All release notes
Platform
The AI intelligence layer goes live
The full AI intelligence layer is now live: automatic CVE processing via SECAI v1.02, a deterministic three-layer risk scoring engine, custom inventory-based risk rules, scheduled report delivery, and on-demand correlation and risk verification triggers.
New
- SECAI v1.02 CVE processing: unclassified CVEs are automatically processed every 5 minutes. Confidence ≥ 0.75 generates structured version rules; lower confidence marks the CVE as insufficient data. Up to two source URLs are fetched as advisory context for each analysis.
- Three-layer risk scoring: every correlation receives a deterministic risk score (0–100) based on CVSS score, CISA KEV membership, exploit evidence, attack vector, internet exposure, device asset criticality, and compensating security controls. SECAI v1.02 adds an asynchronous contextual assessment. The final score maps to LOW, MEDIUM, HIGH, or CRITICAL.
- Custom risk rules: administrators can create rule sets based on inventory data; such as missing encryption, prohibited software, or open ports. Rules are evaluated hourly and close automatically when the condition no longer applies.
- Scheduled reporting: reports are automatically delivered on a configurable schedule. Recipients, format, and frequency are configurable per report.
- On-demand correlation and risk verification: administrators can trigger a full correlation from the CVE page, or a device-scoped scan from the device detail page. The risk detail page now includes a Verify Risk button that re-runs scoring for the affected device.
- SECAI v1.02 status panel in Settings → Application Settings: shows queue size, processed today, successful conversions, insufficient data count, and last run time.
- Device asset criticality: devices can be classified as LOW, MEDIUM, HIGH, or CRITICAL; weighted into risk scoring.
Security
- Correlation keys are idempotent per rule, device, and CVE combination; no duplicate risks on repeated runs.
- SECAI v1.02 analyses on our infrastructure in the Netherlands; CVE and inventory data never leave our hands.