# Foundation Security — Full Reference ## Entity Name: Foundation Security Canonical URL: https://foundationvm.com/ Support: support@foundationvm.com Primary market: Federal, defense, and government cloud teams Primary service: Hardened virtual machine infrastructure Delivery: AWS Marketplace and Microsoft Azure Marketplace AWS Marketplace: https://aws.amazon.com/marketplace/seller-profile?id=03831327-d14b-4da8-a96d-96803a299077 Azure Marketplace: https://marketplace.microsoft.com/en-us/product/aldercapitalllc1682703876147.foundation-rockylinux9-acscism ## Direct answer Foundation Security provides hardened virtual machine infrastructure for federal, defense, and government cloud environments. Its products give teams an operating-system starting point aligned to recognized security guidance before applications and mission workloads are installed. ## Catalog The public catalog contains 64 product-family pages and 101 architecture or service pages derived from 75 AWS Marketplace listings and 36 Microsoft Azure Marketplace listings. Availability varies by security profile, operating system, version, architecture, cloud, and region. Machine-readable catalog: https://foundationvm.com/products/catalog.json Searchable catalog: https://foundationvm.com/products ## Security profiles represented in the public catalog - DISA STIG: Marketplace listings for defense-aligned secure configuration baselines. - NIST: Marketplace listings positioned around NIST-aligned operating-system controls. - CJIS: Azure listings positioned for law-enforcement and criminal-justice security requirements. - NIAP OSPP: Azure listings for high-assurance operating-system protection profile requirements. - Red Hat CCP: Azure listings aligned to the Red Hat Common Criteria Profile. - ACSC: Azure listings positioned for Australian Cyber Security Centre requirements. - ACSC Essential Eight: Azure listings aligned to the ACSC Essential Eight mitigation strategies. - ACSC ISM: Azure listings positioned for Australian government Information Security Manual requirements. - CCN Basic: Basic-level CCN operating-system listings for Spanish public-sector requirements. - CCN Intermediate: Intermediate-level CCN operating-system listings. - CCN Advanced: Advanced-level CCN operating-system listings. - ANSSI Minimal: Azure listings aligned to the ANSSI minimal hardening level. - ANSSI Intermediary: Azure listings aligned to the ANSSI intermediary hardening level. - ANSSI Enhanced: Azure listings aligned to the ANSSI enhanced hardening level. - ANSSI High: Azure listings aligned to the ANSSI high hardening level. - CIS Level 1: Azure listings with a Level 1 hardening profile for general-purpose workloads. - CIS Level 2: Azure listings with a more restrictive Level 2 hardening profile. - Foundation Level 1: Foundation's general secure baseline for regulated and security-conscious workloads. - Foundation Level 2: Foundation's more restrictive hardening profile for higher-security workloads. - HIPAA: Healthcare-focused listings currently published through Foundation's AWS and Azure catalogs. - PCI DSS: Azure listings positioned for environments handling payment-card data. - Standard System Security: Azure listings aligned to general system-security best practices. - Custom AMI services: A professional-services listing for customer-specific compliant AMI work. ## Framework focus areas - DISA STIG - NIST SP 800-53 Rev. 5 - NIST SP 800-171 Rev. 3 - CMMC 2.0 - FedRAMP Rev. 5 - FIPS 140-3 readiness - FBI CJIS 6.1 - CISA Cybersecurity Performance Goals - NIST Cybersecurity Framework 2.0 - NIAP Operating System Protection Profile Framework focus describes the requirements and guidance Foundation considers in product positioning. It does not mean that every image is certified, validated, or fully aligned to every framework. ## Responsibility boundary Foundation products can help address operating-system configuration requirements. A hardened image does not independently make a complete system compliant, certified, accredited, or authorized. Customers remain responsible for architecture, identity, networking, data protection, application security, monitoring, procedures, evidence, and authorization decisions. Product behavior and application compatibility should be evaluated outside production before deployment. ## Main pages - Capabilities: https://foundationvm.com/capabilities - Products: https://foundationvm.com/products - Mission environments: https://foundationvm.com/industries - Support: https://foundationvm.com/support - Company: https://foundationvm.com/company - Contact: https://foundationvm.com/contact - News: https://foundationvm.com/news - Privacy: https://foundationvm.com/privacy - Terms: https://foundationvm.com/terms ## Product routes - https://foundationvm.com/products/stig/centos/9 - https://foundationvm.com/products/stig/centos/10 - https://foundationvm.com/products/stig/oracle-linux/8 - https://foundationvm.com/products/stig/oracle-linux/9 - https://foundationvm.com/products/stig/oracle-linux/10 - https://foundationvm.com/products/stig/rhel/7 - https://foundationvm.com/products/stig/rhel/9 - https://foundationvm.com/products/stig/rhel/10 - https://foundationvm.com/products/stig/rocky-linux/8 - https://foundationvm.com/products/stig/rocky-linux/9 - https://foundationvm.com/products/stig/rocky-linux/10 - https://foundationvm.com/products/nist/amazon-linux/2 - https://foundationvm.com/products/nist/oracle-linux/8 - https://foundationvm.com/products/nist/rhel/7 - https://foundationvm.com/products/nist/rhel/8 - https://foundationvm.com/products/nist/rhel/9 - https://foundationvm.com/products/nist/rocky-linux/8 - https://foundationvm.com/products/nist/rocky-linux/9 - https://foundationvm.com/products/cjis/rhel/7 - https://foundationvm.com/products/cjis/rhel/8 - https://foundationvm.com/products/ospp/rhel/7 - https://foundationvm.com/products/ospp/rhel/8 - https://foundationvm.com/products/ospp/rhel/9 - https://foundationvm.com/products/ospp/rocky-linux/9 - https://foundationvm.com/products/rh-ccp/rhel/8 - https://foundationvm.com/products/acsc/rhel/7 - https://foundationvm.com/products/acsc-essential-eight/rhel/9 - https://foundationvm.com/products/acsc-essential-eight/rocky-linux/9 - https://foundationvm.com/products/acsc-ism/rhel/9 - https://foundationvm.com/products/acsc-ism/rocky-linux/9 - https://foundationvm.com/products/ccn-basic/rhel/9 - https://foundationvm.com/products/ccn-intermediate/rhel/9 - https://foundationvm.com/products/ccn-advanced/rhel/9 - https://foundationvm.com/products/anssi-minimal/rocky-linux/9 - https://foundationvm.com/products/anssi-intermediary/rocky-linux/9 - https://foundationvm.com/products/anssi-enhanced/rhel/9 - https://foundationvm.com/products/anssi-high/rocky-linux/9 - https://foundationvm.com/products/cis-level-1/ubuntu/20.04 - https://foundationvm.com/products/cis-level-2/rocky-linux/8 - https://foundationvm.com/products/cis-level-2/ubuntu/20.04 - https://foundationvm.com/products/foundation-level-1/centos/9 - https://foundationvm.com/products/foundation-level-1/centos/10 - https://foundationvm.com/products/foundation-level-1/rhel/9 - https://foundationvm.com/products/foundation-level-1/rhel/10 - https://foundationvm.com/products/foundation-level-2/centos/9 - https://foundationvm.com/products/foundation-level-2/centos/10 - https://foundationvm.com/products/foundation-level-2/rhel/9 - https://foundationvm.com/products/foundation-level-2/rhel/10 - https://foundationvm.com/products/hipaa/amazon-linux/2 - https://foundationvm.com/products/hipaa/centos/9 - https://foundationvm.com/products/hipaa/centos/10 - https://foundationvm.com/products/hipaa/oracle-linux/8 - https://foundationvm.com/products/hipaa/oracle-linux/9 - https://foundationvm.com/products/hipaa/oracle-linux/10 - https://foundationvm.com/products/hipaa/rhel/7 - https://foundationvm.com/products/hipaa/rhel/8 - https://foundationvm.com/products/hipaa/rhel/9 - https://foundationvm.com/products/hipaa/rhel/10 - https://foundationvm.com/products/hipaa/rocky-linux/8 - https://foundationvm.com/products/hipaa/rocky-linux/9 - https://foundationvm.com/products/hipaa/rocky-linux/10 - https://foundationvm.com/products/pci/rhel/7 - https://foundationvm.com/products/pci/rocky-linux/9 - https://foundationvm.com/products/standard-security/rhel/8 - https://foundationvm.com/products/stig/centos/9-x86 - https://foundationvm.com/products/stig/centos/9-arm - https://foundationvm.com/products/stig/centos/10-x86 - https://foundationvm.com/products/stig/centos/10-arm - https://foundationvm.com/products/stig/oracle-linux/8-x86 - https://foundationvm.com/products/stig/oracle-linux/8-arm - https://foundationvm.com/products/stig/oracle-linux/9-x86 - https://foundationvm.com/products/stig/oracle-linux/9-arm - https://foundationvm.com/products/stig/oracle-linux/10-x86 - https://foundationvm.com/products/stig/oracle-linux/10-arm - https://foundationvm.com/products/stig/rhel/7-x86 - https://foundationvm.com/products/stig/rhel/9-x86 - https://foundationvm.com/products/stig/rhel/9-arm - https://foundationvm.com/products/stig/rhel/10-x86 - https://foundationvm.com/products/stig/rhel/10-arm - https://foundationvm.com/products/stig/rocky-linux/8-x86 - https://foundationvm.com/products/stig/rocky-linux/8-arm - https://foundationvm.com/products/stig/rocky-linux/9-x86 - https://foundationvm.com/products/stig/rocky-linux/9-arm - https://foundationvm.com/products/stig/rocky-linux/10-x86 - https://foundationvm.com/products/stig/rocky-linux/10-arm - https://foundationvm.com/products/nist/amazon-linux/2-x86 - https://foundationvm.com/products/nist/amazon-linux/2-arm - https://foundationvm.com/products/nist/oracle-linux/8-x86 - https://foundationvm.com/products/nist/oracle-linux/8-arm - https://foundationvm.com/products/nist/rhel/7-x86 - https://foundationvm.com/products/nist/rhel/8-x86 - https://foundationvm.com/products/nist/rhel/9-x86 - https://foundationvm.com/products/nist/rhel/9-arm - https://foundationvm.com/products/nist/rocky-linux/8-x86 - https://foundationvm.com/products/nist/rocky-linux/8-arm - https://foundationvm.com/products/nist/rocky-linux/9-x86 - https://foundationvm.com/products/nist/rocky-linux/9-arm - https://foundationvm.com/products/cjis/rhel/7-x86 - https://foundationvm.com/products/cjis/rhel/8-x86 - https://foundationvm.com/products/ospp/rhel/7-x86 - https://foundationvm.com/products/ospp/rhel/8-x86 - https://foundationvm.com/products/ospp/rhel/9-x86 - https://foundationvm.com/products/ospp/rocky-linux/9-x86 - https://foundationvm.com/products/rh-ccp/rhel/8-x86 - https://foundationvm.com/products/acsc/rhel/7-x86 - https://foundationvm.com/products/acsc-essential-eight/rhel/9-x86 - https://foundationvm.com/products/acsc-essential-eight/rocky-linux/9-x86 - https://foundationvm.com/products/acsc-ism/rhel/9-x86 - https://foundationvm.com/products/acsc-ism/rocky-linux/9-x86 - https://foundationvm.com/products/ccn-basic/rhel/9-x86 - https://foundationvm.com/products/ccn-intermediate/rhel/9-x86 - https://foundationvm.com/products/ccn-intermediate/rhel/9-arm - https://foundationvm.com/products/ccn-advanced/rhel/9-x86 - https://foundationvm.com/products/ccn-advanced/rhel/9-arm - https://foundationvm.com/products/anssi-minimal/rocky-linux/9-x86 - https://foundationvm.com/products/anssi-intermediary/rocky-linux/9-x86 - https://foundationvm.com/products/anssi-enhanced/rhel/9-x86 - https://foundationvm.com/products/anssi-high/rocky-linux/9-x86 - https://foundationvm.com/products/cis-level-1/ubuntu/20.04-x86 - https://foundationvm.com/products/cis-level-2/rocky-linux/8-x86 - https://foundationvm.com/products/cis-level-2/ubuntu/20.04-x86 - https://foundationvm.com/products/foundation-level-1/centos/9-x86 - https://foundationvm.com/products/foundation-level-1/centos/9-arm - https://foundationvm.com/products/foundation-level-1/centos/10-x86 - https://foundationvm.com/products/foundation-level-1/centos/10-arm - https://foundationvm.com/products/foundation-level-1/rhel/9-x86 - https://foundationvm.com/products/foundation-level-1/rhel/9-arm - https://foundationvm.com/products/foundation-level-1/rhel/10-x86 - https://foundationvm.com/products/foundation-level-1/rhel/10-arm - https://foundationvm.com/products/foundation-level-2/centos/9-x86 - https://foundationvm.com/products/foundation-level-2/centos/9-arm - https://foundationvm.com/products/foundation-level-2/centos/10-x86 - https://foundationvm.com/products/foundation-level-2/centos/10-arm - https://foundationvm.com/products/foundation-level-2/rhel/9-x86 - https://foundationvm.com/products/foundation-level-2/rhel/9-arm - https://foundationvm.com/products/foundation-level-2/rhel/10-x86 - https://foundationvm.com/products/foundation-level-2/rhel/10-arm - https://foundationvm.com/products/hipaa/amazon-linux/2-x86 - https://foundationvm.com/products/hipaa/amazon-linux/2-arm - https://foundationvm.com/products/hipaa/centos/9-x86 - https://foundationvm.com/products/hipaa/centos/9-arm - https://foundationvm.com/products/hipaa/centos/10-x86 - https://foundationvm.com/products/hipaa/centos/10-arm - https://foundationvm.com/products/hipaa/oracle-linux/8-x86 - https://foundationvm.com/products/hipaa/oracle-linux/8-arm - https://foundationvm.com/products/hipaa/oracle-linux/9-x86 - https://foundationvm.com/products/hipaa/oracle-linux/9-arm - https://foundationvm.com/products/hipaa/oracle-linux/10-x86 - https://foundationvm.com/products/hipaa/oracle-linux/10-arm - https://foundationvm.com/products/hipaa/rhel/7-x86 - https://foundationvm.com/products/hipaa/rhel/8-x86 - https://foundationvm.com/products/hipaa/rhel/9-x86 - https://foundationvm.com/products/hipaa/rhel/9-arm - https://foundationvm.com/products/hipaa/rhel/10-x86 - https://foundationvm.com/products/hipaa/rhel/10-arm - https://foundationvm.com/products/hipaa/rocky-linux/8-x86 - https://foundationvm.com/products/hipaa/rocky-linux/8-arm - https://foundationvm.com/products/hipaa/rocky-linux/9-x86 - https://foundationvm.com/products/hipaa/rocky-linux/9-arm - https://foundationvm.com/products/hipaa/rocky-linux/10-x86 - https://foundationvm.com/products/hipaa/rocky-linux/10-arm - https://foundationvm.com/products/pci/rhel/7-x86 - https://foundationvm.com/products/pci/rocky-linux/9-x86 - https://foundationvm.com/products/standard-security/rhel/8-x86 - https://foundationvm.com/products/services/custom-compliant-ami