Xacta (SaaS Platform)

Xacta® is a cyber GRC automation platform that brings structure and consistency to how risk and compliance are handled across the frameworks you follow and the environments you run. Xacta.ai builds on the platform with advanced AI capabilities that accelerate decision-making, reduce manual effort, and increase operational efficiency. Designed to help organizations manage cyber risk and compliance more efficiently, Xacta supports assessment and authorization, remediation, and continuous monitoring. The FedRAMP-authorized SaaS instance of Xacta includes Xacta 360™ and, optionally, Xacta.io™ and Xacta.ai™. Xacta 360 streamlines security, risk, and compliance programs using a project-based workflow. It features:

1. Out-of-the-box cyber risk management templates, customizable in a no-code/low-code UI
2. Automated workflows with prerequisites, role-based approvals, and intelligent capabilities.
3. The ability to produce documentation in human-readable and machine-readable formats

Users can conduct asset inventory and risk assessments, generate required compliance documentation and audit artifacts in real time, and automate compliance for over 100 regulations and policies. Xacta.io correlates results from multiple security products across your organization into a single view, and maps them to the relevant controls for security and risk management. IT risk and security compliance teams can then use these results to create reports for analysis and to understand trending security issues in their environment.

Included with Xacta.io is Xacta MetriX™, which offers additional powerful, modular reporting capabilities that allow compliance teams to easily build and edit custom widgets and dashboards. Xacta.ai is the artificial intelligence capability at the core of the Xacta cyber GRC platform, empowering IT risk and security compliance teams to work more efficiently and make informed decisions. It can be customized by integrating your organizations data to enable faster, more informed decisions and accelerate your GRC initiatives. Use Xacta.ai to draft control implementation statements and automatically check them for accuracy, generate targeted test procedures aligned to your environment, run queries on project artifacts, and more. Together, Xacta 360, Xacta.io, and Xacta.ai form a complementary suite of solutions that supports compliance and authorization for a variety of frameworks including, but not limited to, FISMA, NIST RMF, CNSSI 1253, NIST 800-53, NIST CSF, FedRAMP, COBIT 5, PCI-DSS, and ISO. The platform draws on a knowledgebase of over 5,000 security requirements and associated test procedures, cross-referenced across more than 100 security policies and standards, and produces artifacts in both human-readable office documents and machine-readable digital formats such as the Open Security Controls Assessment Language (OSCAL). In AWS environments, Xacta 360 can inherit common security controls from the underlying platform to reduce duplication of effort and accelerate authorization.

The SaaS version of Xacta is authorized at FedRAMP High, GovRAMP High, CMMC Level 2, CUI and ISO 27001. Deployment options include Public SaaS up to FedRAMP Class D (High) and user provided infrastructure