Infographic

FedRAMP Class B Explained

What cloud providers need to know about the FedRAMP 20x certification class

September 15, 2026
Fed RAMP Class B Explained 2 1

See how Class B differs from legacy Low-oriented paths — and whether it’s the right certification target for your service.

See the full qualification checklist, the four-step certification path, and whether Class B is the right first move for your federal go-to-market strategy.

Download the infographic

FedRAMP Class B is a finalized FedRAMP 20x certification class intended for fairly common small-scale or light-use cloud services where agency-wide or mission-important use is unlikely. This infographic is for cloud service providers evaluating their FedRAMP path — especially those holding FedRAMP Ready or Class A status who need to confirm their next move. Understanding how Class B differs from legacy Low-oriented paths helps providers avoid treating it as a simple renaming and instead plan for the certification package and ongoing assurance expectations.

Three key takeaways:

  • Class B is best for small-scale or light-use services and is not a one-for-one replacement for Low or Li-SaaS.
  • Certification requires a FedRAMP 20x package with assessment evidence and ongoing vulnerability, reporting, and evidence maintenance.
  • Class B is a certification target with ongoing assurance expectations — not a one-time milestone.

Have questions about whether Class B fits your roadmap?

Contact Coalfire’s FedRAMP team to book a strategy meeting and get answers specific to your architecture.

Book a meeting