Release Notes

Summary

These release notes highlight the most impactful, customer-facing changes included in releases for the NetSPI Platform. Any customer-facing updates delivered via hotfix releases will be documented as an addendum to the impacted release version.

Release Version 1.1.45

Release date: August 3, 2026

Highlights

  • Application Data Standardization - Significant work on CPE parsing from NMAP and Nessus imports, generating application instances from CPEs, field renaming, and fixing missing data (company name, version, EOL, IP/domain/ host). This improves data quality across the Applications page.

  • Certificates Improvements - Side panel enhancements including IP Addresses tab, Domains tab, certificate hashes, and status naming/filtering updates.

  • CAASM/EASM Hardening - Validation and fixes for data sync workflows, finding-to-asset linkage, and population of key fields (company name, version, EOL date, domain/IP/host) on application instances.

  • Asset Deduplicated & Vulnerability Enhancements - Backend support for severity-wise vulnerability counts on deduplicated assets, time-series views (first seen / last seen), and remediation due date fixes.

Release Version 1.1.44

Release date: July 20, 2026

Highlights

  • Dark Web Monitoring – Dark Web Monitoring has moved from the legacy UI to the new UI, restyled to match the new experience. It provides comprehensive monitoring and analysis of your organization's exposure across dark web sources, breach databases, and public data platforms, consolidating multiple data sources into a unified interface so security teams can proactively detect, investigate, and remediate potential security incidents involving exposed credentials, sensitive information, and organizational mentions.

  • Attack Surface Data Enrichment - New WHOIS, DNS, IP/ASN, and certificate data collection for monitored domains.

  • Vulnerability and Finding Quality - New default columns (CVSS, EPSS, KEV, Exploited), confidence threshold for EOL findings, CAASM template improvements.

Release Version 1.1.43

Release date: July 6, 2026

Highlights

  • New Certificates Experience – The new Certificates page under Attack Surface gives you a dedicated view of all certificates, with both card and table layouts to choose from. Click into any certificate to see full details, including issuer, affected domains, and expiration date.

  • Vulnerability Dashboard – The new Vulnerability Dashboard gives you a centralized view of your open and closed vulnerabilities, broken down by severity and remediation status. Track average time to remediate against your SLA and see opened versus closed trends over time.

  • Engagement Surveys – Once your engagement reaches a key milestone or wraps up, you'll now receive a short survey asking about your experience. Your feedback helps us sharpen how we run engagements, so take a minute to share your thoughts — we're listening.

Release Version 1.1.42

Release date: June 22, 2026

Highlights

  • User Profile Settings Page: A fully redesigned user profile experience. You can now manage your profile picture (upload/remove), view and edit personal information (name, email, phone, position), set your location and time zone, choose a custom landing page, and globally restore default table columns. The profile also includes read-only tabs for G roups, Engagements, Orchestration access, and API key management.

  • Attack Surface Table on Engagement Details: The Engagement Details page now includes an Attack Surface tab with a table showing all discovered assets for that engagement. Default columns include Asset Type, Name, Vulnerability Breakdown, Asset Group, and Tags, with the full set of attack surface filters and columns available.

  • Group Column in User Management: Client admins can now see a user's permission group directly in the User Management table under Settings.

  • Loading UX Overhaul for Tables and Trees: All tables and trees across the platform now display animated skeleton loaders while data is loading.

  • Data Source Collection Attributes in Table View: You can now see exactly where your assets and vulnerabilities were discovered — directly from any asset or vulnerability table.

  • Four new columns have been added across all tables: Collection Module, Collection Source Type, Collection Source, and Collection Source Instance. When an asset or vulnerability was found by multiple sources, values appear as a comma-separated list within the column. These columns are fully sortable and filterable, making it easy to slice your data by collection origin — for example, isolating findings from a specific scanner or source instance at a glance. Additionally, four new tree grouping levels let you group vulnerabilities by any of these collection attributes for a structured, hierarchical view of your data by source.

Release Version 1.1.41

Release date: June 8, 2026

Highlights

  • Finding State Overhaul: A sweeping update to how finding/vulnerability states work across the platform. This included implementing state transition restrictions on engagements, updating all queries, filters, forms, and UI components for new states, and fixing numerous bugs where dashboards showed incorrect counts, filters were missing new states, or findings weren't displaying properly.
  • Vulnerability States have been expanded and updated to give you greater flexibility in how you manage and track vulnerabilities across engagements. As part of this update, we've renamed "Findings" to "Vulnerabilities" — this terminology change is reflected in the new experience.

    The following states were impacted by the changes:

    • States Renamed:
      • Remediated to Remediation Verified
      • Not Retested to Unable to Retest
      • User Remediated to Remediated
      • False Positive to Verified False Positive
    • States Added:
      • Remediation in Progress
    • States Removed:
      • Exception Requested
      • Exception Granted
  • Data Source Attribution Pipeline: Explore where assets and vulnerabilities were discovered, organized by collection module, source type, source, and source instance.
  • Platform Settings & User Management: View the discovery chain for your assets discovered by continuous capabilities.