Platform releases, methodology updates, and process improvements — chronologically, no filler.
When you generate the final report, an evidence pack for your selected framework (SOC 2, ISO 27001, PCI DSS, HIPAA) is now auto-built alongside it — no manual export step required.
You can now route engagement notifications to different Slack channels by severity — e.g. all findings to #security, criticals to #incident.
Add a specific label to a Jira issue linked to a finding and the retest is automatically requested. Status flows back to the ticket when the retest completes.
Every finding now includes both CVSS 3.1 and 4.0 scoring. Framework mappings choose the one your auditor references.
All webhook deliveries are now signed with a per-integration HMAC-SHA256 signature in the X-SecureBlock-Signature header. Signing key rotates on demand from the platform.
Previously multi-surface engagements required a scoping call. You can now scope mobile + backend API + cloud environment in the same quote flow, with the combined-engagement discount applied automatically.
Retest window "expires in N days" counters now correctly localize to the customer's timezone. Some workspaces saw off-by-one displays after DST transitions.
Major platform update. Findings feed rebuilt on a new streaming architecture — findings now appear in your dashboard within seconds of confirmation. Evidence pack generation is 5x faster.
New engagement template pre-configured for EU financial entities scoping threat-led penetration testing under the Digital Operational Resilience Act.
Roadmap items are shared with active customers in-platform. Get on an engagement and see what's coming.
