Release notes

NewNew Features

• Fresh-IP Egress: external scans now run from clean, ephemeral IP addresses to beat shared-IP reputation blocks and WAF bans.
• WAF & Bot-Challenge Detection: scans flag degraded or blocked results instead of silently returning incomplete data.
• Entry Points Chart Remade: the dashboard now plots both entry points and assets over time, by family and scope.
• Company Classification Overhaul: NACE-first dispatch removes retail, wholesale, and IT mis-classification; the picker typeahead now surfaces corporate-group siblings.
• Wider Live Progress: the scan progress bar now spans entry points, vulnerabilities, risk score, and status in real time.
• New Scan: repeat any scan as a separate scan instead of overwriting it. Rescan still replaces the run in place; New Scan keeps the previous one whole and openable.
• Licence capacity and cost are now shown before you confirm a scan, for probe groups and single probes alike.
• Scan history that opens: timeline points left behind by a rescan are marked as replaced runs instead of leading to a "Scan Not Found" page.

ImprovedPerformance

• Attack Surface Map: panning and zooming a large map is now immediate — viewports are drawn from data already in your browser instead of one request per movement.
• The map is now built while the scan runs rather than after it, so it is ready the moment the scan finishes.

ImprovedImprovements & Fixes

• Cloud Costs admin view with Digital Ocean cost tracking.
• Security hardening: closed unauthenticated RCE, broken-auth, and SSRF findings from the latest security audit.
• Fixes: PDF report tables overflowing the footer, staging build memory, and notification dropdown scrolling.
• Large scans now finish: every phase is budgeted for real estate sizes, so one slow tool no longer ends a multi-hour scan as "partial".
• Screenshots, login-form detection and cookie security checks now cover their full allowance instead of stopping after the first few hosts.
• Scan duration now reads in hours once a scan passes one hour, in the app and in both PDF reports.
• Public API: asset and domain inventories now return correctly for external scans, and asset pages are dramatically smaller.

NewNew Features

• Scan Sharing: share any external scan with teammates by name or email — they get a read-only copy on their own dashboard, with invite, resend, and revoke, and a Mine / Shared with me / Shared by me filter.
• Exploit Prioritization (EPSS + CISA KEV): every CVE now shows real-world exploit likelihood — EPSS probability, a Known-Exploited flag, and a ransomware indicator — with new sort, filter chips, a top-priority card, and CSV columns.
• Outbound Integrations: forward scan events to Slack, Jira, ServiceNow, Splunk, Microsoft Sentinel, a generic webhook, or an email digest, with per-integration event selection and signed delivery.
• API Access & Personal Access Tokens: a new /api/v1 surface with Personal Access Tokens managed under Settings, plus SSO bearer support, for programmatic access to your scan data.
• External API Usage (admin): a Settings page logging every company-data API call (MARGO/CRIF, D&B) with vendor, query, status, and estimated cost, visible within seconds.
• Rebuilt Landing Page: a new marketing site with an animated hero, dashboard preview, and dedicated sections for each capability.
• On-Demand Re-Enrichment: refresh a company's data from the Companies tab in one click, plus an advisory before re-scanning a target scanned in the last 6 hours.

ImprovedImprovements

• Far Wider CVE Coverage: removed a silent allowlist that dropped detected products — cPanel, Plesk, Tomcat, GitLab, Grafana and many more now reach the CVE feeds and surface advisories that were previously missed.
• Less CVE Noise: stale 1999-2017 findings (Heartbleed, Shellshock, etc.) are now filtered everywhere — scan list, Vulnerabilities tab, summary, and PDF.
• Sharper Company Classification: fixed NACE/SIC code collisions that mislabeled PR, software, and consultancy firms, and now prefer precise class-level sector labels.
• Corporate-Group Siblings: the company picker returns the whole corporate family for a shared domain so you can pick the correct legal entity, and no longer comes back empty on domain-only searches.
• Clearer NIS-2 Empty States: when revenue or headcount is missing, the NIS-2 tab and PDF explain that sizing and the penalty cap are indeterminate instead of showing blanks.
• Platform Upgrade (Next.js 15): framework upgrade that fixes a post-login dashboard error and improves stability.

FixedFixes

• Fixed a partner login loop that bounced affected accounts back to the sign-in page.
• Removed a costly D&B fallback for Italian companies, restoring MARGO/CRIF as the sole source and stopping vendor overage.
• Fixed a cancel-scan race that could wrongly refund a scan token.
• Fixed a light/dark theme flash on login and logout.
• Fixed external-scan PDF layout defects (page offset, cell overflow, blank-page export) and made dashboard polling feel live during active scans.

• Platform, performance, and stability improvements across the app.

• Web Security Analysis Suite: Unified security tab with DNS Security grading, Cookie Security analysis, HTTP Security headers radar chart, and TLS/SSL certificate auditing with NIS2-aligned severity badges
• Industry Risk Intelligence: Quantitative risk scoring based on your NACE sector, with breach probability analysis, threat landscape narratives, and sector-specific vulnerability trends
• Web Sitemap Explorer: Interactive tree visualization of discovered URLs with status codes, content types, and depth analysis
• NIS2 Reanalyze with Context: Refine your NIS2 compliance assessment by providing additional business context such as critical services, data processing scope, and supply chain role
• Screenshots with Login Detection: Automated page captures with intelligent login form detection
• Command Palette: Press Cmd+K to instantly search and navigate to any scan, domain, schedule, or page
• CVE Intelligence: Applicable/Advisory vulnerability classification with version-verified filtering
• Comprehensive Scan Export: JSON and CSV now include security scores, DNS grades, security headers, industry risk analysis, NIS2 compliance data, and crawled URL details
• Enhanced PDF Reports: Web Security pages with DNS and Cookie analysis, improved vulnerability pagination, and full NACE hierarchy
• External Target Management: Export and import targets with all company data preserved, run scans directly from saved targets
• Token Billing Transparency: Real-time balance sync, payment method validation, cost-per-run breakdown, and Cyber Token preview before every scan
• Fixed worker crashes at 82% scan progress (memory optimization)
• Fixed entry point count inconsistencies across dashboard, settings, timeline, and detail pages
• Consistent risk score calculations with RBVM v5 formula

• Scheduled Scans: Automate security scanning with daily, weekly, bi-weekly, monthly, or quarterly frequencies
• Email Notifications: Receive scan completion, failure, and auto-pause alerts via email
• Auto-Pause Protection: Schedules automatically pause after 3 consecutive failures to prevent token waste
• Low Token Warning: In-app toaster and email alerts when cyber tokens drop below threshold
• ENISA EUVD Integration: European Union Vulnerability Database for enhanced CVE coverage
• Fingerprintx Service Detection: Advanced service fingerprinting with CPE identification
• RBVM v4 Risk Scoring: Exponential volume scaling for more accurate risk assessment
• Scan History Timeline: Track changes between scans with delta indicators (+/-)
• Mobile Navigation: Responsive sidebar optimized for mobile devices
• NIS2 Penalty Calculator: Real-time currency conversion for accurate penalty estimates
• Performance Optimizations: Memory and API call reductions in CVE scanning
• Bug fixes and stability improvements across the application

• Scheduled Scans: Automate security scanning with daily, weekly, bi-weekly, monthly, or quarterly frequencies
• Email Notifications: Receive scan completion, failure, and auto-pause alerts via email
• Auto-Pause Protection: Schedules automatically pause after 3 consecutive failures to prevent token waste
• Low Token Warning: In-app toaster and email alerts when cyber tokens drop below threshold
• ENISA EUVD Integration: European Union Vulnerability Database for enhanced CVE coverage
• RBVM v4 Risk Scoring: Exponential volume scaling for more accurate risk assessment
• Mobile Navigation: Responsive sidebar optimized for mobile devices

• Attack Surface Map v2.0 with React Flow visualization and interactive asset layout
• External Targets: Save and manage scan targets for quick access
• Multi-domain Attack Surface Map with aggregated parent view
• Vulnerability detection with CVE aggregation from NIST NVD, GitHub Advisory, and CIRCL
• CISA Known Exploited Vulnerabilities (KEV) badge for actively exploited CVEs
• Enhanced PDF reports with Risk Assessment section and clickable CVE links
• Security hardening with authentication on all API endpoints

• Multi-domain scanning: Scan multiple domains in a single operation with batch processing
• Multi-company group scan support: Handle multiple companies sharing the same domain
• Scan form persistency: Your scan configuration is automatically saved and restored
• Enhanced PDF reports with improved pagination, layout, table of contents and dark mode support
• Company enrichment with Orizon BI cache integration for faster, cost-effective data
• Advanced attack surface mapping with subdomain discovery and technology detection
• Intelligent web scraping for comprehensive website content analysis
• Performance optimizations: Fixed N+1 queries resulting in 80% faster database operations
• Domain/company view tabs for better organization and navigation of scan results
• Real-time notification center with system updates and activity history
• Bug fixes including group scan navigation, PDF generation, and API route rendering

• Company enrichment with MARGO and D&B integration
• Multi-domain scanning with batch processing
• Real-time notification center
• Enhanced PDF reports with dark mode support
• Visual Attack Surface Map