STREAM® Classic
Enterprise-scale cyber GRC — on-prem deployment, deep automation, advanced modelling, and expert-level configurability for mature programmes.
Last updated: 19 May 2026
Who is STREAM® Classic for?
Advanced programme maturity
Organisations with established, mature cyber risk management programmes that require deep configurability and advanced modelling.
Complex, multi-layered environments
Enterprises managing complex governance, risk, and compliance requirements across multiple business units, regions, or regulatory frameworks.
On-prem and air-gapped requirements
Organisations with air-gapped deployment requirements or a preference for on-prem hosting to meet specific security or regulatory obligations.
STREAM® Classic capabilities
| Area | STREAM® Classic Capability |
|---|---|
| Risk Quantification | Quantitative risk assessments with Monte Carlo analysis, loss exceedance reporting, and return on investment modelling |
| Workflow Automation | Interactive and scheduled custom workflow automations, automated risk identification and assessment, automated escalation and notification |
| Enterprise Integrations | REST API integrations (Nessus, Qualys, and others), SharePoint, Active Directory, integrated messaging and email notifications |
| Advanced Reporting | Branded dashboards, integrated custom report builder, report distribution by user/group, reporting API for Power BI and other visualisation solutions |
| Identity & Authentication | Multi-factor authentication and single sign-on |
| Advanced Data Modelling | Conditional fields, hidden fields, read-only fields, permitted record type linkages, automatic sequential references, defaulting field values based on workflow rules |
| Content Library | Unlimited controls metadata, threat library with threat metadata, asset class threat and control mappings, control-to-control mappings |
| Controls Assurance | Automatically scheduled recurring assessments, configurable guidance for assessors, alerting when assessments are due, custom schemes with multiple criteria |
| Forms Module | Forms designer and forms module for broader end-user and process interaction scenarios |
| Data Flexibility | Virtual views for cutting and slicing data, bulk record update, record cloning, import of threat libraries and mappings |
On-prem deployment
Deploy STREAM® Classic on your own infrastructure — for organisations with air-gapped deployment requirements or those that prefer to keep their GRC data on-premises.
Deep automation
Automate complex governance, risk, and compliance workflows at enterprise scale — including automated risk identification, assessment, treatment plans, and residual risk estimation.
Advanced modelling
Quantitative risk assessments with Monte Carlo analysis, loss exceedance reporting, and ROI modelling for sophisticated analytical requirements.
Expert configurability
Configure STREAM® Classic to match the precise requirements of your organisation — conditional fields, workflow rules, custom schemes, and permitted record linkages.
When is STREAM® Classic the right fit?
Programme maturity: You have an established, mature cyber risk management programme that needs deep configurability and advanced modelling.
Deployment requirements: You need on-premises deployment, potentially in isolated (air-gapped) environments where required.
Reporting and integration: You need enterprise integrations via REST API, branded dashboards, custom report building, and Power BI connectivity.
See STREAM® Classic in action
Reporting & Analytics
Branded dashboards, custom report builder, automated report generation, and reporting API for Power BI.
Explore reporting →Integrations & API
Connect STREAM® Classic with enterprise tools through REST API integrations, SharePoint, Active Directory, and email notifications.
Explore integrations →Prefer a lightweight cloud approach?
Discover the STREAM® Cyber GRC Platform
Learn how the Vendor Management Hub and STREAM® can help unify your governance, risk and compliance efforts into a single, powerful platform.