Release 7 February 2024

We're excited to announce the latest release of PentestPortal.io, packed with new features and bug fixes to enhance your pentesting efficiency and experience. Here's what's new and improved:

Features

• #PP-22: by popular demand, we've added the ability to copy a finding/risk to another pentest. Note: the target pentest must be 'In Progress,' that you need have the permissions on the target assessment and the content of the finding will be stripped of screenshots, etc.

• #PP-10: recognizing the importance of sharing risks found outside the official scope with clients, we now support 'out-of-scope' targets. Risks can be attached to these targets like any other, and they are grouped separately at the end of the pentest report.

• #PP-149: short company names of fewer than 4 characters can now be added to PentestPortal, addressing a previously existing limitation.

• #PP-115: monthly patches have been applied to libraries and dependencies to keep the platform secure and up-to-date.

• #PP-118: made the IP Reputation table in the CyberScanner report more compact, aligning with the format of other tables.

• #PP-120: expanded the pentest CSV download to include the recommendations/advices field.

• #PP-132: added Issue Type to the CSV JIRA Export, which is now customizable at the client level.

• #PP-130: expanded reserved names for DNS within PentestPortal for enhanced security and management.
  

Bug fixes

• #PP-102: improved and clarified error messages related to file uploads and file size restrictions.

• #PP-145: addressed missing Cloud Scope information in reports; details like IDs and URLs are now properly displayed.

• #PP-122: resolved an issue where settings for functional managers were missing/not displayed in multi-reseller instances of PentestPortal.

• #PP-119: fixed an issue where this.$messages.add occasionally failed to display messages.

• #PP-121: fixed several minor translation issues following the major release that introduced multilingual support.

• #PP-131: optimized a slow-performing query behind the loading of quality requirements, significantly improving speed.

• #PP-132: corrected a flaw where a quality requirement was sometimes wrongly approved, and the redirect URL was incorrect.

• #PP-151: fixed a TypeError in the back-end that was causing errors in logging.

We believe that PentestPortal will greatly enhance the experience of individual penetration testers, penetration testing firms and enterprises conducting their own pentests and that PentestPortal contributes to more efficient and effective penetration testing. Your feedback is invaluable in helping us improve and tailor the software to meet your needs.

Thank you for choosing our software, and we look forward to hearing your thoughts on this exciting new release!