BetaCybersecurity GRC · for consultancies and companies
The GRC workspace for teams and their agents
Assess against ISO 27001, NIS2, SOC 2 and more, run a living risk register and keep every piece of evidence on the record. Connect Claude or ChatGPT, and the work lands where you can check it.
The manual covers two controls in this analysis. Here are the grades; neither applies until you approve it.
- status
- Pass
- summary
- The policy is approved by the board, has an owner and is reviewed every year.
- status
- Partial
- summary
- The roles are in the manual, but no one is assigned to incident management.
Teams working with Sekit
Cross-walked across the frameworks your auditors ask for
Agentic GRC for consulting firms and in-house compliance teams
Consulting firms
Run every client's security programme from one workspace
For cybersecurity and GRC consultancies, from independent consultants to small firms. Assessments, risk registers, evidence collection and client reports, with agents doing the groundwork and you making the calls.
In-house compliance teamsEarly access
Own your compliance programme without a big GRC team
For companies that run security and compliance themselves. Assess against the framework you answer to, keep a living risk register, attach your own evidence and show an auditor or your board the trail.
Know where each control stands
Evaluate a framework control by control, with the evidence on the table. Compliance mode for the audit, readiness mode for the plan. The picture forms in hours, not weeks.
Findings become decisions
A living risk register: likelihood and impact against your own criteria, owners, treatment and the residual risk you accept. On a heatmap anyone in the room understands.
Explore risk managementMandatory MFA on email for all staff. Linked to controls 5.15 and 8.5.
Encrypted daily backups and a successful restore test in Q3.
- NIS2 Directive (EU 2022/2555)
21(2)(c) - SOC 2 Trust Services Criteria
A1.2 - Esquema Nacional de Seguridad
mp.info.6
Every claim, traceable
Policies, records and assets attach to controls and risks. Cross-walked frameworks mean one piece of evidence answers several auditors at once.
Explore evidenceEvery change, on the record
Field-level history for every risk, control and piece of evidence: who changed what, when, and whether a person or an agent did it. The trail you hand an auditor or your board.
Your AI does the work. Sekit is where it lands
Connect Claude or ChatGPT over MCP, or use Sekura, the built-in agent. Every risk, evaluation and piece of evidence an agent creates lands in the workspace, linked, editable and on the record.
Three risks created from the open gaps, each linked to its controls with a proposed treatment. They are in Sekit for your review.
Claude and ChatGPT over MCP for consultancies today · agent access for company workspaces on request
Explore the AI-native platformFor consultancies
Ask for evidence once. Sekura does the reading
Choose who to ask. Sekit builds the list
The asks come from the controls still open, and each contact gets their own link.
Sekura asks the client for the documents in their portal and checks them against this analysis. You review every change afterwards.
Send toSekura reads every document and asks for the next one
Each upload is checked against the open controls, graded and linked as evidence. Your client just answers.
Every grade waits for you
Mark it reviewed, ask for more, or revert it. Nothing is final until you say so.
Daily backups are configured, but there is no evidence a restore was ever tested.
For consultancies
The work becomes the report
Gap, risk and readiness reports assemble from the analysis you already did: summary, findings and a phased roadmap, ready to deliver. Print it or save it as PDF.
Know where your compliance stands,
and prove it
299 €standard price after the beta
99 €/ month
* VAT not included
Per firm. Unlimited seats.