Skip to main content
WhyHow It WorksFeaturesPricingBlog
Sign inRequest demo
VDR-TFR-MVX20x onlyImplementation guide coming soon

Persistent Machine Verification and Validation for 20x

Vulnerability Detection and Response (VDR) · Timeframes

Applies to: Providers
Who this applies to
Providers
Service class
Varies: A, B, C
Force
Varies by class
Timeframe
No fixed timeframe

Reviewed implementation guidance for VDR-TFR-MVX is not published yet. The official source below remains complete and authoritative.

Official FedRAMP source

Verbatim from FedRAMP/rules

This requirement varies by FedRAMP Certification class. Each class has its own statement:

Class A

SHOULD 1 months
Providers of FedRAMP 20x Class A offerings SHOULD verify and validate the status of machine-based information resources at least once every month.

Class B

MUST 7 days
Providers of FedRAMP 20x Class B offerings MUST verify and validate the status of machine-based information resources at least once every 7 days.

Class C

MUST 3 days
Providers of FedRAMP 20x Class C offerings MUST verify and validate the status of machine-based information resources at least once every 3 days.

Defined terms in this requirement

Information ResourceMachine-Based (Information Resources)ProviderValidationVerification

Change history

  • 2026-05-04Initial reset for the Consolidated Rules for 2026 Public Preview.

Content provenance

Official requirement text is sourced from FedRAMP/rules . Boundera implementation guidance has not been fully reviewed for this item.