What's new in GRCEye
Every major feature we've shipped, in order — from the first release to this week.
Today
We're building in public — the next release is already underway.
September 2026
Full Arabic & French localization
Translation now reaches every corner of the product: UI text, in-app notifications, emails, generated PDFs, API error messages, and even the shared threat-intelligence feed.
New trilingual documentation site
A searchable, self-service documentation site in English, French and Arabic replaces the old in-app help pages.
On-premises licensing & offline installer
Online license activation for on-premises customers, plus a fully offline appliance installer for air-gapped environments.
August 2026
MFA enforced at login; Asset Cartography ships
Two-factor authentication becomes a mandatory second login step for enrolled accounts, and the Asset Cartography graph screen goes live alongside a risk-scenario timeline view.
Tamper-evident activity log & Two-Factor Authentication
The audit trail becomes cryptographically hash-chained and independently verifiable; TOTP-based two-factor authentication and an active-sessions view arrive in Settings.
Vulnerability scanner connectors & OCR document capture
Sync findings live from vulnerability scanners, and turn scanned documents into structured data with OCR — French recognition at launch.
RACI matrix, document repository & advanced reporting
A RACI accountability matrix, a governance document repository, records archiving with retention rules, an Advanced Report Builder with Excel export, and 7 new per-module analytics dashboards.
CVE Knowledge Base, Risk Treatment Plans & enterprise SSO
A CVE database synced from the NVD with CVSS scoring, richer Threat Library profiles, formal Risk Treatment Plans, Active Directory/LDAP single sign-on, and Oracle/SQL Server support for enterprise deployments.
Elite tier launches: Asset Cartography & valuation
A new top-tier plan debuts with an interactive asset relationship graph, CIA-based asset valuation, lifecycle tracking and ownership fields.
May 2026
Five GCC regulatory frameworks added
Saudi NCA ECC-2:2024, UAE NESA IAS, Dubai DESC ISR, Qatar NIA CSF and Bahrain CBB ISR join the built-in framework library.
April 2026
Applied Controls, Exceptions, Trust Center & Webhooks
Track controls by cost, effort and progress, formalize risk exceptions, publish a public Trust Center page, fire outbound webhooks, and keep a full activity audit trail.
Risk Scenarios, custom matrices & Monte Carlo quantification
Model Threat → Vulnerability → Asset → Control chains, define your own probability/impact scales, and quantify risk financially with Monte Carlo simulation (ALE/SLE/P90/P95).
Incident, Vulnerability & Threat management
A full security-operations suite ships in one release: categorized Incident Management with a timeline, Vulnerability Management with CVE/CVSS tracking, and a Threat Library.
AI-assisted vendor contract review
Upload a vendor contract and get an AI-assisted review as part of the TPRM workflow.
March 2026
AI Document & Policy Generator
Draft security policies and compliance documents with AI, then export them to CSV or styled HTML.
English & French localization, guided onboarding
The platform ships bilingual, with a guided onboarding tour and a starter Information Security Policy template for new tenants.
Full audit lifecycle and Auditor Portal
A complete audit management module ships alongside a dedicated Auditor Portal, a Remediation Planner and a cross-framework Traceability view.
AI-assisted audit, risk and vendor analysis
The first AI-powered features ship, backed by a self-hosted model rather than a third-party API: AI assistance for audit planning, risk analysis and vendor assessment.
February 2026
Platform launch: Vendor Risk & Compliance Assessments
GRCEye launches with a full Vendor Risk Management (TPRM) module and a Compliance Assessment engine, including a custom framework builder, evidence upload and per-control tracking.
Building in public since February 2026.
See it running on your own frameworks
Start a free trial, or read the docs to see how each feature fits together.