What we've shipped & what's next
We build in the open. Here's what's live, what's in progress, and what's coming. We'll only bill for a capability once it has shipped.
Planned
4SAML / Enterprise IdP Integration
EnterpriseConnect Okta, Azure AD, and other SAML identity providers for enterprise single sign-on.
Data Residency Options
EnterpriseChoose where your data is stored to meet regulatory requirements (EU, US, APAC).
Third-Party Risk Management
Track and assess vendor and supplier risks alongside your own risk register.
Automated Evidence Collection
Connect cloud providers, identity platforms, and code repositories to automatically collect compliance evidence.
Shipped
23Risk Register with 5×5 heat-map scoring
Identify, score, and prioritize risks with likelihood/impact heat maps, clear ownership, and treatment tracking.
Business Impact Analysis
Map critical processes, dependencies, recovery time and point objectives.
Business Continuity Planning
Build living BCP playbooks with incident teams, recovery strategies, and vendor contacts — linked to your risks.
Compliance Tracking (SOC 2, ISO 27001, NIST CSF 2.0, HITRUST, HIPAA + AI governance)
Track controls with status, ownership, and evidence across nine frameworks — including AI governance (ISO 42001, NIST AI RMF, EU AI Act).
Cost-Benefit Analysis (SLE / ARO / ROSI)
ProQuantify risk in financial terms and evaluate the return on security investment for proposed controls.
AI-Assisted Risk Assessment
ProGet likelihood & impact recommendations with reasoning and key factors, powered by AI.
AI-Generated BCP Playbooks
ProDescribe a scenario, get a complete continuity playbook in seconds.
Natural-Language Data Queries
ProAsk questions in plain English and get answers grounded in your actual risk and compliance data.
NIST SP 800-30 Assessment Reports
ProGenerate board-ready assessment reports with risk matrices, cost-benefit summaries, and executive overviews.
Industry-Tailored Sample Data (8 industries)
One-click sample data for Technology, Healthcare, Finance, Manufacturing, Retail, Education, Government, and Energy.
Per-Module Access Control (Hidden / View / Edit)
Set granular permissions per teammate per module — Risk, BIA, Continuity, Compliance, and Cost-Benefit.
MFA / Two-Factor Authentication
ProTOTP-based two-factor authentication for all accounts.
Single Sign-On (Google SSO)
EnterpriseSign in with Google for Enterprise workspaces.
Custom Compliance Frameworks
EnterpriseDefine your own frameworks with fully custom controls for Enterprise workspaces.
Custom AI Workflows
EnterpriseBuild reusable AI-powered workflows tailored to your organization’s processes.
Workspace Branding & Logo
ProCustomize your workspace with your company’s branding and logo.
Guided CSV Bulk Import for Risks
Bring your existing risk spreadsheets in with a step-by-step wizard — upload, auto-mapped columns, preview, then import hundreds of risks at once.
Risk Tagging & Filtering
Add custom tags to any risk and filter or search your register by them for faster slicing across teams, projects, and themes.
Audit-Readiness Score per Framework
See a weighted readiness score for each compliance framework — blending control implementation, evidence coverage, and review timeliness — right on your dashboard.
Risk Acceptance Workflow
Formally accept risks with documented sign-off, rationale, and a re-review date so accepted risks never fall off the radar.
Review-Date Calendar
A unified monthly calendar of upcoming review dates across compliance plans, continuity plans, tasks, and risk targets — with overdue alerts.
Public Trust Page
Share your security and compliance posture with customers and auditors through a polished, public-facing trust page.
Public API & Webhooks
ProProgrammatic access to your risk, compliance, and continuity data with real-time webhook notifications.
