Oneleet

Description

From the marketplace listing

Oneleet is a security and compliance platform that runs SOC 2, ISO 27001 and other compliance programs alongside penetration testing, attack surface monitoring, code security and device management. The Oneleet plugin connects ChatGPT and Codex to your Oneleet workspace so you can review and work on your security program in conversation. What you can do: - Compliance: find controls that are failing or not started, read the checks behind a control, and track framework requirements, audit readiness and your compliance journey. - Monitoring: review automated monitors and the assets failing them, rerun a monitor, or snooze one with a reason. - Evidence and policies: list evidence and get download links, link evidence to controls, and review policies, policy versions and signatures. - Risk and vendors: work with risk assessments and risks, review vendors and their security assessments, and maintain vendor data inventories. - People and access: list workspace members, check device compliance, and run access reviews. - Security findings: review code security findings, dependency vulnerabilities, attack surface findings, DAST issues and pentest findings, and generate fix patches for code findings and open them as pull requests. - Trust center: review trust center documents, FAQs and document requests, and approve or deny requests. How it works: you sign in with your Oneleet account and choose the workspace to connect. The plugin acts as you. It can only see and change what your role in that workspace allows, and every action is attributed to your account. Tools that create, change or delete data are marked as write actions, so you are asked to confirm before they run. Requirements and limitations: you need an existing Oneleet account that is a member of a workspace with AI assistant access enabled. The plugin works in one workspace at a time; to switch, disconnect and sign in again. It cannot set a control's status directly (status comes from the control's checks and evidence), sign policies for other people, or reach workspaces you are not a member of.