Roo Code
ATH Infosystems · Software Development
Certification per Microsoft Marketplace.
Evidence tier Source Confirmed · 2 captures on record
What the publisher says
As described on Microsoft Marketplace.
Roo Code is a free, open-source AI-powered coding assistant that helps developers generate, modify, debug, and understand code directly within the development environment.
Key Features of Roo Code:
Show the rest of the publisher’s description (13 more lines)
- Open-source AI-powered coding assistant.
- Supports code generation, modification, debugging, and analysis.
- Helps automate software development and coding tasks.
- Supports integration with AI models for intelligent coding assistance.
- Can work with project files and codebases to assist with development workflows.
- Suitable for developers, software teams, and organizations seeking AI-assisted development capabilities.
Roo Code Usage:
$ sudo su
$ cd /opt/roo-code
$ cd /tmp
$ code --no-sandbox --user-data-dir=/root/.vscode-root --list-extensions --show-versions | grep -i roo
Disclaimer:
Roo Code is an open-source AI-powered coding assistant. Users are responsible for configuring AI models, API credentials, access controls, networking, data privacy, and security policies before using Roo Code in a production environment.
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Compliance
- FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27
Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.
Vendor
External enrichment · as of 2026-08-29
Reconciled on 9/3/2026
Sources
Publisher resources
1 linkLinked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.

