<img height="1" width="1" style="display:none;" alt="" src="https://px.ads.linkedin.com/collect/?pid=4730426&amp;fmt=gif">

Security Certifications

Our security certifications validate the highest standards of security, compliance and trust, ensuring mission-critical workloads and operations is always protected.

CIS Benchmarks

The Center for Internet Security (CIS – https://www.cisecurity.org/benchmark/kubernetes/) is an accepted third-party and nonprofit organization whose mission is to “identify, develop, validate, promote, and sustain best practice solutions for cyber defense and build and lead communities to enable an environment of trust in cyberspace” (https://www.cisecurity.org/about-us/).

RGS takes these benchmarks and either builds the controls directly into RKE2 or allows for the configuration to be applied easily via automated scripts and input parameters. In addition to applying the benchmarks, we also provide tools that can periodically scan security configurations to enforce this compliance.

Enumerating the controls contained in these documents can also provide a large body of evidence needed for security approvals.

Consult the following resources for information about hardening your cluster according to the CIS benchmarks:

CMMC Level 2 Certified

Rancher Government Solutions (RGS) is among the estimated first 1% of U.S. government contractors to earn Cybersecurity Maturity Model Certification (CMMC) Level 2 through a certified third-party assessment. This certification confirms that RGS meets the Department of Defense’s security standards for protecting Controlled Unclassified Information (CUI) within contractor systems.

Achieving this certification took more than 150 documented policies, procedures, and controls, all developed and implemented by a small internal team. RGS completed the process with no open action items (POA&Ms), a result few organizations achieve. This places us in a select group of early certified contractors and positions us to assist federal partners seeking their own CMMC assessments.

DISA STIG Guides

Rancher Government Solutions works with DISA to maintain STIGs for Rancher, RKE2, and Harvester Government. The STIG hardening guides can be downloaded at the links below. Please check cyber.mil regularly for updates, as we are constantly updating according to best practices.

Rancher STIG

RKE2 STIG

Harvester Government STIG

NIST - FIPS 140-3 Certified

The Federal Information Processing Standard, FIPS, is a U.S. Government security standard used to approve cryptographic modules. Rancher Government Solutions delivers secure Kubernetes to federal programs with certified FIPS 140-3 cryptographic libraries for RKE2.