Instead of navigating to “Settings → Manage Users”, group leaders can now access the “Manage Users” functionality directly in the sidebar.

We’ve made this minor change to provide better visibility for an important feature used by group leaders.

👇

At SafeStack, we love making it easier for organizations to meet their compliance training requirements. Our training is designed to support compliance requirements for frameworks like ISO27001, PCI DSS and SOC2. In order to highlight what parts of our training apply to which compliance frameworks, a few weeks ago, we released a handy compliance page.

Compliance training is spread across both our Secure Development program as well as the Security Awareness program. Some of our more recent customers were not able to view or buy the Security Awareness program, while we worked on making some strategic changes to the program.

We are now happy to announce that:

1. all Secure Development customers, who didn’t have access to the Security Awareness program, now have access to a limited set of free courses from this program

2. all Secure Development customers can now buy the Security Awareness program as an add-on

3. your learners will not see any Security Awareness content, until one of your Group Leaders assigns them to the program

4. we have redesigned our subscription page to better highlight what plan you are on and what add-ons are available for your organization in SafeStack

5. the subscription page itself has been moved from “Settings → Subscription” to “Subscription” in the sidebar

   

—

Head over to our course catalog and check out the Security Awareness courses available, for free, for your organization!

Or check out the new subscription page, from where you can buy or manage your subscription for any of our programs or add-ons.

PS: You can read more about how we can help you meet your compliance needs here.

When setting up your Learning Path, you’ve previously been able to add a due date that your learners should have completed their courses. This due date in some instances would show as being a day forward or behind depending on if learners were in a different timezone.

We’ve now added the ability to set the due time that courses should be completed by, and improved how the due date is shown to group leaders and their learners based on their current timezone.

In a move to simplify our subscription structure, we've merged the Enterprise Plan with the Team Plan, creating a more straightforward and cohesive offering, while all features remain available. It’s important to note that this update will not impact our existing customers, except for the actual plan name being changed.

We're thrilled to introduce a brand-new Organization Settings page, designed to streamline your organizational management tasks and configure SafeStack to meet your team’s needs. Access to this page is reserved exclusively for group leaders of customers on our paid Team plan.

Within this page you’ll find a handy new option to ensure that users from your organization, signing up to SafeStack on their own, get added to your existing SafeStack organization, instead of being added to a completely new SafeStack organization.

Note that such users will be invited as Learners into your SafeStack organization and will not occupy any seats, until a Group Leader assigns them to one of our training programs.

To keep your learners on the path to success, we’ll now send out a reminder to those who still have courses to complete. An in-app and email notification will be sent a few days before the due date of their Learning Path, and contain a quick link for them to finish their Learning Path.

Learners can opt-out of email notifications from their Profile page.

In order to help you meet your compliance needs with ease, SafeStack now provides a handy compliance page for you to check out all the courses you need to complete, in order to meet compliance training requirements for supported frameworks.

At the moment, SafeStack can help you reach awareness related training for the following compliance frameworks:

1. ISO27001

2. PCI DSS

3. SOC2

Go ahead and check out our compliance page to learn more!

The SafeStack - Vanta integration now sends your users' security and compliance training data to Vanta every hour, so it can be included in Vanta's monitoring and reports.

SafeStack’s Security Awareness programme contains a lot of courses that help you meet compliance training requirements for frameworks like ISO27001, PCI DSS and SOC2.

If your organization is using Vanta to automate compliance related tasks, check out our Vanta integration to send your SafeStack users - and their compliance training information, automatically to Vanta.

SafeStack provides many types of reports to help learners and group leaders track progress of your security training journey.

All our reports now support server side pagination, loading chunks of data as requested by your browser - while you “page” through the reports. This leads to much quicker report generation, especially for some of our larger customers with thousands of learners in their team.

All our reports now also provide enhanced filtering capabilities that help determine exactly how much progress you, or your team, have achieved, across a program, learning path or course.

For group leaders, this helps answer questions like:

• “Who has not yet completed their Secure Development learning path?”

• “How much progress, in % format, has my team, or user X, achieved in the Secure Development learning path?”

• “Which users have completed the Designing Secure Microservice Architectures course, and which users have made some progress in that course?”

For learners, this helps answer questions like

• “What learning paths have I made some progress in?”

• “What courses have I made no progress in?”

Further, your currently selected report filters are now applied automatically whenever you download a report as a CSV file.

We hope that our enhanced reporting functionality helps you track your, or your teams progress, much more easily and are always open to feedback.