2025.02.19

Tool Findings API enhancements & new webhooks

We've enhanced the API and webhooks to provide greater control and automation over findings and targets extracted from supported scanning tools like Burp and Nessus. With these new capabilities, you can:

• Access & Manage Parsed Findings – Retrieve tool findings and targets, import them into assessments, and link them to existing findings or targets.
• Mark Findings – Mark findings or targets as 'out-of-scope' or 'ignored'.
• Automate Workflows – Use new webhooks to trigger actions when output file parsing is complete.
• List Output Files – Retrieve and manage parsed tool output files via the API.

See the updated API documentation for full details.

Other improvements

• Caution tags have been renamed to To-Do tags for clarity. All existing caution tags are automatically updated.
• When requesting a review, approval, or publishing a finding with To-Do tags, you’ll now receive a warning.
• An assessment’s research hours are displayed on the schedule page when assigning a phase.
• The spacing around code, table, and figure captions is now more consistent.
• You can now adjust the spacing between a code block, table, or figure and its caption.
• Findings, users, and sections can be tagged immediately after an opening brace or parenthesis. For example, typing "in another finding (#finding:...)" will trigger the selection menu.
• When importing findings from a previous assessment, references to findings or sections in the old assessment are automatically updated to their equivalents in the new assessment, whenever possible.

Bug Fixes

• Resolved an issue where findings imported from a previous assessment were always published.
• Fixed a bug where a published badge incorrectly appeared in retests in the PDF report.
• Addressed an issue where findings moved to new sections in the researcher panel could still be found in the old section via search.
• Fixed a bug where the 'Approve and publish' dropdown sometimes didn't appear.
• Corrected an issue with empty multi-select custom fields.
• Fixed a bug where videos attached to Markdown fields occasionally appeared twice in the online report.
• Resolved an error when loading certain rare notifications.
• Fixed an issue where non-custom short IDs on the assessment edit page were not automatically updated using the research start date.
• Adjusted table margins to correct excessive spacing above text in some tables.
• Fixed a rare exception when rendering the management results table to PDF.
• Resolved an exception when rendering VRT classifications to PDF.
• Fixed an issue in the results table component where resolved findings sometimes appeared in the wrong column.
• Prevent lengthy usernames from overflowing from the menu and onto the page content.
• The 'finding counts by severity' component (with the original severity option selected) now correctly links to the search page filtered by 'original severity' instead of 'current severity'.
• Sections in the researcher panel now correctly display their folder color based on retest status.