SolarWinds announced multiple products are now certified under the Common Criteria for Information Technology Security Evaluation (ISO/IEC 15408), an internationally recognized standard for computer security achieved through independent laboratory testing and evaluation.
“At SolarWinds, we make every effort to ensure our software is powerful, effective and safe,” said Chris LaPoint, VP Product Management, SolarWinds. “This Common Criteria certification attests that SolarWinds solutions adhere to the necessarily high performance standards for government deployment and are validated to help IT Pros accomplish their missions.”
Common Criteria provides a broad range of evaluation criteria for commercial and nationally sensitive government-use IT security products. Federal IT users needing to run applications in National Security Systems (NSS) environments can look to Common Criteria-certified software for numerous compliant software solutions.
The SolarWinds Orion Suite, comprising the below solutions, is now certified under Common Criteria lab EAL 2 evaluation, empowering government IT pros to implement and use the software safely on Federal networks:
- Network Performance Monitor 10.6 – Management and monitoring of dynamic network performance
- Server & Application Monitor 6.0 – Server, application and OS monitoring
- Network Configuration Manager 7.2 – Network configuration and compliance management
- Network Traffic Analyzer 3.11 – Flow-based network traffic analysis
- IP Address Manager 4.0 – IP address and DHCP/DNS management and monitoring
- User Device Tracker 3.0.1 – Device and switch port monitoring and mapping
- VoIP & Network Quality Manager 4.1 – VoIP and WAN performance monitoring
- Web Performance Monitor 2.0.1 – Website and web application monitoring
- Enterprise Operations Console 1.4.1 – Unified management for distributed enterprise networks
- Failover Engine 6.7.0 – SolarWinds platform server monitoring
SolarWinds Log & Event Manager 5.7, which provides log collection, analysis and real-time correlation, is also Common Criteria certified under EAL 2+ lab testing.
Electronic Warfare Associates (EWA)-Canada, a Common Criteria Testing Laboratory (CCTL) accredited by the Standards Council of Canada and approved by Canada’s Communications Security Establishment (CSE), has evaluated the SolarWinds software to determine it meets all of the requirements of this security certification. EWA-Canada is recognized for its extensive experience with Common Criteria evaluations, enabling companies to manage the process and ensure their products meet important certification requirements.
“EWA-Canada is pleased to verify SolarWinds’ solutions as Common Criteria-certified,” stated Erin Connor, Director of the EWA-Canada CCTL. “During the rigorous evaluation process, SolarWinds solutions demonstrated their sophistication and high standards of quality and security. This independent certification reflects SolarWinds' commitment to providing high-quality solutions to support the mission-critical demands of IT professionals in the Federal Government and elsewhere and proves that the products meet global security standards for deployment in government.”
SolarWinds software is available on the U.S. General Services Administration (GSA) Schedule, Department of Defense ESI, and other contract vehicles.
U.S. Government certifications and approvals include Army CoN, Air Force APL, Navy DADMS; and Technical Requirements include FIPS compatibility, DISA STIGs, and National Institute of Standards and Technology (NIST) compliance.
SolarWinds also has hundreds of built-in automated compliance reports, which meet requirements of all major auditing authorities, including DISA STIG, FISMA, NIST, and more. SolarWinds’ thwack online user community provides a number of out-of-the-box compliance report templates available to download for free that are designed to help users prepare for an inspection. thwack also provides information on Smart Card and Common Access Card (CAC) product support.
The Latest
According to Auvik's 2025 IT Trends Report, 60% of IT professionals feel at least moderately burned out on the job, with 43% stating that their workload is contributing to work stress. At the same time, many IT professionals are naming AI and machine learning as key areas they'd most like to upskill ...
Businesses that face downtime or outages risk financial and reputational damage, as well as reducing partner, shareholder, and customer trust. One of the major challenges that enterprises face is implementing a robust business continuity plan. What's the solution? The answer may lie in disaster recovery tactics such as truly immutable storage and regular disaster recovery testing ...
IT spending is expected to jump nearly 10% in 2025, and organizations are now facing pressure to manage costs without slowing down critical functions like observability. To meet the challenge, leaders are turning to smarter, more cost effective business strategies. Enter stage right: OpenTelemetry, the missing piece of the puzzle that is no longer just an option but rather a strategic advantage ...
Amidst the threat of cyberhacks and data breaches, companies install several security measures to keep their business safely afloat. These measures aim to protect businesses, employees, and crucial data. Yet, employees perceive them as burdensome. Frustrated with complex logins, slow access, and constant security checks, workers decide to completely bypass all security set-ups ...
In MEAN TIME TO INSIGHT Episode 13, Shamus McGillicuddy, VP of Research, Network Infrastructure and Operations, at EMA discusses hybrid multi-cloud networking strategy ...
In high-traffic environments, the sheer volume and unpredictable nature of network incidents can quickly overwhelm even the most skilled teams, hindering their ability to react swiftly and effectively, potentially impacting service availability and overall business performance. This is where closed-loop remediation comes into the picture: an IT management concept designed to address the escalating complexity of modern networks ...
In 2025, enterprise workflows are undergoing a seismic shift. Propelled by breakthroughs in generative AI (GenAI), large language models (LLMs), and natural language processing (NLP), a new paradigm is emerging — agentic AI. This technology is not just automating tasks; it's reimagining how organizations make decisions, engage customers, and operate at scale ...
In the early days of the cloud revolution, business leaders perceived cloud services as a means of sidelining IT organizations. IT was too slow, too expensive, or incapable of supporting new technologies. With a team of developers, line of business managers could deploy new applications and services in the cloud. IT has been fighting to retake control ever since. Today, IT is back in the driver's seat, according to new research by Enterprise Management Associates (EMA) ...
In today's fast-paced and increasingly complex network environments, Network Operations Centers (NOCs) are the backbone of ensuring continuous uptime, smooth service delivery, and rapid issue resolution. However, the challenges faced by NOC teams are only growing. In a recent study, 78% state network complexity has grown significantly over the last few years while 84% regularly learn about network issues from users. It is imperative we adopt a new approach to managing today's network experiences ...
From growing reliance on FinOps teams to the increasing attention on artificial intelligence (AI), and software licensing, the Flexera 2025 State of the Cloud Report digs into how organizations are improving cloud spend efficiency, while tackling the complexities of emerging technologies ...