[CORE] Editable resolution date
Key changes
It’s now possible to edit the resolution date of a resolved report. This date was previously automatically set when the report’s status was set to resolved.
Organisations can now edit this date to reflect the actual remediation time provided by their team.
Impact
Organisations can now better track their remediation progress through the dashboards (ie., Reports Lifecyle).
Audience
All organisations with resolved vulnerability reports in their vulnerability center.
Usage
ℹ️ By default, when a report’s status is set to “resolved,” the resolution date is set to the current date.
To change the resolution date:
Open a resolved vulnerability report
Click on the pencil icon (edit)
Change the resolution date
Click on “Save”
Any change to the resolution date will appear in the comments.
ℹ️ The SLA compliance is recalculated based on the days consumed and any delay.
The 'Reports Lifecycle' dashboard takes into account updated resolution dates:
[ASM] Report creation from a technology instance
Key changes
An organisation can now create a report from technology instances to quickly identify vulnerabilities related to these versions.
ℹ️ The report’s title will be: Outdated {techno - version} on {host}
Impact
Organisations can now easily report and track vulnerabilities related to technologies through the Vulnerability Center.
Audience
Business Unit Owners (BUO), Business Unit Managers (BUM] and BU Surface Manager with an activated ASM product.
Usage
Go to the “Attack Surface” Tab
Click on the “Hosts” tab and choose a Host
Click on “Technologies”
Find the new “Create report” icon on the right.
Click on it to create a new report from a Technology
This report now appears in the Vulnerability Center
⚠️ Note that this new report does not appear in the “Vulnerability reports” tab yet. This will evolve in the coming weeks.
⬆️[CORE] More notifications' details
Key changes
New details have been added to the notification center to improve its readability. Icons are already displayed next to sender types (managers, hunters, triage) to help users identify who’s sending the message.
The text now also include who the message is for (e.g., Triage added a comment for Hunter).
Impact
Going through multiple notifications at a glance is now easier, especially when users have access to several types
Audience
All users, both from organisations and hunters, with access to the platform.
Usage
Click the bell icon at the top right to open the notification page
[MISC]
Dashboard: The title of the “Reports Acceptance” chart has been changed to “Valid Reports”. The chart now displays the percentage of Accepted reports among all valid reports (including "won't fix" and "informative" reports).
The program title is now case sensitive (i.e. by default in lowercase and have uppercase only on letters that organisations have put).
Organisations can now easily access the user-agent used by triagers directly within the programs.