Built for security, compliance, and engineering teams

Automatic sync with configurable intervals keeps your data fresh. Incremental updates ensure only changed issues are fetched, minimizing API calls. Run custom JQL queries directly from your dashboards.

• Automatic and manual sync triggers
• Incremental updates via last-modified tracking
• Configurable sync intervals (hourly, daily, custom)
• Direct JQL query execution from dashboard widgets

Build the exact view your team needs. Drag-and-drop widgets onto a flexible grid, create unlimited dashboards per tenant, and share configurations via JSON import/export.

• Drag-and-drop widget placement on a responsive grid
• Unlimited custom dashboards per tenant
• JSON-based import and export for sharing configurations
• Per-user widget dimension preferences

Go beyond basic charts. Track velocity trends with Bollinger bands, analyze cycle time distributions with kernel density estimation, and monitor throughput with moving averages.

• Velocity trends with Bollinger band overlays
• Cycle time and lead time distributions (KDE)
• Throughput tracking with configurable moving averages
• Scatter-density plots for estimation accuracy

Understand how work flows across your team. Per-member breakdowns reveal workload distribution, sprint-by-sprint analytics highlight estimation accuracy, and comparative views surface bottlenecks.

• Per-member workload distribution charts
• Sprint analytics with velocity per assignee
• Estimation accuracy tracking (story points vs. actual)
• Work-in-progress limits and queue depth monitoring

Score your security maturity across NIST CSF 2.0, CIS Controls v8, NIST 800-53, OWASP Top 10, MITRE ATT&CK, and CISA Zero Trust. Radar charts, control tracking, and framework coverage in one place.

• NIST CSF 2.0, CIS Controls v8, NIST 800-53, OWASP Top 10
• MITRE ATT&CK framework coverage mapping
• CISA Zero Trust Maturity Model (ZTMM)
• Radar charts and maturity scores per category

Log and manage security incidents through the full NIST SP 800-61 lifecycle. Timeline tracking, severity classification, response actions, and post-incident reviews with MTTI/MTTR metrics.

• Full lifecycle: Detection through Post-Incident Review
• Timeline log with response actions and CAPA linkage
• MTTI and MTTR metrics per incident
• Severity classification and escalation tracking

Track vulnerabilities from discovery to remediation. Record CVSS 3.1 scores, assign severity, link to affected systems, and monitor open versus resolved counts over time with SLA deadlines.

• CVE tracking with CVSS 3.1 scoring
• Severity classification and remediation SLAs
• Affected system and asset linkage
• Open vs. resolved trend monitoring

Maintain a catalog of threat actors, indicators of compromise, and campaign records. Classify by type and sophistication using MITRE ATT&CK v14 and STIX 2.1 vocabulary.

• Threat actor catalog with MITRE ATT&CK mappings
• Indicator of compromise (IOC) tracking
• STIX 2.1 vocabulary for threat classification
• Control coverage mapping for each threat

Register and track hardware, software, data assets, and services. Classify by confidentiality, integrity, and availability. Map assets to risks, vulnerabilities, and controls.

• CIA classification (Confidentiality, Integrity, Availability)
• Asset ownership and lifecycle tracking
• Mappings to risks, vulnerabilities, and controls
• ISO 27001 A.8 compliant asset register

Track controls across ISO 27001:2022, SOC 2, GDPR, PCI DSS, HIPAA, CMMC, and 25+ frameworks. Evidence library, audit readiness scores, and exportable review logs for every engagement.

• 25+ frameworks including ISO 27001, SOC 2, GDPR, PCI DSS, HIPAA
• Evidence library with upload, expiry, and coverage tracking
• Audit readiness scoring per framework
• Exportable review logs and audit trails

Log risks with ISO 31000 methodology. Track treatment actions, assign ownership, and manage corrective and preventive actions (CAPA) linked to compliance controls.

• Risk registry with 5x5 likelihood-impact heatmap
• Treatment action assignment and tracking
• CAPA log with root cause and effectiveness review
• ISO 31000:2018 risk assessment methodology

Manage your Register of Processing Activities (ROPA) and Data Protection Impact Assessments (DPIA). Built for GDPR Article 30 and Article 35 compliance.

• ROPA — Article 30 record of processing activities
• DPIA — Article 35 data protection impact assessments
• Processing activity classification and lawful basis tracking
• Data subject request workflow

Create, version, approve, and publish organisational policies. Track employee attestations and map policies to compliance controls for auditor-ready evidence.

• Full policy lifecycle: Draft to Published to Retired
• Version history with diff comparison
• Employee attestation tracking per policy version
• Policy-to-control mapping across frameworks

Track training programs, campaigns, and individual completion records. Supports security awareness, phishing simulation, and compliance training. Produces completion evidence for auditors.

• Training program and campaign management
• Individual completion tracking and records
• Phishing simulation campaign support
• Auditor-ready completion evidence reports

Monitor regulatory updates from GDPR, NIS2, DORA, and more. Assess impact on your controls and policies, plan remediation, and stay ahead of audit findings.

• Regulatory change monitoring across jurisdictions
• Impact assessment on existing controls and policies
• Remediation planning with ownership and deadlines
• Framework-to-regulation cross-reference

Each tenant operates in complete isolation. Separate Jira credentials, independent databases, and role-based access ensure your data stays private and secure.

• Complete data isolation between tenants
• Per-tenant Jira and GitLab credentials
• Role-based access control (Admin, User, Viewer)
• Tenant-scoped API keys and sessions

Connect your GitLab instance for full development lifecycle visibility. Track pipeline success rates, merge request throughput, and CI/CD performance alongside your Jira data.

• Pipeline analytics and success rate tracking
• Merge request throughput and review time
• CI/CD visibility with stage-level breakdowns
• Unified dashboards combining Jira and GitLab data

Fully documented REST API built on OpenAPI 3.1. Create API keys with granular scopes, integrate with external tools, and automate workflows with webhook support.

• OpenAPI 3.1 specification with Swagger UI
• API key creation with granular scope control
• Webhook support for real-time event notifications
• Programmatic dashboard and data management