Secani Documentation
Product guides for IT-Grundschutz, ISMS workflows, evidence management, AI-assisted reviews, and audit-ready compliance work.
Secani is an AI-native workspace for cybersecurity compliance teams working with IT-Grundschutz, ISMS processes, evidence, owners, tasks, and review decisions. These guides show how audit readiness becomes part of everyday work instead of a last-minute documentation push.
What You Can Do
- Model IT-Grundschutz and ISMS work around real target objects.
- Keep evidence connected to requirements, controls, and decisions.
- Use AI-assisted workflows while preserving human review and source traceability.
Documentation Structure
This documentation starts with the minimum product and workflow context needed to orient new users. It can grow into deeper guides for imports, modeling, evidence, reporting, and integrations as those surfaces stabilize.
API Permissions and JSON Errors
The public OSCAL Validation API supports anonymous calls at its base limits. Optional sk_oscal_ credentials use one fixed API-key role, oscal-validator, with one capability, oscal.validate. That role is bounded to validation and higher request limits: it cannot read organizations, workspaces, governance scopes, or evidence, and it cannot write, approve, or administer product data.
Invalid API paths and invalid requests return RFC 9457 problem details as application/problem+json. Each error includes a stable code, a recovery-oriented resolution, and a documentation URL. See permissions and API access, the OSCAL API guide, the error reference, and the OpenAPI contract.