Case Study: Zscaler achieves FedRAMP ATO for Kubernetes with Buoyant Enterprise for Linkerd

Zscaler fast-tracks FedRAMP ATO on Kubernetes with Buoyant

Zscaler, a cybersecurity company, required FedRAMP Authorization to Operate (ATO) for its Cloud Browser Isolation solution to sell to U.S. government agencies. The challenge involved navigating the complex FedRAMP Rev. 5 compliance process within a large-scale, dynamic Kubernetes environment, which included ensuring all encryption used FIPS-validated modules. To meet this need, Zscaler partnered with the vendor Buoyant and utilized Buoyant Enterprise for Linkerd.

Buoyant's solution provided commercial support for FIPS-validated modules in Linkerd, which allowed Zscaler to transparently encrypt all application data in transit without altering their application. This was a key factor in Zscaler successfully achieving FedRAMP ATO, making them one of the first Kubernetes-based solutions certified under the newer Rev. 5 requirements. This milestone validated their security posture and opened up significant new business opportunities with U.S. government clients.

Zscaler