Velo3D Sapphire Printers Become First Metal 3D Printers to Achieve DOD Green-Level STIG Compliance

Velo3D, a metal additive manufacturing (AM) technology company for mission-critical parts, has earned the U.S. Department of Defense’s (DOD) Green-level STIG (Security Technical Implementation Guide) Compliance for its Sapphire family of 3D printers. The certification allows Sapphire printers to be connected to the DOD’s Secret Internet Protocol Router Network (SIPRNet) and gives customers the confidence their metal 3D printers are hardened against potential cyberattacks.

The rigorous qualification process was achieved through collaboration with a third party to generate compliance, vulnerability and remediation reports from Sapphire printers that measure against security benchmarks. The testing process confirmed that all Velo3D printers provide the highest network, data and software security, as well as vulnerability management, reducing the risk of security breaches. This includes Sapphire, Sapphire 1MZ, Sapphire XC and Sapphire XC 1MZ. Test results indicated Velo3D achieved an average score of 97% on its tests, exceeding the DOD’s threshold of 90% needed to achieve Green-level STIG compliance, which is highest certification level offered.

The company says the team at Velo3D strives to go above and beyond to meet our customers’ needs. So when customers that work with the DOD inquired about STIG compliance, the company quickly went to work to achieve the highest level of certification available.

Obtaining the certification should empower all Velo3D customers — but especially those that work with the DOD and other government agencies — to fully leverage the capabilities of this AM technology without worrying about the risk of stolen intellectual property.

In addition to being SIPRNet-ready, Velo3D Sapphire printers can now also connect to the DOD’s Nonclassified Internet Protocol Router Network (NIPRNet). STIG compliance is required for DOD agencies and contractors that connect to both networks, as well as networks operated by other branch departments of the federal government.

Without STIG compliance, government agencies and contractors using metal 3D printers were required to keep them disconnected from network connections. This technique — commonly referred to as air gapping — can complicate the process of managing printers.

In the case of Velo3D, engineers and printer operators could not fully leverage the capabilities of its fully integrated solution, which enables users to easily monitor the printing of parts, analyze the data generated in the printing process and transfer print files to and from printers. Now, with Velo3D, engineers can utilize all aspects of metal AM technology when manufacturing parts that are classified or International Traffic in Arms Regulation (ITAR) protected without risking stolen intellectual property or other cyberattacks.

STIG compliance will also make it easier for defense contractors and agencies to purchase Sapphire printers as they will no longer have to obtain exceptions and other approvals that are required for noncompliant printers. Current Velo3D customers can easily upgrade their existing Sapphire printers to achieve STIG Green-level security. The software upgrade can be completed with minimal impact on the customer.

To learn more about Velo3D’s STIG certification and the process followed to achieve compliance, read the blog by Aaron Katske, vice president of Information Technology.