Wiz Integration | CNAPP (Cloud-Native Application Protection Platform)
We use Wiz as our cloud security platform and would like to see a native integration with Secfix. Wiz already contains relevant cloud security posture, monitoring, and control evidence, so being able to sync this information automatically into Secfix would reduce manual evidence collection and make audit preparation more efficient. This would also help us demonstrate our cloud security controls more clearly during ISO 27001 audits. We’ve also noticed that similar compliance automation platforms already support Wiz integrations, so having this available in Secfix would provide significant additional value for teams using modern cloud security tooling.
Matt Sleeman 6 days ago
Connections
Feature Request
Wiz Integration | CNAPP (Cloud-Native Application Protection Platform)
We use Wiz as our cloud security platform and would like to see a native integration with Secfix. Wiz already contains relevant cloud security posture, monitoring, and control evidence, so being able to sync this information automatically into Secfix would reduce manual evidence collection and make audit preparation more efficient. This would also help us demonstrate our cloud security controls more clearly during ISO 27001 audits. We’ve also noticed that similar compliance automation platforms already support Wiz integrations, so having this available in Secfix would provide significant additional value for teams using modern cloud security tooling.
Matt Sleeman 6 days ago
Connections
Feature Request
Ability to manually add an employee to Secfix
Currently, I need to reach out to support to manually add an employee to Secfix. I should be able to do it myself as the Admin.
tracy.olnhausen 29 days ago
Feature Request
Ability to manually add an employee to Secfix
Currently, I need to reach out to support to manually add an employee to Secfix. I should be able to do it myself as the Admin.
tracy.olnhausen 29 days ago
Feature Request
Put profile pic for policy approver
Under policies —> Profile picture of the approver should be put as well (like we do with the owner) so as to see whether the owner and approver is a different person or not (for quick check with customer)
François Gales about 2 hours ago
Feature Request
Put profile pic for policy approver
Under policies —> Profile picture of the approver should be put as well (like we do with the owner) so as to see whether the owner and approver is a different person or not (for quick check with customer)
François Gales about 2 hours ago
Feature Request
Bulk reminder to specific group
Under Employees —> One should be able to send a bulk reminder to a specific group only. This is currently not possible. (Only possible for either every employee concerned or one specific person). Could be interesting if we want to send a reminder to the i.e. the whole CS team.
François Gales about 2 hours ago
Feature Request
Bulk reminder to specific group
Under Employees —> One should be able to send a bulk reminder to a specific group only. This is currently not possible. (Only possible for either every employee concerned or one specific person). Could be interesting if we want to send a reminder to the i.e. the whole CS team.
François Gales about 2 hours ago
Feature Request
Enable vendor version & change history
Currently, I need to maintain external spreadsheets for vendor reviews because Secfix does not provide visibility into: what changed, who changed it, when the change happened. Any update overwrites the previous state, making it difficult to track changes and prepare audit evidence. This is especially inefficient in environments with multiple vendor owners across different departments, where many people are responsible for maintaining vendor information and changes happen frequently. Requested Functionality I would like vendor entries to include version history/change tracking similar to policy version history. For each vendor, it should be possible to see: timestamp of the change, user who made the change, changed fields, previous value, new value. Key fields: vendor owner, contact person, authentication method (MFA/SSO), processed data, risk level, certification status, active/inactive status. Expected Outcome This would allow us to: conduct vendor reviews fully inside Secfix, reduce reliance on external spreadsheets, improve audit traceability, simplify evidence collection, better manage reviews across multiple vendor owners.
Jan Wagner about 2 hours ago
Feature Request
Enable vendor version & change history
Currently, I need to maintain external spreadsheets for vendor reviews because Secfix does not provide visibility into: what changed, who changed it, when the change happened. Any update overwrites the previous state, making it difficult to track changes and prepare audit evidence. This is especially inefficient in environments with multiple vendor owners across different departments, where many people are responsible for maintaining vendor information and changes happen frequently. Requested Functionality I would like vendor entries to include version history/change tracking similar to policy version history. For each vendor, it should be possible to see: timestamp of the change, user who made the change, changed fields, previous value, new value. Key fields: vendor owner, contact person, authentication method (MFA/SSO), processed data, risk level, certification status, active/inactive status. Expected Outcome This would allow us to: conduct vendor reviews fully inside Secfix, reduce reliance on external spreadsheets, improve audit traceability, simplify evidence collection, better manage reviews across multiple vendor owners.
Jan Wagner about 2 hours ago
Feature Request
Optional "Reports to" Requirement for Externals/ Contractors
Currently, automated checks require all employees/users to have an assigned owner/manager. This creates issues for external employees and contractors (e.g. external developers), who: work inside the company environment, should still complete compliance-related tasks such as Security Awareness Training and Policy Acceptance, but often do not have a formal internal manager/owner within the organization. At the moment, customers are forced to assign arbitrary HR or IT users as owners purely to satisfy the automated check requirements. Introduce a new configurable setting on employee groups tasks: Ownership/ Reports to required (enabled/disabled)
Frank Tiex about 20 hours ago
Feature Request
Optional "Reports to" Requirement for Externals/ Contractors
Currently, automated checks require all employees/users to have an assigned owner/manager. This creates issues for external employees and contractors (e.g. external developers), who: work inside the company environment, should still complete compliance-related tasks such as Security Awareness Training and Policy Acceptance, but often do not have a formal internal manager/owner within the organization. At the moment, customers are forced to assign arbitrary HR or IT users as owners purely to satisfy the automated check requirements. Introduce a new configurable setting on employee groups tasks: Ownership/ Reports to required (enabled/disabled)
Frank Tiex about 20 hours ago
Feature Request
Automatic Data Sync for Maintenance PSR
Enable the Maintenance PSR to automatically pull and reflect updates from other relevant sections (e.g., Risk Register, Vendor Reviews) to reduce manual work and ensure consistency. Introduce automatic synchronization between the Maintenance PSR and other key modules: When the Risk Register is reviewed, this should automatically update the corresponding task/status in the Maintenance PSR When a quarterly vendor review is completed, the related task in the Maintenance PSR should be automatically marked as completed Expected Benefits Eliminate repetitive manual updates Improve data consistency across the platform Save time for users managing ongoing ISO 27001 compliance Reduce risk of missing required maintenance actions
Jan Wagner 19 days ago
Feature Request
Automatic Data Sync for Maintenance PSR
Enable the Maintenance PSR to automatically pull and reflect updates from other relevant sections (e.g., Risk Register, Vendor Reviews) to reduce manual work and ensure consistency. Introduce automatic synchronization between the Maintenance PSR and other key modules: When the Risk Register is reviewed, this should automatically update the corresponding task/status in the Maintenance PSR When a quarterly vendor review is completed, the related task in the Maintenance PSR should be automatically marked as completed Expected Benefits Eliminate repetitive manual updates Improve data consistency across the platform Save time for users managing ongoing ISO 27001 compliance Reduce risk of missing required maintenance actions
Jan Wagner 19 days ago
Feature Request
ability to edit assigned employee groups for a draft policy
Currently, you can see on the right panel of a policy detail which employee groups a draft policy was assigned to. It would be cool if this were not only a list of group tags, but a list of check boxes so that we can edit them when necessary. This would make things much easier. Since group settings only list approved policies, it’s a hassle to manage this before a policy is approved.
Frank Tiex 29 days ago
Feature Request
ability to edit assigned employee groups for a draft policy
Currently, you can see on the right panel of a policy detail which employee groups a draft policy was assigned to. It would be cool if this were not only a list of group tags, but a list of check boxes so that we can edit them when necessary. This would make things much easier. Since group settings only list approved policies, it’s a hassle to manage this before a policy is approved.
Frank Tiex 29 days ago
Feature Request
Hide CISOai bubble
It’d be great to have a toggle to hide the CISOai bubble. It’s useful sometimes, but it’s mostly distracting.
Fidel Esquivel 20 days ago
Feature Request
Hide CISOai bubble
It’d be great to have a toggle to hide the CISOai bubble. It’s useful sometimes, but it’s mostly distracting.
Fidel Esquivel 20 days ago
Feature Request
Detect all groups from IdP for scoping
I thought I would not have to create a new group in the IdP, but rather select among the groups that were already created. So, for us at M365 IdP, we have our groups created, for example: XXX-HQ XXX-Germany So I expect that the integration would be able to fetch already present groups from the IdP and let us select from those groups. With the current behavior, I would need to either rename XXX-HQ to Secfix-XXX-HQ or create another "duplicate" group called Secfix-XXX-HQ.
galo.rosero 27 days ago
Feature Request
Detect all groups from IdP for scoping
I thought I would not have to create a new group in the IdP, but rather select among the groups that were already created. So, for us at M365 IdP, we have our groups created, for example: XXX-HQ XXX-Germany So I expect that the integration would be able to fetch already present groups from the IdP and let us select from those groups. With the current behavior, I would need to either rename XXX-HQ to Secfix-XXX-HQ or create another "duplicate" group called Secfix-XXX-HQ.
galo.rosero 27 days ago
Feature Request
Ability to re-push the Secfix Security Training to users who already completed them
The reason is that if you have a security incident, it is useful (and good proof for the auditor) to reinforce people to do the training again, for a refresh of information. Admins should be able to request that employees complete the training again.
Anita Luca 2 months ago
Feature Request
Ability to re-push the Secfix Security Training to users who already completed them
The reason is that if you have a security incident, it is useful (and good proof for the auditor) to reinforce people to do the training again, for a refresh of information. Admins should be able to request that employees complete the training again.
Anita Luca 2 months ago
Feature Request
Provide secure development trainings
Some of our customers and prospects are increasingly asking whether our engineers have completed secure coding training. This topic is becoming more relevant for companies, especially in the context of security frameworks and customer security requirements. To help address these requests, it would be very valuable if Secfix could provide a secure coding training directly within the Secfix platform. Ideally, this training would be targeted at developers and aligned with relevant security best practices and frameworks (e.g., ISO 27002). Having such training available in the platform would help us demonstrate that our engineers are trained in secure development practices and make it easier to meet security expectations from customers and prospects.
Andreas Offermann 2 months ago
Feature Request
Provide secure development trainings
Some of our customers and prospects are increasingly asking whether our engineers have completed secure coding training. This topic is becoming more relevant for companies, especially in the context of security frameworks and customer security requirements. To help address these requests, it would be very valuable if Secfix could provide a secure coding training directly within the Secfix platform. Ideally, this training would be targeted at developers and aligned with relevant security best practices and frameworks (e.g., ISO 27002). Having such training available in the platform would help us demonstrate that our engineers are trained in secure development practices and make it easier to meet security expectations from customers and prospects.
Andreas Offermann 2 months ago
Feature Request
Ability to re-push the Secfix Policies to users who already accepted them
The reason is that if you have a security incident, it is useful (and good proof for the auditor) to reinforce people to read the policy again, for a refresh of information. Admins should be able to request that employees accept the policy again.
Lilian Xalter about 2 months ago
Feature Request
Ability to re-push the Secfix Policies to users who already accepted them
The reason is that if you have a security incident, it is useful (and good proof for the auditor) to reinforce people to read the policy again, for a refresh of information. Admins should be able to request that employees accept the policy again.
Lilian Xalter about 2 months ago
Feature Request
Complete
Trust collaborator role
A Trust Center collaborator needs access only to the Trust Center dashboard to review, approve, or reject access requests. Typically, a trust center collaborator doesn’t have any other responsibilities in Secfix beyond handling Trust Center requests.
Jakub Wanat 3 months ago
Feature Request
Complete
Trust collaborator role
A Trust Center collaborator needs access only to the Trust Center dashboard to review, approve, or reject access requests. Typically, a trust center collaborator doesn’t have any other responsibilities in Secfix beyond handling Trust Center requests.
Jakub Wanat 3 months ago
Feature Request
Complete
Ability to undo "mark as not a person" action on employees page
I think if we (an admin) mark someone as "not a person", there should be an option to also "unmark" them. It can be done by mistake, or for testing, and it needs to be reversible.
Anita Luca 2 months ago
Feature Request
Complete
Ability to undo "mark as not a person" action on employees page
I think if we (an admin) mark someone as "not a person", there should be an option to also "unmark" them. It can be done by mistake, or for testing, and it needs to be reversible.
Anita Luca 2 months ago
Feature Request
Export functionality for Access Review data
Context / problem: Currently, we cannot export the access review data (list of users & permissions) from the platform. This creates friction especially for larger customers like us. Customer impact: Manually copying the data into the access review template is time-consuming and error-prone. Proposed solution: Introduce an export functionality (e.g. CSV/Excel) for access review data directly from the Access section.
Frank Tiex about 2 months ago
Feature Request
Export functionality for Access Review data
Context / problem: Currently, we cannot export the access review data (list of users & permissions) from the platform. This creates friction especially for larger customers like us. Customer impact: Manually copying the data into the access review template is time-consuming and error-prone. Proposed solution: Introduce an export functionality (e.g. CSV/Excel) for access review data directly from the Access section.
Frank Tiex about 2 months ago
Feature Request