FedRAMP Consolidated Rules · 2026

The Consolidated Rules for 2026 that bind cloud service providers, across 15 rulesets. They apply on the Rev5 and 20x paths alike and at every Certification Class.

165

requirements tracked

Premium

Access

Add-on from $49/mo

Start free: it’s ready on launch See pricing

Launches Nov 2026. Start free today on a live framework: your evidence carries over the day FedRAMP Consolidated Rules goes live.

Scope

How much of the standard Keel models

Models its declared scope in full

Keel authors every leaf requirement in the scope declared below, all 165 of them, with nothing inside that scope left out. A test fails the build if the authored count and the declared count ever diverge, so this framework cannot quietly lose requirements after the fact.

Authored in Keel: 165 requirements
In Keel’s scored scope: 165 leaf requirements

Keel publishes this for every framework it ships, complete or not, so a readiness percentage can be read against a denominator you can see. Compare every framework

What Keel does

How Keel helps with FedRAMP Consolidated Rules

Track FedRAMP Consolidated Rules as a control set with a live readiness score
Crosswalked to your other frameworks, so shared controls are evidenced once
Collect evidence in one place and reuse it everywhere

Collect once, comply everywhere

FedRAMP Consolidated Rules is tracked as its own control set in the same place as everything else you have to prove, with the same owners, evidence, and review dates. Its requirements are specific enough that they do not yet share canonical controls with the other frameworks in the catalog.

Other frameworks: ISO/IEC 27001 · CIS Critical Security Controls · PCI DSS · SOC 2 · SOX (Sarbanes-Oxley) Section 404 · NIST Cybersecurity Framework · All frameworks