Product Roadmap

What we've shipped & what's next

We build in the open. Here's what's live, what's in progress, and what's coming. We'll only bill for a capability once it has shipped.

Planned

4

SAML / Enterprise IdP Integration

Enterprise

Connect Okta, Azure AD, and other SAML identity providers for enterprise single sign-on.

Data Residency Options

Enterprise

Choose where your data is stored to meet regulatory requirements (EU, US, APAC).

Third-Party Risk Management

Track and assess vendor and supplier risks alongside your own risk register.

Automated Evidence Collection

Connect cloud providers, identity platforms, and code repositories to automatically collect compliance evidence.

Shipped

23

Risk Register with 5×5 heat-map scoring

Identify, score, and prioritize risks with likelihood/impact heat maps, clear ownership, and treatment tracking.

Business Impact Analysis

Map critical processes, dependencies, recovery time and point objectives.

Business Continuity Planning

Build living BCP playbooks with incident teams, recovery strategies, and vendor contacts — linked to your risks.

Compliance Tracking (SOC 2, ISO 27001, NIST CSF 2.0, HITRUST, HIPAA + AI governance)

Track controls with status, ownership, and evidence across nine frameworks — including AI governance (ISO 42001, NIST AI RMF, EU AI Act).

Cost-Benefit Analysis (SLE / ARO / ROSI)

Pro

Quantify risk in financial terms and evaluate the return on security investment for proposed controls.

AI-Assisted Risk Assessment

Pro

Get likelihood & impact recommendations with reasoning and key factors, powered by AI.

AI-Generated BCP Playbooks

Pro

Describe a scenario, get a complete continuity playbook in seconds.

Natural-Language Data Queries

Pro

Ask questions in plain English and get answers grounded in your actual risk and compliance data.

NIST SP 800-30 Assessment Reports

Pro

Generate board-ready assessment reports with risk matrices, cost-benefit summaries, and executive overviews.

Industry-Tailored Sample Data (8 industries)

One-click sample data for Technology, Healthcare, Finance, Manufacturing, Retail, Education, Government, and Energy.

Per-Module Access Control (Hidden / View / Edit)

Set granular permissions per teammate per module — Risk, BIA, Continuity, Compliance, and Cost-Benefit.

MFA / Two-Factor Authentication

Pro

TOTP-based two-factor authentication for all accounts.

Single Sign-On (Google SSO)

Enterprise

Sign in with Google for Enterprise workspaces.

Custom Compliance Frameworks

Enterprise

Define your own frameworks with fully custom controls for Enterprise workspaces.

Custom AI Workflows

Enterprise

Build reusable AI-powered workflows tailored to your organization’s processes.

Workspace Branding & Logo

Pro

Customize your workspace with your company’s branding and logo.

Guided CSV Bulk Import for Risks

Bring your existing risk spreadsheets in with a step-by-step wizard — upload, auto-mapped columns, preview, then import hundreds of risks at once.

Risk Tagging & Filtering

Add custom tags to any risk and filter or search your register by them for faster slicing across teams, projects, and themes.

Audit-Readiness Score per Framework

See a weighted readiness score for each compliance framework — blending control implementation, evidence coverage, and review timeliness — right on your dashboard.

Risk Acceptance Workflow

Formally accept risks with documented sign-off, rationale, and a re-review date so accepted risks never fall off the radar.

Review-Date Calendar

A unified monthly calendar of upcoming review dates across compliance plans, continuity plans, tasks, and risk targets — with overdue alerts.

Public Trust Page

Share your security and compliance posture with customers and auditors through a polished, public-facing trust page.

Public API & Webhooks

Pro

Programmatic access to your risk, compliance, and continuity data with real-time webhook notifications.

Have a feature request?

Timing on a specific item can affect your decision — let us know.