Skip to Content

June 2026 Product Releases

Enhancement

Discover - Customer-Authored Exposures

Teams can now tune built-in exposure rules or write their own across asset, identity, software and SaaS data, including AI-assisted authoring that turns a plain-English description into a ready-to-review rule. Teams can reduce noise and close the coverage gaps unique to their environment.

Enhancement

Mobile App - Intel Reports and Subscription Notifications

Threat Intel Analyst Teammate reports can be generated and viewed on the go through Chat or the Reports tab in Intel, with history syncing between web and mobile. Push notifications for Intel Update Subscriptions link straight to the relevant update.

New Release

Platform - Ticket Sync for Google SecOps SOAR and ServiceNow

GreyMatter now offers native bidirectional ticket sync with Google SecOps SOAR and ServiceNow. Incidents created or updated in Investigate sync in near real time, updates flow both ways, and customers configure integrations, field mappings and status mappings themselves.

Enhancement

Platform - Notification Groups

Notifications can now go to groups built from GreyMatter users and external distribution lists, so one notification reaches a whole team or stakeholder set. Members can see their groups and opt out, while group management stays with admin-level users.

Direct Sources

New Direct Sources - OpenAI Compliance, Rapid7 InsightVM

Source

Supported GreyMatter Capabilities

OpenAI Compliance

Detect at Source, Investigate/Hunt, Respond

Rapid7 InsightVM

Discover, Asset Inventory, Respond

Enhancement

Detect - Detection Validation Enhancements

Detection Validation now covers 185+ rules with higher-fidelity ReliaQuest-authored simulations and can validate single, multiple or all eligible deployed rules in one run, uniting Security Control Validation and Rule Validation in one workflow. Configurable criteria such as log source selection and strict or normal mode give more control over how each rule is validated, while AI-generated run summaries and downloadable PDF reports make results easy to understand and share.

Enhancement

Mobile App - GreyMatter Chat in Mobile

Chat is now available in the Mobile App, with the same natural-language interface as web and conversations syncing in real time. Mobile Chat covers the areas of the platform already supported in mobile; web-only actions continue on web via sync.

Direct Sources

New Direct Sources - PingOne

Source

Supported GreyMatter Capabilities

PingOne

Discover, Respond

Enhanced Sources

Enhanced Direct Sources - Microsoft Entra ID

Source

Updated GreyMatter Capabilities

Microsoft Entra ID

Respond: Delete Device

Direct Sources

New Direct Sources - Jamf Pro

Source

Supported GreyMatter Capabilities

Jamf Pro

Discover, Respond

Enhanced Sources

Enhanced Direct Sources - Exabeam New-Scale SIEM

Source

Updated GreyMatter Capabilities

Exabeam New-Scale SIEM

Detect, Detection Push, Detection State Syncing

Direct Sources

New Direct Sources - Sublime Security

Source

Supported GreyMatter Capabilities

Sublime Security

Detect, Detection Push, Investigate/Hunt, Intel Push, Respond

See Our 300+ Supported Sources

Claude Enterprise activity data flows directly into GreyMatter for detection, investigation, and response—same workflows, same Agentic Teammates, same platform that already connects 300+ security technologies.