Six modules. One platform.
Run one or all six. Every module sits on the same Postgres schema, so adding one is a feature flag on your deployment, not another implementation project.
Governance, Risk & Compliance
Frameworks, controls, risk, evidence. One schema, no spreadsheet rooms.
48 frameworks, plus controls, risks, policies and evidence, in one database.
Explore GRCAudit Management
Audits, findings and auditor access on the same records as your controls.
Audits, findings, a scoped auditor portal, and one-click evidence packs.
Explore AuditVendor Risk Management
Vendors, questionnaires, documents and subprocessors, tied to your controls.
Vendor register, assessments, questionnaires, documents and subprocessor tracking.
Explore Vendor RiskVulnerability Management
Thirteen scan engines, one queue, ranked by what attackers are using.
13 scan engines plus Defender and Security Hub, deduplicated, ranked by EPSS and CISA KEV.
Explore Vuln MgmtAutomated Penetration Testing
Scoped, automated pen test runs with a kill switch and a report.
Automated pen test runs with a declared scope, a kill switch and a generated PDF report.
Explore Pen TestContracts and Obligations
Agreements, renewals and obligations, linked to vendors and risk.
Agreements with versions, approvals and milestones, plus AI obligation extraction.
Explore ContractsNot sure where to start?
Start with the module that hurts most today. The rest switch on later without a migration.