April 2026 Release Notes

New features

Continuous monitoring

AutoCISO now continuously monitors ISO 27001 controls for staleness. When a control has not been reviewed or updated within its configured window, the platform automatically sends an alert to the control owner. Configure monitoring intervals under ISO → Monitoring.

Control testing

Compliance Managers can now create and run structured control tests directly in AutoCISO. Tests support multi-step workflows, evidence attachment, and sign-off by named participants. Access control testing under ISO → Controls → Test.

Access reviews — send to managers

The access review workflow now supports delegating individual review items to direct managers. Reviewers receive an email with a link to their pending items and can approve or revoke access without logging into the full console.

Vulnerability management surface

IT and Security Leads can now view and triage vulnerabilities identified from uploaded SBOMs under SSCS → Vulnerabilities. Vulnerabilities are sourced from NVD/RHSA and are updated nightly.

Improvements

• Backup test reports now auto-compute scenario results from step outcomes
• Shared Markdown rendering component for AI chat, partner panel, and help drawer
• Server-side pagination and status filtering for access review detail view

Bug fixes

• Fixed PDF download authentication in backup test reports
• Fixed sign-off participant matching using internal user ID instead of external auth ID
• Fixed SOA generation timeout for organizations with more than 93 ISO controls