In This Article
Customer Story · FedRAMP 20x
Manual FedRAMP took four people working full-time. Vbrick is building FedRAMP 20x with Paramify instead — no extra headcount required.
“If Paramify went away, I’d have to invent Paramify. That’s how important it is to us getting compliant, becoming certified with FedRAMP 20x. It’s absolutely essential.”
The Pain of Doing Compliance the Old-Fashioned Way
Vbrick runs enterprise video at scale for large organizations — managing it, distributing it, and unlocking its value through integrations with Salesforce, ServiceNow, Zoom, Microsoft, and AI.
Vbrick has held Legacy FedRAMP Certification at the Class B (Low) impact level since February 2019. They know that this certification opens the door to a huge number of federal customers.
Getting certified, and staying there, meant running Rev 5 the way most cloud service providers still do.
A lot of manual pain.
Picture a team of 4 working fulltime to track everything across spreadsheets, Word docs, and Jira tickets.
Worse, the work came due all at once, every year. Todd Kistner, VP of Cloud Operations even had to spend his whole Labor Day weekend just writing documentation one summer — a task that did nothing to actually make the platform more secure.
Compliance was a resource drain, not a security program, and everyone involved knew it.
“I remember one time I spent the entire Labor Day weekend just writing documentation. Four-day weekend, 12-hour days in front of the computer. I’m glad I don’t have to do that anymore.”
A Higher Bar for FedRAMP 20x
FedRAMP 20x changes the equation in both directions at once.
1: The agency sponsor blocker is gone. The door is open to more agencies faster.
2: Continuous, machine-readable evidence of security outcomes, generated and validated in real time is required to get there.
Vbrick priced out what building that by hand would take, on top of a team already stretched thin by Rev 5, and landed on one or two more full-time hires just to keep pace.
CTO Shailesh Lohiya put it bluntly: without the right tool, getting there "is most likely not possible."
A Tool Built for 20x
Vbrick shopped the GRC market and ran into the same issue most CSPs find:
Most vendors bolt 20x language onto tools built for the old annual-audit mode. It’s new marketing, but the same static documents and manual process underneath.
But Paramify's architecture was actually built for the task. The model is data-centric where a control lives as a single field, not a paragraph copied into a spreadsheet, a Word doc, and a Jira ticket.
You make an update once and it cascades automatically to every framework and requirement it touches.
The output is machine-readable by default, and evidence is collected and validated through API integrations against Vbrick's actual infrastructure — pass, fail, or partial, not a screenshot pasted into a slide. The headcount Vbrick priced out was never needed.
Todd Kistner felt the difference immediately:
“Paramify does one thing that I’ve never been able to do... cross-reference the work I’m doing on one thing with all of the other requirements that it applies to. Here I can just click one place, get a list, and I know what I have to address. It’s better and it’s faster.”
Better Security, Faster with Paramify
Kistner estimates Paramify saves him close to a day of work a week, and the annual fire drill — the Labor Day weekends, the twelve-hour days — is gone.
What replaced it matters more than the hours back.
As CIO Terry Medhurst puts it, the team is "actually able to focus more on real security work. Rather than demonstrating the state of a system during an annual audit, we're actually able to demonstrate our security status on an ongoing basis."
Vbrick is pointing that same trust center at enterprise customers now too, not just federal ones. They use one continuously updated source of truth to serve both audiences instead of two separate paper trails.
Vbrick CEO and Chairman Paul Sparta sums up Paramify in one line: the new process is simpler, faster, and better than the one it replaced.
If you're serious about 20x, this is what the difference looks like.
Schedule a demo to see how Paramify supports FedRAMP 20x, check out our pricing to plan your path, or reach out with any questions — our team loves to help.
.avif)
.svg)
.svg)
%20the%20requirements%20and%20who%20needs%20it.webp)
