PurpleWASP

PurpleWASP is a connected governance, risk and compliance platform that helps organisations manage regulatory requirements and understand the evidence behind their decisions. It links business processes, assets, suppliers, risks, controls and evidence in one view, reducing the need to reconcile information across separate registers, spreadsheets and folders.

The platform supports policy and document management, compliance mapping, control assessments, evidence history, risk ownership and treatment, asset management, third-party oversight and business continuity planning. It also offers FAIR quantitative risk analysis, reporting and analytics, tasks, reminders, audit history, imports and bulk operations. PurpleWASP’s Risk Graph connects risks to relevant assets, dependencies, controls, suppliers and obligations, helping teams trace exposure and communicate its significance to leadership.

Users can connect supported tools including Microsoft Entra ID, Microsoft 365, Azure, Amazon Web Services, Google Workspace, GitHub and Qualys to collect available security facts and assess applicable controls. Evidence can be mapped to multiple adopted frameworks, supporting reusable assurance and clearer reviews.