aid: anitian name: Anitian description: 'Anitian, Inc. is a Portland, Oregon cloud security and compliance automation company that helps SaaS providers reach and maintain U.S. federal compliance. Its FedFlex platform automates the FedRAMP lifecycle — pre-engineered AWS and Azure landing zones, AI-driven evidence collection mapped to FedRAMP 20x Key Security Indicators (KSIs) and NIST 800-53 controls, SSP generation, an auditor view for 3PAOs, and continuous monitoring — sold as FedFlex Starter (FedRAMP Low via the sponsorless 20x pilot) and FedFlex Comprehensive (Moderate/High). Anitian also sells SecureCloud compliance automation for ISO 27001, CMMC and commercial frameworks, plus managed SecOps. The company published a machine-readable FedRAMP 20x Phase One pilot package — a KSI-aligned assessment file, its data schema, and a signed 3PAO attestation from A-LIGN — publicly on GitHub. Anitian merged with Arkenstone Defense in April 2026 and now operates as "Anitian, powered by Arkenstone".' image: https://www.anitian.com/wp-content/uploads/2023/08/Anitian-blue-logo.svg url: https://raw.githubusercontent.com/api-evangelist/anitian/refs/heads/main/apis.yml x-type: company x-source: harvest:secondary-market specificationVersion: '0.23' created: '2026-08-06' modified: '2026-08-06' tags: - Company - Security - Compliance - Cloud - Governance - FedRAMP - Government - Risk - Audit - Automation apis: - aid: anitian:securecloud-platform name: Anitian SecureCloud / FedFlex Platform API description: 'The HTTP API behind the Anitian SecureCloud and FedFlex console at securecloud.anitian.com. Anitian documents (in its FedRAMP 20x pilot README) that "an API is available for auditors to download evidence and integrate it into their own systems", but publishes no OpenAPI, reference, or developer portal. Every probed path under the console — including /openapi.json, /swagger.json, /api-docs and /docs — returns HTTP 307 to /auth/signin. Two endpoints answer anonymously and confirm the surface is live: /api/health returns {"status":"ok"} and /api/auth/providers enumerates the OAuth identity providers (Okta and Amazon Cognito). Access is customer- and auditor-only.' humanURL: https://securecloud.anitian.com/ baseURL: https://securecloud.anitian.com/api tags: - Compliance - Security - Audit - Evidence properties: - type: Login url: https://securecloud.anitian.com/auth/signin x-evidence: fetched: '2026-08-06' probes: - url: https://securecloud.anitian.com/api/health status: 200 note: 'anonymous; body {"status":"ok","version":""}' - url: https://securecloud.anitian.com/api/auth/providers status: 200 note: anonymous; NextAuth provider list — okta, cognito - url: https://securecloud.anitian.com/openapi.json status: 307 note: redirects to /auth/signin - url: https://securecloud.anitian.com/api-docs status: 307 note: redirects to /auth/signin - aid: anitian:fedflex-copilot name: Anitian FedFlex Copilot WebSocket API description: 'An AWS API Gateway WebSocket API fronting the FedFlex agentic-AI copilot. Every plain HTTP request to copilot.anitian.com returns HTTP 426 Upgrade Required with a Sec-WebSocket-Version: 13 header; a WebSocket upgrade handshake is answered by the $connect authorizer with HTTP 401 {"message":"Unauthorized"}. No AsyncAPI, message catalog, or public documentation of the protocol is published.' humanURL: https://www.anitian.com/fedflex-platform-overview/ baseURL: https://copilot.anitian.com tags: - AI - Agents - Compliance x-evidence: fetched: '2026-08-06' probes: - url: https://copilot.anitian.com/ status: 426 note: 'Sec-WebSocket-Version: 13; AWS API Gateway (execute-api us-west-2)' - url: https://copilot.anitian.com/ status: 401 note: WebSocket upgrade handshake rejected by $connect authorizer maintainers: - FN: Kin Lane email: kin@apievangelist.com - FN: APIs.json email: info@apis.io common: - type: DomainSecurity url: security/anitian-domain-security.yml - type: Website url: https://www.anitian.com/ - type: About url: https://www.anitian.com/about/ - type: Blog url: https://www.anitian.com/all-posts/ - type: BlogRSS url: https://www.anitian.com/feed/ - type: Support url: https://www.anitian.com/contact/ - type: SignUp url: https://securecloud.anitian.com/auth/signin - type: Pricing url: https://aws.amazon.com/marketplace/seller-profile?id=31e28297-b7d4-416f-b454-59f1d0aa8865 - type: TermsOfService url: https://www.anitian.com/marketplace-eula/ - type: PrivacyPolicy url: https://www.anitian.com/privacy-policy/ - type: GitHubOrganization url: https://github.com/anitianinc - type: Partners url: https://www.anitian.com/partner-program/ - type: CaseStudies url: https://www.anitian.com/resources/case-studies/ - type: Conformance url: conformance/anitian-conformance.yml - type: Compliance url: conformance/anitian-conformance.yml - type: Authentication url: authentication/anitian-authentication.yml - type: LLMsTxt url: llms/anitian-llms.txt x-enrichment: date: '2026-08-06' status: minimal artifacts_added: 7 pass: local-v1 x-coverage: state: gated reason: customer-only-docs detail: >- Anitian's own FedRAMP 20x README says an API exists for auditors to download evidence, but the SecureCloud/FedFlex console at securecloud.anitian.com answers HTTP 307 to /auth/signin for every path including /openapi.json and /api-docs — only /api/health and the NextAuth /api/auth/* endpoints respond anonymously — and the FedFlex copilot API at copilot.anitian.com is a WebSocket-only AWS API Gateway whose $connect route returns 401, so no contract is reachable without a tenant or auditor account. evidence: - url: https://securecloud.anitian.com/openapi.json status: 307 - url: https://securecloud.anitian.com/api-docs status: 307 - url: https://securecloud.anitian.com/api/health status: 200 - url: https://copilot.anitian.com/ status: 426 - url: https://www.anitian.com/openapi.json status: 404 checked: '2026-08-06'