Discover - Customer-Authored Exposures
Teams can now tune built-in exposure rules or write their own across asset, identity, software and SaaS data, including AI-assisted authoring that turns a plain-English description into a ready-to-review rule. Teams can reduce noise and close the coverage gaps unique to their environment.
Mobile App - Intel Reports and Subscription Notifications
Threat Intel Analyst Teammate reports can be generated and viewed on the go through Chat or the Reports tab in Intel, with history syncing between web and mobile. Push notifications for Intel Update Subscriptions link straight to the relevant update.
Platform - Ticket Sync for Google SecOps SOAR and ServiceNow
GreyMatter now offers native bidirectional ticket sync with Google SecOps SOAR and ServiceNow. Incidents created or updated in Investigate sync in near real time, updates flow both ways, and customers configure integrations, field mappings and status mappings themselves.
Platform - Notification Groups
Notifications can now go to groups built from GreyMatter users and external distribution lists, so one notification reaches a whole team or stakeholder set. Members can see their groups and opt out, while group management stays with admin-level users.
New Direct Sources - OpenAI Compliance, Rapid7 InsightVM
Source | Supported GreyMatter Capabilities |
|---|---|
OpenAI Compliance | Detect at Source, Investigate/Hunt, Respond |
Rapid7 InsightVM | Discover, Asset Inventory, Respond |
Detect - Detection Validation Enhancements
Detection Validation now covers 185+ rules with higher-fidelity ReliaQuest-authored simulations and can validate single, multiple or all eligible deployed rules in one run, uniting Security Control Validation and Rule Validation in one workflow. Configurable criteria such as log source selection and strict or normal mode give more control over how each rule is validated, while AI-generated run summaries and downloadable PDF reports make results easy to understand and share.
Mobile App - GreyMatter Chat in Mobile
Chat is now available in the Mobile App, with the same natural-language interface as web and conversations syncing in real time. Mobile Chat covers the areas of the platform already supported in mobile; web-only actions continue on web via sync.
New Direct Sources - PingOne
Source | Supported GreyMatter Capabilities |
|---|---|
PingOne | Discover, Respond |
Enhanced Direct Sources - Microsoft Entra ID
Source | Updated GreyMatter Capabilities |
|---|---|
Microsoft Entra ID | Respond: Delete Device |
New Direct Sources - Jamf Pro
Source | Supported GreyMatter Capabilities |
|---|---|
Jamf Pro | Discover, Respond |
Enhanced Direct Sources - Exabeam New-Scale SIEM
Source | Updated GreyMatter Capabilities |
|---|---|
Exabeam New-Scale SIEM | Detect, Detection Push, Detection State Syncing |
New Direct Sources - Sublime Security
Source | Supported GreyMatter Capabilities |
|---|---|
Sublime Security | Detect, Detection Push, Investigate/Hunt, Intel Push, Respond |
