ViitorCloud joins Carahsoft to sell EveryCRED to US public sector
ViitorCloud Technologies has named Carahsoft Technology Corp. as its Master Government Aggregator in the United States, making the company's EveryCRED verifiable-credentials platform accessible to federal, state and local agencies through a suite of established government procurement contracts. The arrangement spans NASA SEWP V, ITES-SW2, NASPO ValuePoint and OMNIA Partners vehicles, giving public-sector buyers a compliant route to procure the platform without standalone competitive tenders.
EveryCRED is positioned by ViitorCloud as a decentralised digital trust platform designed to replace manual identity and document verification workflows. The system issues and authenticates tamper-proof credentials in real time, covering use cases including contractor access validation, privileged-role verification, grant eligibility checks and inter-agency credential exchange. The underlying approach shifts security controls away from network perimeters and toward continuous identity validation, which aligns broadly with zero-trust principles now mandated across US federal agencies under Office of Management and Budget guidance.
The deal
Rohit Purohit, chief executive of ViitorCloud US, said the partnership would allow the company to "scale the adoption of our digital trust solutions across Federal, State and Local agencies" and that together the two firms were helping organisations move "beyond traditional security models." Carahsoft's vice-president for open-source and DevSecOps solutions, Natalie Gregory, characterised EveryCRED as providing "a powerful approach to digital trust" for public-sector teams.
No contract value, agency pilot customers, or deployment timelines were disclosed in the announcement. ViitorCloud's parent company is a 170-person technology services firm headquartered in India, with offices in the US and Mauritius, and has operated for over eleven years across sectors including blockchain, AI, cloud and IoT.
Market context
The verifiable-credentials market for government is gaining momentum as agencies grapple with legacy identity infrastructure, rising insider-threat risks and the broader federal push toward zero-trust architecture. Several competing platforms already serve this space, including offerings from established identity providers and a growing cohort of blockchain-anchored credential startups. ViitorCloud's EveryCRED uses a decentralised framework, which may appeal to agencies prioritising interoperability and audit-trail integrity, though buyers will want to scrutinise whether the platform is built on open standards such as the W3C Verifiable Credentials Data Model and DIDs, given the risk of lock-in with proprietary credential schemas.
Carahsoft's distribution model is well-understood in the public-sector technology market: the aggregator relationship routes sales through an existing reseller network and leverages pre-negotiated contract vehicles, materially reducing procurement friction for smaller agencies that lack dedicated acquisition staff. For a company of ViitorCloud's current scale, the arrangement provides a faster path to federal and state buyers than a standalone GSA schedule application would allow.
Regulatory read-across
The zero-trust mandate under OMB Memorandum M-22-09 required US federal agencies to meet specific identity-pillar targets by the end of financial year 2024. Agencies that remain behind on those targets represent a natural near-term pipeline for credential-verification platforms. At the same time, the NIST National Cybersecurity Center of Excellence has published guidance on enterprise-wide identity and access management, and vendors seeking federal adoption are increasingly expected to align with those reference architectures. ViitorCloud has not disclosed whether EveryCRED holds FedRAMP authorisation, which would be a prerequisite for many federal cloud deployments, and the absence of that detail is likely to be a question procurement officers raise early in any evaluation process.