Security standards

Run Ubuntu in high-security environments. Confidently deploy critical workloads while meeting rigorous cybersecurity standards like NIST 800-53, FedRAMP, and CMMC with Ubuntu Pro. As the publishers of Ubuntu, we’ve also developed automated hardening solutions enabling you to run Ubuntu in any environment.

Contact us Learn more about Pro ›

FIPS 140-3 is now available for Ubuntu 22.04 LTS. Learn more.

Supported standards

  • FIPS

    FIPS 140-2 & 140-3 certified modules are available for Ubuntu.

  • DISA-STIG

    Simplify your DISA-STIG hardening process by taking advantage of the automation available with Ubuntu Security Guide (USG).

  • CIS

    Harden your systems to CIS benchmark standards using the automation available with Ubuntu Security Guide (USG).

  • CRA

    Learn how Canonical’s security vulnerability management program enables you to comply with the requirements of the Cyber Resilience Act.

  • NIST 800-53

    Canonical provides hardening and compliance tools to help you meet NIST 800-53 requirements.

  • CMMC

    Canonical provides hardening tools, FIPS 140 certified cryptographic modules, and timely vulnerability patching that enable CMMC compliance.

  • FedRAMP

    Find security tools to help you achieve FedRAMP Authority To Operate.

  • PCI-DSS

    Gain extra security and compliance guarantees needed to deploy applications in line with PCI-DSS requirements.

Security compliance in action

Lucid Software

Ubuntu Pro helps Lucid Software meet FedRAMP compliance for government contracts

By deploying Ubuntu Pro, Lucid acquired AWS-compatible and FIPS 140-2 certified packages and became FedRAMP compliant.

Read the case study ›
LaunchDarkly

LaunchDarkly becomes the first FedRAMP-authorized feature management platform thanks to Ubuntu Pro

Learn how a SaaS provider achieved effortless FIPS compliance on AWS.

Read the case study ›
New Mexico State University

How New Mexico State University accelerates compliant federal research with Ubuntu

When the stakes are high and national security is on the line, every decision matters. Just ask the team at New Mexico State University’s Physical Science Laboratory (PSL).

Read the case study ›

Compliance everywhere

On-prem

Ubuntu Pro enables compliance on Ubuntu desktops and servers in private clouds, Virtual Machines, and air-gapped environments.

In the cloud

Get pre-hardened and compliant Ubuntu Pro images in the public cloud.

Amazon Web Services
Learn more  ›
Microsoft Azure
Learn more  ›
Google Cloud Platform
Learn more  ›

On the Edge

Take advantage of Ubuntu Core, our new immutable Ubuntu designed for IoT and Edge deployments with Ubuntu Pro for Devices.

Resources

Simplify security maintenance and compliance with Ubuntu Pro auto-attach for LXD guests

Simplify security maintenance and compliance with Ubuntu Pro auto-attach for LXD guests

With the latest LXD release, Ubuntu Pro now supports auto-attachment for LXD guest instances, offering organizations a seamless way to extend Ubuntu Pro benefits across their infrastructure.

最新 IDC 研究 — 70% 的 IT 团队每周在安全补丁方面耗费时间超 6 小时

最新 IDC 研究 — 70% 的 IT 团队每周在安全补丁方面耗费时间超 6 小时

Canonical 与国际数据公司（IDC）开展的最新研究表明，在严苛的 CVE 补丁更新规定下，企业组织难以笃定地应用补丁，并且在开源软件供应链方面也面临着其他严峻挑战。 今日，Ubuntu 发行商 Canonical 发布了一份与 IDC 合作完成并由 Google Cloud...

The long march towards delivering CRA compliance

The long march towards delivering CRA compliance

The EU Cyber Resilience Act is here, and in 2027 it will require manufacturers to meet a long list of security and support standards. Here’s our advice to all developers.

CRA compliance: Things IoT manufacturers can no longer do under the CRA (and what to do instead)

CRA compliance: Things IoT manufacturers can no longer do under the CRA (and what to do instead)

In this blog, I’ll give you a thorough overview of common IoT manufacturer and PDE developer practices that need immediate attention, and how to change or improve these practices so that you...

A guide to Infrastructure Hardening
Ubuntu compliance guide for US public sector
Understand IoT security and IoT compliance across global markets

Easily comply with the most
stringent security standards
with Ubuntu Pro

Ubuntu Pro provides an easy pathway to compliance. It delivers CVE patching for Ubuntu OS and Applications covering 36,000 packages, along with automated, unattended, and restartless updates, and the best tools to secure and manage your Ubuntu infrastructure developed by the publisher of Ubuntu.

Contact us Learn more about Pro ›