The certification makes LCPtracker the sixth cloud service provider (CSP) SunStone Secure has supported to Certified status on the FedRAMP Marketplace, across both the Rev5 and 20x paths.

BELMONT, Calif.--(BUSINESS WIRE)--

SunStone Secure today announced that LCPtracker, Inc., the only provider currently in the prevailing wage and labor compliance solutions to be listed on the FedRAMP Marketplace, received FedRAMP Rev5 Class C (Moderate) Certification on May 1, 2026, sponsored by a U.S. federal agency. LCPtracker's certification program was built using SunStone's Artemis compliance automation platform.

The Artemis platform automates the compliance process by round-trip engineering the System Security Plan (SSP) and producing a gap list surfaced as actionable tickets in the customer’s ticketing system, as well as simulating and testing the specific controls to ensure audit readiness. Combined with SunStone’s advisory service, the result is 90% lower cost, with lower project risk, and faster execution for CSPs to reach assessment-ready status. SunStone’s fastest customer engagement reached assessment-completed status for FedRAMP Rev5 Moderate in six weeks from advisory program kickoff.

SunStone Artemis Integrates with Vanta and Existing Enterprise Environments

When deployed within a CSP's boundary, Artemis can use Vanta’s APIs to directly ingest data. Artemis delivers the SSP and an actionable gap list with contextualized remediation recommendations, leveraging the SOC2 and other compliance work already completed in Vanta. Remediation items surface as actionable tickets in the customer's existing ticketing system, so engineering teams act on FedRAMP gaps within the workflows they already use.

Artemis also ingests environment data from across the customer’s stack, including hyperscalers (AWS, Azure, GCP), enterprise systems, GRC platforms, as well as document stores, and builds an OSCAL-native digital twin that maps simultaneously to FedRAMP Rev5, FedRAMP 20x, and CMMC.

The combination of OSCAL-based architecture and direct GRC integrations positions Artemis as a path for cloud service providers entering federal markets without absorbing legacy certification costs. SunStone has additional CSP engagements in progress across Rev5, 20x, and CMMC.

"We evaluated 'FedRAMP enablement' platforms, but ultimately chose SunStone utilizing Vanta so we could build directly on Azure's native services. That decision reduced projected licensing costs by nearly 80%, avoided vendor lock-in, and allowed us to maintain a single security architecture across commercial and federal environments, substantially accelerating the authorization process." — Jules Panopoulos, CTO/CISO, LCPtracker, Inc

"FedRAMP has never been out of reach because of security. It's been out of reach because of cost, risk, and complexity. LCPtracker closed that gap by building on their SOC 2 program in Vanta and their existing Azure architecture rather than re-platforming onto a templated stack." — Mats Nählinder, CEO and Co-founder, SunStone Secure

About SunStone Secure

FedRAMP automation has traditionally meant replatforming onto a third-party vendor's proprietary stack: months of engineering work, years of lock-in, and documentation cycles that drag on for six months or more. SunStone built Artemis to automate the compliance process by leveraging the customer's existing environment instead. Since 2019, SunStone has advised cloud-native CSPs through to certification. The Artemis AI-native compliance automation platform builds an OSCAL-based digital twin that simultaneously maps to FedRAMP Rev5, FedRAMP 20x, and CMMC, generating same-day SSPs, gap lists, and other deliverables, and reducing certification costs by up to 90%. Learn more at sunstonesecure.com/solutions/fedramp.

About LCPtracker

LCPtracker is a leading provider of data tracking and management software solutions that assist organizations in achieving their labor compliance, workforce development, and contract compliance objectives on publicly funded projects. Its cloud-based compliance solutions give government agencies, project owners, and contractors deep visibility into certified payroll, construction site compliance, workforce demographics, and supplier diversity data. By facilitating regulatory compliance and construction workforce development initiatives, LCPtracker supports organizations in achieving their goals and creating opportunities for a brighter future. With offices in California, Texas, and Michigan, LCPtracker is a privately held company.

Visit our website at https://lcptracker.com or join the conversation on LinkedIn, Facebook, or Instagram.

View source version on businesswire.com: https://www.businesswire.com/news/home/20260813377442/en/

Source: SunStone Secure