Roadmap
Changelog

Got an idea for how to improve Secfix?

Share it with us, and upvote other users' ideas.

Automatic Data Sync for Maintenance PSR

Enable the Maintenance PSR to automatically pull and reflect updates from other relevant sections (e.g., Risk Register, Vendor Reviews) to reduce manual work and ensure consistency. Introduce automatic synchronization between the Maintenance PSR and other key modules: When the Risk Register is reviewed, this should automatically update the corresponding task/status in the Maintenance PSR When a quarterly vendor review is completed, the related task in the Maintenance PSR should be automatically marked as completed Expected Benefits Eliminate repetitive manual updates Improve data consistency across the platform Save time for users managing ongoing ISO 27001 compliance Reduce risk of missing required maintenance actions

Jan Wagner about 3 hours ago

💡

Feature Request

Detect all groups from IdP for scoping

I thought I would not have to create a new group in the IdP, but rather select among the groups that were already created. So, for us at M365 IdP, we have our groups created, for example: XXX-HQ XXX-Germany So I expect that the integration would be able to fetch already present groups from the IdP and let us select from those groups. With the current behavior, I would need to either rename XXX-HQ to Secfix-XXX-HQ or create another "duplicate" group called Secfix-XXX-HQ.

galo.rosero 8 days ago

💡

Feature Request

ability to edit assigned employee groups for a draft policy

Currently, you can see on the right panel of a policy detail which employee groups a draft policy was assigned to. It would be cool if this were not only a list of group tags, but a list of check boxes so that we can edit them when necessary. This would make things much easier. Since group settings only list approved policies, it’s a hassle to manage this before a policy is approved.

Frank Tiex 10 days ago

💡

Feature Request

Provide secure development trainings

Some of our customers and prospects are increasingly asking whether our engineers have completed secure coding training. This topic is becoming more relevant for companies, especially in the context of security frameworks and customer security requirements. To help address these requests, it would be very valuable if Secfix could provide a secure coding training directly within the Secfix platform. Ideally, this training would be targeted at developers and aligned with relevant security best practices and frameworks (e.g., ISO 27002). Having such training available in the platform would help us demonstrate that our engineers are trained in secure development practices and make it easier to meet security expectations from customers and prospects.

Andreas Offermann about 1 month ago

💡

Feature Request

Export functionality for Access Review data

Context / problem: Currently, we cannot export the access review data (list of users & permissions) from the platform. This creates friction especially for larger customers like us. Customer impact: Manually copying the data into the access review template is time-consuming and error-prone. Proposed solution: Introduce an export functionality (e.g. CSV/Excel) for access review data directly from the Access section.

Frank Tiex 28 days ago

💡

Feature Request

Add a location/ entity category to Inventory

Context: We needed to add our locations/entities to the Secfix Platform. Currently, this is only possible by creating them under “Custom Assets.” Problem: Locations/entities are conceptually different from other assets, but they are currently mixed within the Custom Assets section, which makes management and visibility less clear. Requirement: Introduce a dedicated section in the Inventory for Locations/Entities, separate from Custom Assets. Expected Benefit: Clearer structure and separation of asset types Improved usability and navigation Better alignment with real-world organizational structures

Martin Trachsel about 1 month ago

💡

Feature Request

Manual Evidences: Manual Status Change & "Work in Progress"

When adding files to a manual evidence, the status is automatically set to “Completed” although in some cases, not all documents or links were added yet. Therefore it would be helpful to be able to change back the status manually and also to have a third status “Work in Progress” to mark this and not to loose overview.

Frank Tiex about 2 months ago

💡

Feature Request