AI-Powered Compliance Auditor

Automated GRC Audits in Minutes

GRC Pilot assesses your organization's controls against leading Saudi and international cybersecurity frameworks. Connect your cloud environment or upload evidence, and the AI engine evaluates every control, scores compliance, and generates a bilingual remediation report you can share with regulators.

3 Frameworks

43+ Controls

Live AI Engine

NCA ECC 2.0 82 controls

SAMA CSF 1.0 36 controls

PCI DSS 4.0 63 controls

1Choose a compliance framework

→

2Upload evidence or connect a data source

→

3Download your bilingual audit report

Audit Configuration

›

Evidence Upload

.csv.txt .cfg.conf .log.json .yaml.md .docx.pdf

Sample Evidence Formats

username,mfa_enabled,role,status
admin,no,privileged,ACTIVE
alice,yes,user,ACTIVE
svc-api,no,service,ACTIVE

! Cisco ASA / Palo Alto / Fortinet
access-list OUTSIDE extended
 permit ip any any log
! no explicit cleanup-deny rule
transport input telnet ssh

# Access Control Policy v2.1
Approved by: CISO — 2024-11
Next review: 2025-11
- MFA required for all privileged
- Annual access review cycle

interface GigabitEthernet0/1
 switchport mode access
 switchport access vlan 10
 spanning-tree portfast

Cloud Config (JSON)

{"policies":[
  {"name":"AllowAdmin",
   "effect":"Allow",
   "actions":["*"],
   "principal":"arn:aws:iam::*"}
]}

Security Log (SYSLOG)

Jun 26 auth: Failed password for
 root from 1.2.3.4 port 22
Jun 26 sudo: user NOT in sudoers
Jun 26 firewalld: ACCEPT tcp 443

Cloud & Integration Connectors

Integration Setup

☁️

Oracle Cloud Infrastructure

OCI_TENANCY_OCID — Tenancy OCID

OCI_REGION — e.g. me-jeddah-1

OCI_COMPARTMENT_OCID — optional

Collects

IAM users with MFA status

VCN security lists (ingress rules)

Open-to-internet access exposure

🪟

Microsoft 365 / Entra ID

M365_TENANT_ID — Azure Tenant ID

M365_CLIENT_ID — App Registration ID

M365_CLIENT_SECRET — Client Secret

Collects

MFA registration per user

Conditional access policies

Privileged accounts without MFA

🔧

Atlassian Jira

ATLASSIAN_BASE_URL — e.g. https://org.atlassian.net

ATLASSIAN_EMAIL — Service account email

ATLASSIAN_API_TOKEN — API token

Collects

Open security & risk tickets

Change management records

Vulnerability remediation status