# 9line: public information

9line tells agencies which vulnerabilities in their software and AI supply chain actually affect them, with evidence an assessor can re-check. A customer submits a repository or container image through the web application or API. 9line generates a CycloneDX SBOM, inventories the AI models and agents it contains, matches components against vulnerability data, and determines whether each vulnerable code path is reachable using a deterministic call-graph engine. It returns a VEX document in which every statement carries its evidence. An in-boundary model (Amazon Bedrock in AWS GovCloud) explains verdicts but cannot clear a finding.

| Field | Value |
|---|---|
| FedRAMP ID | FR2701857797 |
| Provider | Optimal Labs |
| Service | 9line |
| Certification sought | 20x Class C, Program path |
| Service model | SaaS |
| Deployment model | Government Community Cloud |
| Business category | Cybersecurity & Risk Management, Artificial Intelligence (AI), Development Tools |
| UEI | TYMSGKDF2K48 |
| Sales contact | Ryan Gutwein <support@gooptimal.io> |
| Security contact | Ryan Gutwein, ISSO <support@gooptimal.io> |
| Product website | https://gooptimal.io/nineline |

Generated 2026-10-22T01:58:59+00:00 (CDS-CSO-PUB). Machine-readable: public-information.json.