Changelog

Improvements

• Custom pricing shows the package name agreed with your account team, instead of "Custom"

Bug fixes

• Checkout has a promotion code field, both when you subscribe and when you upgrade from a trial

Sign-up and setup

• Workspace domain join new sign-ups on your Google Workspace domain join your organization as members, once an admin turns it on
• Refreshed workspace setup a focused, step-by-step setup for new organizations

Policies

• Re-acceptance on approval when you approve a new policy version, choose whether employees must accept it again and email the people affected

Vendors

• SOC 2 report summary AI vendor diligence now summarizes a vendor's SOC 2 report

End-of-life software

• More detection scans now recognize more languages, frameworks, and runtimes, so fewer outdated components slip through unnoticed

Integrations

• GitHub rulesets branch protection tests now read GitHub rulesets as well as classic branch protection rules

Billing

• Cancel your plan cancel your subscription from the Subscription page, effective at the end of your billing period

Bug fixes

• Vendor diligence analysis works for vendors without a risk level and no longer treats Unscored vendors as Low risk
• End-of-life findings no longer label supported software as an active issue
• End-of-life scans of large repositories are no longer marked partial because of hosting config files

FedRAMP

• FedRAMP Certification Data Sharing publish a FedRAMP-compatible Trust Center under the FedRAMP Consolidated Rules for 2026, with a checklist that validates your package against FedRAMP's official schema
• Agency access verified .gov and .mil users get access instantly, and every view of your certification data is logged
• Share policies with FedRAMP mark a policy or document as shared with FedRAMP agencies while you edit it

Trust Center

• Build with SecureSlate AI generate your Trust Center content from your website, then review it before it is published

Policies and training

• Policy re-acceptance set an interval, such as every 12 months, for employees to accept a policy again even when it hasn't changed
• Training reminders email employees whose security awareness training is still outstanding
• Training auto-fix pass training completion tests using the training records SecureSlate already keeps
• Policy Library export download every policy file with a CSV summary in one zip

End-of-life software

• More runtime detection scans now read Dockerfiles, Docker Compose files, and GitHub Actions workflows
• Findings export export end-of-life findings for all your repositories to one CSV

Bug fixes

• Domain scans run again after a scanner update stopped them from starting
• Employees are only asked to accept a policy once its new version is approved
• Vendors added by the AI agent get the right business owner

Improvements

• Pages load faster across the app
• The Employees export can now include every employee's security training history
• User Access has a Sync button that refreshes accounts and MFA status on demand
• The cookie widget can be opened from your own "Cookie preferences" link, and the floating button can be hidden.
• Clearer guidance when accepting an invitation, with a direct way back to it after you verify your email

Bug fixes

• Lists such as tasks, risks, vendors, and policies keep updating live after they first load, including vendors added through the AI agent
• Pages no longer stay on a loading screen when access to a list is denied

Cookie consent

• Dark mode and compact layout choose a light or dark theme for the cookie widget, with collapsible cookie types and cleaner buttons
• Policy links add your Cookie Policy, Privacy Policy, and Terms of Service links to the banner and preferences window
• The installation guide now builds the snippet from your saved widget settings

Trust Center

• Double opt-in new subscribers confirm their email before receiving Trust Center updates, and every update email includes a one-click unsubscribe
• The subscribers list shows each subscriber's confirmation status

Device agent

• Update notifications the device agent checks for new versions and shows an Update button when one is available
• More reliable compliance reporting on unstable networks, with automatic retries

Assets and audit

• Device status in audit exports see whether each device is active, inactive, or disconnected next to its compliance flags
• Asset Management is now simply Assets, with simpler asset status charts
• Admins can assign an owner to devices that are not yet linked to an account

Dark web monitoring

• Scan a pasted list of email addresses at once

Bug fixes

• Smoother asset imports and integration connections
• Faster page loads and visual polish across the app

Integrations

• Hexnode connect your Hexnode MDM to automatically collect device compliance evidence for your controls
• Slack intergations improvements

Policies

• AI policy analysis get an automated review of how well a policy covers its mapped control
• Approval history see who approved a policy and when, across every versions

Secret detection

• Findings management ignore reviewed findings and view results across all repositories in one place

Performance

• Cloud findings and reports load significantly faster on large workspaces

Trust Center

• Custom domain publish your Trust Center on your own domain, with guided DNS setup and verification
• Refreshed layout and cleaner presentation of documents and controls

Integrations

• Google Workspace imrpovements

Bug fixes

• Clearer custom domain verification instructions
• Notion integrations bug fixes

Code security

• SBOM generate a software bill of materials from your connected repositories and review every dependency in one place
• Secret detection find credentials and API keys committed to your code, with severity and secret-type breakdowns
• End-of-life software flag packages and runtimes that no longer receive security updates

Bug fixes

• GitHub integration improved reliability for repository scans
• Improved feedback when a repository scan fails and issues.

Employee onboarding

• Customized onboarding steps tailor which steps each employee group completes, such as policies, training, or device setup.

Settings

• Scan scheduling set how often cloud, domain, and repository scans run
• Incident contacts record who should be reached during a security incident

Access reviews

• Auto-assign feature for unassigned accounts to employees in a single action

Bug fixes

• Vulnerability reports consistently
• Asset chart and SLA deadline display fixes

Vendor risk

• Diligence documents upload due diligence files to a vendor profile and get an AI-generated risk summary
• Improved vendor profile with additional fields and better information layout

Share

• Copy a direct link to any page and share it with your team

Bug fixes

• Minor reliability fixes for login and onboarding flows
• General security hardening

Employee management

• Role changes admins can now update team member roles directly from the employee list

Frameworks

• US Data Privacy new compliance framework added with pre-mapped controls
• Expanded control mappings for GDPR and HIPAA

Trust Center

• Master Service Agreement optionally require visitors to accept an MSA before accessing your Trust Center

Dark web monitoring

• Newly added team members are automatically enrolled in dark web monitoring

Bug fixes

• Notification links corrected for owner assignment emails
• Policy filtering improved for framework-mapped policies

Integrations

• Easier visibility into integrations that need attention
• Integration status stays up to date without needing to refresh

Cloud scanning

• More consistent scan results across cloud providers

Customer commitments

• Commitments view and manage the security commitments your organization has made to customers

Bug fixes

• Vulnerability severity reporting improved
• Minor display fixes across several views

Security questionnaires

• Import and answer with AI: upload a vendor or customer questionnaire (Excel/CSV) and let SecureSlate AI auto-answer questions using your Knowledge Hub.
• Pending queue: questions assigned to you surface in a dedicated inbox so nothing slips through.

Knowledge Hub

• Documents: upload policies, certifications, and other reference material that the AI draws on when answering questionnaires.
• Q&A library: build a curated set of question/answer pairs for questions you answer repeatedly. The AI uses these as the highest-confidence source.
• Sync from platform: automatically pull controls, policies, and audit evidence from your existing SecureSlate workspace into the hub.

Asset risk charts

• Asset management now includes donut charts breaking down assets by security status, giving a quick visual read on exposure across your inventory.

Bug fixes

• Questionnaire access control tightened for shared and internal accounts
• Chat loading state improved for smoother UX

Billing and subscriptions

• Ultra plan: new flat-rate annual package replacing the seat-tiered Ultimate plan, with a fixed 50-seat allocation
• Subscription changes take effect immediately; trialing accounts are billed on the new plan right away

Device agent

• Device agent pairing: connect devices to your workspace by installing the SecureSlate Device Agent and confirming a pairing code in the browser. See Setup for install steps.
• Device setup mode: organization can now choose between agent-based or manual evidence upload directly from the onboarding checklist. See General & privacy for an overview of both options.

Bug fixes

• Invitation flow reliability improved
• Security rules hardened

Cloud integrations

• GCP updated ui on the integration page, and automatic compliance re-evaluation when scans complete
• Scheduled cloud scanning across AWS, GCP, and Azure based on your configured frequency
• Compliance tests update automatically after each scheduled scan

Settings

• Scanning frequency set how often SecureSlate runs automated security scans across your environment. Available to paid plans under Settings

Bug fixes

• Compliance tests re-evaluate correctly after a scheduled scan completes
• Scan frequency settings persist correctly across sessions
• Cloud scan status recovers cleanly after an interrupted scan

Integration updates

• Cloudflare: connect Cloudflare to sync security and access permissions into your compliance workspace
• Office 365: smoother setup and configuration for Office 365 integrations

Cloud integrations

• GCP: full cloud scanning with a new Checks tab, legacy test detection, and clean disconnect that removes associated records
• AWS: streamlined CloudFormation setup, safer scan starts, automatic test re-evaluation after scans, and HIPAA control mapping
• Azure: Cloud Shell-based setup, clearer scan status reporting, and more helpful connection guidance
• More dependable cloud scan scheduling across AWS and Azure

Vendor and audit

• Vendor due diligence export: download vendor assessment data as a ZIP from the vendor page for audit
• Sort the audit list by creation date

Employee onboarding

• HIPAA Training is available as a built-in resource in employee onboarding

Bug fixes

• Improved magic link sign-in reliability when verifying email addresses
• Invitation page now loads consistently during account creation
• Session timeout settings now apply correctly across all supported browsers
• Cloud scan frequency settings now display for eligible accounts
• Clearer error messaging during integration authorization

Integration updates

Microsoft SharePoint

Connect Microsoft SharePoint to sync policies and documents directly into SecureSlate. Pick the site you want to sync from, and SharePoint files are automatically detected and mapped to the corresponding policies and documents. Approved files can be published to your trust center without leaving SecureSlate. View setup guide

Policies and documents

• SharePoint connection status is now visible in the Add and Edit dialogs so you can see at a glance whether a document is linked
• SharePoint sync now supports Word, PDF, and Excel (.xlsx) files
• Integration setup guide links added directly to the connection drawer

Frameworks

ISO 9001:2015

Updated ISO 9001:2015 for better coverage and mapping. Clauses 4–10 are available in the Add Manual Control drawer and Map Framework dialog, with a full template and control library included.

Multi-framework mapping

Controls can now be mapped across multiple frameworks in the same workflow. Framework detail pages show full clause and article titles as subgroup headers so mapped controls are easier to find.

Bug fixes

• Fixed issue in session timeouts
• Fixed framework controls page issues

Integration updates

Hetzner Cloud

Connect your Hetzner Cloud account to sync server assets automatically into SecureSlate. SSH firewall rules are evaluated against your compliance controls, and stale assets are cleaned up as your infrastructure changes. View setup guide

Vulnerability management

• Vulnerability drawer rebuilt with AI remediation guidance as the primary action
• Repository vulnerabilities now stored for faster retrieval
• Issues Outside SLA report now includes interactive breakdown charts
• New Trend over time report for open issue volume

Navigation and UX

• Previous / next navigation added to all detail drawers
• Animated content transitions in drawers with state resets between records

Policies

• Policy versioning, version history tracked per policy with a new version dialog
• Whistleblowing channel integrated into the public page automation flow

Integration updates

Railway

Connect your Railway account to bring Railway projects into SecureSlate alongside the rest of your connected infrastructure.

Bug fixes

• Fixed cloud issue drawer portal blocking table row actions
• Fixed drawer z-index conflict breaking Select and Dropdown components
• Fixed active element blur during drawer keyboard navigation
• Fixed outside-in scan remediation guidance not appearing for failed checks
• Fixed source filtering and messaging in reports

Dashboard

• Vendor Management card added for quick risk posture visibility
• Dark Web Monitoring card enhanced with drill-down support
• Framework Card links to filtered controls per framework status
• Risk heatmap cells now interactive, click to drill down to filtered risks

AI

• AI Risk Assessment Card scores risk posture automatically from connected integration data

Integration updates

Asana

Connect Asana to manage compliance-related tasks directly from your existing workflow. Asana projects and tasks are mapped to the relevant compliance tests automatically. View setup guide

Performance

• Tests promoted to a top-level sidebar item
• Eager prefetching across Asset Management, Trust Center, and sibling tabs
• Spinner component standardized and navigation performance improved

Policies

• Policy renewal UI, a dedicated workflow for renewing policies with status tracking

Filtering

• Controls page now supports assignee filtering
• Risk, user access, and test components updated with consistent filter behavior

Bug fixes

• Fixed custom control removal not showing feedback or resetting state

Integration updates

Azure

Connect Azure Defender to SecureSlate to trigger scans and sync cloud assets. The setup follows the same wizard flow as AWS for a consistent onboarding experience. View setup guide

Salesforce

Connect Salesforce via OAuth to bring your CRM data into your compliance workflow. Salesforce is mapped to the relevant automated compliance tests automatically. View setup guide

MongoDB Atlas

Connect MongoDB Atlas via your group ID to discover and manage database assets within SecureSlate. Asset deletion is also handled automatically as resources are removed. View setup guide

1Password

Connect 1Password to map your password manager usage to the relevant compliance controls with automated test coverage. View setup guide

Deel

Connect Deel to bring HR and contractor data into your compliance workflow with automated control test coverage. View setup guide

Authentication

• GitHub sign-in added alongside email and magic link

Vulnerability management

• Create and link Jira issues directly from any vulnerability finding

Platform

• Audit UI overhauled for cleaner navigation and faster evidence review
• Domain scanner improved with better subdomain coverage

Bug fixes

• Fixed payment price total display in settings
• Fixed Bitbucket integration scope being too broad

Integration updates

Auth0

Connect Auth0 to sync your rules, actions, and hooks into SecureSlate. Auth0 data is mapped to the relevant compliance tests automatically. View setup guide

Netlify

Connect Netlify to bring your deployment infrastructure into your compliance posture with automated compliance test support.

GCP

GCP integration is now complete, covering cloud vulnerabilities, inventory, access management, and a full suite of integration tests. Keyless authentication is supported alongside standard credential-based setup. View setup guide

AWS CloudFormation

A one-click CloudFormation stack setup is now available for AWS onboarding, replacing the previous manual IAM role creation flow for a faster and more reliable connection. View setup guide

Dark web monitoring

• Track breach exposure across your domains, view breach history, and trigger manual rescans

Onboarding

• Getting Started workflow introduced, a guided checklist accessible from the sidebar

Bug fixes

• Fixed AWS connect flow copy and ARN gating in the role permissions UI
• Fixed Aikido scanner feedback state not updating correctly after a scan

Framework updates

CMMC

SecureSlate now supports the Cybersecurity Maturity Model Certification framework. CMMC controls are mapped across your existing tests and evidence, giving you a clear view of where you stand against each maturity level.

ISO 42001

SecureSlate now supports ISO 42001, the international standard for AI Management Systems. Controls are mapped to your existing compliance posture so you can track readiness without starting from scratch.

Audits

• Audit workflow updated with improved scope handling and status tracking

Trust Center

• Trust Center setup overhauled with better structure and custom domain support

Bug fixes

• Fixed Office365 integration mapping and data handling issues
• Fixed mobile responsive layout and middleware issues