Product Roadmap

What we've shipped & what's next

We build in the open. Here's what's live, what's in progress, and what's coming. We'll only bill for a capability once it has shipped.

Planned

4

SAML / Enterprise IdP Integration

Enterprise

Connect Okta, Azure AD, and other SAML identity providers for enterprise single sign-on.

Data Residency Options

Enterprise

Choose where your data is stored to meet regulatory requirements (EU, US, APAC).

Third-Party Risk Management

Track and assess vendor and supplier risks alongside your own risk register.

Automated Evidence Collection

Connect cloud providers, identity platforms, and code repositories to automatically collect compliance evidence.

Shipped

17

Risk Register with 5×5 heat-map scoring

Identify, score, and prioritize risks with likelihood/impact heat maps, clear ownership, and treatment tracking.

Business Impact Analysis

Map critical processes, dependencies, recovery time and point objectives.

Business Continuity Planning

Build living BCP playbooks with incident teams, recovery strategies, and vendor contacts — linked to your risks.

Compliance Tracking (SOC 2, ISO 27001, NIST CSF 2.0, HITRUST, HIPAA)

Track controls with status, ownership, and evidence across multiple frameworks.

Cost-Benefit Analysis (SLE / ARO / ROSI)

Pro

Quantify risk in financial terms and evaluate the return on security investment for proposed controls.

AI-Assisted Risk Assessment

Pro

Get likelihood & impact recommendations with reasoning and key factors, powered by AI.

AI-Generated BCP Playbooks

Pro

Describe a scenario, get a complete continuity playbook in seconds.

Natural-Language Data Queries

Pro

Ask questions in plain English and get answers grounded in your actual risk and compliance data.

NIST SP 800-30 Assessment Reports

Pro

Generate board-ready assessment reports with risk matrices, cost-benefit summaries, and executive overviews.

Industry-Tailored Sample Data (8 industries)

One-click sample data for Technology, Healthcare, Finance, Manufacturing, Retail, Education, Government, and Energy.

Per-Module Access Control (Hidden / View / Edit)

Set granular permissions per teammate per module — Risk, BIA, Continuity, Compliance, and Cost-Benefit.

MFA / Two-Factor Authentication

Pro

TOTP-based two-factor authentication for all accounts.

Single Sign-On (Google SSO)

Enterprise

Sign in with Google for Enterprise workspaces.

Custom Compliance Frameworks

Enterprise

Define your own frameworks with fully custom controls for Enterprise workspaces.

Custom AI Workflows

Enterprise

Build reusable AI-powered workflows tailored to your organization’s processes.

Workspace Branding & Logo

Pro

Customize your workspace with your company’s branding and logo.

Public API & Webhooks

Pro

Programmatic access to your risk, compliance, and continuity data with real-time webhook notifications.

Have a feature request?

Timing on a specific item can affect your decision — let us know.