C1Secure Launches SmartRAMP 20x for FedRAMP 20x Model

C1Secure announced on Monday the launch of SmartRAMP 20x, a ServiceNow-native application built for the U.S. government's new FedRAMP 20x model for certifying cloud services. The platform operates on the ServiceNow AI Platform, aiming to provide cloud service providers with a faster and lower-cost path to the FedRAMP Marketplace.

The FedRAMP 20x model represents a significant shift from the previous program, which required a sponsoring agency, cost between $250,000 and $1 million, and took 12 to 15 months to complete. The new model removes the sponsor requirement and replaces one-time, document-heavy reviews with continuous, automated proof against Key Security Indicators. SmartRAMP 20x was built from the ground up to mirror FedRAMP's 46 Key Security Indicators.

For providers, SmartRAMP 20x transforms certification into continuous operation. The platform validates supporting evidence on the cadence set by FedRAMP, automatically opens remediation issues within ServiceNow Integrated Risk Management when evidence falls short, and closes the loop when evidence is re-verified. For agencies, the platform provides a live view of a provider's compliance posture within their existing ServiceNow Continuous Authorization and Monitoring workflow.

"FedRAMP 20x is a different model, not a tweak to the old one. Compliance is something you prove every day now, not something you document once a year," said Tom Thomson, CEO of C1Secure. He added that the platform enables providers to earn certification on the system they already run their business on, and offers agencies current, dependable assurance instead of a stack of paperwork.

SmartRAMP 20x is intended for cloud service providers pursuing FedRAMP 20x certification, as well as the agencies, assessment organizations, and advisors involved in the process. C1Secure plans to incorporate AI-assisted continuous monitoring and reporting in future updates.