• Risk Realignment (Org Settings → Security & Governance) reconciles historical vulnerability and governance events with your current configuration — includes Severity Realignment, Disabled PII Cleanup, and Authentication State Cleanup.
• Default severity levels updated for select passive scan misconfigurations.

AI-Powered API Classification

• APIs are automatically classified into categories such as business-critical, privileged, account sign-in, and transaction using OpenAPI specs and payload analysis.
• Drives more consistent security-policy application and prioritization across your API inventory.

Public API Enhancements — Compliance Reporting

• Generate OWASP Coverage, PCI-DSS, and GDPR compliance reports on demand via public API.
• Optional duration filters and email delivery.

API Security Testing Enhancements

• Clearer Start-Test experience with better error messaging and more readable test suite display.
• Proxy configuration support added to the UI (Configuration Page, Start Test dashboard, Test Inspector).
• OAST reachability status now shown in the DAST Dashboard, plus a reachability check in Test Inspector.
• DAST Incremental Run enhanced with advanced config-version selection.
• New CSRF & CORS test suite added to DAST.

Runtime Threat Detection

• Simplified ATD configuration — profile setup is now UI-driven instead of manual YAML configuration.

API Discovery & Application Configuration

• WAF log-based API discovery — the controller can process CEF-formatted WAF logs forwarded to it and discover APIs directly from those logs.
• Flexible host/path filtering — configurable AND/OR logic between host and path filters in Manage Applications.
• Option to disable default application discovery, so only APIs from configured application domains and hostnames are learned.

For questions or a walkthrough of these updates, please contact the AppSentinels Support Team.

© AppSentinels. All rights reserved.