Secuno
ENNL
Book demo
All release notes
Platform

The AI enrichment pipeline, completed

v0.0.45Major

Follow-on major release completing the AI enrichment pipeline, adding NVD matchCriteriaId resolution, delivering a rebuilt CVE database page with environment-aware context, configurable Threat Intelligence and Dark Web monitoring panels, real Software Utilisation data, and a new FINANCE platform role. Includes post-deploy hotfixes for a rendering regression and an authentication regression, both resolved.

New

  • CVE database page rebuilt as an environment-aware intelligence tool. New stat cards show CVEs added this week, known exploit count, CVEs affecting your environment, and risks past SLA. Quick-filter chips and an always-visible advanced filter panel (CVSS range, EPSS threshold, date range, vendor, CWE, exploit availability, environmental context) sit directly beneath the stats. Results table adds EPSS percentile bars, exploit source badges, affected asset counts, and risk status per CVE. Column headers are sortable.
  • CVE detail page (new): a full-page view for every CVE showing a hero header with severity, KEV, and ransomware badges, CVSS v3.1 and v2.0 metric grids, CWE classification, affected products (CPE 2.3) with version ranges, references, and an activity timeline. A teal-styled environment impact card in the right sidebar shows affected device count, linked risks, and a Create Risk action.
  • CVE cross-linking: the CVE detail page surfaces linked open risks, lets users create a risk directly from a CVE, and links each affected device to its device detail page.
  • KEV page updated: clicking a KEV entry now navigates to the CVE detail page instead of opening a modal.
  • NVD matchCriteriaId resolution: a new service resolves NVD UUID-based CPE match criteria to concrete version-bound CPE entries via the NVD cpematch API, backed by a 30-day cache with automatic rate limiting. Entries that previously contained only a UUID gain exact CPE criteria progressively across sync and correlation runs.
  • Threat Intelligence configuration panel: replaces the static integration-required banner. Admin roles get a client selector; operators get per-client Shodan and VirusTotal toggle switches that persist immediately.
  • Dark Web monitoring configuration panel: replaces the static monitoring-required banner. Operators can add and remove monitored domains and email addresses, saved immediately via the API. Admins get a client selector.
  • Software Utilisation page now renders real per-device usage data: the utilisation service is wired into the agent inventory pipeline and populates the table on every agent report.
  • FINANCE platform role added: a new role for finance team members, available across the platform.

Improved

  • AI enrichment pipeline routing fixed: enrichment requests now route through the AI processor service and return a structured analysis covering overview, root cause, attack chain, impact, and affected context. Enrichment is cached at the CVE level and reused across all risks linked to the same CVE.
  • Correlation engine full-scan performance: candidate inventory build and source snapshot computation are deferred and only executed for CVEs without structured rules, eliminating a large O(devices x software x tokens) pass for the 85 to 95 percent of CVEs that already have rules.
  • CVEs with an unresolvable correlation status are now excluded at the database query level, removing repeated processing of dead CVEs from every full scan.
  • Batched correlation-state saves and hoisted rule sorting reduce per-CVE database round-trips and redundant in-loop computation.
  • Software index entries store normalised vendor at build time, allowing index-sourced candidates to skip redundant product re-normalisation during matching.
  • Device-scoped correlation sweeps now accept an optional product filter, limiting the scan to CVEs affecting changed software rather than all recent CVEs.
  • Client sweeps in scheduled scans now run with bounded concurrency instead of strictly sequentially.
  • Bulk CPE cache updates now use a single set-based SQL update instead of one transaction per row.

Fixed

  • Mitigated CVE risk detail page no longer throws a null-reference error when a linked user record has a null name.
  • Global header search for CVEs now navigates to the CVE detail page instead of the filtered list URL.
  • Resolved a blank-page rendering regression introduced during security hardening in v0.0.44.

Security

  • Corrected input-handling behaviour that could cause sign-in failures for certain passwords; authentication now works reliably for all credential formats.