CISAPP

Product roadmap

What we're building, and why

Recently shipped features, work in progress and the topics we are exploring for third-party risk management and compliance.

Indicative roadmap: upcoming items and their timing may change. Only "Shipped" items are commitments delivered.

Export (Excel) Markdown version
Today

In progress

In active development.

  1. In progressPlatform

    Cyber news feed

    A feed of cyber and regulatory news on your dashboard, with the option to add your own sources.

  2. In progressAssessments

    End-to-end vendor assessment journey

    A single journey covers selecting a new vendor, comparing several candidates and recurring monitoring of the vendors already in place.

    NIS2DORAISO-27001View details
  3. In progressMapping

    Exposed attack surface

    Discover the domains and assets your organization exposes on the Internet, verify you own them, and follow scan progress live.

    NIS2View details
  4. In progressMapping

    Vendor mapping at scale

    A smooth map of all your vendor relationships, built for hundreds of third parties, with filters by criticality and tier.

    DORA

Up next

Planned, indicative timing.

  1. Up nextComplianceQ4 2026

    NIS2 compliance management

    Find out whether NIS2 applies to you, measure your gap against the Article 21 measures, track your action plan and link vendor assessments to the supply chain security requirement.

    NIS2View details
  2. Up nextComplianceQ4 2026

    DORA register of information

    Generate the register of information required by DORA straight from your vendor registry and mapping.

    DORA
  3. Up nextPlatformQ4 2026

    Custom dashboards

    Build your own dashboards with historical indicators, targets and ready-made templates (CISO, DPO, Procurement, executive, NIS2), then export them or schedule delivery.

    View details
  4. Up nextMappingQ1 2027

    Application inventory

    Tell apart the applications of a single vendor, the activities that rely on them, their owning teams and the data they process, so each can be assessed and tracked separately.

    View details
  5. Up nextIntegrationsQ1 2027

    AWS, Jira, Slack and GitLab connectors

    Your cloud and code evidence flows in on its own, action plans land in your tracking tools and alerts reach your team where it already works.

    • AWS
    • Jira
    • Slack
    • GitLab
    View details
  6. Up nextAssessmentsQ1 2027

    Vendor-customer document exchange

    A document space for each relationship: request a document with a due date and reminders, track its validity and share it once with several customers.

    View details
  7. Up nextComplianceQ1 2027

    Enhanced crisis management

    Regulatory notification deadlines, playbooks by incident type, structured post-mortems and impact analysis when a vendor is affected.

    NIS2DORAView details
  8. Up nextPlatformQ1 2027

    Group and subsidiary management

    Run a group and its subsidiaries from one account: dedicated roles, perimeters, shared vendors and consolidated views, with strict isolation between subsidiaries. Enterprise plan only.

    View details
  9. Up nextAssessmentsQ1 2027

    Evidence linked to questionnaire answers

    Back an answer with live evidence from your CISAPP tools or connectors instead of a static file. The customer sees a dated, verified attestation.

    NIS2ISO-27001View details
  10. Up nextAssessmentsQ1 2027

    Enhanced Trust Center

    Publish certifications, controls, subprocessors and FAQ, and share documents publicly, on request or under NDA. CISAPP customers get access in one click.

    View details
  11. Up nextComplianceQ2 2027

    Multi-framework gap analysis

    Measure your gap per framework, see what your ISO 27001 certification already covers for NIS2 or DORA, and get a prioritised remediation plan.

    NIS2DORAISO-27001View details
  12. Up nextComplianceQ2 2027

    Cyber Resilience Act compliance

    For vendors of digital products: product inventory, SBOM, vulnerability tracking and reporting within CRA deadlines.

    View details
  13. Up nextIntegrationsQ2 2027

    Azure, Google Cloud, Scaleway, OVHcloud, Linear and Aikido connectors

    All your clouds covered, European hosting providers included, your application vulnerabilities in one place and your action plans in Linear.

    • Azure
    • Google Cloud
    • Scaleway
    • OVHcloud
    • Linear
    • Aikido
    View details
  14. Up nextAssessmentsQ2 2027

    Import answers from a Trust Center

    Pre-fill an assessment from a vendor's Trust Center, with cited sources and answers pending validation.

  15. Up nextComplianceQ2 2027

    GDPR: DPIA, data subject requests and retention

    Impact assessment workflow, data subject request register with deadlines, retention policies and a data map that flags transfers outside the EU.

    RGPDView details
  16. Up nextComplianceQ2 2027

    Advanced risk management

    Risk appetite, risk indicators tracked over time, risks suggested from your assessments and monitoring, then the full EBIOS RM method.

    ISO-27001View details
  17. Up nextIntegrationsQ3 2027

    Datadog, Azure DevOps, Confluence, Riot and Akamai connectors

    Your monitoring, documentation and staff awareness become evidence, with no extra effort.

    • Datadog
    • Azure DevOps
    • Confluence
    • Riot
    • Akamai
    View details

Exploring

Under study, no date committed.

  1. ExploringCompliance

    AI Act compliance

    Register of the AI systems you use, risk classification and tracking of your deployer obligations.

    AI-ACT
  2. ExploringPlatform

    AI-assisted tailored monitoring

    Cyber and regulatory monitoring filtered on your vendors, technologies and sector, with one-click actions.

  3. ExploringAssessments

    Browser extension

    Reuse your answer library directly inside your customers' questionnaire portals.

    View details
  4. ExploringIntegrations

    Connectors under consideration: Salesforce, Zendesk, Shopify, Sage…

    These integrations are being considered next. Tell us which ones matter to you: your feedback sets the order.

    • Salesforce
    • Zendesk
    • Shopify
    • Mixpanel
    • Sage
    • Vercel
    • Zapier
    View details
  5. ExploringAssessments

    Continuous external vendor monitoring

    Complement self-declared assessments with external signals continuously observed on your vendors' exposed surface.

    NIS2
  6. ExploringAssessments

    Recommended contract clauses

    Based on a vendor's answers, CISAPP suggests suitable clauses, backed by the original answer and exportable for negotiation.

    DORANIS2View details

Something you need isn't here?

The roadmap is built with the security, procurement and compliance teams who use CISAPP. Tell us what you are missing.

Ready to take control of your third-party risk?

I'm a company

We'll get back to you within 24 hours

I'm a vendor

Immediate onboarding

Create a free account