FedRAMP® provides a standardized, reusable approach to security assessment and authorization for cloud service offerings.
Rev 5 Agency Authorization
The traditional FedRAMP Agency Authorization process is the only path to FedRAMP authorization today and it's not going away any time soon!
Learn more20x Community Working Groups
FedRAMP 20x is building a new cloud-native approach to FedRAMP authorization with industry and entirely in public.
ParticipateFedRAMP Changelog
FedRAMP is moving fast and updating guidance and resources regularly. In order to keep our stakeholders informed about our changes in real-time, we maintain a changelog which documents relevant administration and program updates.
View the full changelogMost Recent Updates
| Date | Details |
|---|---|
| 2025-08-28 | Published a new blog post (See FedRAMP 20x: Five Months In and Full of Surprises) |
| 2025-08-28 | Updated guidance on the Scope of FedRAMP as required by M-24-15 (following RFC-0010). (See Scope of FedRAMP) |
| 2025-08-26 | Added a placeholder page for the 20x Phase Two pilot, coming in October 2025. (See 20x Phase Two) |
