Release 14 November 2025

This release brings another round of critical improvements, refinements to the assignment and billing system, several upgrades, and a long list of quality and security fixes. Here's what's new:

Features

• #PP-428 – Automated Invoicing (assignments)
  Continued development of invoice automation under assignments, including handling small findings, invoice breakdowns, and improvements to project code display.

• #PP-535 – Invoice improvements
  Added logic and UI support to handle small findings in billing and quote processing.

• #PP-530 – Send UBL/XML Files with invoices
  Structured UBL/Invoice XML files are added for automated invoice processing by clients.

• #PP-488 – Offorte won_date for signed date
  Integrated Offorte's won_date field to reflect the actual signed date of quotes, useful for billing timelines.

• #PP-529 – Improvements Following PP-428 (assignments)
  Follow-up changes improving performance, reliability, and usability of the new assignment and billing workflows.

• #PP-490 – Copy action possible in compliance screens
  In finalized assessments, you can now copy compliance remarks from ASVS pop-ups.

• #PP-480 – Report warning for draft findings
  Users are now warned when a PDF report contains findings still marked as Concept, helping avoid confusion over missing content.

• #PP-537 – Infinite loop error fixes
  Reworked components that occasionally caused infinite loops under edge cases.

• #PP-499 – API docs for customer and contact management
  Extended the public API documentation (under /application/api/docs) with endpoints for managing customers and contact persons - available to instance owners.

• #PP-426 – Assignment management system
  Additional improvements to the assignments feature - including linking quotes to multiple pentests, invoice logic setup, and Offorte integrations.

• #PP-482 – Show reseller name when linking assignment
  The UI now clearly shows the reseller name next to a customer when assigning quotes - useful in multi-reseller environments.

• #PP-483 – Extended reseller role capabilities
  Reseller contacts can now create customers and access expanded customer editing options.

Bug Fixes

• #PP-462 – QA Demand spellcheck false positives
  Fixed a bug where the QA spellcheck flagged an issue that didn’t exist in the finding text.

• #PP-518 / #PP-521 - Project code display issues
  Project codes are now fully visible in the UI and reports, even for long codes or where truncated before.

• #PP-491 – Dashboard year rollover fix
  The dashboard date range now properly handles cross-year navigation (Dec → Jan).

• #PP-507 – Clean up from redirects from URLs
  Fixed unsafe or broken redirects containing hash fragments in the URL.

• #PP-505 – Reseller-Level translations not loaded
  Fixed an issue where translations at reseller level were ignored or misapplied.

• #PP-527 / #PP-528 – Fixes related to PP-428 rollout
  Multiple corrections to roles, permissions, and UI following the assignments system introduction.

• #PP-522 – Report-Level translations could not be Saved
  Translation updates in reports now save properly, including custom fields.

• #PP-504 – Dollar-sign shortcut insert bug
  $ shortcut for inserting templates now works reliably across fields.

• #PP-502 – Reseller contact: Add customer Fix
  Reseller users with correct permissions can now create customers as expected.

• #PP-503 – Secret Update Flow Fixed
  Updating sensitive fields like OAuth client secrets now works consistently.

• #PP-458 – Tool/Risk exclusions now apply consistently
  Excluded risks/tools are now properly filtered from exports and views.

• #PP-459 – IP Column width in scope table expanded
  Long IP addresses now display correctly without being cut off.

• #PP-477 – Clarified status labels in planning
  Status labels for absences (e.g. research week) are now clearer and more neutral.

• #PP-471 – Offorte Quote tag filtering
  Skip/include logic for Offorte tags works reliably; tags now respected in back-end filters.

• #PP-472 – Prevent adding findings to finalized assessments
  UI and back-end checks now block editing or adding to assessments marked as finished.

• #PP-473 – Autocomplete “Add” button restored
  Fixed a UI bug where adding values to autocomplete lists did nothing.

• #PP-474 – 404 Error when adding First pentester
  Creating the first user in a new instance no longer results in a 404.

• #PP-475 – Missing “Add Pentester IP” button restored

• #PP-476 – Unable to add report version number (resolved)

• #PP-478 – First user role not assigned in new Instance

• #PP-479 – ASVS result status update 403 error fixed

• #PP-481 – Cross-Reseller planning visibility corrected

We believe that PentestPortal will greatly enhance the experience of individual penetration testers, penetration testing firms and enterprises conducting their own pentests and that PentestPortal contributes to more efficient and effective penetration testing. Your feedback is invaluable in helping us improve and tailor the software to meet your needs.

Thank you for choosing our software, and we look forward to hearing your thoughts on this exciting new release!