Websites & IPs

• The Technologies column shows up to six brand-icon tiles per asset instead of a wrapping list of names. Variants of one product are merged into one tile, the rest are counted as +N, and the full list is on hover.

FixTrail

• New page under Actions & Intel: every vulnerability's path from detection, through the Issue Tracker and its fix steps, to the re-scan that verifies the fix, per website and server. Attack-surface map, KPIs (verified, awaiting re-test, average time to fix) and a per-finding event history.

Global Vulnerabilities

• Bulk Move to Issue tracker, Ignore and Restore to Active now work. The Ignore action in the detail drawer persists.
• A banner shows how many findings are fixed, with a link to the Fixed view; fixed rows carry Verified by retest or Awaiting re-test.
• The dashboard's Top Vulnerabilities card lists the most recently fixed findings with the same marks.

Issue Tracker

• Remediation steps are no longer generated when a card opens. Ask AlienGate AI for remediation steps generates them on demand.
• The checklist is optional. Moving a card to Fixed with unticked steps asks you to confirm that a re-scan is what verifies the fix.

Reports and Report Center

• The PDF cover is a true full-bleed page; request, response and body excerpt are code boxes that break cleanly across pages; cleaner footer.
• Security scans and OSINT reports are listed under separate tabs.

Scanner Console and Websites & IPs

• The decorative terminal is gone; scan types are grouped once: Web and network, Platform scanners, Reconnaissance.
• Type, risk and sort filters work; the SSL/TLS Alerts card is replaced by Fixed and Verified Vulnerabilities.

Websites & IPs

• Select several targets and delete them in one action. Deleting a target stops its scans, removes its findings, incidents and dark web records, and recomputes usage.
• The asset drawer lists every finding for that asset, with brand icons for the detected technologies.
• Compact CVSS calculator with metric codes and tooltips.

Dashboard and Monitoring Hub

• New dashboard layout from the latest design.
• Monitoring Hub: a live view of running scans.
• Run Scan in the top bar opens the Scanner Console in place.

Scanner

• New targets no longer launch a Web Application Scan automatically; only subdomain discovery runs on its own.
• The scan status popover is no longer clipped by the table and stays open until dismissed; a running row opens the live console.

Text and billing

• Customer-facing text no longer names third-party providers.
• New price list (plus tax), lower email limits, bank-transfer plan changes; the 10% yearly discount is removed, so yearly is twelve times monthly.

Retest verification

• Re-running the same scan type on the same target marks findings the scanner no longer reports as Fixed and Verified by retest. The matching Issue Tracker card moves to Fixed with a badge; a finding that comes back is marked Reopened.

Scanner Console

• Stop Scan and Delete Scan for a running scan, also stopping it at the engine.
• Check authentication: a headless-browser login check before an authenticated scan runs, with a Page to check for cookie and header methods.
• Scan options: light or deep profile per engine, maximum duration and request rate.
• Clickable scan status with the reason: who stopped a scan, why it failed, what a completed scan found.

Findings

• Delete vulnerabilities from Global Vulnerabilities (findings on the Issue Tracker are kept).
• Replay Attack button in the vulnerability drawer re-sends the captured request from your browser.
• CVSS panel in the classic two-column calculator layout.

Security

• Hardening after an internal audit: stricter tenant scoping, password-reset tokens bound to the account, SSRF guards, front-end sanitising, and web app scan credentials are no longer retained after the scan.
• Aliengate Recon: a standalone website technology fingerprinting service.

Vulnerability Scanner

• Authenticated Web Application Scan: log in with a login form, cookies or headers. Credentials are encrypted at rest and used only for that scan.
• Live scan console with an activity feed and progress per job; the Websites & IPs table shows which assets are being scanned right now.
• A scan picker in Global Vulnerabilities narrows the list to one scan.
• CVSS 3.1 risk analysis on every finding: the metric breakdown, the score and a plain-language explanation that stays inside the scanner's severity band. The same score is shown on Issue Tracker cards.
• New engines: WordPress Scan, Cloud Scan and Kubernetes Scan, listed as specialised scanners.
• Website Recon and Subdomain Finder are reconnaissance, not vulnerabilities: they have their own Recon tab and no longer count toward the Attack Surface Score.

Reliability

• A scan resumed after a worker restart continues the existing job instead of starting a second one; queued jobs are labelled Queued.

Free exposure check

• One public scan endpoint that works out whether the target is a domain or an email address.
• Results in Japanese on request, with a 15-second translation budget so a first scan completes.
• An exposure report can be emailed, only to an address at the scanned domain.

Website

• Blog posts and release notes are written in the admin panel and served to the static site. Release notes carry a version and are listed on /changelog.
• Demo requests and inquiries are emailed to the sales inbox.

Billing

• Stripe webhook events about resources that no longer exist are acknowledged instead of retried.

Admin and support

• Deleting an organisation works where the help desk is not configured, and an already-deleted help-desk record no longer aborts the purge.
• A failed purge can no longer cancel a subscription while reporting success.
• Development organisations are now distinguishable from production ones in the shared help desk.

Account security

• An expired sign-in link answered with a server error; it now explains that the link expired.
• One-time codes now expire.

Alien Copilot

• The assistant on aliengate.io answers visitors' questions about the product without any access to customer data.

Also

• The Japanese Terms of Use are titled サービス利用規約, as the document itself reads.

Reports

• New formal layout from cover to conclusion: disclaimer, document management, table of contents with real page numbers, executive summary, one finding per page, conclusion. English and Japanese.
• The captured request and response are printed as a panel with the finding, not two raw dumps.
• Page numbers on every page; headings never end a page; the Technical Report heading no longer sits alone.
• A regenerate control in the Report Center, and a failed rebuild keeps the PDFs that already worked.

Scanner

• A scan that timed out kept running at the engine and lost its report. It is now recovered and the report is produced.
• CVSS score and CVE ids shown in the vulnerability list.

Identity Protection

• A profile with a dark-web leak is no longer shown as Clean.

Also

• Alert details modal rebuilt in the current dashboard style; yearly price no longer wraps on the subscription page; twenty API messages that printed their key path now print their text.

The first production release of AlienGate.

Platform

• Workspaces: one per client, subsidiary or business unit, provisioned from your email domain on signup. Every target, asset, finding and alert belongs to exactly one workspace.
• Websites & IPs: verified domains, discovered subdomains and IP targets in one inventory, with managed and untracked assets kept apart.
• Attack Surface Score for each workspace.

Dark Web Intelligence

• Continuous monitoring of marketplaces, forums, Telegram channels, ransomware leak sites and infostealer logs, matched to your domains.
• Leaked credentials, stealer logs and PII exposure listed per asset with source, first-seen time and confidence grade. Passwords are masked.
• CSV export of findings on plans that include it.

Identity Protection

• Monitored profiles for company email addresses, grouped into alert groups.
• Every exposure for a person on one card: leaked credentials, stealer-log records, public breach records.

Vulnerability Scanner

• Network, Web Application and SSL/TLS engines, Website Recon and Subdomain Finder, with ready-made Quick Perimeter and Full Web Application Audit profiles.
• Findings with severity, evidence and remediation advice; per-scan PDF reports in the Report Center.

Issue Tracker

• Move any finding or exposure onto a Kanban board with an owner, a due date and a remediation checklist. Every state change is recorded.

Also

• Alerts & notifications, team management with roles, Stripe billing with a 30-day trial, English and Japanese interface.