SimpleRisk Extras
Do more with SimpleRisk Extras
SimpleRisk Core is free and open source. Extras add the advanced capabilities and integrations that scale your GRC program: unlock what you need, when you need it.
Registration Required
Free to unlock — just register your SimpleRisk instance.
Standard Extras
$5,000/yr each before discounts — add the ones your program needs.
Advanced Search
Search all of your risk data by keyword or number from the top bar, so the risk you need is never more than a query away.
API
Automate SimpleRisk with a RESTful API. Script interactions with CMDBs, ticketing, and BI tools using the infrastructure you already run.
Artificial Intelligence
AI-assisted risk analysis, FAIR assessments, and tailored documentation, built from your organization's own profile and needs.
Custom Authentication
Add Active Directory (LDAP) and SAML single sign-on so users authenticate through the directory you already run, with access that follows your policies.
Customization
Add custom fields and forms and build page templates that match your naming conventions, so SimpleRisk fits how your team already works.
Email Notification
Send automatic email alerts when risks are submitted or changed, plus scheduled reminders when reviews are due, so nothing slips through.
Encrypted Database
Encrypt sensitive risk data at rest with AES-256, so it can only be read or changed through SimpleRisk. Helps meet PCI DSS, HIPAA, and FIPS.
Import-Export
Import an existing risk register by mapping a CSV to SimpleRisk's fields, and export risks, mitigations, and reviews whenever you need them.
Jira Integration
Two-way sync of risk, mitigation, and review data between SimpleRisk and Jira. Work created in either system shows up in the other.
Risk Assessment
Build custom questionnaires with logic, send them to contacts, and turn the results into tracked risk, then compare answers over time.
Team-Based Separation
Assign risks to teams so members see only what they own, keeping everyone else out on a need-to-know basis.
Unified Compliance Framework
Map your controls to UCF's common control framework and test once to satisfy many, through SimpleRisk's UCF partnership.
Vulnerability Management
Turn vulnerability scans into tracked risk. Import from Rapid7, Tenable, and Qualys, cut the noise, and manage findings through mitigation.
Workflows
Design custom approval and review workflows, route tasks automatically, and keep oversight across your whole GRC program.
Premium Extras
$10,000/yr each before discounts — advanced capabilities for larger programs.
Incident Management
Run incident response on the NIST 800-61 methodology inside your GRC platform: submit, assign, prioritize, and tie incidents to risk.
Organizational Hierarchy
Structure SimpleRisk around business units and teams, and scope what each user can see, so a large organization can run one platform.