FedRAMP 20x Class B and C Are Open — The Next Cohort's Move
By Philip Luca — Founder of GovExpress; prior domain experience at Bloomberg Government and GovWin IQ.
Note on terms: The Consolidated Rules retired “Authorized” as the status term: the status a cloud service holds is now FedRAMP Certified. Where this post says “authorization” generically, read “certification”.
The FedRAMP 20x Class A pipeline opened on August 3, 2026. Four weeks later, on August 31, 2026, the Class B and C pipelines opened. Both on-ramps are now open, which changes the question a company is asking. It is no longer “when does the window open?” — it is “when do we walk through it, and what do we bring?”
What a company deciding now can see
A company that submits today has something the first submitters did not: precedent. The earliest Class A submissions went in during August, and every week since has added to the record of how a 20x package is put together and received. A company moving now can learn from that record instead of guessing through it.
The trade is the mirror image: the first-mover narrative is already spoken for. The companies that showed up ready in August own that story for 2026, and later submitters have to earn attention rather than inherit it. That is not a reason to wait; it is a reason to be unmistakably ready when you submit, because “ready” is the only remaining way to stand out once “first” is gone.
The clock that governs the work
With the pipelines open, there is no calendar date left to work toward. The date that governs the work is your own submission date, and readiness is not something you begin on that day — it is something you walk in already holding. A company that starts its readiness work the day it files is a company that will spend its review discovering gaps instead of closing them.
The weeks before you submit are the whole opportunity. Used well, they are enough to answer the three readiness questions with evidence and hold a sequenced plan before you file. Left idle, they are weeks in which every company already in the pipeline keeps building the record yours will be compared against.
Same three questions, same legible answers
Whichever class a company targets, the readiness questions do not change — and neither do the answers this series has laid out across the earlier pieces:
- Where do you actually stand? A 100-point Federal Readiness Score across the 12 categories a federal buyer weighs, read as one of five tiers from Not Federal Ready to Federal Established — a number, not a vibe.
- What is verified vs. merely attested? The compliance overlay distinguishes verified from self-reported status on every vendor you search in the app, with the source and observation date behind each verified mark, and “Insufficient data” rather than a guess when a public source is down.
- What are the next moves? A readiness report that ends in a 90-day action plan — the sequenced steps that move a score before you submit, not an audit filed and forgotten.
Self-attested compliance is not verified compliance, and a later submitter is evaluated by the same buyers, on the same gap, as an earlier one.
Get the compliance calendar right
The precision that signals credibility does not relax for later submitters. The same three facts remain load-bearing in 2026:
- CMMC Phase I is in force.
- CMMC Phase II is suspended — not cancelled (memo 26-P-1023, announced 2026-07-13).
- DFARS 252.204-7012 remains in force.
A company that touches Department of War (DoW) work runs the civilian FedRAMP 20x calendar and the DoW CMMC / DFARS calendar as two separate clocks — the same discipline whichever 20x class it targets.
The move
The move is not complicated, and it is not “wait.” Get your score, see what’s verified versus self-attested, and hold a 90-day plan — so that when you submit to the Class B or C pipeline, you walk in already ready rather than starting to find out.
Find out where you stand before you submit, not after. Get your Federal Readiness Score and 90-day action plan, then pick your submission date from a position of evidence.
Related reading
Frequently Asked Questions
When did the FedRAMP 20x Class B and C pipelines open?
August 31, 2026 — four weeks after the Class A pipeline opened on August 3, 2026.
Is it too late to submit to FedRAMP 20x Class B or C?
No. The pipelines are open, so the deciding date is the day you submit. What matters is whether you arrive with readiness evidence in hand rather than discovering gaps after you file.
What is the current status of CMMC Phase II?
CMMC Phase II is suspended — not cancelled — per memo 26-P-1023 announced 2026-07-13. CMMC Phase I and DFARS 252.204-7012 remain in force.
The CMMC brief
What the Phase 2 suspension changed and what it did not — the obligations that still bind, the assessment path a contract puts you on, the scoping decision that drives the cost, and the sequence that fits inside a pipeline. Sourced from the primary record.