What Secureframe changed

• Added Secureframe Virtual Desktops with features like shared file storage (Z: drive) and configuration drift detection.
• Launched a Notifications Hub to centralize failing tests, overdue tasks, and audit activity in one view.
• Redesigned the policy creation workflow with a two-step guided process and live token previews.
• Introduced automated scoping and implementation statements specifically for CMMC 2.0 and GCC High environments.
• Added "Smart User Mentions" to allow tagging team members and auditors directly in comments.
• Released User Access Reviews (UAR) to automate recurring access audits.

The product is moving deeper into the defense sector by providing the actual infrastructure (Virtual Desktops) needed to handle sensitive data, rather than just monitoring it. This makes them a direct service provider for CMMC compliance, not just a software layer.

• Replaced a top-bar banner about CMMC regulatory news with a promotion for a new "Notifications Hub" feature.
• Added a new cookie consent and privacy preference management interface to the site header.
• Updated technical metadata for how external links open in new windows.

Secureframe is shifting its focus from static blog updates about compliance news to an active, centralized product feature. This helps their users track regulatory changes directly within the platform rather than reading external articles.

• Added a Notifications Hub (Early Access) to centralize alerts for failing tests, tasks, and mentions.
• Launched Custom Fields for Personnel and Tasks (Complete plan) to replace external spreadsheets.
• Redesigned the Employee Onboarding setup into modular sections (policies, training, etc.).
• Introduced a "Personnel Source of Truth" selector for organizations with multiple HRIS/directory integrations.
• Updated the Org Picker to allow faster switching between different company accounts.
• Enhanced several integrations including Azure, Microsoft Sentinel, Datadog, and ServiceNow.

The platform is shifting from a passive compliance repository to an active management tool. By centralizing alerts for failing tests, vendor updates, and audit activity, Secureframe is trying to reduce user churn caused by "compliance fatigue" and manual monitoring.