FedRAMP 20x Toolkit download

Boundera/fedramp-20x-toolkit is the practitioner-grade reference for mapping FedRAMP 20x Key Security Indicators (KSIs) to AWS evidence sources. Covers the IAM family (KSI-IAM-MFA, KSI-IAM-APM, KSI-IAM-SNU, KSI-IAM-JIT, KSI-IAM-ELP, KSI-IAM-SUS, KSI-IAM-AAM) and MLA family (KSI-MLA-OSM, KSI-MLA-RVL, KSI-MLA-EVC, KSI-MLA-LET, KSI-MLA-ALA) in depth, with machine-readable YAML mappings, real AWS Config rule references, NIST 800-53 control crosswalks, and per-indicator evidence shapes that compliance engineers can use directly during 3PAO preparation.

Includes the full FedRAMP machine-readable documentation (FRMR v0.9.43-beta) and a Python ksi-validator CLI for OSCAL package validation.

Maintained by Boundera (https://boundera.io) as a community resource alongside the Boundera commercial product, which automates evidence collection across all 60 KSI indicators and 11 families on AWS, Azure, and GCP. MIT licensed.

Project Activity

See All Activity >

License

MIT License

Follow FedRAMP 20x Toolkit

FedRAMP 20x Toolkit Web Site

Other Useful Business Software

Enterprise-grade ITSM, for every business

Give your IT, operations, and business teams the ability to deliver exceptional services—without the complexity.

Freshservice is an intuitive, AI-powered platform that helps IT, operations, and business teams deliver exceptional service without the usual complexity. Automate repetitive tasks, resolve issues faster, and provide seamless support across the organization. From managing incidents and assets to driving smarter decisions, Freshservice makes it easy to stay efficient and scale with confidence.

Try it Free

Rate This Project

User Reviews

Be the first to post a review of FedRAMP 20x Toolkit!

Additional Project Details

Operating Systems

Linux

Registered

2026-06-04

Similar Business Software

Criminal IP

Criminal IP is a cyber threat intelligence solution that provides decision-ready threat intelligence, and attack surface management solutions to security teams worldwide. By continuously scanning the global internet, Criminal IP aggregates and contextualizes threat signals across IPs, domains,...

See Software
Diplomat Managed File Transfer

Diplomat MFT by Coviant Software is a secure, reliable managed file transfer solution designed to simplify and automate SFTP, FTPS, and HTTPS file transfers. Built for seamless integration, Diplomat MFT works across major cloud storage platforms, including AWS S3, Azure Blob, Google Cloud,...

See Software
Comet Backup

Start running backups and restores in less than 15 minutes! Fast, secure backup software for businesses and IT providers. Comet is a flexible, all-in-one backup platform available in 13 languages. You choose your backup destination, server location, configuration and setup. Backup to your...

See Software
Secure Eraser

What is deleted from the hard drive is far from gone. As long as the data is not overwritten, anyone can make it visible again at any time. This is particularly problematic when a computer is resold or given away. Secure Eraser utilizes recognized methods for data deletion and overwrites...

See Software
Safetica

Safetica’s Intelligent Data Security protects sensitive data where teams work, using powerful AI to deliver contextual awareness, reduce false positives, and stop real threats without disrupting productivity. With Safetica, security teams can maintain visibility and control over sensitive data,...

See Software
Blumira

Empower Your Current Team to Achieve Enterprise-Level Security An all-in-one solution with SIEM, endpoint visibility, 24/7 monitoring, and automated response to reduce complexity, increase visibility and speed up time to respond. We handle the security heavy lifting, so you get time back...

See Software