Part of broader FedRAMP modernization

FedRAMP terminology is changing. The authorization work is not.

FedRAMP Low, Moderate, and High are becoming Class A, B, C, and D. The operational reality stays the same.

The new class system
A
Pilot baseline
B
Li-SaaS / Low
C
Moderate
D
High
Sponsorship, ATOs, continuous monitoring, and 3PAO assessments all remain in force.

For SaaS companies, the message is simple. FedRAMP language is evolving — Knox remains the fastest path to FedRAMP.

The new terminology does not eliminate agency sponsorship, risk acceptance, continuous monitoring, 3PAO assessments, or ATO requirements.
Key changes

A new vocabulary for the same program

FedRAMP is standardizing new terminology to create a more consistent, modern certification framework aligned with statutory language.

Terminology transition

What gets renamed

Low, Moderate, High Class A, B, C, D
FedRAMP Authorized FedRAMP Certified

Certification classes

Expected alignment of the new classes

Class A
New pilot baseline
Class B
FedRAMP Li-SaaS and Low
Class C
FedRAMP Moderate
Class D
FedRAMP High

FedRAMP has not yet published a formal technical equivalency matrix. This alignment reflects current industry interpretation.

Unchanged foundation

The terminology modernizes. The requirements do not.

At this stage, the shifts change how FedRAMP designations are described and communicated. They do not change the work behind authorization.

Agency sponsorship
Still required
Agency AOs & risk acceptance
Unchanged
Current control requirements
No change
Continuous monitoring
Expectations intact
SCN & SRQ processes
Unchanged
3PAO assessments
Still required
Agency operational approvals
Production gate
Why it matters for SaaS

The practical requirements remain intact.

Compliance language and reporting will keep evolving, but authorization remains the hard part for companies. Our FedRAMP 20x page explains this too: modernization does not remove the need for sponsors, ATOs, or federal authorization pathways.

01A compliant environment
02Federal sponsorship
03Agency risk acceptance
04ATO approval
05Continuous monitoring
06Evidence and assessment readiness
Where Knox fits in

Move through federal authorization faster

Knox helps SaaS companies clear the hard part of authorization — by giving you what would otherwise take years to build.

16+

Inheritable ATOs

Authorizations your environment can inherit on day one.

Top federal & Department of War sponsors

Established sponsorship relationships across mission-critical agencies.

FedRAMP-certified cloud boundary

A compliant boundary, already assessed and operating.

Continuous monitoring

Ongoing ConMon that keeps your authorization in good standing.

Inherited controls

Controls satisfied at the platform layer, so you don't rebuild them.

KnoxAI-driven compliance tooling

AI that drives evidence collection, monitoring, and remediation.

The Knox advantage

Trusted by top agencies for mission-critical needs

National Institutes of Health
Food and Drug Administration
Defense Information Systems Agency
Internal Revenue Service
Department of Housing and Urban Development
Department of Homeland Security
Federal Emergency Management Agency
Department of the Navy
Marine Corps
U.S. Air Force
Defense Counterintelligence and Security Agency
Department of Transportation
Centers for Medicare and Medicaid Services
United States Patent and Trademark Office
The bottom line

FedRAMP is changing its language. Knox is still the fastest path to FedRAMP.

Certification in 90 days, for 90% less.