Foxx Cyber / Security software
Bedrock RMF
An open-source alternative to eMASS and Xacta for NIST SP 800-53 packages.
Overview
Bedrock RMF manages NIST SP 800-53 Rev. 5 compliance across multiple ATO packages. It is the tool we run for our own authorizations, released under the GNU AGPL v3 so you can read every line before you run it.
Who it is for
Teams that maintain ATO packages and want to host the tool themselves.
What it does
- ATO packagesSeveral systems, each with its own NIST SP 800-53 Rev. 5 package.
- Controls and POA&MsImplementation status and weaknesses tracked from finding to closure.
- Self-hostedOne compose file on your own infrastructure; the source is public.
More security software
| Sheet | Title | Scope | Status |
|---|---|---|---|
| FC-201 | vCISO | A personal AI security advisor for small businesses. | |
| FC-202 | Bedrock GRC | The governance, risk and compliance console behind our fractional-CISO practice. | |
| FC-203 | Bedrock CMMC | CMMC compliance software for defense contractors and the firms that serve them. | |
| FC-204 | Bedrock Flowdown | CMMC flow-down tracking for prime contractors. | |
| FC-205 | Bedrock C3PAO | The containerized assessment client for CMMC assessors. | |
| FC-207 | Bedrock AFT | Assured File Transfer: cross-domain transfer requests without the paper form. | Open source |
Talk to us about Bedrock RMF.
A person reads every message and answers, usually within one business day. No pricing page and no sales script: a conversation about your work.
FOXX CYBER LLCCOLORADO SPRINGS, CO
Drawn byJ. P. Price, CISSP, CISM
OwnershipVeteran-owned
FC-206
Contact sales