Wallarm, Inc.: Wallarm Federal Cloud

The Wallarm Federal Cloud (WFC) is a Software as a Service (SaaS) application programming interface (API) security platform that provides real-time traffic inspection and Web Application Firewall (WAF) capabilities for federal agencies. It is deployed in a single-tenant, Government-Only Cloud architecture on Google Cloud Platform (GCP).

Functionality and Use Case: The system is designed to analyze incoming network traffic, mitigate malicious requests, and upload security metrics. The Wallarm Federal Cloud component processes this filtering node data, compiles custom security rules, builds API structure models, and provides the Wallarm Console user interface (UI) for configuration and security event investigation.1

Type of Federal Data: The system is categorized at the Moderate security impact level. The federal data and information stored, processed, or transmitted includes: - Full HTTP/HTTPS request and response bodies and headers for WAF analysis, which may contain customer API data. - Security events, WAF rules, user profile and session data, and audit logs. The system does not process, store, or transmit information requiring special protective measures beyond the standard FedRAMP Moderate baseline, such as Sensitive Compartmented Information (SCI).