• Added 2FA capabilities
• Fixed minor design inconsistencies.

We’re excited to share that our new 90-second product demo is now live—no registration required. This short video gives you a clear, fast overview of how devguard automates compliance.

Whether you're exploring compliance automation for the first time or looking to streamline existing processes, this demo shows exactly how our platform delivers simplicity, transparency, and developer-friendly workflows. Watch it now and get a firsthand look at how devguard transforms compliance into productivity.

• Added drag and drop to sort categories and policies.
• Allow approver to be configured in policy detail view.
• Improved redirect from coverage to policy with a clear indication of the selection.
• Ensure that control editing works the same in every place.
• Fixed an issue where the action template was not correctly rendered when attaching to assets, risks or policies.
• Fixed lists in reports not being displayed in alphabetical order.
• Fixed tables to be only horizontally scrollable.

We’re pleased to announce the publication of our final Terms of Service, Privacy Policy, and Site Notice, effective as of December 1st.

These updated documents provide more precise guidance on how devguard operates, how we safeguard your data, and what you can expect when using our platform. With improved transparency, refined language, and a more structured layout, this release ensures you can navigate your rights and responsibilities with confidence as we continue to grow and strengthen our service.

• Improved control mapping in policies, assets, and risks.
• Improved visibility of sub-sections when editing policies.
• Improved viewing of control description by making it expandable and collapsable.
• Fixed an issue where control mappings between risks and assets were shared.
• Fixed an issue where control mappings were not scrollable.

• The AI management system ISO/IEC 42001 and ISO/IEC 42001 Annex A are now available 🎉.
• The Digital Operational Resilience Act (DORA) framework is now available 🎉.
• Fixed descriptions for the GDPR framework.

• Added the trust center to our marketing website.
• Refreshed content on the marketing website for clarity.
• The certification process now excludes non-relevant controls for the completion process.
• Threat and vulnerability classes now display their descriptions in the list view.
• Fixed the display of CIA calculated aggregation when "unset" is selected.
• Fixed coverage calculation, excluding categories or groups from the overall progress.
• Fixed the coverage section not showing all of the possible linked assets, risks, or policies.
• Fixed an issue with the scrollable area in audit-log.
• Fixed the policy panels so they are visible initially.

• Set the official name of our company to devguard Ltd. 🎉
• We are now sending welcome emails when an organization is created and when the trial ends.
• Fixed a display issue in the documentation navigation.
• Fixed double scroll on large tables.

• Actions can now be mapped to policies, assets, and risks.
• Added option to disable the AI Assistant and show lock screen.
• Improved the display of external ticket configuration in the action detail view.
• Improved theme switcher display and active states.
• Improved the display of organizational invites on the dashboard and made it more prominent.
• Fixed an issue where product updates were not linked correctly to the marketing website.
• Fixed issues with the JIRA and Slack integrations.
• Fixed field rendering for rich text content in several places.
• Fixed several inconsistencies in the overall layout of the application.
• Fixed issues in the profile view for specific states.
• Fixed password change in profile to use current password and new password.
• Fixed infinite loading of organization when no organization is created.

We’re excited to announce the release of Access Token Management, giving you more secure and flexible control over how external systems interact with devguard.

You can now generate scoped access tokens directly from your workspace settings, making it easier to limit permissions, rotate credentials, and follow security best practices when integrating CI/CD pipelines, automation scripts, or third-party services.