Liferay Launches ATO FastTrack Initiative, Giving US Government Agencies a Clear Path to Authorization to Operate for Custom Applications

New initiative gives government agencies a faster, more flexible path to secure authorization for custom applications, now and in the future

LOS ANGELES, Sept. 04, 2026 (GLOBE NEWSWIRE) -- Liferay, Inc., a leading provider of Digital Experience Platforms (DXPs), today announced the launch of its ATO FastTrack initiative, giving U.S. federal and state agencies the security foundation, compliance documentation and low-code tools they need to build custom applications and achieve Authorization to Operate (ATO). The initiative is built on independently audited security certifications mapped to federal control frameworks, giving agencies a flexible foundation for their specific needs.

ATO FastTrack’s core advantage is inheritable security controls. Because Liferay DXP is a low-code platform, an agency can authorize its DXP foundation once, then build new solutions on top of it, such as a grant portal, a veteran services site or a staff intranet, without starting from scratch. Each new solution inherits the platform's existing security controls, so agencies typically only need to assess what's unique to each new application, rather than restarting the full authorization process for each new digital experience they launch.

ATO FastTrack pairs Liferay DXP with an independently verified security certification stack that’s available today. Liferay has also confirmed an end of 2026 milestone that will complete the full Government Rapid Authorization capability: FIPS 140-3 readiness, with Liferay DXP binaries pre-configured to utilize FIPS 140-3 validated cryptographic modules, and OSCAL-compatible security documentation that agencies can ingest directly into GRC tools.

“Agencies have a lot they want to build, and turnkey SaaS solutions have limitations when it comes to delivering the custom, mission-specific applications agencies require,” said Bryan Cheung, Co-Founder and Chief Marketing Officer at Liferay. “ATO FastTrack lets agencies deliver new digital services faster, without cutting corners on security.”

What ATO FastTrack delivers

The ATO FastTrack initiative includes two capabilities available today, with two further capabilities coming by the end of 2026:

An authorization-ready low-code platform, today. Because Liferay DXP is a low-code platform, agencies can authorize their DXP foundation once, then extend it to new citizen- or employee-facing solutions. Each new solution inherits those controls, so the agency can focus on assessing what's unique to the new application, rather than starting from scratch.

An independently verified security foundation, today. Liferay’s security posture is built on a layered stack of independently audited certifications, including ISO/IEC 27001, 27017 and 27018; SOC 2 Type 2; HIPAA readiness; ISO 42001 for responsible AI management; and CSA STAR Level 1 and 2. Zero Trust architecture is supported through multi-factor authentication, role-based access control, audit logging, single sign-on and continuous monitoring.

FIPS 140-3 readiness, coming by the end of 2026. Liferay DXP binaries will be pre-configured to utilize FIPS 140-3 validated cryptographic modules, helping ensure that data at rest and in transit meet the latest NIST standards.

OSCAL-compatible security documentation, confirmed by the end of 2026. OSCAL, or Open Security Controls Assessment Language, makes security documentation machine-readable. When Liferay’s OSCAL capability ships, agency security teams will be able to ingest Liferay’s security posture directly into GRC tools, replacing manual documentation processes with actionable evidence.

Availability and procurement

The ATO FastTrack initiative is available now, built on Liferay DXP's Cloud Native architecture. The ATO FastTrack authorization roadmap document is available to qualifying agencies on request.

Liferay is actively pursuing GSA Multiple Award Schedule listing to further streamline procurement. For state and local agencies, Liferay is pursuing GovRAMP (formerly StateRAMP) authorization.

To request the ATO FastTrack authorization roadmap or begin a government deployment conversation, visit liferay.com/atofasttrack or contact the Liferay government solutions team directly at sales-government@liferay.com.

About Liferay

Liferay helps organizations build for the future by enabling them to create, manage and scale powerful solutions on the world's most flexible Digital Experience Platform (DXP). Trusted globally by over a thousand companies spanning multiple industries, Liferay's open-source DXP facilitates the development of marketing and commerce websites, customer portals, intranets and more. Learn how we can use technology to change the world together at liferay.com.

Contact
Breanne Ngo
bngo@ideagrove.com