RiskPilot
Website
FR
GitHub
Menus, submenus and screens #
AvailableMap verified against the RiskPilot product main branch, commit 924dcac dated 9 August 2026.
Risk governance #
| Menu | Route | Features |
|---|---|---|
| Dashboard | / | summaries, due dates and exports |
| Risks | /risks | register, priorities, policies, acceptances and campaigns |
| EBIOS Risk Manager | /ebios | five workshops, completeness, versioning and independent validation |
| Action plans | /actions | table, Kanban, calendar, iCalendar and GRC fields |
| Operations | /operations | tasks, responsibilities, trajectories, questionnaires, campaigns and packs |
| Indicators | /indicators | KPI/KRI definitions and measurements |
| Annual reports | /annual-reports | classified activity, cyber maturity and versioned snapshots |
| Decision | /decision | projects, quantification, views, reports, connectors and TPRM |
| Experiments | /experiments | controlled assistant and governed internal library |
| Analyses | /analysis-workspace | versioned analyses, artifacts, quality and approval |
| Risk matrix | /risk-matrix | inherent, current and residual scores |
Inventory and ISMS #
| Menu | Route | Features |
|---|---|---|
| Scopes | /scopes | hierarchy and owners |
| Assets → All assets | /assets | cross-family register, search and export |
| Hardware assets | /assets/hardware | equipment and media |
| Software assets | /assets/software | applications, systems and services |
| Information assets | /assets/information | data, documents and flows |
| Threats | /threats | event catalogue |
| Vulnerabilities | /vulnerabilities | weaknesses and affected assets |
| Security controls | /security-controls | deployment and effectiveness |
| Compliance | /compliance | assessments, frameworks and SoA |
| NIS2 compliance | /nis2 | score, requirements, maturity, evidence and remediation |
| Third parties | /third-parties | dependencies, data and exit plans |
| Resilience | /resilience | incidents, BIA, BC/DR and exercises |
| Regulatory | /regulatory | processing, DPIAs, breaches and exemptions |
| ISMS documents | /isms-documents | publications, categories, versions and shares |
Monitoring and settings #
Notifications and the executive report complete monitoring. Settings includes My profile and MFA for language, password and sessions. Administrators also access Action columns, integrations, email, users, organizations and audit logs.
| Submenu | Route |
|---|---|
| My profile and MFA | /profile |
| Roles and permissions | /administration/rbac |
| Action columns | /administration/action-fields |
| Identity and integrations | /administration/integrations |
| AI copilot (administrators) | /administration/integrations |
/administration/email-settings | |
| Users | /administration/users |
| Organizations | /administration/organizations |
| Audit log | /administration/audit-logs |
Language and permissions #
The French/English profile choice applies to the whole interface. Administrator-only entries are hidden from other roles, but authorization is always enforced by the API.
Risk management, Governance, Assets, Compliance and controls, ISMS documents and Settings behave as an accordion: opening one closes the previous group. The group containing the active route opens automatically, including after direct navigation or reload.
The lazy-loaded floating AI copilot button remains available throughout authenticated screens. It opens four workflows: GRC chat, AI-assisted third-party risk generation, AI-assisted compliance action generation and ISMS document preparation. In Compliance, each result also has a contextual button linked to its requirement.