Back to the registry
Agent passport

InfusionPoints XBU40 with Command Center + Fortreum Audit Services

InfusionPoints · Intelligence & Research

No attestation published

Certification per AWS Marketplace.

Provenance reach3 of 12 layers traced

Evidence tier Source Confirmed · 4 captures on record

User ratingNot rated0 reviews on the listing
Runs onUnknownProfessional service
ProvenanceUnknown33% of the provenance layers this product can disclose
Evidence riskHighSign in to see the basis for this band.

What the publisher says

As described on AWS Marketplace.

InfusionPoints’ Command Center on XBU40, bundled with Fortreum’s 3PAO audit services, offers a comprehensive package to help cloud service providers achieve SOC 2 certification and FedRAMP 20x Low authorization efficiently in their AWS environments. This professional services offering is designed to directly support AWS-native services (e.g., CloudTrail, Config, GuardDuty) and third-party compliance tools available on AWS Marketplace, such as vulnerability scanners, SIEMs, and endpoint protection platforms.

This AWS Marketplace solution includes:

Show the rest of the publisher’s description (9 more lines)

Command Center – a secure, cloud-native platform for automated compliance management, centralized logging, and continuous monitoring. It integrates with AWS services and third-party security solutions (e.g., CrowdStrike, Tenable, Graylog) to consolidate evidence and support ongoing FedRAMP control assessments.

AuditShield – an automated compliance engine that maps evidence from AWS and Marketplace-listed tools to FedRAMP controls, providing real-time audit readiness aligned with FedRAMP 20x Key Security Indicators (KSIs). AuditShield ensures audit tasks are tracked, completed, and continuously updated using automated data sources.

Fortreum 3PAO Services – an accredited Third Party Assessment Organization (3PAO) providing FedRAMP and SOC 2 validation and advisory services to reduce audit risk and accelerate time-to-authorization.

This bundle helps customers achieve key cloud outcomes, including:

Streamlined SOC 2 and FedRAMP audit readiness

Real-time compliance posture visibility using integrated AWS and third-party Marketplace tools

Reduced manual audit preparation through automation

Secure, cloud-native zero trust architecture and compliance pipelines

Validated under the FedRAMP 20x Phase One (20xP1) pilot, this solution simplifies compliance while reducing risk, manual burden, and time to authorization.

Highlights

Highlighted by the publisher on AWS Marketplace.

Automated SOC 2 & FedRAMP 20X Compliance: XBU40+Command Center streamlines continuous monitoring and automated evidence collection to support both SOC 2 certification and FedRAMP 20X Low authorization requirements—reducing manual effort and audit preparation time.

Integrated 3PAO Assessment with AuditShield: Fortreum’s accredited 3PAO services leverage AuditShield’s automated compliance tooling to perform machine-readable validation and deliver comprehensive security assessments for FedRAMP and SOC 2 frameworks.

Cloud-Native, Zero Trust Security Architecture: Designed for modern cloud environments, the solution uses zero trust access controls and secure automation pipelines to ensure scalable, resilient protection with real-time visibility and rapid incident response.

Agent build and provenance

See the full provenance

The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.

Sources

Marketplace listingaws.amazon.comSource
App certificationaws.amazon.comSource

Linked repositories

RepositoriesUnknownUnknown

Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.

Pricing
Unknown
Not stated
Delivery
Professional service
info@infusionpoints.com
Open the source listing ↗

Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.