Anitian

aid: anitian
name: Anitian
description: Anitian, Inc. is a Portland, Oregon cloud security and compliance automation company that helps SaaS providers
  reach and maintain U.S. federal compliance. Its FedFlex platform automates the FedRAMP lifecycle — pre-engineered AWS and
  Azure landing zones, AI-driven evidence collection mapped to FedRAMP 20x Key Security Indicators (KSIs) and NIST 800-53
  controls, SSP generation, an auditor view for 3PAOs, and continuous monitoring — sold as FedFlex Starter (FedRAMP Low via
  the sponsorless 20x pilot) and FedFlex Comprehensive (Moderate/High). Anitian also sells SecureCloud compliance automation
  for ISO 27001, CMMC and commercial frameworks, plus managed SecOps. The company published a machine-readable FedRAMP 20x
  Phase One pilot package — a KSI-aligned assessment file, its data schema, and a signed 3PAO attestation from A-LIGN — publicly
  on GitHub. Anitian merged with Arkenstone Defense in April 2026 and now operates as "Anitian, powered by Arkenstone".
image: https://www.anitian.com/wp-content/uploads/2023/08/Anitian-blue-logo.svg
url: https://raw.githubusercontent.com/api-evangelist/anitian/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
specificationVersion: '0.20'
created: '2026-08-06'
modified: '2026-08-06'
tags:
- Company
- Security
- Compliance
- Cloud
- Governance
- FedRAMP
- Government
- Risk
- Audit
- Automation
apis:
- aid: anitian:securecloud-platform
  name: Anitian SecureCloud / FedFlex Platform API
  description: 'The HTTP API behind the Anitian SecureCloud and FedFlex console at securecloud.anitian.com. Anitian documents
    (in its FedRAMP 20x pilot README) that "an API is available for auditors to download evidence and integrate it into their
    own systems", but publishes no OpenAPI, reference, or developer portal. Every probed path under the console — including
    /openapi.json, /swagger.json, /api-docs and /docs — returns HTTP 307 to /auth/signin. Two endpoints answer anonymously
    and confirm the surface is live: /api/health returns {"status":"ok"} and /api/auth/providers enumerates the OAuth identity
    providers (Okta and Amazon Cognito). Access is customer- and auditor-only.'
  humanURL: https://securecloud.anitian.com/
  baseURL: https://securecloud.anitian.com/api
  tags:
  - Compliance
  - Security
  - Audit
  - Evidence
  properties:
  - type: Login
    url: https://securecloud.anitian.com/auth/signin
  x-evidence:
    fetched: '2026-08-06'
    probes:
    - url: https://securecloud.anitian.com/api/health
      status: 200
      note: anonymous; body {"status":"ok","version":""}
    - url: https://securecloud.anitian.com/api/auth/providers
      status: 200
      note: anonymous; NextAuth provider list — okta, cognito
    - url: https://securecloud.anitian.com/openapi.json
      status: 307
      note: redirects to /auth/signin
    - url: https://securecloud.anitian.com/api-docs
      status: 307
      note: redirects to /auth/signin
- aid: anitian:fedflex-copilot
  name: Anitian FedFlex Copilot WebSocket API
  description: 'An AWS API Gateway WebSocket API fronting the FedFlex agentic-AI copilot. Every plain HTTP request to copilot.anitian.com
    returns HTTP 426 Upgrade Required with a Sec-WebSocket-Version: 13 header; a WebSocket upgrade handshake is answered by
    the $connect authorizer with HTTP 401 {"message":"Unauthorized"}. No AsyncAPI, message catalog, or public documentation
    of the protocol is published.'
  humanURL: https://www.anitian.com/fedflex-platform-overview/
  baseURL: https://copilot.anitian.com
  tags:
  - AI
  - Agents
  - Compliance
  x-evidence:
    fetched: '2026-08-06'
    probes:
    - url: https://copilot.anitian.com/
      status: 426
      note: 'Sec-WebSocket-Version: 13; AWS API Gateway (execute-api us-west-2)'
    - url: https://copilot.anitian.com/
      status: 401
      note: WebSocket upgrade handshake rejected by $connect authorizer
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: DomainSecurity
  url: security/anitian-domain-security.yml
- type: Website
  url: https://www.anitian.com/
- type: About
  url: https://www.anitian.com/about/
- type: Blog
  url: https://www.anitian.com/all-posts/
- type: BlogRSS
  url: https://www.anitian.com/feed/
- type: Support
  url: https://www.anitian.com/contact/
- type: SignUp
  url: https://securecloud.anitian.com/auth/signin
- type: Pricing
  url: https://aws.amazon.com/marketplace/seller-profile?id=31e28297-b7d4-416f-b454-59f1d0aa8865
- type: TermsOfService
  url: https://www.anitian.com/marketplace-eula/
- type: PrivacyPolicy
  url: https://www.anitian.com/privacy-policy/
- type: GitHubOrganization
  url: https://github.com/anitianinc
- type: Partners
  url: https://www.anitian.com/partner-program/
- type: CaseStudies
  url: https://www.anitian.com/resources/case-studies/
- type: Conformance
  url: conformance/anitian-conformance.yml
- type: Compliance
  url: conformance/anitian-conformance.yml
- type: Authentication
  url: authentication/anitian-authentication.yml
- type: LLMsTxt
  url: llms/anitian-llms.txt
x-enrichment:
  date: '2026-08-06'
  status: minimal
  artifacts_added: 7
  pass: local-v1
x-coverage:
  state: gated
  reason: customer-only-docs
  detail: Anitian's own FedRAMP 20x README says an API exists for auditors to download evidence, but the SecureCloud/FedFlex
    console at securecloud.anitian.com answers HTTP 307 to /auth/signin for every path including /openapi.json and /api-docs
    — only /api/health and the NextAuth /api/auth/* endpoints respond anonymously — and the FedFlex copilot API at copilot.anitian.com
    is a WebSocket-only AWS API Gateway whose $connect route returns 401, so no contract is reachable without a tenant or
    auditor account.
  evidence:
  - url: https://securecloud.anitian.com/openapi.json
    status: 307
  - url: https://securecloud.anitian.com/api-docs
    status: 307
  - url: https://securecloud.anitian.com/api/health
    status: 200
  - url: https://copilot.anitian.com/
    status: 426
  - url: https://www.anitian.com/openapi.json
    status: 404
  checked: '2026-08-06'