Progress toward FedRAMP certification
FedRAMP 20x Class C (Moderate) certification of Pitbull Audit through the Program path, with the application to FedRAMP in the first quarter of 2027.
Reviewed November 12, 2026; next review by February 12, 2027. Also as JSON.
| Date | Milestone | Status |
|---|---|---|
| October 28, 2026 | FedRAMP 20x Class C plan adopted; dedicated production AWS account chosen over shared hosting | done |
| November 3, 2026 | Production built entirely from templates, with operators signing in through security keys or passkeys only | done |
| November 3, 2026 | Daily automated record of all 46 Key Security Indicators begins, kept three years and locked against change | done |
| November 4, 2026 | Vulnerability disclosure program and security contact published | done |
| November 6, 2026 | Security policies and procedures approved by the accountable official | done |
| November 12, 2026 | Honest self-assessment against every FedRAMP rule and indicator; first monthly vulnerability report produced | done |
| November 30, 2026 | Independent assessor chosen and booked | in progress |
| December 7, 2026 | Monthly vulnerability reporting in force (FedRAMP's date for these rules) | on track |
| December 15, 2026 | Trust center complete: availability page, and agency access to the certification package | in progress |
| December 31, 2026 | Certification package drafted in human-readable and JSON forms; FedRAMP Marketplace listing requested | on track |
| February 28, 2027 | Independent assessment complete, findings fixed | planned |
| March 31, 2027 | Application submitted to FedRAMP | planned |