Case Study
Determinate Systems Brings Governed Nix Infrastructure to Federal Agencies and Partners
With FlakeHub’s FedRAMP High Authorization, federal agencies, contractors, and organizations handling Controlled Unclassified Information can use enterprise-ready Nix services for private collaboration, faster builds, trusted publishing, and secure software distribution
Client Details
Industry
Software Development
HQ
Pittsfield, MA, USA
Size
10+ employees
Federal teams and suppliers should not have to choose between Nix’s reproducibility and the controls their missions require. Knox gave us the federal cloud and compliance foundation to make FlakeHub available in a FedRAMP High environment, so those teams can use modern Nix infrastructure with confidence.
Graham Christensen
Co-founder & CTO
Determinate Systems
Determinate Systems is building the secure software supply chain for critical infrastructure. Co-founded by the creator of Nix and a long-time Nix community leader, Determinate helps engineering teams make software reproducible, attestable, and secure across development, CI, cloud, edge, and production. Determinate Nix, FlakeHub, and Determinate Secure Packages give organizations control over dependencies, builds, configurations, artifacts, and runtime environments so that software runs the same every time, everywhere.
350+
Vulnerabilities patched each week
16 Million
Determinate Nix installs
>1.5 Billion
Monthly FlakeHub Cache requests
Results
How Knox Helped Determinate Systems
1
Challenges
Federal agencies and organizations handling CUI need reproducible, auditable software supply chains, but stringent security and compliance requirements have historically limited their access to modern Nix infrastructure.
2
Phased Journey
1. Design the offering: Define how FlakeHub and Determinate software would serve teams under FedRAMP High requirements.
2. Build the authorized environment: Deploy FlakeHub on Knox’s managed federal cloud and align the service with FedRAMP High controls.
3. Open a secure delivery path: Enable authenticated access to Determinate Nix, FlakeHub, and Determinate Secure Packages through the authorized environment.
3
Results
By deploying FlakeHub on Knox’s managed federal cloud, Determinate brought its hosted Nix platform into a FedRAMP High Authorized environment with record speed. Federal agencies and organizations handling CUI can now use private flakes, binary caching, federated access controls, trusted publishing, and provenance through FlakeHub. Authenticated users can also download and update Determinate Nix and retrieve Determinate Secure Packages from within the authorized environment, then run those products in their own infrastructure.
Ready to achieve FedRAMP authorization in 90 days or less?
Schedule a meeting to discuss scope, parse readiness, and map your company’s accelerated path to FedRAMP authorization.
_Horizontal_RGB.png)
