# Fortreum Launches FedRAMP Vulnerability Service

Fortreum announced general availability of an annual-subscription Vulnerability Detection and Response (VDR) and Vulnerability Evaluation and Reporting (VER) service, combining its Kovr platform with assessment and implementation support for FedRAMP-certified cloud service providers. The requirements become mandatory on December 7, 2026, with a grace period through March 7, 2027. The launch creates a near-term commercial offering for CSPs preparing vulnerability evaluation, remediation, and reporting workflows, as well as potential work for contractors providing related assessment and compliance support.

- FedRAMP-certified CSPs must address the new VDR/VER requirements beginning **December 7, 2026**; the grace period runs through March 7, 2027.
- Companies serving CSPs can assess demand for vulnerability assessment, compliance automation, remediation workflow, and reporting support ahead of the deadline.
- CSPs can evaluate Fortreum’s annual subscription, which bundles Kovr with onboarding and professional services; pricing was not stated. Fortreum also offers a 30-minute scoping session.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity, Regulatory Compliance
**Published:** November 12, 2026

### Government Entities
- Federal Risk and Authorization Management Program (FedRAMP)
- Federal agencies

### Vendors
- Fortreum (Provider of VDR/VER subscription and implementation services)

### Key Quotes
> FedRAMP did not simply add a rule. It changed the unit of work from the scan to the decision. Every finding now needs a defensible determination on a clock, and the people best placed to build that logic are the people who assess it. Customers walk into an agency review with the confidence of knowing they have the answers.
> — Andy Black, Chief Strategy Officer, Fortreum

### Sources
- [Fortreum Launches VDR/VER, Powered by Kovr, Ahead of FedRAMP’s Dec. 7 Vulnerability Deadline](https://www.businesswire.com/news/home/20261112826680/en/Fortreum-Launches-VDRVER-Powered-by-Kovr-Ahead-of-FedRAMPs-Dec.-7-Vulnerability-Deadline) - Business Wire
- [Fortreum Launches VDR/VER, Powered by Kovr, Ahead of FedRAMP’s Dec. 7 Vulnerability Deadline](https://finance.yahoo.com/technology/ai/articles/fortreum-launches-vdr-ver-powered-210200266.html) - Yahoo Finance