Blog

Gain insights, updates, and best practices to strengthen your security posture and compliance program.

FedRAMP Ready is retired. Here's what a FedRAMP readiness tool needs to do instead

FedRAMP Ready has been retired. Here's what replaced it, and what a FedRAMP readiness tool needs to do for you now.

Mike Kim

October 6, 2026

12 min read

FedRAMP security controls baseline, explained: What the new 20x Certification Classes changed (and didn't)

Low, Moderate, and High didn't disappear under FedRAMP 20x—they just stopped being certification labels. Here's what’s actually changed.

Mike Kim

October 6, 2026

15 min read

How to automate SOC 2 compliance: A former auditor's step-by-step guide

A former auditor's take on which parts of SOC 2 compliance to hand off to software, and what you should keep with your team.

Mike Kim

October 5, 2026

17 min read

AI changed the economics of cyberattacks. Here's what to do about it

The risks are familiar. The cost of exploiting them has changed. Four things mid-market companies should do, from Mike Kim's conversation with Kye CEO Caleb Gawne.

Mike Kim

October 1, 2026

5 min read

Compliance

Real enterprise security, continuous compliance.

Beyond FedRAMP, we can help you navigate the rigorous requirements for FedRAMP 20x, CMMC, NIST 800 Series, SOC 2, ISO 27001, GDPR, PIPEDA, EU AI Act, HIPAA, and more.

We turn the compliance nightmare into a dream

Talk to us