Stell Engineering, Inc., a provider of requirements management software for aerospace and defense programs, announced on October 6, 2026, that its Stell Requirements Management System (SRMS) has achieved FedRAMP Moderate Equivalency. The independent assessment, conducted by FedRAMP-recognized Third Party Assessment Organization (3PAO) ControlCase, confirms that SRMS meets all security controls required by the FedRAMP Moderate baseline as outlined in the DoD CIO's December 2023 memo on cloud service providers hosting covered defense information. This achievement is significant because DFARS 252.204-7012 mandates that defense contractors storing covered defense information in the cloud use a provider that is FedRAMP Moderate authorized or equivalent. The 2023 memo raised the bar for equivalency, requiring providers to implement 100% of the Moderate baseline controls and have a 3PAO validate that implementation. By meeting these stringent requirements, Stell Engineering demonstrates its commitment to protecting sensitive mission data and enables its defense contractor customers to remain compliant with federal regulations.
Anne Wen, CEO of Stell Engineering, emphasized the importance of security in the company's mission: "Our mission is to give commercial, government, and defense programs the software tool to move hardware development faster than legacy tools allow. That starts with security. Our partners trust us to protect their mission data and meet federal requirements for safeguarding Controlled Unclassified Information." Sam Rahn, Security Program Manager at Stell Engineering, added, "Obtaining FedRAMP Moderate Equivalency is a major milestone for Stell's security roadmap. This achievement was made possible by a Stell leadership team that embeds security in every conversation, and a team of talented engineers that are always asking what we can be doing better." The announcement underscores Stell's broader security posture, which includes a FedRAMP Ready designation for SRMS on the FedRAMP Marketplace, a SOC 2 Type II report with no findings, and a CMMC Level 2 certification. Additionally, its SRMS Government Cloud holds an Impact Level 5 Authorization to Operate from U.S. Space Force Space Systems Command and has completed a FedRAMP High assessment, with its authorization package under review by the FedRAMP PMO.
For defense contractors, the implications are clear: partnering with Stell Engineering ensures compliance with DFARS and the DoD CIO's memo, reducing the risk of contract penalties and enhancing national security. The FedRAMP Moderate Equivalency also positions Stell as a trusted provider in a competitive market where security credentials are paramount. Contractors seeking more information can visit Stell's Trust Center or contact the company directly. As cyber threats continue to evolve, Stell's achievement sets a benchmark for security in requirements management software, enabling faster and more secure development of critical defense systems.
