Vulnerability Scanner
- Authenticated Web Application Scan: log in with a login form, cookies or headers. Credentials are encrypted at rest and used only for that scan.
- Live scan console with an activity feed and progress per job; the Websites & IPs table shows which assets are being scanned right now.
- A scan picker in Global Vulnerabilities narrows the list to one scan.
- CVSS 3.1 risk analysis on every finding: the metric breakdown, the score and a plain-language explanation that stays inside the scanner's severity band. The same score is shown on Issue Tracker cards.
- New engines: WordPress Scan, Cloud Scan and Kubernetes Scan, listed as specialised scanners.
- Website Recon and Subdomain Finder are reconnaissance, not vulnerabilities: they have their own Recon tab and no longer count toward the Attack Surface Score.
Reliability
- A scan resumed after a worker restart continues the existing job instead of starting a second one; queued jobs are labelled Queued.
