2025-08-14: New improvements reduce bottlenecks

Enhanced permissions to remediation  

We have enhanced permissions for teams in remediation, making it even easier to delegate tickets to groups of users so they can focus only on their assigned tasks. 

Here's what’s new:  

• Teams and users (non-superusers) will only see tickets assigned to their teams or those tickets without an assigned team, concealing irrelevant tickets from view.  
• Users with Read permissions can now update the status of tickets, making it easier to collaborate and manage remediation efforts without requiring elevated access. 

Read about how to assign permissions using teams here.

CVSS scores provide clarity 

All upcoming web and API vulnerabilities in the unified vulnerabilities view will now display a CVSS score - just open the details of the vulnerability to view the score.

This added detail gives a clearer understanding of each vulnerability's severity to prioritize remediation more effectively. All existing vulnerabilities will receive a visible score in upcoming releases.

Optimized web & API scans 

Two new scan profiles streamline web and API scanning and reduce scan duration, ultimately providing greater vulnerability coverage with optimized performance.  

The two new optimized scan profiles are: 

• Web Scan – Optimized Profile – Fast 
• Web Scan – Optimized Profile – Essentials 

Read more about optimizing scans here.

You can also include a new HID (HID-3-1-10264) in your scans to provide insight into where the scan spends most of its time, helping you identify where to split one scan into multiple for more efficient runs. 

Read more about available web scans here.

Ignoring device vulnerabilities

You can now ignore vulnerabilities discovered by the Device Agent directly from the unified vulnerabilities view. This allows you to hide specific findings, either indefinitely or for a set time period, helping you focus on the vulnerabilities that matter most.  

We are making this available in customer accounts on a rolling basis.  

Read more about how to ignore Device Agent vulnerabilities here.

Easily track device uptime  

The Device Agent now reports each assets’ uptime, which is visible as a new column in the Devices list. This makes it easier to spot systems that haven’t been rebooted in a long time, which may indicate pending patches or maintenance requirements. 

Additional enhancements  

• The default modal size has been increased in the majority of locations in Security Center, giving you an easier overview of the presented data.  
• Reports with vulnerabilities found using the Device Agent now show additional information about missing patches.  
• All tags are now included when exporting assets to a CSV. 
• The ASV report has been updated to align with the latest PCI DSS framework.