Feature Improvements
Overview : Added data personalization to let users switch between Vulnerabilities and Risk Insights for both the severity KPI block and the “Latest” table.
Risk insights – Asset protection filter : The Risk Insights list now excludes items linked to ineligible IPs by default and introduces a new multi-select “Asset protection” filter aligned with the Vulnerabilities list.
Filters – Protection : The Protection filter (Assets list) and Asset protection filter (Vulnerabilities list) are now multi-select, allowing users to filter by multiple protection values at once.
Asset groups – Actions panel : Added the Enable EASM protection action and renamed Edit pentest status to Edit Pentest protection for consistency across the app.
Assets – Score : Assets that have no score available now display “?”, and the score sorting places “?” after F (or before in descending order). The Global score now excludes “?” assets.
Design Improvements
Global – Sidebar : Added a collapsible navbar to improve readability and optimize available space.
Navigation – Tabs : Tab menus are now fixed while scrolling on key pages (Risk insights, Asset detail, Org detail, User detail, Asset group detail, Vulnerability detail, Campaign detail, CVE detail, Org settings).
Trending attacks : The CVE column was moved earlier in the table (after Severity) and long CVE tag lists are now properly truncated using the preview popover component.
Asset detail – Attack surface : Counts on the Attack surface select button are now hidden when the value is 0.
Dialogs : All Cancel buttons are now outlined, aligned with the design system.
Bug Fixes
Assets – Created by : Fixed an issue where “Patrowl” could incorrectly remain displayed as the creator when an asset was deleted and recreated.
Assets – IP range import : Fixed an issue where importing an IP range would not re-enable an IP that had previously been deleted.
Asset detail – Metadata layout : Fixed an overlap issue between “Created by” and “Created on” when the creator email address was too long.
Asset groups – Access & exports : Fixed 500 errors affecting Standard users accessing asset groups and exporting assets/vulns/risks in sub-org contexts.
Global report : Fixed report data inconsistencies (pentested assets count, last scan date source, and Risk Insights exclusion flags).