What we've
shipped.
What we have shipped recently, written for the people who use the platform. Every entry describes a change that is live today.
Fairer scores and deliverables that fit your exercise
- FIXED
Areas an exercise did not test are marked “Not tested”
A capability the scenario never exercised used to count as a perfect score. It is now shown as not tested and left out of the total, so your readiness score reflects only what your team actually demonstrated.
- IMPROVED
Facilitated scores count every inject
In facilitated exercises, injects your team did not answer and decisions that would have made the incident worse now count toward the score instead of being skipped.
- IMPROVED
Incident response playbooks address the gaps you showed
The generated playbook now plugs the specific gaps observed in your exercise, and its regulatory drivers are tailored to your industry.
- TRUST
Deliverables pass the same review gate as after-action reports
Before a deliverable is published to your portal it goes through the same quality review we already apply to after-action reports.
- FIXED
Engagement status follows the work
An engagement now moves forward on its own when its exercise completes and its after-action report is ready, so the status you see matches where things stand.
- TRUST
Solo-run scores are labelled as solo
Scores from a solo training run are clearly marked, explained, and never compared side by side with scores from a facilitated team exercise.
- FIXED
Smoother solo trainer
Each decision gets one clear verdict, the debrief matches what you saw during the run, typed answers survive the countdown, reloading a finished run reopens its debrief, and the trainer fits a phone screen without sideways scrolling.
- FIXED
Clearer carrier view and replays
The carrier portal now consistently says “readiness score”, and injects a facilitator jumped past are shown as skipped.
Smarter coaching in the solo trainer
- IMPROVED
Decision quality moves your solo readiness score
How well you handled each decision now feeds into the readiness score of a solo run, not just whether you covered the topic.
- IMPROVED
Coaching reads what you decided, not just the words you used
The facilitator now grades the stance of a decision, so naming the right terms while choosing the wrong course of action no longer earns credit.
- FIXED
Solo runs record the gaps the coach observed
Gaps the facilitator identifies during a solo run are now saved with the run and appear in your results.
Accessibility checks on every change
- TRUST
Automated accessibility scanning
Every public page is scanned against WCAG 2.1 A and AA rules and checked at phone width on every change. We also scanned a representative set of signed-in portal pages and fixed every serious finding. Details are on our accessibility statement.
- IMPROVED
Fonts served from our own domain
Typefaces are now self-hosted, so loading the site makes no requests to third-party font services.
- TRUST
Subprocessor list and privacy policy brought up to date
Our public subprocessor list and privacy policy now match exactly what the platform does today.
Safer saves and expiring share links
- FIXED
Reports and exercises save in one step
The after-action report editor and the Exercise Builder now save everything together or nothing at all, so a dropped connection can no longer leave a report or exercise half-saved.
- TRUST
Exercise replay links expire
Shared replay links now expire after 7, 30 or 90 days (30 by default) and can be revoked at any time.
- TRUST
Two-factor requirements enforced end to end
When your organization requires two-factor authentication, that requirement now applies to every way your data is read, not only to the web app.
- TRUST
Stricter browser security policy in the portals
Portal and sign-in pages now ship a strict content security policy that limits which scripts a page may run.
Two-factor authentication
- NEW
Authenticator-app two-factor sign-in
Anyone can turn on two-factor authentication with an authenticator app, and team admins can require it for everyone in their organization.
Board reports and shareable certificates
- NEW
One-click board report
Download a board-ready PDF of your readiness score, trend, capability breakdown, open gaps and top findings. Any section without enough data is listed as withheld rather than filled in.
- NEW
Share a readiness certificate with an expiring link
Team admins can share a certificate with a broker, carrier or board through a link that expires after 7, 30 or 90 days and can be revoked at any time.
Account controls for team admins
- NEW
Audit log you can export
Team admins can review their organization’s audit log in settings and export it as CSV or JSON.
- NEW
Session controls
Sign out of every other device in one click, let team admins sign a member out, and set how long an idle session stays signed in for your organization.
- NEW
Privacy requests from settings
Request an export of your data or deletion of your account directly from the portal.
- NEW
Manage your subscription in the portal
Cancel, resume or change plan without contacting us, see your invoices and card on file, and track seats used against your plan.
A methodology paper withdrawn
- TRUST
Readiness Score methodology paper withdrawn
The paper described a calibration of insurance-discount ranges that we could not substantiate, so we withdrew it rather than soften the claim. The readiness scoring engine itself is unchanged.
Self-serve sign-up
- NEW
Sign up with a magic link
Create an account with your name and email, without waiting to hear from us.
- TRUST
Removed unsubstantiated numbers from our website
We removed every outcome statistic on our marketing pages that we could not back with real data, and replaced it with facts that are true today.
Free readiness check and methodology library
- NEW
Free two-minute readiness check
Eight questions, instant scoring across the NIST 800-61 capability areas, and no sign-up required.
- NEW
Methodology whitepapers
We publish how our scoring and analysis methods work, so you can check the reasoning behind every number.
- NEW
One-click unsubscribe
Every sequence email carries a one-click unsubscribe link that stops all future mail to that address.
See where your program stands