Stell Engineering, Inc., a provider of requirements management software for aerospace and defense programs, announced on October 6, 2026, that its commercial cloud service offering, the Stell Requirements Management System (SRMS), has achieved FedRAMP Moderate Equivalency. The designation comes after an independent security assessment by ControlCase, a FedRAMP recognized Third Party Assessment Organization (3PAO), which attested that SRMS meets all security controls required by the FedRAMP Moderate baseline as outlined in the DoD CIO's December 2023 memo on cloud service providers that host covered defense information.
This achievement matters because DFARS 252.204-7012 requires defense contractors that store covered defense information in the cloud to use a provider that is FedRAMP Moderate authorized or equivalent. The 2023 memo raised the bar for equivalency, requiring providers to implement 100% of controls in the Moderate baseline and have a 3PAO validate the implementation. Stell's attainment of this milestone means defense contractors can now use SRMS for covered defense information without running afoul of these strict federal requirements, potentially simplifying compliance and accelerating adoption of modern requirements management tools.
"Our mission is to give commercial, government, and defense programs the software tool to move hardware development faster than legacy tools allow. That starts with security. Our partners trust us to protect their mission data and meet federal requirements for safeguarding Controlled Unclassified Information," said Anne Wen, CEO of Stell Engineering.
Sam Rahn, Security Program Manager at Stell Engineering, added, "Obtaining FedRAMP Moderate Equivalency is a major milestone for Stell's security roadmap. This achievement was made possible by a Stell leadership team that embeds security in every conversation, and a team of talented engineers that are always asking what we can be doing better."
Beyond this announcement, Stell's security posture includes several other credentials. The Stell Requirements Management System holds a FedRAMP Ready designation on the FedRAMP Marketplace and maintains a current SOC 2 Type II report with no findings. Its government cloud offering, SRMS Government Cloud, holds an Impact Level 5 Authorization to Operate from U.S. Space Force Space Systems Command. That offering has also completed its FedRAMP High assessment by an independent 3PAO, and its authorization package is under review by the FedRAMP PMO. Additionally, Stell holds a CMMC Level 2 certification from an authorized C3PAO.
For defense contractors and aerospace programs, Stell's FedRAMP Moderate Equivalency provides a validated secure platform for managing complex requirements. As the defense industrial base increasingly relies on cloud-based collaboration, certifications like this one can influence procurement decisions and help contractors demonstrate compliance with federal cybersecurity mandates. The move could also pressure competitors to accelerate their own security certifications to remain viable in the defense market.
Contractors can obtain more information on Stell Engineering's security program through their Trust Center.
