Scrut innovations: December 2024 snapshots

Welcome to Scrut’s first-ever product update blog!

This monthly series is your go-to resource for all things new at Scrut—features, updates, and innovations designed to make compliance and security effortless. Whether you’re an existing customer or just exploring what Scrut has to offer, this blog will show how we’re helping organizations simplify workflows, reduce risks, and stay audit-ready.

For our first edition, our rollouts include:

• Scrut Monitor: Forget the manual madness—our tool automates evidence collection like a boss. You’ll be audit-ready before you even realize an audit’s coming. 
• Vulnerability Management: Security risks, meet your match. Centralize, prioritize, and handle vulnerabilities with real-time insights and SLAs that actually make sense. 
• Test Library: Take control of compliance tests with a centralized repository for reviewing and approving updates before they impact compliance workflows.
• New Integrations and Improvements: We’ve got a toolbox full of integrations to make your life easier—Slack, FreshService, SonarCloud, Trello, and more.

Automating evidence collection with Scrut Monitor

Evidence collection is often time-consuming and error-prone. Taking screenshots, exporting logs, or tracking approvals can quickly overwhelm compliance teams. Scrut Monitor simplifies this by automatically collecting evidence from your connected apps, giving you accurate, real-time visibility into all your evidence directly on the Scrut platform.

With Scrut Monitor, you can:

• Automate Evidence Collection: Eliminate manual data gathering by automatically pulling evidence from tools like source code management systems. 
• Continuous monitoring: Schedule evidence collection at regular intervals to stay on top of compliance requirements.
• Ensure data integrity: Built-in health checks alert you to unexpected data, enabling swift investigation and resolution.
• Streamline workflows: Easily integrate with popular tools and platforms, ensuring smooth setup and efficient evidence collection.
• Get real-time alerts: Stay informed of any collection issues with timely notifications.

Ready to transform your evidence-collection process? Explore Scrut Monitor today!

Centralized vulnerability management

Managing vulnerabilities across your assets can be overwhelming, with your teams often struggling to prioritize and remediate effectively.

Our new Vulnerability Management feature makes it easier to keep track of vulnerabilities across all your connected applications right from the Scrut platform. It gives you a centralized view, so you can prioritize risks based on severity and ensure remediation with tailored SLAs.

Here’s what makes Scrut Vulnerability Management a must-have:

• Unified visibility: Supports integrations with tools like AWS Inspector, Snyk (SCA and SAST), and GitHub Dependabot, automatically syncing vulnerabilities into Scrut for centralized tracking.
• Prioritized remediation: Vulnerabilities are sorted by severity—Critical, High, Medium, Low, and Info—allowing you to focus on the most urgent issues first.
• Detailed vulnerability view: Each vulnerability is mapped to its CVE ID and can be grouped by status (e.g., Open, Closed, Ignored, Risk) or by affected assets. This ensures you can quickly identify and act on critical issues.
• Risk register integration: Automatically escalate vulnerabilities into your risk register for ongoing monitoring and governance.
• Real-time dashboard: Group vulnerabilities by status, asset, or severity for a clear, actionable view of your organization’s security posture.
• Effortless collaboration: Assign and manage tasks directly from the platform by integrating with tools like Jira.

Stay ahead of security risks and streamline your compliance with Scrut Vulnerability Management. Book a demo today!

Test Library: Take control of your compliance tests

When tests are added or updated without review, your compliance workflows can be disrupted, leading to missed deadlines, misaligned audits, and wasted time addressing unforeseen issues.

Scrut’s Test Library solves this problem by providing a single, centralized place to review, approve, and integrate tests into your compliance program—ensuring no changes impact your workflow without your consent.

• New tests workflow: Newly added tests are marked with a “New” tag in the Test Library. Review the details, accept them into scope, and ensure they’re ready for audits.
• Test updates workflow: Updates to existing tests are marked with an “Update” tag. Once accepted, these updates automatically replace the older versions without disrupting your workflows.
• Minimized operational risk: To prevent unexpected disruptions, actions like assigning tests, creating tickets, or exporting data are restricted until you accept the tests as part of your compliance scope.
• Notifications: Get real-time alerts on your dashboard or CATs page whenever there are new or updated tests that need your attention.
• Bulk accept: With the bulk accept feature, you can quickly approve multiple tests in one go, saving time without compromising control.

The Test Library gives you the tools to stay ahead of compliance changes, making your workflows smoother and more predictable. Take the guesswork out of managing tests—explore the Test Library today!

Video training in the Security Awareness Platform

Keeping employees engaged in security training is often a challenge, especially with traditional, static formats. The Video Training feature in our Security Awareness module enables organizations to deliver compliance and security training through engaging video content.

• Interactive training modules: Employees can now access training videos that simplify complex topics into clear, relatable, and engaging lessons.
• Built-in quizzes: Each video lesson comes with a quiz that unlocks only after watching the full video, helping reinforce key concepts.
• Easy access: Access video training directly within Scrut’s Security Awareness dashboard for a streamlined experience.
• Enhanced awareness: Equip employees with the knowledge they need to recognize and respond to security risks effectively.

Empower your workforce with better training tools—start leveraging video training in the Security Awareness Platform today!

Expanding your toolkit with new integrations

Integrations are key to making compliance management more efficient, and we’ve rolled out some exciting new ones this month:

• FreshService: Simplify IT service management with seamless ticketing and compliance tracking.
• Okta Integration Upgrade: Transitioned to OAuth for enhanced security and added user synchronization.
• SonarCloud: Automate code quality checks and integrate compliance reporting.
• CrowdStrike Falcon Antivirus: Detect antivirus installations through MDM solutions or the Scrut agent, ensuring easy tracking of security compliance.
• Azure Gov Cloud: Support compliance needs in highly regulated industries with Azure Government Cloud.
• Slack: Streamline team communication by integrating compliance alerts and updates directly into your Slack channels.
• KiteCyber MDM: Manage mobile devices securely and ensure compliance across your organization’s mobile fleet with KiteCyber Mobile Device Management.
• Salesforce Integration in Trust Vault: Automatically approve users within Trust Vault using Salesforce integration, saving time and reducing manual effort.

These integrations are designed to enhance your workflows and keep your compliance processes running smoothly. Check out the integrations page in your Scrut account to learn more.

Experience it firsthand!

The 2024 updates reflect our commitment to simplifying compliance and strengthening security for organizations of all sizes.

Login to your Scrut account to explore all these features. Not a Scrut customer yet? Request a demo to discover how Scrut can work for you.

We’d love to hear your thoughts! Share your feedback with your Customer Success Manager, and tune in next month for more exciting product updates from Scrut.