Sekit GRC Platform

Sekit is a cybersecurity GRC platform (currently in beta) for consultancies and in-house compliance teams. It supports assessments against frameworks such as ISO 27001, NIS2 and SOC 2, and keeps the work in one workspace where it can be reviewed. Main functions: - Control-by-control gap analysis with evidence attached, with a compliance mode for audits and a preparation mode for planning. - A risk register with likelihood and impact scored against the organization's own criteria, owners, due dates, treatment decisions (mitigate, transfer, accept, avoid) and residual risk, shown on a heat map. - Evidence management that links policies, records and assets to controls and risks. Framework mappings let one piece of evidence serve several frameworks. - A control library with equivalences between frameworks (for example, ISO 27001 A.8.13 mapped to NIS2, SOC 2 and ENS). - Field-by-field change history for risks, controls and evidence, recording who changed what and when, and whether a person or an agent made the change. - An AI assistant (Sekura) and agents that can be connected to Claude or ChatGPT. They prepare control evaluations, such as ones based on an uploaded ISMS manual. Changes are not applied until a user approves them. - Multi-client workspaces for consultancies, and an early-access offering for internal compliance teams. Frameworks listed: ISO 27001, NIS2, SOC 2, GDPR, ENS, ISO 22301, ISO 42001, NIST CSF, NIST 800-53, CIS Controls v8, PCI DSS, HIPAA, COBIT 2019, CSA CCM and Cyber Essentials. The site offers a free start option. No pricing details are shown.