blog

New Features Released – August 2022

The AppSec Phoenix team is pleased to bring you another batch of functional additions and improvements. This release is packed full of key additions across multiple platform areas.

We are sure that you’ll find these quite interesting!

  • New Detailed Screen to see your Assets and Posture
    • Improved filtering for Assets screens
    • New AppSec Assets screen
    • New SBOM screen
    • Asset Details popup
    • Track multiple sources of asset data
  • Integrations
    • ServiceNow CMDB
    • ServiceNow Incidents
    • CrowdStrike Falcon
  • Usability
    • Improved filtering behaviour on the Vulnerabilities page
    • Allow selecting Any/All logic when filtering by tags
    • Warn users about potential high ticket volumes in “auto-push” mode
Appsec Phoenix Crowdstrike Falcon Endpoint Security Integration
AppSec Phoenix Qualys Endpoint Integration
AppSec Phoenix Qualys Endpoint Integration
Appsec Phoenix Service Now CMDB ITSM
Appsec Phoenix Service Now CMDB ITSM

Explore your Assets and Posture

Improved filtering for Assets screens

You can now easily apply complex filters to select the assets that interest you in any asset list screens.

New AppSec Assets screen with SBOM

Continuing on the Asset theme, there is a new option under the “Assets” menu to see a list of your software assets (AppSec). This screen has two tabs: Assets List and SBOM. On the first one, you can see your list of assets, similar to the other asset screens:

New SBOM screen

Furthermore, you have the “SBOM” tab, where you can see your Software Bill Of Materials information. The tab has two further display options or views: Group by Applications and Group by Package.

As the name suggests, the first option shows you a list of applications and you can expand each one to see the list of packages.

With Group by Package you see a list of packages used in your applications, with the option to expand each package to see the list of applications that use that package.

Asset Details popup

When looking at assets in any of the asset list screens you can now click on the contextual menu (three dots) to the right of the asset row and select “Details”. This will open a popup from the right of the screen with a full view of the details of the asset.

These details include information provided by different sources that have “reported” this asset. These details are grouped by source in collapsible areas.

Track multiple sources of asset data

In order to know which sources provide details for a particular asset you don’t need to open the Details popup. Just by hovering over the information icon on the Sources column you will get a popup with the list of sources for that asset.

Integrations

ServiceNow CMDB

This release brings a new type of integration to AppSec Phoenix: The Asset Source integrations.

These systems provide asset details without necessarily being a source of vulnerability information. Typically, these are CMDB platforms or other types of asset inventory systems.

To get started with asset source integrations, we are introducing our integration with ServiceNow CMDB.

This integration allows you to connect with your ServiceNow CMDB instance and augment the assets inside AppSec Phoenix with additional information contained in the CMDB.

This integration will work both ways in the future and provide intelligent synchronisation of asset details.

ServiceNow Incidents

Continuing with the integration and ServiceNow theme, this release includes an integration with the platform’s Incidents functionality. This is part of the Workflow integrations and allows you to open vulnerability resolution tickets directly in your ServiceNow Incidents instance.

CrowdStrike Falcon

And continuing with yet another integration, AppSec Phoenix now features CrowdStrike Falcon and one of our multiple scanner integrations.

Usability

Improve filtering behaviour on the Vulnerabilities page

We have improved our search behaviour and filtering on the Vulnerabilities page to make it more predictable and consistent. Not a huge change, but always looking to make the experience of using AppSec Phoenix as seamless as possible.

Allow selecting Any/All logic when filtering by tags

When searching or filtering using tags now, you can select whether you want to match All the tags entered or Any of them. This is also known as “and”/”or” logic and provides additional flexibility when searching using tags.

Warn users about potential high ticket volumes in “auto-push” mode

Our vulnerability auto-push functionality is very useful. It allows organisations to to automate the ticket creation process by having the platform automatically create tickets for those vulnerabilities selected to fix. However, in some cases there could be a high number of selected vulnerabilities, so it might not be desirable to automatically create tickets for them. Now the platform will provide a warning to users when the auto-push option is activated.

This is all for this update. We’ll be back soon with more exciting news about AppSec Phoenix. In the meantime, enjoy using the platform!

Francesco is an internationally renowned public speaker, with multiple interviews in high-profile publications (eg. Forbes), and an author of numerous books and articles, who utilises his platform to evangelize the importance of Cloud security and cutting-edge technologies on a global scale.

Discuss this blog with our community on Slack

Join our AppSec Phoenix community on Slack to discuss this blog and other news with our professional security team

From our Blog

Phoenix Security, the next-gen leader in Application Security Posture Management and Unified Vulnerability Management, welcomes Lee Vorthman, Ciso of ORACLE advertising to the advisory board
Francesco Cipollone
Owasp top 10 has been a pillar over the years; sister to CWE – Common Weakness Enumeration we provide an overview of the top software vulnerabilities and web application security risks with a data-driven approach focused on helping identify what risk to fix first.
Francesco Cipollone
The Cloud Security and AppSec teams at Phoenix Security are pleased to bring you another set of new Phoenix Security features and improvements for vulnerability management across application and cloud security engines. This release builds on top of previous releases with key additions and progress across multiple areas of the platform. Asset and Vulnerability Management – Associate assets with multiple Applications and Environments – Mapping of vulnerabilities to Installed Software – Find Assets/Vulns by Scanner – Detailed findings Location information Risk-based Posture Management – Risk and Risk Magnitude for Assets – Filter assets and vulnerabilities by source scanner Integrations – BurpSuite XML Import – Assessment Import API Other Improvements – Improved multi-selection in filters – New CVSS Score column in Vulnerabilities
Alfonso Eusebio

Join our Mailing list!

Get all the latest news, exclusive deals, and feature updates.

x Logo: ShieldPRO
This Site Is Protected By
ShieldPRO