection-and-validation): Continuously collect KSI evidence from connected tools and validate it against requirements
- [VDR and VER Compliance](https://www.paramify.com/products/vdr-ver-compliance): Automate FedRAMP Vulnerability Detection and Response reporting, with machine-readable JSON output
- [Trust Center](https://www.paramify.com/products/trust-center): Branded portal for sharing compliance status, artifacts and subprocessors with customers

## Frameworks

- [FedRAMP 20x](https://www.paramify.com/fedramp-20x): Automate KSI implementation and machine-readable certification packages for FedRAMP 20x
- [FedRAMP Legacy Rev 5](https://www.paramify.com/fedramp-rev5): Generate SSPs and manage POA&Ms for Rev 5 Low, Moderate and High authorizations
- [CMMC](https://www.paramify.com/framework/cmmc): Prepare for CMMC Levels 1 to 3 and NIST SP 800-171, including SPRS scoring
- [DoD ATO](https://www.paramify.com/dod-ato): Produce DoD ATO documentation for Impact Levels 2 to 6
- [FISMA](https://www.paramify.com/fisma): Produce FISMA SSPs and POA&Ms at Low, Moderate and High impact levels
- [GovRAMP](https://www.paramify.com/frameworks/stateramp): Automate GovRAMP (formerly StateRAMP) documentation and POA&M management
- [TX-RAMP](https://www.paramify.com/frameworks/tx-ramp): Automate TX-RAMP documentation for Texas state agencies' cloud vendors
- [FedRAMP CR26](https://www.paramify.com/key-to-cr26): How Paramify produces the new deliverables required by FedRAMP CR26

## Company

- [Pricing](https://www.paramify.com/pricing): Plans for CMMC, FedRAMP, FISMA, DoD ATO, GovRAMP and commercial frameworks
- [Customer stories](https://www.paramify.com/testimonial): What security leaders and advisors say about using Paramify
- [Club 7739 partner program](https://www.paramify.com/partners/club-7739-overview): Paramify's program for advisors, assessors, managed service providers and resellers
- [Partner directory](https://www.paramify.com/providers): Advisors and assessors who work with Paramify customers
- [FAQ](https://www.paramify.com/faq): Common questions about Paramify's SSP and POA&M automation
- [Request a demo](https://www.paramify.com/request-demo): Book a walkthrough of the platform
- [Free gap assessment](https://www.paramify.com/request-free-gap-assessment): Request a gap assessment with cost and time estimates to reach compliance

## Optional

- [SOC 2](https://www.paramify.com/frameworks/soc-2): SOC 2 documentation support
- [ISO 27001](https://www.paramify.com/frameworks/iso): ISO 27001 documentation support
- [HIPAA](https://www.paramify.com/frameworks/hipaa): HIPAA documentation support
- [NIST CSF](https://www.paramify.com/frameworks/nist-csf): NIST Cybersecurity Framework documentation support
- [PCI DSS](https://www.paramify.com/frameworks/pci-dss): PCI DSS documentation support
- [SSP Resource Center](https://www.paramify.com/ssp-resource-center): Guides, FAQs and videos about System Security Plans
- [POA&M Resource Center](https://www.paramify.com/poam-resource-center): Guides, FAQs and tutorials about POA&Ms
- [Blog](https://www.paramify.com/blog): Articles on FedRAMP, CMMC and security compliance
- [Careers](https://www.paramify.com/careers): Open roles at Paramify in Lehi, Utah