Stell Engineering, Inc., a provider of requirements management software for aerospace and defense programs, announced on October 6, 2026, that its commercial cloud service offering, the Stell Requirements Management System (SRMS), has achieved FedRAMP Moderate Equivalency. This designation signifies that SRMS meets all security controls required by the FedRAMP Moderate baseline, as validated by an independent assessment conducted by ControlCase, a FedRAMP recognized Third Party Assessment Organization (3PAO). The assessment specifically attests that SRMS complies with the requirements outlined in the DoD CIO's December 2023 memo on cloud service providers that host covered defense information.
The achievement matters because defense contractors handling Controlled Unclassified Information (CUI) in the cloud must comply with DFARS 252.204-7012, which mandates the use of a FedRAMP Moderate authorized or equivalent cloud provider. The 2023 memo raised the bar for equivalency, requiring that a provider implement 100% of the controls in the Moderate baseline and have a 3PAO validate that implementation. By meeting this standard, Stell Engineering offers its customers a compliant path to store and manage sensitive defense data, reducing the risk of contractual non-compliance and potential security breaches.
Anne Wen, CEO of Stell Engineering, emphasized the importance of security in the company's mission: "Our mission is to give commercial, government, and defense programs the software tool to move hardware development faster than legacy tools allow. That starts with security. Our partners trust us to protect their mission data and meet federal requirements for safeguarding Controlled Unclassified Information." This sentiment underscores how the FedRAMP Moderate Equivalency not only validates Stell's security posture but also reinforces its commitment to supporting national defense efforts.
Sam Rahn, Security Program Manager at Stell Engineering, added, "Obtaining FedRAMP Moderate Equivalency is a major milestone for Stell's security roadmap. This achievement was made possible by a Stell leadership team that embeds security in every conversation, and a team of talented engineers that are always asking what we can be doing better." The milestone reflects a culture of continuous improvement and security-first thinking, which is critical for maintaining trust with defense and government clients.
The Stell Requirements Management System also holds a FedRAMP Ready designation on the FedRAMP Marketplace and maintains a current SOC 2 Type II report with no findings. Its government cloud offering, SRMS Government Cloud, holds an Impact Level 5 Authorization to Operate from U.S. Space Force Space Systems Command and has completed its FedRAMP High assessment by an independent 3PAO, with its authorization package under review by the FedRAMP PMO. Additionally, Stell holds a CMMC Level 2 certification from an authorized C3PAO. These credentials collectively position Stell as a trusted partner for defense contractors seeking secure, compliant requirements management solutions.
Contractors can obtain more information on Stell Engineering's security program through their Trust Center. The implications of this announcement extend beyond Stell: it signals to the defense industrial base that secure, FedRAMP-equivalent cloud tools are available for requirements management, potentially accelerating the adoption of modern, AI-native platforms that can replace legacy systems. As defense programs increasingly rely on cloud-based collaboration, Stell's achievement may encourage other software vendors to pursue similar certifications, raising the overall security standard across the sector.
