Release 27 June 2024

We're excited to announce the latest summer release of PentestPortal.io, packed with new features and bug fixes to enhance your pentesting efficiency and experience. Here's what's new and improved:

Features

• PP-17: Instance-wide Ignore list for valid words
  We have introduced an instance-wide ignore list to prevent certain valid words from being flagged as errors in every pentest. For example, if you approve "Cross-Site Scripting (XSS)" as correct word, it is now recognized as correct across all instances. You are also able to manage this "ignore list".

• PP-224: Improved autocomplete visibility in dark mode
  Autocomplete suggestions are now more visible in dark mode. The background color of the pop-up has been lightened to avoid black-on-black text issues.

• PP-234: Enhanced risk search functionality
  In the risk screen, the !! shortcut now searches across all words in a risk, making it faster and easier to find the relevant risk.

• PP-242: Improved graphs in Management Portal
  Usages/statistics graphs in the management portal have been enhanced for better clarity and readability.

• PP-252: Spell check tooltip on click
  The tooltip with spelling suggestions now appears when you click on a misspelled word, not just when hovering over it.

• PP-227: Memory usage optimization
  We have optimized memory usage across the platform for improved performance.

• PP-237: Multiple DigiD Norms for risks
  Risks can now be linked to multiple DigiD norms simultaneously, rather than being limited to one at a time.

• PP-247: Introducing scope filters
  Pentesters can now filter search results for open ports based on internal or external IP addresses using a slider or checkbox. This allows for quicker and more targeted searches during penetration testing.

• PP-232: SecurityTXT check in CyberScanner report
  A new SecurityTXT check section has been added to the CyberScanner report, enhancing security assessment capabilities.

Bug Fixes

• PP-223: Issue with enter after {{ Resolved
  Fixed an issue where it was not possible to press enter directly after typing {{. You no longer need to add a space before pressing enter.

• PP-236: Dark mode report send button visibility
  In dark mode, the send report button is now clearly visible, even when in the 'disabled' state.

• PP-239: Updated security checks in build pipelines
  Various security checks in the platform's build pipelines have been fixed and updated.

• PP-238: ASVZ Compliance check fix
  Resolved an issue where the ASVZ compliance check would incorrectly fail under certain conditions.

• PP-250: CyberScanner connection check fixed
  Fixed the connection check issue in CyberScanner, ensuring reliable connectivity.

We believe that PentestPortal will greatly enhance the experience of individual penetration testers, penetration testing firms and enterprises conducting their own pentests and that PentestPortal contributes to more efficient and effective penetration testing. Your feedback is invaluable in helping us improve and tailor the software to meet your needs.

Thank you for choosing our software, and we look forward to hearing your thoughts on this exciting new release!