grid lines

[ Changelog . v1.5 . 27 SEP 2026 ]

Retest verification, stop and delete scans, check authentication, scan options, security hardening

Fixes are verified by re-scan, running scans can be stopped or deleted, authentication is checked before a scan starts, and a security audit's findings are closed.

Retest verification

  • Re-running the same scan type on the same target marks findings the scanner no longer reports as Fixed and Verified by retest. The matching Issue Tracker card moves to Fixed with a badge; a finding that comes back is marked Reopened.

Scanner Console

  • Stop Scan and Delete Scan for a running scan, also stopping it at the engine.
  • Check authentication: a headless-browser login check before an authenticated scan runs, with a Page to check for cookie and header methods.
  • Scan options: light or deep profile per engine, maximum duration and request rate.
  • Clickable scan status with the reason: who stopped a scan, why it failed, what a completed scan found.

Findings

  • Delete vulnerabilities from Global Vulnerabilities (findings on the Issue Tracker are kept).
  • Replay Attack button in the vulnerability drawer re-sends the captured request from your browser.
  • CVSS panel in the classic two-column calculator layout.

Security

  • Hardening after an internal audit: stricter tenant scoping, password-reset tokens bound to the account, SSRF guards, front-end sanitising, and web app scan credentials are no longer retained after the scan.
  • Aliengate Recon: a standalone website technology fingerprinting service.

← All releases