Secuno
ENNL
Book demo
All release notes
Platform

A rewritten correlation engine and SLA policies

v0.0.42Major

Major security hardening, performance, and feature release: 25 improvements across the full stack, including a rewritten CVE correlation engine, EPSS scores in the frontend, an SLA policy engine, expanded custom risk rules, a portfolio intelligence dashboard for partners, and security hardening across authentication and data access.

New

  • EPSS exploit probability and percentile now visible on the risk detail page, CVE list, and KEV page.
  • SLA policy engine: automatically sets a due date on risks based on severity (Critical / High / Medium / Low) with a configurable day window per category.
  • Risk audit trail: chronological timeline on the risk detail page surfaces all changes; creation, assignment, status change, escalation, and notes added.
  • Mitigated risks now have their own dedicated view in the sidebar, separated from the default 'All Risks' list.
  • @Mentions and 'Watch risk' subscriptions: @username in risk notes triggers an in-app notification; the 'Watch this risk' button subscribes to all future status changes.
  • Session expiry warning: a countdown toast appears 2 minutes before auto-logout due to inactivity, with a 'Stay logged in' option.
  • Portfolio Intelligence Dashboard: partner dashboard rebuilt with a client risk ranking table, top 3 most at-risk clients alert card, risk velocity indicator per client, CVE portfolio impact panel, and a herd immunity tracker per CVE.
  • Custom risk rules, AND/OR logic: rules now support multiple conditions with an AND or OR toggle between clauses.
  • Custom risk rules, dry-run preview: the 'Test Impact' button shows how many devices and clients a rule would match without creating any risks.
  • Custom risk rules, escalation policy: severity can automatically escalate after a configurable number of unresolved days (e.g. Medium → High after 14 days → Critical after 30 days).
  • Custom risk rules, per-rule remediation notes: fixed remediation instructions auto-populated on every risk the rule creates.
  • Partner Settings page for the PARTNER_ADMIN role with two tabs: ticket settings and partner info.
  • Partner edit modal directly from the partners management screen.

Improved

  • CVE correlation engine rewritten from O(N⁴) to O(N) using a software index and set-based lookup; full-scan performance dramatically improved.
  • Version-matching false positives tightened: software without a version number no longer matches wildcard CPE rules; lt/le/gt/ge boundaries are applied strictly.
  • CPE-first matching: the correlation engine attempts an exact CPE match before falling back to normalised name matching.
  • NVD enrichment fully decoupled from the correlation loop; no inline NVD API calls during correlation.
  • Batch database writes during correlation reduce sequential round-trips significantly on large scans.
  • Database indexes added for CVE cursor and risk correlation lookups for faster query performance.
  • SECAI enrichment scoped to CVEs with active risks; reduces CPU and model pressure on large CVE databases.
  • Automatic rescoring on CVE data changes: CVSS increase, KEV addition, and EPSS spike automatically escalate linked open risks.

Security

  • Hardened two-factor authentication with unpredictable, securely generated temporary tokens.
  • Enforced strong startup validation of critical secrets, with no insecure fallback.
  • Moved authentication rate limiting to a shared store so it works correctly across multiple backend instances.
  • Replaced unsafe database query patterns with parameterised queries.