Release 23 May 2025

We’re excited to bring you the May 2025 PentestPortal update! This release introduces powerful new features like customer-level test accounts, automatic date adjustments in pentest planning, and support for the latest OWASP Mobile Top 10 (2024). We’ve also cleaned up legacy code, enhanced credit handling, and fixed a wide range of issues to make your experience faster and more reliable than ever.

Features

• #PP-292 – Test accounts at customer level
  You can now manage and reuse test accounts per customer, similar to how contact persons work.
  Add test accounts once, reuse them across assessments
  Autocomplete and checkbox selection
  Link test accounts to customer or assessment targets
  Role-based access (Account Manager, Pentester, CustomerContactPrimary)
  This is especially useful for large customers with many apps, where consistent naming and reuse of accounts saves time and reduces error.

• #PP-401 – Legacy front-end removed completely
  The old front-end has been fully removed, including code, management tool options, and pipelines. The new Nuxt3 interface is now the only interface in use.

• #PP-393 – Reseller and customer deletion support
  Admins can now delete a reseller (and all associated data) from the reseller detail page.

  • All related customers, assessments, targets, risks, and roles are marked as removed.

  • Deleted entities are no longer visible in the UI or statistics.
    This action is irreversible and must be used with care.

• #PP-282 – Auto-adjust end date in pentest scheduling
  When editing a pentest start date, the end date now automatically updates with the same offset — reducing clicks and improving UX.

• #PP-396 – Updated to OWASP Mobile Top 10 (2024)
  Mobile assessments now use the new OWASP Mobile Top 10 from 2024, replacing the outdated 2016 version.

• #PP-399 – Spellcheck quality requirement added to existing assessments
  The automated spellcheck quality control added in a previous release is now also applied retroactively to all existing assessments.

• #PP-408 – Document Management column width update
  The “Name” column in document management has been adjusted for better readability.

• #PP-414 – Cyber Credits use earliest expiry first
  Cyber Credits are now consumed starting with the ones closest to expiration.

Bug Fixes

• #PP-392 – Copying a finding from an old report caused a 503 error — fixed.

• #PP-382 – Rounded UI elements were inconsistent on wide screens — resolved.

• #PP-394 – Bullet lists in PDFs broke across pages — fixed via improved overflow detection logic.

• #PP-389 – Labels in report delivery emails showed internal keys — now correctly displayed.

• #PP-390 – Creating a new customer under a reseller sometimes caused a 500 error — resolved.

• #PP-395 – Pagination on user management page was missing — now fixed.

• #PP-397 – Custom translations at assessment level disappeared after edits — fixed.

• #PP-400 – Subdomain counts in CyberScanner were inconsistent after edits — frontend sync fix added.

• #PP-402 – IP address in PDF report was incorrectly replaced by hostname — now resolved.

• #PP-403 – Pentest creation failed on invalid start/end date logic — corrected.

• #PP-404 – Sentry logging failed in MGMT environment — fixed.

• #PP-406 – QA requirements couldn’t be approved in scheduled pentests — rights updated for Account Manager role.

• #PP-409 – Adding QA Demands on reseller level didn’t work — fixed.

• #PP-89 – Title “CSV Export Settings” changed to “JIRA” for clarity.

• #PP-415 – CyberScan crashed when 0 subdomains were detected — fixed.

• #PP-416 – Global search bar cleared first letter on unfocus — resolved and optimized.

• #PP-417 – XLSX uploads downloaded as ZIP files — now correctly restored as .xlsx.

We believe that PentestPortal will greatly enhance the experience of individual penetration testers, penetration testing firms and enterprises conducting their own pentests and that PentestPortal contributes to more efficient and effective penetration testing. Your feedback is invaluable in helping us improve and tailor the software to meet your needs.

Thank you for choosing our software, and we look forward to hearing your thoughts on this exciting new release!