OMNI-GRC

OMNI-GRC Feature Gallery

This document provides a visual walkthrough of all OMNI-GRC features with screenshots and descriptions.

Table of Contents

Authentication

Login Page

OMNI-GRC uses an invite-only authentication system for enhanced security. Users must be invited by an administrator to access the platform.

Login Page

Features:

Dashboard

Main Dashboard

The dashboard provides a comprehensive overview of your compliance and security posture at a glance.

Dashboard

Key Metrics:

Dashboard Cards:

Actions:

Compliance Management

Compliance Overview

Track compliance status across all active frameworks with industry filtering.

Compliance Page

Statistics Cards:

Industry Filters:

Tabs:

  1. Your Compliance Status - Active frameworks and their status
  2. Framework Library - Browse all available frameworks
  3. Industry Coverage - See coverage by industry

Framework Library

Browse all 36+ compliance frameworks with control counts, region info, and industry tags.

Framework Library

Framework Cards Include:

Frameworks Displayed:

Industry Coverage

See framework, best practice, and checklist coverage across all 12 industries.

Industry Coverage

Industries Covered: | Industry | Frameworks | Practices | Checklists | |———-|————|———–|————| | Healthcare | 9 | 54 | 5 | | Financial Services | 12 | 55 | 5 | | Government & Public Sector | 12 | 46 | 5 | | Technology & IT Services | 15 | 54 | 5 | | Privacy & Data Protection | 12 | 36 | 4 | | Retail & E-Commerce | 7 | 34 | 3 | | Manufacturing & Industrial | 6 | 33 | 3 | | Energy & Utilities | 8 | 33 | 3 | | Education | 5 | 33 | 3 | | Telecommunications | 6 | 33 | 3 | | Emerging Technologies | 8 | 38 | 4 | | General / Cross-Industry | 5 | 33 | 3 |

Security Scanning

Scans Management

Create, execute, and monitor security scans across your infrastructure.

Scans Page

Statistics:

Scan Table Columns:

Supported Scanner Categories (24 adapters implemented):

Checklists

Checklists Management

Manage compliance, audit, and security checklists with progress tracking.

Checklists

Statistics:

Features:

Pre-built Templates (15):

Reports

Reports Management

Generate 28+ report types including executive summaries and audit evidence packages.

Reports

Statistics:

Tabs:

  1. Report Templates - Browse available templates
  2. Generated Reports - View and download reports
  3. Scheduled Reports - Configure automated generation

Report Templates by Category:

Category Templates
Executive & Board Executive Summary, Board of Directors Report
Compliance Compliance Summary, Framework Assessment, Control Gap Analysis, Policy Compliance
Security Security Findings Report, Remediation Tracker, Incident Response Report
Risk Management Risk Register, Third Party Risk Report, Vendor Assessment
Audit & Evidence Audit Evidence Package
Asset Management Asset Inventory Report
Operational & SLA SLA Compliance Report, Remediation Progress Tracker
Governance & Maturity Maturity Assessment, Policy Gap Analysis
Data Privacy Data Privacy Impact Assessment, Consent Compliance Report
Business Continuity Business Continuity Plan, Disaster Recovery Report

PDF Generation Features:

Export Formats:

Risk Register

Risk Management

Track and manage organizational risks with interactive risk matrix visualization.

Risk Register

Statistics:

Risk Matrix:

Risk Table:

Risk Scoring:

Treatment Options:

Asset Management

Assets Inventory

Manage your IT asset inventory with filtering by type, status, and criticality.

Assets

Statistics by Type:

Filters:

Asset Table Columns:

Evidence Library

Evidence Management

Manage compliance evidence and audit artifacts with chain of custody tracking.

Evidence

Statistics:

Evidence Types:

Classification Levels:

Features:

Workflow Automation

Workflows

Automate remediation, approvals, and compliance workflows.

Workflows

Tabs:

  1. Workflows - Configured workflow definitions
  2. Executions - Active and completed workflow runs
  3. Templates - Pre-built workflow templates

Workflow Table:

Workflow Templates: | Template | Stages | |———-|——–| | Critical Finding Remediation | Triage → Investigation → Remediation → Verification → Closure | | Control Implementation | Requirements → Implementation → Testing → Evidence → Review | | Risk Treatment | Assessment → Selection → Implementation → Monitoring | | Evidence Review | Submission → Review → Approval | | Approval Workflow | Request → Review → Decision |

Features:

Settings

Configuration

Configure your OMNI-GRC instance with organization, user, notification, and security settings.

Settings

Setting Tabs:

  1. General
    • Organization name
    • Default timezone
    • Date format
    • Enabled compliance frameworks
  2. Users
    • User list and management
    • Invite new users
    • Role assignment (admin, grc_analyst, security_engineer, auditor, viewer)
    • Activate/deactivate users
  3. Notifications
    • Email notifications toggle
    • Slack webhook URL
    • Notification preferences
  4. Integrations
    • AI provider configuration (OpenAI, Anthropic, Ollama)
    • Jira, ServiceNow, Slack connections
  5. Security
    • Session timeout
    • MFA requirement
    • Password policy
    • SSO provider configuration cards:
      • Google (OAuth 2.0)
      • GitHub (OAuth 2.0)
      • Microsoft Azure AD (OpenID Connect)
      • Okta (OIDC)
      • SAML 2.0 (custom IdP)
  6. Report Branding
    • Color pickers for primary, secondary, and accent colors
    • Header and footer templates with logo upload
    • Paper size selection (A4, Letter, Legal)
    • Cover page customization with title, subtitle, and organization logo
    • Table of contents generation toggle
    • Confidentiality watermark and classification banners

Getting Started Guide

Interactive Guide

Interactive guide with quick start steps, scanner reference, and feature overview.

Getting Started

Sections:

  1. Quick Start Guide
    • Install Security Scanners
    • Run Your First Scan
    • Review Findings
    • Track Compliance
    • Generate Reports
  2. Core Concepts
    • Scan Once, Comply Everywhere
    • Unified Finding Schema
    • Control Assessment Engine
    • Evidence Collection
  3. Scanner Reference
    • Container & Kubernetes (3 scanners)
    • SAST & SCA (4 scanners)
    • DAST & Web Security (3 scanners)
    • Secrets Detection (1 scanner)
    • Cloud Security (1 scanner)
    • Network & Infrastructure (2 scanners)
  4. Supported Frameworks
    • All 8 core frameworks with control counts
  5. Feature Overview
    • Security Scanning
    • Compliance Tracking
    • Report Generation
    • Checklists
    • Asset Management
    • Alerting
  6. Environment Setup
    • Required environment variables
    • AI provider configuration
    • Database setup commands
  7. User Roles & Permissions
    • Role descriptions and capabilities

Integrations

External Tool Connections

Connect OMNI-GRC with Jira, ServiceNow, Slack, and custom webhooks.

Integrations

Available Integrations:

Integration Capabilities
Jira Create issues from findings, sync status, link to controls
ServiceNow Create incidents/problems, sync CMDB, link changes
Slack Real-time notifications with rich Block Kit formatting
Microsoft Teams Webhook with Adaptive Cards
PagerDuty Incident creation for critical alerts
Webhooks Custom integrations with any system

Features:

Audit Logs

Activity Tracking

Track all user actions and system events with comprehensive filtering and export.

Audit Logs

Statistics:

Filters:

Audit Log Table:

Features:

SSO & Authentication

Single Sign-On Providers

OMNI-GRC supports 5 SSO providers for enterprise authentication, all conditionally enabled via environment variables:

Provider Protocol Configuration
Google OAuth 2.0 Client ID + Secret
GitHub OAuth 2.0 Client ID + Secret
Microsoft Azure AD OpenID Connect Tenant ID + Client ID + Secret
Okta OIDC Domain + Client ID + Secret
SAML 2.0 SAML IdP metadata URL + Entity ID

Features:

API Documentation

Interactive API Docs

Built-in OpenAPI/Swagger documentation for all API endpoints.

API Documentation

Features:

Continuous Compliance

Automated Compliance Monitoring

Continuously monitor compliance posture with automated checks and drift detection.

Features:

Dashboard Customization

Widget-Based Dashboard

Customize your dashboard with drag-and-drop widgets and saved layouts.

12 Widget Types:

4 Preset Layouts:

  1. Executive - High-level compliance, risk, and trend widgets
  2. Security Engineer - Findings, scans, and remediation-focused
  3. Auditor - Evidence, controls, and audit trail widgets
  4. Custom - Build your own layout

Per-user saved layouts that persist across sessions.

SIEM/SOAR Integration

Audit Log Export

Export audit logs to your SIEM/SOAR tools in multiple industry-standard formats.

Export Formats: | Format | Description | |——–|————-| | CEF (Common Event Format) | ArcSight and compatible SIEMs | | Syslog RFC 5424 | Standard syslog with structured data | | JSON | Structured JSON for custom integrations | | CSV | Spreadsheet-compatible tabular export | | Windows Event XML | Windows Event Log compatible |

Forwarding Destinations:

Plugin System

Extensible Architecture

Extend OMNI-GRC with custom plugins for scanners, integrations, report templates, dashboard widgets, and alert channels.

5 Plugin Types: | Type | Description | |——|————-| | Scanner Plugin | Add new security scanner adapters | | Integration Plugin | Connect to external tools and services | | Report Template Plugin | Custom report formats and layouts | | Widget Plugin | Custom dashboard visualizations | | Alert Channel Plugin | New notification delivery methods |

Features:

Multi-Language Support

Internationalization (i18n)

OMNI-GRC supports 8 languages with full RTL support:

Language Code Direction
English en LTR
Spanish es LTR
French fr LTR
German de LTR
Arabic ar RTL
Chinese (Simplified) zh LTR
Japanese ja LTR
Portuguese (Brazil) pt-BR LTR

Features:

OMNI-GRC provides a comprehensive platform for:

Last Updated: June 2026
Applies to: OMNI-GRC v0.1.0+