Risk Management
Made Simple.

Track every risk, plan every mitigation and demonstrate its effect. Consistent scoring, clear heatmaps and an auditable decision log in one register.

For CISOs, IT directors and risk leads running a continuous program.

Contact

Mobile companion apps — coming soon

Apple App Store Google Play
Three side-by-side risk heatmaps showing Inherent, Residual and Target distributions

Features

How it works

  1. 01

    Inherent, residual and target heatmaps.

    Inherent, residual and target sit side by side at all times. You see where each risk started, where it sits today, and where you want it next.

    Click any cell to filter the register to the risks behind it, without building a separate report.

  2. 02

    Mitigations with cost and effect.

    Every control and project carries effectiveness, status and cost. When a mitigation is marked complete, the residual score of the related risk updates immediately.

    Budget delivery updates with it, and the audit log records who made the change. Mitigation spend and delivery can be reported without a spreadsheet.

  3. 03

    Decisions on the record.

    Record decisions, such as a board accepting a risk until Q3, on the risk's timeline next to the score and the data that supports them.

    Decisions can be edited and their history is preserved, so auditors can see who decided what and when without separate preparation.

  4. 04

    Recommendations with the calculation shown.

    Specific, actionable recommendations rather than generic best practice, for example: "Mark this MFA rollout complete to reduce CYB-001 by six points."

    Every recommendation cites the rule applied, the risk concerned and the figures used, so your team can review and challenge it.

  5. 05

    Board-ready reports.

    Executive summary, appetite breaches, mitigation programme and overdue reviews, each generated from the same data in one click.

    Print to PDF for board packs and audits. The layout is clear enough for the board and detailed enough for auditors.

  6. 06

    ESG in the same workspace.

    ESRS-aligned topics, disclosures and metrics live right next to your risks - not in a separate tool, not in another vendor's database.

    Materiality assessments use the same heatmap method your risk team already uses, so ESG and risk teams work from one source of truth.

Frameworks

Built for compliance

Aligned with what you already report against.

93 controls pre-seeded into your controls catalogue. Link them to risks, track effectiveness, export evidence.

Categories, asset and supplier registers, and the decisions log map to the directive's risk-management and incident-handling articles.

Structure your register by Govern, Identify, Protect, Detect, Respond, Recover - each function a category, each subcategory a risk.

Track CIS Safeguards as mitigations against the risks they reduce. Useful when you run a CIS-aligned operational program.

ESRS-aligned topics, disclosures and metrics live in the same workspace - in scope when the ESG module is enabled.

Pricing

Compare plans

Starter

DKK 2,200 / month

Billed monthly

  • Risks25
  • Users2
  • Risk heatmaps (inherent, residual, target)✓
  • Mitigations✓
  • Decisions log and audit trail✓
  • Custom risk categories✓
  • Custom appetite per category—
  • Report branding—
  • Single sign-on (SSO)—

Modules included

DKK 5,000/yr per module

  • ReportsAdd-on
  • InsightsAdd-on
  • ESGAdd-on
  • Linked entitiesAdd-on
  • Controls catalogueAdd-on
Contact

Most popular

Growth

DKK 4,000 / month

Billed annually

  • Risks50
  • Users10
  • Risk heatmaps (inherent, residual, target)✓
  • Mitigations✓
  • Decisions log and audit trail✓
  • Custom risk categories✓
  • Custom appetite per category✓
  • Report brandingLogo only
  • Single sign-on (SSO)—

Modules included

DKK 5,000/yr per module

  • ReportsIncluded
  • InsightsAdd-on
  • ESGAdd-on
  • Linked entitiesAdd-on
  • Controls catalogueAdd-on
Contact

Scale

DKK 7,500 / month

Billed annually

  • RisksUnlimited
  • UsersUnlimited
  • Risk heatmaps (inherent, residual, target)✓
  • Mitigations✓
  • Decisions log and audit trail✓
  • Custom risk categories✓
  • Custom appetite per category✓
  • Report brandingWhite-labeled
  • Single sign-on (SSO)✓

Modules included

  • ReportsIncluded
  • InsightsIncluded
  • ESGIncluded
  • Linked entitiesIncluded
  • Controls catalogueIncluded
Contact

About

About Risk-App

Risk-App is built by MVCS ApS, a Danish software company focused on risk, compliance and governance teams. We built it because the systems we used were either too heavy to roll out or too limited to manage real risk, and much of the work ended up in email and spreadsheets.

Risk-App ships with sensible defaults, so an evaluation is spent using it rather than configuring it. Every screen exists because practitioners running a risk register asked for it.

We are based in Copenhagen, release continuously and respond to support requests within one working day. The roadmap is shaped by the customers who use Risk-App every day, and a small team means feedback reaches the product in weeks rather than quarters.

Contact

Get in touch

Questions about Risk-App? Write to us and we'll get back to you.

Reach us directly

[email protected]

MVCS ApS
CVR: DK-45438392
Copenhagen, Denmark