Fortreum and InfusionPoints complete FedRAMP 20x pilot assessments

Fortreum and InfusionPoints have completed pilot assessments for the federal government's new FedRAMP 20x cloud security model. These assessments, conducted at both Low and Moderate impact levels, represent an early step in the government's transition towards automation-first cloud security evaluations, as noted by Channel Insider.

The companies concluded the Class B (Low) Phase I pilot in July 2025 and the Class C (Moderate) Phase II pilot in April 2026. Their work involved validating 11 Key Security Indicators (KSIs), 61 KSI rules, and 209 validations for InfusionPoints' XBU40 platform on AWS GovCloud. The Moderate assessment was particularly noteworthy as it occurred before a standardized assessment process was established for that level. FedRAMP 20x aims to replace traditional static compliance documentation with continuous security measurement and machine-readable evidence, emphasizing ongoing monitoring and reporting over point-in-time audits.

For assessors, this shift means focusing on the trustworthiness of the systems producing evidence rather than just the evidence itself. This evolution creates new opportunities for cybersecurity consultants and service providers, who will need expertise in continuous evidence collection, compliance engineering, and security telemetry to support federal cloud environments.

Source: Channel Insider