Engineering the Datadog Agent for FedRAMP High® Certification

To achieve FedRAMP High certification, Datadog had to move beyond its previous proxy-based architecture, which could not sufficiently enforce strict cryptographic boundaries and failure modes within customer-managed environments. The company re-engineered the Datadog Agent to embed cryptographic enforcement directly within its runtimes, ensuring consistent security and compliance across diverse and evolving infrastructures.