Blog

Discover the latest insights, tutorials, and updates from our team. Stay informed about governance trends, best practices, and innovative solutions.
AI Gateway & Enhanced Security
Changelog

AI Gateway & Enhanced Security

Centralized AI gateway for all AI features and OTP verification for stronger account security.
Justin Leapline

Justin Leapline

Beyond Memorization: How episki Supports True Security Awareness Through Behavior Change 💡
News

Beyond Memorization: How episki Supports True Security Awareness Through Behavior Change 💡

Our platform is officially live, and this is just the beginning.
Justin Leapline

Justin Leapline

Compliance in the Cloud
Crafts

Compliance in the Cloud

A practical guide for growing companies on how to approach cloud compliance with confidence, clarity, and the right tools.
Justin Leapline

Justin Leapline

SaaS Launch 🚀
News

SaaS Launch 🚀

Our platform is officially live, and this is just the beginning.
Justin Leapline

Justin Leapline

When PCI Compliance Goes Off Track: How to Respond and Recover with Confidence
Crafts

When PCI Compliance Goes Off Track: How to Respond and Recover with Confidence

A practical guide for security and compliance teams on how to respond when PCI DSS compliance slips—covering common pitfalls, recovery strategies, and how to regain control with confidence.
Justin Leapline

Justin Leapline

AI-Powered Compliance
Changelog

AI-Powered Compliance

Introducing RAG pipeline and Notion-like AI assistance for smarter compliance management.
Justin Leapline

Justin Leapline

TypeScript & Quality of Life
Changelog

TypeScript & Quality of Life

Full TypeScript enforcement, smarter autocomplete, and numerous usability improvements.
Justin Leapline

Justin Leapline

Import/Export & Custom Statuses
Changelog

Import/Export & Custom Statuses

Full import and export capabilities for testing procedures, plus customizable control statuses.
Justin Leapline

Justin Leapline

Custom Statuses & Dark Mode Polish
Changelog

Custom Statuses & Dark Mode Polish

Customize how you track control status and enjoy a refined dark mode experience.
Justin Leapline

Justin Leapline

GRC Metrics Executives Actually Care About
Crafts

GRC Metrics Executives Actually Care About

Skip vanity dashboards and focus on the few signals that show risk exposure, audit readiness, and operational velocity.
Justin Leapline

Justin Leapline

Build an Evidence Library That Scales With Your Company
Crafts

Build an Evidence Library That Scales With Your Company

A repeatable system for naming, ownership, and retention that turns evidence collection into a steady workflow instead of a scramble.
Justin Leapline

Justin Leapline

SOC 2 Readiness in 30 Days: A Practical Roadmap
Crafts

SOC 2 Readiness in 30 Days: A Practical Roadmap

A focused four-week plan to scope your SOC 2 effort, assign control ownership, collect evidence, and run a clean pre-audit check.
Justin Leapline

Justin Leapline

5 Common Mistakes in GRC and How to Avoid Them
Crafts

5 Common Mistakes in GRC and How to Avoid Them

Governance, Risk, and Compliance (GRC) are three critical areas that every organization needs to focus on to protect itself from risks, ensure compliance with regulations, and safeguard against security threats. Unfortunately, even experienced professionals can make mistakes that can lead to significant consequences for their organizations. In this article, we will discuss the five most common mistakes in GRC and provide practical advice on how to avoid them.
Justin Leapline

Justin Leapline