Product Updates

Discover the latest feature releases, improvements and updates.
All updates
Asset Management
Dashboard
API
January 29, 2024

Release Notes January 29th

The Likelihood of an Asset Being Exploitated

Not too long ago we added the EPSS (Exploit Prediction Scoring System) metric to vectors that have a CVE as their first tag. We wanted to provide you with an insight into the likelihood of this vector being exploited. In this release we have taken it a step further and added an EPSS score to all the Vector tags on the platform, so every vector has an EPSS score, and added a new metric to assets which is based on the highest EPSS score out of all the vectors that are attached to an asset and provide an Exploitation likelihood score for the asset.

Dashboard - Vector Breakdown

We heard you about the Vector Breakdown feature in the Dashboard screen and that it was somewhat counterintuitive, so we gave it an update and now it will better help you find the vector you’re looking for.

The left side still represents all the vector tags that are present on the target, clicking on one of them will show on the right side a list of all the vectors that have this tag. Clicking on a vector will take you to the Vectors screen with the selected vector filtered.

Identifiers in Reports and the API

The Asset and Vector identifiers were added so you can easily differentiate between similar vectors, now we added them to all the reports, relevant external API routes and email alerts as well.

Exporting Data

You can now export all the data on the Discovery screen into JSON format. Exporting to JSON is limited to 100 items per file due to size limitations.

API additions

  • Requesting all the vectors on a target - when a target has a lot of vectors it can take some time to get all of them using the API. To ease the process, we added lazy loading to the endpoint. Read more about it in our API docs.
  • A whole new API route was added to allow you to delete assets from your target. Keep in mind that deleting an asset also deletes all of its data, including vectors, IPs, ports, technologies etc.
    This action is not reversible.

Additional Features

  • Member role cannot delete playbooks anymore.
  • We updated the walkthrough videos to reflect all the changes in the platform.
  • A new sorting option for both Assets and Vectors - Sort by name.