Release Notes

Apr 26, 2024

• New Features
  • Lifecycles - Clients will now be able to configure Target and Vuln Instance Lifecycles.
    • Clients may have a data retention policy to manage or maybe they prefer to only analyze vulnerabilities for targets recently scanned. You can now configure a Target Lifecycle policy to either mark a Target as Inactive or to delete it based on the last time it was scanned.
    • Clients can also mark Vuln Instances closed in bulk based on when they were last detected and may also choose to delete them in bulk.
    • These rules are run once a day at night (EST).
    • Go to Settings | Lifecycles to configure your settings.

• Improvements
  • The Vuln Instance Details page gets an update to the Location card. This card is meant to represent the specific location a vulnerability was found on a target by the scanner. Typically it can be a Port or a URL or a File Location.
• Bug Fixes
  • Exception Insights Details for Target Properties widgets have now been fixed.

Apr 15, 2024

• New Features
  • Create Widgets
    • Users can now create custom widgets for use within their own instance. You provide the following:
      • A Query
      • Segment
      • Values
      • Visualization Type
    • You can follow the guide here to learn how to create your first widget.

• • • We will continue releasing more functionality to allow you even more customization and visualization types over the next several months.
• Improvements
  • Select All functionality in Prioritize Table
    • Users can now define if they are selecting all items in one page or all items across all pages for use with Create Remediation Plans and Create Exception plans use cases.
  • Large Task handling
    • When creating large Actions with either a large number of plans or a large number of vuln instances you will now see that the task has been started in the backend and we will notify you in the UI when it is done.
    • The completed notification will now include a link to the Action itself.
• Bug Fixes
  • We are closing the bug for receiving an Error when creating large Actions as that is now resolved by not timing out and instead moving the processing of the task to the backend.

April 1, 2024

• New Features
  • Exception Insights Page
    • There is a new Insights tab named Exceptions.
    • This tab aims to identify insights based on your Exception data. Each insight is captured within an Insight Widget which has a visualization, a specific insight highlight from that dataset, the risk captured within the Exception Plan, and finally a recommendation on how to leverage the data displayed. Users can view the specific Exception Plans for the highlighted data by clicking on View Details.
  • Threat Vector Insights Page
    • There is a new Insights tab named Threat Vector.
    • NopSec is now categorizing vulnerabilities by leveraging data analysis tools to evaluate vulnerability data and our threat intelligence. These categories can be used by users to help further prioritize vulnerability remediation. The Insight page aims to provide an easy way for users to learn about these threat vectors and see how many, if any, exist in the network similar to Celebrity Vulnerabilities or CISA KEV. However, now users can jump into an Insight page per Threat Vector where they can continue to deep dive into the threat and its impact to the network.
  • Velocity Insights Page
    • There is a new Insights tab named Velocity.
    • Every client identifies vulnerabilities and aims to remediate them within a specific timeframe. This can be calculated as the time to remediate a vulnerability from first detected date to remediated date. When looking across the entire dataset it helpful to look at the Mean Time to Remediate. We can consider the length of time to remediate a vulnerability as the speed or velocity an organization is performing at to remediate vulnerabilities. Now, why would an organization be getting faster or slower at remediating vulnerabilities? This is the core question for the Velocity Insights page.
    • You can now view different potential correlation events that you can use to evaluate where you may be performing slower or where there may have been an event that could have lead to an increase or decrease in speed.
• Integrations
  • We have a new Integration with Veracode SAST and DAST.
    • Users can now view their SAST or DAST scan results within the platform.
  • We have expanded our Wiz Integration to bring in more AWS configuration and policy data.
    • Users can now view new Target Types such as Database and Server and

• Bug Fixes
  • • Floats have been formatted to become 2 decimals. There were a few areas where they were not properly being formatted such as the Top Risk Factors.