Skip to content
Fortreum and InfusionPoints Complete FedRAMP 20x Pilot Assessments

Fortreum and InfusionPoints Complete FedRAMP 20x Pilot Assessments

First seen 12 Oct 2026, 17:36 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 12, 2026 at 21:31 UTC
  • •Fortreum and InfusionPoints completed FedRAMP 20x pilot assessments for cloud security.
  • •The assessments validated 11 Key Security Indicators across 209 validations.
  • •FedRAMP 20x emphasizes continuous security measurement over static compliance.

Fortreum and InfusionPoints have successfully completed pilot assessments for the FedRAMP 20x cloud security model at both Low and Moderate impact levels. The assessments, which validated 11 Key Security Indicators (KSIs) and involved 209 validations for InfusionPoints' XBU40 platform on AWS GovCloud, mark a significant step in the U.S. government's shift towards automation-first cloud security evaluations. The Class B (Low) Phase I pilot was concluded in July 2025, while the Class C (Moderate) Phase II pilot was completed in April 2026. Notably, the Moderate assessment was conducted before a standardized process was established for that level. This new model emphasizes continuous security measurement and machine-readable evidence, moving away from traditional static compliance documentation. As a result, cybersecurity consultants will require expertise in continuous evidence collection and compliance engineering to support federal cloud environments.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2025-07-01
Class B (Low) Phase I pilot completed
Fortreum and InfusionPoints finished the Low impact level assessment as part of FedRAMP 20x.
Msspalert
2026-04-01
Class C (Moderate) Phase II pilot completed
The companies concluded the Moderate impact level assessment, notable for being conducted without a standardized process.
Msspalert

More articles in this cluster (2)

Following this threat?

Track Fortreum in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (4)

1 / 2

Common questions

What is FedRAMP 20x?
FedRAMP 20x is a new cloud security assessment model aimed at automating compliance and emphasizing continuous security measurement.
What platforms were involved in the assessments?
The assessments involved InfusionPoints' XBU40 platform hosted on AWS GovCloud.
What are Key Security Indicators (KSIs)?
KSIs are specific metrics used to evaluate the security posture of cloud systems, with 11 KSIs validated during these assessments.