Releases

Introducing Custom Fields and Finding Layouts

Designed to put flexibility and control at your fingertips. Add highly customizable fields to users, clients, assessments, and findings, and tailor the layout of findings to your exact needs. Use custom fields with your integration with external services - see our blog for an example integration with GitHub that utilizes custom fields, webhooks, and the Reporter API.

Updated API endpoint for listing finding events

Breaking change!

The API endpoint for listing finding events has been updated to make it consistent with other index routes. The endpoint has changed from: /api/v1/findings/{finding_id}/finding-events to /api/v1/finding-events.

Improvements

• The action plan now has the 'Urgent' priority level and the 'Very Complex' complexity option, which provides a more precise categorization of critical and challenging tasks.

Bug Fixes

• Resolved an issue that prevented proper rendering of finding references in the PDF report.
• Fixed a rare migration error that occurred when a bold font was missing in one of the report themes.
• Removed the assessment template name from the breadcrumb path on the assessment section page.
• Fixed a bug on the finding details page where the st

Audit functionalities

A new ISO 27001:2022 assessment template is now available, providing a standardized approach to compliance evaluations. We've also introduced a new audit scoring system with the categories Compliant, Opportunity for Improvement, Minor Non-Conformity, Major Non-Conformity, and Not Applicable. Additionally, a new audit scoring table component offers a clear overview of the number of findings for each score category:

This bugfix release fixes an issue with the researcher panel and includes several other bug fixes.

Self-hosted WebSockets, no third-party service required

Breaking change, read the upgrade guide!

WebSockets are now integrated directly into Reporter, eliminating the need for third-party services like Pusher.

Enhancements

• Add options to the report theme editor for configuring the layout of severity badges. The look of the two types of severity badges (the ones inside finding/retest metadata and the ones in different places) can now be configured separately.

SCIM auto-provisioning  

Reporter now supports SCIM identity providers, such as Microsoft Entra ID and Okta, for user provisioning. SCIM groups can be used to quickly and automatically assign Reporter roles to users in those groups.

Zapier Integration Published

Seamlessly integrate popular applications into your workflow. For instance, connect systems like ServiceNow, Jira, Azure DevOps, or PowerBI. Over time, we'll add more one-click integrations, enhancing your productivity and connectivity.

API improvements

 
API availability for client users

The API is now accessible to client users, enabling automation of their assessment processes for improved efficiency. 

To enable this feature, navigate to 'General Settings' from the main menu, proceed to the 'Functionality' tab, and under the 'Client Users' section, switch on 'Clients have API access'. Once activated, the API documentation becomes available to client users through the main menu for easy access.