NIST CMVP FIPS 140 Validated Cryptographic Modules (FIPS 140-1 / 140-2 / 140-3)

Where this market publishes its structure

• NIST CMVP validated modules, active (csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search/all) machine-readable, 200 HTML table; 740 active certificates (FIPS 140-3), vendor name, module, type, date
• NIST CMVP validated modules, historical (validated-modules/search?SearchMode=Advanced&Standard=140-x&CertificateStatus=Historical) machine-readable, 4,810 historical certificates; edition/type pairs held only here written lapsed: true; Revoked list (25) read, never certified
• NIST CMVP certificate detail pages (certificate/) machine-readable, one per vendor spelling (1,019); Vendor panel gives the website (978) linked by domain + name check; 139 providers linked in market
• NIST CMVP Modules In Process list (modules-in-process/modules-in-process-list) machine-readable, 184 modules, 85 vendors; vendor name only (contacts behind a JS toggle, not read); listing only (in_process); 2 MIP-only providers linked

Own = declares at least one integration itself; covered = visible only because an aggregator, standards body, regulator or partner contract names it; distribution-only = listed only on cloud marketplaces it sells through, a channel reported beside, never counted as its own declared integrations; undeclared = nothing we can read, so no number; declares_compatibility = providers with a `compatible` shape vote, report only (kin, 2026-10-13): never counted as own, never in depth or position.

Taxonomy how this market maps onto apis.io

Derived 2026-10-23 from the 141 providers in this market we could resolve in the catalog. The percentage is the share of those providers carrying each one; it describes the market, not the tag or industry. Tag groups have no page of their own yet, so they are listed unlinked.

share of resolved cohort carrying it; tags >=0.20 & >=3 members (max 12, junk dropped), tag_groups >=0.20 (cooccurrence, non-cross-cutting; max 8), industries >=0.20 (max 6), areas >=0.10 (max 6; areas are keyword-matched and sparse), capabilities L1 >=0.20 (max 8); derive-market-taxonomy.py

Leaders by position (provisional)

Provisional: grouped by position, depth compared within a position only. Distribution (cloud marketplaces) and iPaaS bridges are counted beside position, never inside it. Unknown-builder listings are left out of position shares and counted here.

undeclared 141 · declares nothing we can read: no number