Brinqa

No entries match these filters. Clear filters

1. docs update Sep 24, 2026 · issue 084

   Brinqa adds a Pending Changes review step when upgrading connector versions in data integrations to surface schema differences before they take effect.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ HOW TO FIND IT
   When upgrading a connector version, use the In use only toggle and the Removed filter tab to focus exclusively on removed attributes that are actively referenced in consolidation — the highest-risk changes to resolve first.
   📍In the data integration wizard: open the Pending Changes step › click the Removed filter tab › enable the In use only toggle › click Review on each row › confirm impact under Used in (Identifier / Consolidation Mapping) › click Mark as reviewed.
   • Adds a Pending Changes wizard step when upgrading a connector version in an existing data integration, surfacing added, removed, renamed, and changed attributes before the update is saved.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Surfaces a Used in Consolidation column in the Pending Changes table so practitioners can immediately see which schema changes affect active consolidation identifiers or attribute mappings.
   • Adds per-attribute detail panels showing a field-by-field comparison of old and new values, with an Enable this attribute in Sync configuration toggle for new or renamed attributes that auto-checks the attribute in the sync configuration step.
   • Adds Mark as reviewed and Ignore actions on individual rows, plus bulk Mark reviewed / Mark ignored via multi-select and Select all in current view filtered by All / New / Removed / Changed / Renamed tabs and an In use only toggle.
   • Blocks saving the data integration (disables the Create/Update button with a 'Review all pending schema changes before saving' tooltip) until every pending attribute change is reviewed or ignored.

   5 details in Everything

2. docs update Sep 24, 2026 · issue 084

   Brinqa Platform gains a unified left sidebar with keyboard shortcuts, AI Chat, and per-browser appearance preferences.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢ ⤢ ⤢
   └──▷ HOW TO FIND IT
   Jump straight to the sidebar search from the keyboard to locate any module or submenu without touching the mouse.
   📍Press Ctrl+Shift+F (Windows/Linux) or Cmd+Shift+F (macOS) to expand the sidebar and focus the search input, then type the module name. Press Escape to clear and dismiss.
   Switch the platform to a high-contrast green accent and floating sidebar layout for improved visual differentiation in a dark environment.
   📍Open Account › Preferences › Palette and select Green, then open Account › Preferences › Sidebar and select Floating.
   • Adds Cmd+B / Ctrl+B keyboard shortcut to toggle the sidebar between collapsed and expanded.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds Cmd+Shift+F / Ctrl+Shift+F keyboard shortcut to focus the sidebar search input, expanding the sidebar first if collapsed.
   • Introduces Account > Preferences > Palette to choose an accent color — Navy (default), Black, or Green — applied across both light and dark themes.
   • Introduces Account > Preferences > Frosted glass toggle to enable or disable macOS-style backdrop blur on menus, dialogs, popovers, and the sidebar (enabled by default).
   • Introduces Account > Preferences > Sidebar layout selector with three modes: Floating, Docked, and Flush.

   +5 more show less

   • Replaces the top horizontal toolbar with a unified left sidebar for all navigation, including modules, application switcher, notifications, theme, and account options.
   • Adds a real-time search bar in the sidebar that filters modules and submenu items, highlights matches, and persists the search term across page refreshes.
   • Adds an AI Chat floating button (bottom-right corner) that opens a chat panel when the AI Chat feature is enabled for an application.
   • Adds an Exports entry under the account menu for viewing and downloading list-view exports.
   • Moves application switching into Account > Apps as a hover submenu, replacing the previous standalone Apps sidebar icon.
   • Adds Cmd+B / Ctrl+B keyboard shortcut to toggle the sidebar between collapsed and expanded.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds Cmd+Shift+F / Ctrl+Shift+F keyboard shortcut to focus the sidebar search input, expanding the sidebar first if collapsed.
   • Introduces Account > Preferences > Palette to choose an accent color — Navy (default), Black, or Green — applied across both light and dark themes.
   • Introduces Account > Preferences > Frosted glass toggle to enable or disable macOS-style backdrop blur on menus, dialogs, popovers, and the sidebar (enabled by default).
   • Introduces Account > Preferences > Sidebar layout selector with three modes: Floating, Docked, and Flush.

   +4 more show less

   • Replaces the top horizontal toolbar with a unified left sidebar for all navigation, including modules, application switcher, notifications, theme, and account options.
   • Adds a real-time search bar in the sidebar that filters modules and submenu items, highlights matches, and persists the search term across page refreshes.
   • Adds an AI Chat floating button (bottom-right corner) that opens a chat panel when the AI Chat feature is enabled for an application.
   • Adds an Exports entry under the account menu for viewing and downloading list-view exports.

   1 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !The top horizontal toolbar has been removed; all navigation, application switching, notifications, theme, and account options are now reached from the left sidebar.
3. docs update Sep 24, 2026 · issue 084

   Brinqa adds BrinqaIQ Assistant: a self-hosted AI chatbot for BQL query generation, CVE exploration, and automation lifecycle management.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢
   └──▷ HOW TO FIND IT
   Request BrinqaIQ to generate and immediately execute a BQL query in plain language — useful for ad-hoc risk queries without knowing BQL syntax.
   📍In the BrinqaIQ Assistant chat interface, type: 'Show me all critical vulnerabilities affecting internet-facing assets that have been open for more than 30 days' — BrinqaIQ generates the BQL query and runs it against your Brinqa data, displaying results inline.
   Use CVE Explorer to quickly gather severity and remediation context for a newly disclosed vulnerability during an incident triage.
   📍In the BrinqaIQ Assistant chat interface, type: 'Look up CVE-2024-1234 — what is the severity, which products are affected, and what is the recommended remediation?' — BrinqaIQ returns severity ratings, affected products, and remediation context.
   Use automation lifecycle management to check and act on running flows without leaving the BrinqaIQ chat interface during an active response workflow.
   📍In the BrinqaIQ Assistant chat interface, type: List all currently running flows — then follow up with Cancel the flow named Patch-Rollout-Prod to stop it without navigating to the automations UI.
   • Adds BrinqaIQ Assistant, a self-hosted RAGRAGRetrieval-augmented generation: looking up relevant documents and adding them to the prompt before the model answers. It grounds responses in private or current data without retraining.-powered chatbot that translates plain-language descriptions into valid Brinqa Query Language (BQL) queries.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds BQL execution capability within the BrinqaIQ chat interface, allowing queries to run directly against Brinqa data and display results inline.
   • Adds a CVE Explorer capability to look up CVE details, severity ratings, affected products, and remediation context from within BrinqaIQ.
   • Adds a Docs Assistant mode that answers questions about the Brinqa Platform by drawing from official documentation via Retrieval-Augmented GenerationRetrieval-Augmented GenerationRetrieval-augmented generation: looking up relevant documents and adding them to the prompt before the model answers. It grounds responses in private or current data without retraining. (RAG).
   • Adds automation lifecycle management through BrinqaIQ, enabling users to launch, resume, cancel, and check the status of automations and flows from the chat interface.

   +2 more show less

   • Adds flows and automations discovery in BrinqaIQ, letting users list API- and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.-accessible flows and all automations, inspect them by name or ID, and see which flows are currently running.
   • BrinqaIQ Assistant uses custom data model metadata — including model names, attribute types, and reference relationships — retrieved via Brinqa Platform APIs to assist with BQL generation for tenant-specific schemas.

   7 details in Everything

4. docs update Sep 24, 2026 · issue 084

   Brinqa's ServiceNow connector now ingests Problem and ProblemPtask records via the ServiceNow API.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢
   • Extends the ServiceNow API connector to support Problem and ProblemPtask record types.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 detail in Everything

5. docs update Sep 15, 2026 · issue 075

   Brinqa adds five new connectors: Azure Container Service, Azure Identity, Azure Network, Parquet, and Pentera.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢
   • Adds Microsoft Azure Container Service connector for Cloud Resource data ingestion.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds Microsoft Azure Identity connector for Cloud Resource data ingestion.
   • Adds Microsoft Azure Network connector for Cloud Resource data ingestion.
   • Adds Parquet Connector for ingesting data in Parquet format.
   • Adds Pentera connector supporting Cloud Resource, Host, Site, Vulnerability, and Vulnerability Definition data types.

   5 details in Everything

6. 12.3.295 Sep 11, 2026 · issue 077

   Brinqa 12.3.295 adds vulnerability deduplication, a no-code SmartFlows builder, a broad public API with MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tools, and scheduled PDF dashboard reporting.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ TRY IT
   Use UNION ALL in a BQL Metric to surface critical findings from two separate filter criteria in one query result.
   copy

   $ SELECT id, title, severity FROM findings WHERE severity = 'CRITICAL'
   UNION ALL
   SELECT id, title, severity FROM findings WHERE cvssScore >= 9.0

   • Adds BQL grammar reference endpoint and a debugging option on the BQL API to inspect generated queries.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds UNION ALL support in BQL, letting you combine multiple filter criteria in a single Metric.
   • Adds string-literal output columns in BQL, including within unions.
   • Adds a consolidate-by-BQL action that lets you re-consolidate a selected subset of source records by targeting them with a BQL query.
   • Introduces new public API endpoints and matching MCP tools covering flow execution and history, record comments (create, list, search), dataset writes (single and bulk create/update/delete), button-flow discovery and triggering, and ticket creation from findings.

   +12 more show less

   • Adds a consolidated Record Comments API supporting read, search, and manage operations, with BQL support for querying comments and traversing them back to their records.
   • Introduces Vulnerability Deduplication (ExploitIQ): consolidates duplicate vulnerability definitions into a single Intelligent Vulnerability (IV) and Intelligent Vulnerability Definition (IVD) with consolidated evidence and risk scoring.
   • Adds a deduplication configuration page to turn deduplication on or off, choose participating integration sources, set matching confidence level, and enable or disable individual pipeline steps.
   • Adds a new Intelligent Vulnerabilities relationship tab on Host, Container, and Container Image detail views.
   • Introduces a system-managed SmartFlow and a dedicated trigger deduplication processing action for orchestrating deduplication after data load.
   • Adds in-product progress indicators for IV/IVD generation, plus operational metrics and a dashboard for the deduplication pipeline.
   • Introduces SmartFlows: a visual no-code automation builder supporting webhook and API triggers, filter and action blocks, parallel orchestration, Email/Slack/Microsoft Teams notifications, and dashboard snapshot delivery.
   • Adds Notification Templates with a merge-fields editor, data-model-aware dynamic variables, and the ability to clone and reuse templates across notification actions.
   • Adds BrinqaIQ Assistant multi-turn context, BQL and CVE lookup grounding, automation launch and tracking, and capability parity with the Brinqa MCP tool surface.
   • Introduces Scheduled PDF Dashboard Snapshots: schedule exports as PDFs, target ownership groups, manage a personal My Snapshots inbox with expiration and bulk delete, and deliver via secure link or attachment.
   • Adds Connector Schema Change Review: select a connector version, review detected schema changes in a diff table, and Review, Ignore, or Resolve each change inline — with user-customized consolidation mappings preserved across upgrades.
   • Redesigns the sidebar with collapsed-rail flyouts, collapsible submenu sections that remember their state, expanded multi-theme support, and broad styling improvements.
   • Adds BQL grammar reference endpoint and a debugging option on the BQL API to inspect generated queries.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds a consolidate-by-BQL action that lets you re-consolidate a selected subset of source records by targeting them with a BQL query.
   • Introduces new public API endpoints and matching MCP tools covering flow execution and history, record comments (create, list, search), dataset writes (single and bulk create/update/delete), button-flow discovery and triggering, and ticket creation from findings.
   • Adds a consolidated Record Comments API supporting read, search, and manage operations, with BQL support for querying comments and traversing them back to their records.
   • Introduces Vulnerability Deduplication (ExploitIQ): consolidates duplicate vulnerability definitions into a single Intelligent Vulnerability (IV) and Intelligent Vulnerability Definition (IVD) with consolidated evidence and risk scoring.

   +8 more show less

   • Adds a deduplication configuration page to turn deduplication on or off, choose participating integration sources, set matching confidence level, and enable or disable individual pipeline steps.
   • Adds a new Intelligent Vulnerabilities relationship tab on Host, Container, and Container Image detail views.
   • Introduces a system-managed SmartFlow and a dedicated trigger deduplication processing action for orchestrating deduplication after data load.
   • Adds in-product progress indicators for IV/IVD generation, plus operational metrics and a dashboard for the deduplication pipeline.
   • Introduces SmartFlows: a visual no-code automation builder supporting webhook and API triggers, filter and action blocks, parallel orchestration, Email/Slack/Microsoft Teams notifications, and dashboard snapshot delivery.
   • Adds Notification Templates with a merge-fields editor, data-model-aware dynamic variables, and the ability to clone and reuse templates across notification actions.
   • Introduces Scheduled PDF Dashboard Snapshots: schedule exports as PDFs, target ownership groups, manage a personal My Snapshots inbox with expiration and bulk delete, and deliver via secure link or attachment.
   • Adds Connector Schema Change Review: select a connector version, review detected schema changes in a diff table, and Review, Ignore, or Resolve each change inline — with user-customized consolidation mappings preserved across upgrades.

   4 more in Everything

7. 12.2.248 Sep 10, 2026 · release notes

   Brinqa 12.2.248 adds consolidate-by-BQL action for re-consolidating source records.

   • Adds a consolidate-by-BQL action that lets teams re-consolidate a selected subset of source records by targeting them with a BQL query.
   • Improves connector agent resilience by automatically healing connection state when monitoring entries are missing, ensuring integration syncs continue to run.

   2 details in Everything

8. docs update Sep 8, 2026 · issue 068

   Brinqa adds NowSecure Workstation, OSVOSVOpen Source Vulnerabilities, a vulnerability database and schema maintained by Google that gives cyber tools a machine-readable, cross-ecosystem format for querying and sharing CVE-style advisories., and Security Reporter as new data source connectors.

   ⤢
   • Adds NowSecure Workstation connector, ingesting Application, Dynamic Code Finding, and Dynamic Code Finding Definition data objects into the graph.
   • Adds OSV (Open Source Vulnerabilities) connector, ingesting Security Advisory data objects.
   • Adds Security Reporter connector, ingesting Api Endpoint, Application, Assessment, Cloud Resource, Code Repository, Device, Host, Network, Pentest Finding, Pentest Finding Definition, Person, Site, and Team data objects.

   3 details in Everything

9. docs update Aug 24, 2026 · issue 055

   Brinqa adds Cortex XDRXDRExtended detection and response, combining signals and investigation across endpoints, networks, identities or cloud services. It helps analysts connect activity that separate tools might miss. and Cortex Xpanse connectors with coverage across alerts, vulnerabilities, hosts, and more.

   ⤢
   • New Cortex XDR connector ingests Alert, Alert Definition, Asset, Host, Incident, Incident Definition, Installed Package, Package, Violation, Violation Definition, Vulnerability, and Vulnerability Definition data objects.
   • New Cortex Xpanse connector ingests Alert, Alert Definition, Certificate, Cloud Resource, Host, Incident, Incident Definition, IP Range, Service, and Site data objects.

   2 details in Everything

10. docs update Aug 24, 2026 · issue 055

    Brinqa Data Lake lets you query Brinqa data through BrinqaDL analytics views in BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data..

11. docs update Aug 22, 2026 · issue 053

    Brinqa Data Lake now exposes analytics views queryable via BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data. under the BrinqaDL namespace.

12. docs update Aug 17, 2026 · issue 048

    Brinqa Risk Intelligence adds CISA Vulnrichment SSVCSSVCA decision-support framework for vulnerability prioritization, maintained by CISA and Carnegie Mellon's CERT/CC, that uses stakeholder-specific decision trees to guide patch and remediation timing instead of relying on numeric scores alone. decision points to CVE records.

    • New CISA Vulnrichment fields are delivered via the underlying risk intelligence data feed — no connector version update required; CVEs not yet enriched by CISA leave these fields empty.

    1 detail in Everything

13. docs update Aug 17, 2026 · issue 048

    Brinqa adds connectors for Akto, Cortex Cloud, and SysReptor alongside expanded Tanium Comply support.

    ⤢
    • New Akto connector ingests Api Endpoint, Dynamic Code Finding, and Dynamic Code Finding Definition data objects.
    • New Cortex Cloud connector ingests Asset Group, Cloud Account, Cloud Resource, Container, Container Image, Host, Installed Package, Package, Serverless, Violation, Violation Definition, Vulnerability, and Vulnerability Definition data objects.
    • New SysReptor connector ingests Pentest Finding and Pentest Finding Definition data objects.
    • Tanium Comply connector now appears in the connectors catalog.

    4 details in Everything

14. docs update seen Aug 1, 2026 · issue 032

    Brinqa adds connectors for Invicti Enterprise, Invicti Platform, Offensity, and Upwind

    • New Invicti Enterprise and Invicti Platform connectors ingest Container, DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces., SASTSASTStatic application security testing, analyzing source code or compiled code for vulnerabilities without running the application. It helps developers find problems before deployment., and SCASCASoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself. findings, finding definitions, projects, repositories, scans, and sites.
    • New Offensity connector pulls in sites and violations with their definitions.
    • New Upwind connector ingests alerts, API endpoints, hosts, people, stories, teams, violations, and vulnerabilities with their definitions.

    3 details in Everything

15. docs update seen Jul 24, 2026 · issue 024

    Brinqa v12 introduces AI Agents for natural-language querying, CVE exploration, and autonomous ownership attribution.

    • Adds a user-facing chat agent with three tools: natural-language BQL query generation, documentation Q&A, and CVE exploration.
    • Adds an Attribution Agent that autonomously infers Remediation Owner, Business Owner, and Application Owner attributes and contributes them to the attribute consolidation hierarchy.

    2 details in Everything

16. docs update seen Jul 24, 2026 · docs issue 004

    Brinqa v12 introduces AI Agents for natural-language querying, CVE exploration, and autonomous ownership attribution.

    • Adds a user-facing chat agent with three tools: natural-language BQL query generation, documentation Q&A, and CVE exploration.
    • Adds an Attribution Agent that autonomously infers Remediation Owner, Business Owner, and Application Owner attributes and contributes them to the attribute consolidation hierarchy.

    2 details in Everything

17. docs update seen Jul 24, 2026 · issue 024

    BrinqaIQ adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. integration so AI clients like Claude Desktop, GitHub Copilot, and Goose can query Brinqa data, generate BQL, and manage automations.

    └──▷ USE IT
    Connect Claude Desktop to BrinqaIQ MCP so you can query Brinqa risk data and generate BQL queries from natural language inside Claude.
    json copy

    {
      "mcpServers": {
        "brinqaMCP": {
          "command": "<your-uvx-path>",
          "args": ["mcp-openapi-proxy"],
          "env": {
            "OPENAPI_SPEC_URL": "https://<your-brinqa-platform-url>/brinqamax/openapi.json",
            "API_KEY": "<your-brinqa-platform-access-token>"
          }
        }
      }
    }

    Connect GitHub Copilot in VS Code to BrinqaIQ MCP at the workspace level so you can explore CVEs and run automations without leaving your editor.
    json copy

    {
      "servers": {
        "brinqaMCP": {
          "type": "stdio",
          "command": "<your-uvx-path>",
          "args": ["mcp-openapi-proxy"],
          "env": {
            "OPENAPI_SPEC_URL": "https://<your-brinqa-platform-url>/brinqamax/openapi.json",
            "API_KEY": "<your-brinqa-platform-access-token>",
            "OPENAPI_SIMPLE_MODE": "true"
          }
        }
      }
    }

    Add BrinqaIQ as a custom MCP extension in Goose to query Brinqa data and manage flows from a local or cloud-backed AI agent.
    📍In Goose Desktop, go to Extensions › Add custom extension and set: Name: BrinqaMCP Type: STDIO Command: <your-uvx-path> mcp-openapi-proxy Environment Variables: API_KEY = <your-brinqa-api-key> OPENAPI_SPEC_URL = https://<your-brinqa-platform-url>/brinqamax/openapi.json Then click Add Extension.
    • New MCP server integration exposes BrinqaIQ capabilities — BQL generation, BQL execution, CVE exploration, docs search, and automation lifecycle management — to any MCP-compatible AI client.
    • Supports natural-language BQL query generation and direct BQL execution with paginated results for feeding Brinqa data into external agent pipelines.
    • Automation lifecycle control (launch, resume, cancel, status check) and flows/automations discovery (list, inspect by name or ID, list running flows) available through MCP-connected clients.
    • Docs Assistant tool lets connected AI clients search and retrieve content from Brinqa Platform documentation inline.
    • CVE Explorer tool enables connected AI clients to look up CVE details, severity, affected products, and remediation context.

    +2 more show less

    • Supports Claude Desktop, GitHub Copilot in VS Code, Goose, and Open WebUI as tested MCP clients; Open WebUI connects via OpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth. spec rather than stdio transport.
    • API token-based authentication ensures all MCP calls inherit the user's existing RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. and data-level permissions from the Brinqa Platform.

    7 details in Everything

18. docs update seen Jul 24, 2026 · docs issue 004

    BrinqaIQ adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. integration so AI clients like Claude Desktop, GitHub Copilot, and Goose can query Brinqa data, generate BQL, and manage automations.

    └──▷ USE IT
    Connect Claude Desktop to BrinqaIQ MCP so you can query Brinqa risk data and generate BQL queries from natural language inside Claude.
    json copy

    {
      "mcpServers": {
        "brinqaMCP": {
          "command": "<your-uvx-path>",
          "args": ["mcp-openapi-proxy"],
          "env": {
            "OPENAPI_SPEC_URL": "https://<your-brinqa-platform-url>/brinqamax/openapi.json",
            "API_KEY": "<your-brinqa-platform-access-token>"
          }
        }
      }
    }

    Connect GitHub Copilot in VS Code to BrinqaIQ MCP at the workspace level so you can explore CVEs and run automations without leaving your editor.
    json copy

    {
      "servers": {
        "brinqaMCP": {
          "type": "stdio",
          "command": "<your-uvx-path>",
          "args": ["mcp-openapi-proxy"],
          "env": {
            "OPENAPI_SPEC_URL": "https://<your-brinqa-platform-url>/brinqamax/openapi.json",
            "API_KEY": "<your-brinqa-platform-access-token>",
            "OPENAPI_SIMPLE_MODE": "true"
          }
        }
      }
    }

    Add BrinqaIQ as a custom MCP extension in Goose to query Brinqa data and manage flows from a local or cloud-backed AI agent.
    📍In Goose Desktop, go to Extensions › Add custom extension and set: Name: BrinqaMCP Type: STDIO Command: <your-uvx-path> mcp-openapi-proxy Environment Variables: API_KEY = <your-brinqa-api-key> OPENAPI_SPEC_URL = https://<your-brinqa-platform-url>/brinqamax/openapi.json Then click Add Extension.
    • New MCP server integration exposes BrinqaIQ capabilities — BQL generation, BQL execution, CVE exploration, docs search, and automation lifecycle management — to any MCP-compatible AI client.
    • Supports natural-language BQL query generation and direct BQL execution with paginated results for feeding Brinqa data into external agent pipelines.
    • Automation lifecycle control (launch, resume, cancel, status check) and flows/automations discovery (list, inspect by name or ID, list running flows) available through MCP-connected clients.
    • Docs Assistant tool lets connected AI clients search and retrieve content from Brinqa Platform documentation inline.
    • CVE Explorer tool enables connected AI clients to look up CVE details, severity, affected products, and remediation context.

    +2 more show less

    • Supports Claude Desktop, GitHub Copilot in VS Code, Goose, and Open WebUI as tested MCP clients; Open WebUI connects via OpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth. spec rather than stdio transport.
    • API token-based authentication ensures all MCP calls inherit the user's existing RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. and data-level permissions from the Brinqa Platform.

    7 details in Everything

19. docs update seen Jul 24, 2026 · issue 024

    Brinqa launches a new BQL API replacing the legacy GraphQL API, enabling programmatic access to the data warehouse via async queries.

    └──▷ TRY IT
    Export high-risk vulnerabilities with their affected hosts as nested objects — ideal for feeding a SOARSOARSecurity orchestration, automation and response, coordinating incident workflows across tools. Playbooks can gather evidence, assign work or carry out approved response actions. or ticketing integration.
    copy

    $ curl -X POST 'https://<your-brinqa-instance>/v1/api/bql' \
      -H 'Content-Type: application/json' \
      -H 'Authorization: ApiKey brq_AbCdEfGh.xYz123...' \
      -d '{
        "query": "FIND Vulnerability WHERE riskScore > 8",
        "returningFields": ["id", "name", "riskScore", "targets(displayName, ipAddresses)"],
        "orderBy": ["riskScore DESC"],
        "limit": 100
      }'

    Poll the async result URL until the query completes, then paginate through all result pages to collect every matching row.
    copy

    $ # After POSTing, capture the Location header and poll:
    LOCATION="/v1/api/bql/eyJqb2J..."
    curl -s "https://<your-brinqa-instance>$LOCATION" \
      -H 'Authorization: ApiKey brq_AbCdEfGh.xYz123...' | jq '{status, state, totalRows, cursor, results}'

    Generate a scoped API token for a service account so automated pipelines inherit only that user's RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. permissions.
    📍In the Brinqa Platform UI, click the account icon (person circle) in the top navigation bar › API Tokens › click the + button › fill in Token name (e.g. SOAR Vulnerability Export) and Expiration (e.g. 3 Months) › click Generate › copy the displayed brq_... token immediately.
    • New BQL API (POST /v1/api/bql) replaces the legacy GraphQL API, providing programmatic access to the Brinqa data warehouse using the same query engine as the UI.
    • Supports asynchronous two-step query workflow: submit a query and receive a polling Location URL, then GET results with automatic Retry-After guidance.
    • Introduces two query modes — Analytics mode (full BQL with RETURN/ORDER BY/LIMIT in-query, returning flattened rows) and Projection mode (returningFields/orderBy/limit parameters, returning nested relationship objects).
    • Projection mode supports nested relationship projections and wildcards, enabling structured retrieval of one-to-many relationships as arrays within a single result row.
    • Cursor-based pagination allows retrieval of large result sets up to 10,000 rows per page, with cursor and Location/Link headers pointing to subsequent pages.

    +1 more show less

    • New API token authentication system (ApiKey scheme with brq_-prefixed tokens) tied to user ACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource./RBAC permissions, with configurable expiration (1/3/6/12 months or never) and self-service revoke/reinstate/delete lifecycle management.

    6 details in Everything

20. docs update seen Jul 24, 2026 · docs issue 004

    Brinqa launches a new BQL API replacing the legacy GraphQL API, enabling programmatic access to the data warehouse via async queries.

    └──▷ TRY IT
    Export high-risk vulnerabilities with their affected hosts as nested objects — ideal for feeding a SOARSOARSecurity orchestration, automation and response, coordinating incident workflows across tools. Playbooks can gather evidence, assign work or carry out approved response actions. or ticketing integration.
    copy

    $ curl -X POST 'https://<your-brinqa-instance>/v1/api/bql' \
      -H 'Content-Type: application/json' \
      -H 'Authorization: ApiKey brq_AbCdEfGh.xYz123...' \
      -d '{
        "query": "FIND Vulnerability WHERE riskScore > 8",
        "returningFields": ["id", "name", "riskScore", "targets(displayName, ipAddresses)"],
        "orderBy": ["riskScore DESC"],
        "limit": 100
      }'

    Poll the async result URL until the query completes, then paginate through all result pages to collect every matching row.
    copy

    $ # After POSTing, capture the Location header and poll:
    LOCATION="/v1/api/bql/eyJqb2J..."
    curl -s "https://<your-brinqa-instance>$LOCATION" \
      -H 'Authorization: ApiKey brq_AbCdEfGh.xYz123...' | jq '{status, state, totalRows, cursor, results}'

    Generate a scoped API token for a service account so automated pipelines inherit only that user's RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. permissions.
    📍In the Brinqa Platform UI, click the account icon (person circle) in the top navigation bar › API Tokens › click the + button › fill in Token name (e.g. SOAR Vulnerability Export) and Expiration (e.g. 3 Months) › click Generate › copy the displayed brq_... token immediately.
    • New BQL API (POST /v1/api/bql) replaces the legacy GraphQL API, providing programmatic access to the Brinqa data warehouse using the same query engine as the UI.
    • Supports asynchronous two-step query workflow: submit a query and receive a polling Location URL, then GET results with automatic Retry-After guidance.
    • Introduces two query modes — Analytics mode (full BQL with RETURN/ORDER BY/LIMIT in-query, returning flattened rows) and Projection mode (returningFields/orderBy/limit parameters, returning nested relationship objects).
    • Projection mode supports nested relationship projections and wildcards, enabling structured retrieval of one-to-many relationships as arrays within a single result row.
    • Cursor-based pagination allows retrieval of large result sets up to 10,000 rows per page, with cursor and Location/Link headers pointing to subsequent pages.

    +1 more show less

    • New API token authentication system (ApiKey scheme with brq_-prefixed tokens) tied to user ACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource./RBAC permissions, with configurable expiration (1/3/6/12 months or never) and self-service revoke/reinstate/delete lifecycle management.

    6 details in Everything

21. docs update seen Jul 24, 2026 · issue 024

    Brinqa adds IONIX connector supporting Action Items, Cloud Assets, Domains, IP Addresses, and more.

    • New IONIX connector ingests Action Item, Action Item Definition, Cloud Asset, Domain, IP Address, Managed Domain, and Sub Domain data into the Brinqa graph.

    1 detail in Everything

22. docs update seen Jul 24, 2026 · docs issue 004

    Brinqa adds IONIX connector supporting Action Items, Cloud Assets, Domains, IP Addresses, and more.

    • New IONIX connector ingests Action Item, Action Item Definition, Cloud Asset, Domain, IP Address, Managed Domain, and Sub Domain data into the Brinqa graph.

    1 detail in Everything

23. 11.33.98 seen Jul 13, 2026 · issue 014

    Brinqa 11.33.98 adds drill-down support on dashboard charts with complex BQL relationship queries.

    • Adds drill-down functionality on dashboard charts that use complex BQL queries with relationship conditions (e.g., FIND Asset THAT HAS Finding), enabling interactive exploration of data previously locked behind static charts.
    • Extends due date behavior now preserves the extended due date on findings tied to expired exception requests, preventing retroactive out-of-SLASLAA formal agreement between a service provider and customer that defines expected uptime, response times, and remedies for failures, giving cyber tools a contractual baseline for availability and support commitments. marking for findings remediated within their approved extension window.

    2 details in Everything

24. 12.0.248 seen Jul 13, 2026 · issue 014

    Brinqa 12.0.248 adds case-insensitive search and scalability improvements for high-volume environments.

    • Adds case-insensitive search across the platform.
    • Enhanced platform scalability and performance capabilities to support high-volume customer requirements.
    • Improved orchestration performance to meet high-volume customer requirements.
    • Adds validation and sanitization for invalid date/time values during data integration sync.

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !GraphQL and GraphQL Explorer have been removed in version 12.
    • !Indicator functionality is not supported in version 12.
    • !Analytics Source functionality is not supported in version 12.0; dashboards that relied on Analytics Source are not available and may require reconfiguration.
    • !Brinqa Agents must be compatible with version 12; when configuring integrations, Cloud Server must be selected from the Server dropdown.
25. 12.0.321 seen Jul 13, 2026 · issue 014

    Brinqa 12.0.321 adds Source Data Computation automation, new orchestration stages, and expanded flow step timeouts.

    • Introduces Source Data Computation to automatically identify and process Source Data Models (SDM) with calculated attributes.
    • Adds new orchestration stages enabling automations to trigger after source data computation and data lifecycle management (DLM) pipeline steps.
    • Increases the data lifecycle flow step timeout from 1 to 5 minutes, accommodating larger dataset processing.

    3 details in Everything

26. 12.1.118 seen Jul 13, 2026 · issue 014

    Brinqa 12.1.118 adds delta computes, consolidation, and Analytics Source support.

    • Adds delta computes and consolidation (feature-flagged), enabling incremental data processing workflows.
    • Adds Analytics Source support, expanding the range of data sources available for ingestion and analysis.
    • Adds BQL Optimizer feedback loop to improve query planning over time.
    • Surfaces invalid attribute type mismatches during consolidation in both logs and the UI for improved consolidation visibility.

    4 details in Everything

27. 12.1.403 seen Jul 13, 2026 · issue 014

    Brinqa 12.1.403 adds BCL-based connector filtering, multi-hop BQL traversal, bulk activate/deactivate actions, and richer API pagination.

    └──▷ HOW TO FIND IT
    Bulk-deactivate outdated risk scoring models at once instead of toggling each individually.
    📍Navigate to Configuration › Risk Scoring Models, select the target models using the checkboxes, then choose Deactivate from the bulk actions menu.
    • Adds BCL condition-based filtering during connector sync, letting users control which records are imported based on attribute values.
    • Adds nested projection and wildcard field selection to the BQL API returningFields parameter for precise control over query response attributes.
    • Adds row count details to BQL API pagination responses, simplifying the construction of pagination-aware integrations.
    • Adds multi-hop relationship traversal in BQL, enabling recursive queries across hierarchical data such as multi-level organizational structures.
    • Adds Activate and Deactivate bulk actions to configuration list views for risk factors, SLASLAA formal agreement between a service provider and customer that defines expected uptime, response times, and remedies for failures, giving cyber tools a contractual baseline for availability and support commitments. definitions, risk scoring models, and status configurations.

    5 details in Everything

28. 12.2.201 seen Jul 13, 2026 · issue 014

    Brinqa 12.2.201 debuts SmartFlows v1.0, an AI Attribution Engine, BrinqaIQ enhancements, and a new Platform API replacing GraphQL.

    • Introduces SmartFlows v1.0, a new workflow automation capability for building and executing security flows.
    • Adds ConnectIQ: AI Attribution Engine v1.0 for AI-driven attribution of security findings.
    • Enhances BrinqaIQ Assistant with expanded AI-driven capabilities.
    • Replaces the GraphQL API with a new Platform API — a breaking change requiring migration of existing integrations.
    • Adds a Configuration Change Management UI for building and managing flows visually.

    +2 more show less

    • Adds SmartFlows execution history for visibility into SmartFlow activity and outcomes.
    • Adds SmartFlows support in Version Control to track and manage SmartFlow configuration changes.

    7 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !GraphQL API is replaced with Platform API
29. 12.1.403 Jun 24, 2026 · release notes

    Brinqa 12.1.403 adds BCL filtering during connector sync, multi-hop BQL traversal, and bulk Activate/Deactivate actions

    • returnFields in the BQL API now supports nested projection and wildcard field selection for precise response control
    • BQL queries can now perform multi-hop relationship traversal using recursive syntax to traverse hierarchical data
    • Connector data sync now supports filtering via BCL conditions based on attribute values and conditions
    • Configuration list views gain Activate and Deactivate bulk actions for managing risk factors, SLASLAA formal agreement between a service provider and customer that defines expected uptime, response times, and remedies for failures, giving cyber tools a contractual baseline for availability and support commitments. definitions, and status configurations

    4 details in Everything

30. 12.1.118 Apr 3, 2026 · release notes

    Brinqa 12.1.118 adds feature-flagged delta computes, Analytics Source integrations, and BQL Optimizer feedback loop.

    • delta computes and consolidation are now available as a feature-flagged capability.
    • Added Analytics Source support for integrating external data sources.

    2 details in Everything

31. 12.0.321 Feb 18, 2026 · release notes

    Brinqa 12.0.321 adds Source Data Computation and new automation orchestration stages.

    • Introduces Source Data Computation to automatically identify and process Source Data Models (SDM) with calculated attributes.
    • Adds new orchestration stages for automations that trigger after source data computation and data lifecycle management (DLM).

    2 details in Everything

32. 11.33.98 Jan 27, 2026 · release notes

    Brinqa 11.33.98 adds drill-down on dashboard charts via BQL and fixes due date preservation.

    • Adds initial support for drill-down functionality on dashboard charts using complex BQL queries with relationship conditions (e.g., FIND Asset THAT HAS Finding).
    • Extends due date behavior to preserve the extended due date on findings associated with expired exception requests.

    2 details in Everything

33. 12.0.248 Jan 19, 2026 · release notes

    Brinqa 12.0.248 introduces case-insensitive search and platform modernization.

    • Performance improvements for Vulnerability Definition compute and CPE Record processing

    1 detail in Everything

    └──▷ BREAKING ON UPGRADE

    • !GraphQL and GraphQL Explorer have been removed in version 12
    • !Indicator functionality is not supported in version 12
    • !Analytics Source functionality is not supported in version 12.0
34. 11.32.183 Oct 7, 2025 · release notes

    Brinqa adds detail view for Visualizations, threading limits via maxConcurrency, and improved BrinqaIQ chatbot connectivity feedback.

    • Added detail view mode for Visualizations, enabling drill-down testing and preview without dashboard creation
    • Implemented maxConcurrency parameters in Analytics Source preparation flow to set threading limits
    • Improved BrinqaIQ chatbot with disconnection alerts, automatic reconnection logic, and service unavailability error handling

    3 details in Everything

35. 11.32.161 Sep 25, 2025 · release notes

    Brinqa 11.32 introduces BrinqaIQ Assistant and merges reports into the Dashboard builder with folders and snapshots.

    • Adds BrinqaIQ Assistant, an AI-powered chatbot for natural language navigation, BQL generation, documentation queries, and CVE exploration.
    • Merges Reports and Dashboards into a single entity called Dashboards with support for folder management and promotion to the main page.
    • Adds Dashboard snapshots capability to download PDFs capturing the dashboard's state at the time of the snapshot.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The NIST NVD connector is no longer supported; users are recommended to switch to Brinqa Risk Intelligence.
36. 11.31.154 Aug 26, 2025 · release notes

    Brinqa 11.31.154 adds conversion for Unique Identifier attributes in data consolidation and allows remediation users to update findings.

    • Added conversion support for Unique Identifier attribute types in data consolidation
    • Updated the Report builder to recognize math functions as measures when the math function applies to an aggregation function
    • Added permissions for updating attachments and comments for remediation owner, risk analyst, and risk owner

    3 details in Everything

37. 11.31.73 Jul 3, 2025 · release notes

    Adds bulk dataset recompute action with notifications, extends DW snapshot timeout, improves List view UX

    • Adds a bulk recompute action for system administrators to select datasets and trigger compute operations, receiving notifications and logs upon completion.
    • Increases the default timeout for Data Warehouse snapshot uploads from 30 seconds to 60 minutes.
    • Improves basic input editing in List views and reports by allowing titles to be edited.

    3 details in Everything

38. 11.30.173 May 6, 2025 · release notes

    BQL queries support NOT with relationships, Analytics flow can be disabled, Risk Factor versions visible

    • Added support for BQL queries to use NOT with relationships such as THAT NOT IS or THAT NOT HAS.
    • Added a column to show risk factor versions on data models' Risk Factors page.
    • Users are now able to disable the Analytics source flow via Advanced settings.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The Product Analytics tracking option was removed from Advanced settings.
39. 11.30.150 Apr 22, 2025 · release notes

    List view reflects BQL query filters in basic search; report Dimensions enforce unique attribute selection.

    • List view now displays the filters implied by a transferable BQL query when switching to basic search

    1 detail in Everything

    └──▷ BREAKING ON UPGRADE

    • !Deprecated option to configure risk factor renderers on a Tabular chart
    • !NIST NVDNVDThe National Vulnerability Database, maintained by NIST, is the U.S. government repository of CVE records enriched with CVSS scores and metadata; cyber tools query it to drive vulnerability prioritization. connector is no longer supported and requires migration to Brinqa Risk Intelligence
40. 11.30.129 Apr 8, 2025 · release notes

    Configurable per-flow timeouts and faster orchestration details page in v11.30.129

    • Adds configurable default timeout settings for each flow in orchestration to allow administrators to set timeouts as needed in their environments
    • Enhances the orchestration details page load speed and highlights search results
    • Adds a help link for the Direction field documentation in Analytics Source charts

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The NIST NVDNVDThe National Vulnerability Database, maintained by NIST, is the U.S. government repository of CVE records enriched with CVSS scores and metadata; cyber tools query it to drive vulnerability prioritization. connector is no longer supported and must be switched to Brinqa Risk Intelligence.
41. 11.30.93 Mar 25, 2025 · release notes

    Brinqa 11.30.93 adds report sharing RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists., BQL/BCL USING keyword, dark mode UI, and query-based charts.

    • Adds report sharing RBAC allowing owners to restrict sharing to view-only or view-and-edit permissions
    • Introduces USING keyword for BQL and BCL to specify which database to query from on certain views
    • Makes dark mode available in the UI across the platform
    • Enables creating charts using a query with a RETURN statement on the Explorer page

    4 details in Everything

42. 11.29.221 Mar 14, 2025 · release notes

    Brinqa Platform 11.29.221 adds improved orchestration performance and refined lifecycle status calculation.

    • Enhanced lifecycle status calculation to account for multiple source data models (SDMs) of the same type with varying inactivity values
    • Improved the performance of Analytics Source during orchestrations

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The NIST NVDNVDThe National Vulnerability Database, maintained by NIST, is the U.S. government repository of CVE records enriched with CVSS scores and metadata; cyber tools query it to drive vulnerability prioritization. connector is no longer supported in Brinqa Platform version 11.28 or later.
43. 11.29.200 Feb 24, 2025 · release notes

    Brinqa 11.29.200 adds password length config, fullscreen container rendering fixes, and refined CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. risk calculation.

    • Adds a Length field to the Password type attribute configuration, enabling admins to set the minimum password length for the Brinqa Platform
    • Enables Administrator and Security administrator roles to CREATE, READ, UPDATE, and DELETE any saved queries
    • Adds UTC indicator to date column headers in exports for discrete date and time formats
    • Adds Download and Refresh buttons on the Subnets tab in host details views

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The NIST NVDNVDThe National Vulnerability Database, maintained by NIST, is the U.S. government repository of CVE records enriched with CVSS scores and metadata; cyber tools query it to drive vulnerability prioritization. connector is no longer supported in Brinqa Platform version 11.28 or later, requiring users to switch to Brinqa Risk Intelligence.
44. 11.29.177 Feb 11, 2025 · release notes

    Brinqa 11.29.177 enforces unique emails for users, adds BQL validation on export, and updates Risk Intelligence CPECPECommon Platform Enumeration, an NIST-maintained naming scheme that gives software, hardware, and operating systems a structured, machine-readable identifier so cyber tools can match vulnerabilities to affected products consistently. ingestion.

    • Updates Brinqa Risk Intelligence to ingest more CPE records
    • Adds a check for invalid BQL in data export so exports no longer run when the query is malformed

    2 details in Everything

45. 11.29.152 Jan 28, 2025 · release notes

    Brinqa 11.29.152 adds multiple External URL parsing, data integration restore, and UNWIND support in BQL reports.

    • Adds UNWIND keyword insertion into BQL sub-clauses when generating reports
    • Adds a Restore option for deleted data integrations
    • Updates Automations page to sort by Last updated by default
    • Implements truncation for fields exceeding 32K characters during export

    4 details in Everything

46. 11.29.138 Jan 20, 2025 · release notes

    Brinqa 11.29.138 adds multi-value paste in VQB, NOT relationships in Data Warehouse BQL, and OR with IsCurrentUser piped attributes.

    • Enable pasting a list of values directly into multi-value fields in the Visual Query Builder (VQB), allowing multiple CVE IDs to be input at once.
    • Support BQL queries in Data Warehouse using NOT in a relationship.
    • Support using the OR operator with IsCurrentUser conditions, each with piped attributes, in Data Warehouse BQL queries.
    • Remove Calculation as a mandatory field for category attributes.
    • Update the Data Exporter role to restrict access to only exports created by that user.

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The NIST NVDNVDThe National Vulnerability Database, maintained by NIST, is the U.S. government repository of CVE records enriched with CVSS scores and metadata; cyber tools query it to drive vulnerability prioritization. connector is no longer supported in Brinqa Platform version 11.28 or later.
47. 11.29.98 Dec 18, 2024 · release notes

    Brinqa 11.29.98 adds Jira Alert ticket pushing and immediate ACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource. application via Data Warehouse updates.

    • Adds support for pushing Alert tickets to Jira, allowing users to push tickets generated from alerts to Jira

    1 detail in Everything

48. 11.28.73 Dec 9, 2024 · release notes

    Brinqa 11.28.73 adds Remediation owner, Targets, and Risk factor to CSV exports and fixes data models and UI performance.

    • Remediation owner, Targets, and Risk factor attributes in Finding are now included in the CSV export

    1 detail in Everything

    └──▷ BREAKING ON UPGRADE

    • !The NIST NVDNVDThe National Vulnerability Database, maintained by NIST, is the U.S. government repository of CVE records enriched with CVSS scores and metadata; cyber tools query it to drive vulnerability prioritization. connector is no longer supported in Brinqa Platform version 11.28 or later.
49. 11.29.62 Nov 27, 2024 · release notes

    Brinqa 11.29.62 adds row-level export selection, mean aggregation for risk scores, and host-specific analytics queries.

    • export selected rows added to List views to create focused exports of specific records instead of the entire table
    • Mean added as an aggregating option for risk scoring models to define an average aggregation strategy

    2 details in Everything

50. 11.29.19 Nov 5, 2024 · release notes

    Brinqa 11.29.19 adds scheduled exports with email notifications and SDM attribute transforms for Date, Number, and Boolean.

    • Adds the ability to schedule an export and send notifications via email
    • Added support for Double and Long as connector properties
    • Added a required header (--header 'X-Requested-With: XMLHttpRequest') when retrieving API tokens
    • Added the Connector version and Update available columns to the data integrations page that allows admins to understand when new connector versions are available
    • Added a connector update available filter to the data sources page, so that users can understand which integrations can be updated

    +9 more show less

    • Added ability to configure role strategy (add to existing or replace) in the Create people from roles and Add roles to user action
    • Created an Analytics Source trend for average age in days
    • Added Launch flow ACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource. to the Data Exporter role
    • Added the ability for a user to transform an SDM attribute using string replacement and regular expressions
    • Added the ability for a user to transform an SDM attribute to a Boolean
    • Added the ability for a user to transform an SDM attribute to a Date
    • Added the ability for a user to transform an SDM attribute to a Number
    • Added the ability for a user to transform a relationship type SDM attribute
    • Added the ability for a user to transform multi-value attributes

    14 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The NIST NVDNVDThe National Vulnerability Database, maintained by NIST, is the U.S. government repository of CVE records enriched with CVSS scores and metadata; cyber tools query it to drive vulnerability prioritization. connector is no longer supported in Brinqa Platform version 11.28 or later.
51. 11.28.64 Oct 21, 2024 · release notes

    Brinqa 11.28.64 adds Include Risk Factors UI option for risk score model creation and improves OLAP/analytics performance.

    • Include Risk Factors option displayed on the creation of Risk Score Models to view factor impact during setup
    • Tuning options added for OLAP database threads and settings to reduce resource consumption

    2 details in Everything

52. 11.28.36 Aug 26, 2024 · release notes

    Brinqa 11.28.36 adds kill-switches for risk factors, DLM integration, sidebar dashboards, and MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language. data models.

    • Added kill-switch flow to bulk activate version 2 risk factors from the Brinqa Risk Intelligence feed
    • Added kill-switch to bulk deactivate version 2 risk factors and reactivate stock risk factors
    • Replaced data purge with Data Lifecycle Management (DLM) in data integration, making it the default behavior via removed feature flag
    • Linked data lifecycle flows with Source Data Models (SDM), allowing users to launch them directly from the data model page
    • Enabled dashboard sidebar navigation, removing the dashboard list from the top bar and adding Category organization for dashboards

    +4 more show less

    • Added access control to dashboards to restrict assets and risks based on user permissions
    • Added report inputs as filters at the top of reports for clarity
    • Created new MITRE data models: Attack Mitigation, Attack Pattern, Attack Tactic, Attack Technique, EOL Advisory
    • Added configuration capability to push Remediation Campaigns to external tools

    9 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The NIST NVDNVDThe National Vulnerability Database, maintained by NIST, is the U.S. government repository of CVE records enriched with CVSS scores and metadata; cyber tools query it to drive vulnerability prioritization. connector is no longer supported; users must switch to Brinqa Risk Intelligence.
    • !The cvssV2AttackVector attribute has been renamed to cvssV2AccessVector in the CVE Record and Finding Definition data models.
53. 11.27.46 Aug 23, 2024 · release notes

    Brinqa 11.27.46 adds Status Configuration feature with required migration supervision.

    • Optimizes snapshot code for Data Warehouse to handle increased data volume from Data lifecycle management (DLM)
    • Adds parallel processing improvements to reduce consolidation time after DLM runs

    2 details in Everything

54. 11.27.36 Jul 29, 2024 · release notes

    Brinqa 11.27.36 adds configurable Data computation batch size and new Status Configuration feature with migration requirements

    └──▷ BREAKING ON UPGRADE

    • !Migration from previous versions requires supervision and low-traffic scheduling due to the new Status Configuration feature launch.
55. 11.27.31 Jul 8, 2024 · release notes

    Brinqa 11.27.31 adds Status Configuration migration and fixes for ACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource. filters, BQL builder, and report formatting.

    • Enables adding multiple filters to Access Control Lists (ACLsACLsAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource.)
    • Updates Visual Query Builder to support saved queries
    • Adds custom date format support to the report builder

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The upgrade requires supervision due to the launch of the Status Configuration feature.
56. 11.27.26 Jun 20, 2024 · release notes

    Brinqa 11.27.26 adds Status Configuration for assets/findings and Data Lifecycle Management

    • Adds Status Configuration feature to define conditions for setting the Status attribute on assets and findings.
    • Introduces Data Lifecycle Management settings that replace data retention in data integrations, carrying over existing purge policies as lifecycle policies.
    • Adds new attributes lifecycleInactiveDate, lifecyclePurgeDate, lifecycleStatus, sourceStatus, and statusCategory to Asset, Entity, and Finding data models.
    • Adds the hostname of the instance to Orchestration Email notifications for clarity on affected instances.

    4 details in Everything

57. 11.24.52 May 29, 2024 · release notes

    Brinqa 11.24.52 adds Remediation and Risk owner dashboards, Data Exporter role, sortable user columns, BQL operators for limited users, and improved Parquet export.

    • Adds Remediation owner dashboard for comprehensive asset and finding overview tailored to remediation owners
    • Adds Risk owner dashboard for comprehensive asset and finding overview tailored to risk owners
    • Adds Data Exporter role to allow administrators to enable or disable data export permissions for users
    • Adds sortable capability for columns added by users in List views
    • Adds BQL operators support for limited users to enable more granular searches

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !If your user defined libraries (UDLs) use brinqa.channel.neo4j.impl.Neo4jPersistenceService, you must update them to brinqa.channel.persistence.neo4j.Neo4jPersistenceService
    • !If your user defined libraries (UDLs) use brinqa.channel.neo4j.SnowflakeIdGenerator, you must update them to brinqa.channel.persistence.SnowflakeIdGenerator
    • !If your user defined libraries (UDLs) use brinqa.channel.neo4j.Util.newTransactionConfig, you must update them to brinqa.channel.persistence.Util.newTransactionConfig (final String transactionId, final String username, final Duration timeout)
    • !If your user defined libraries (UDLs) use com.brinqa.platform.v2.analytics.query.Query, you must update them to com.brinqa.platform.v2.analytics.query.BQLQuery
    • !You must change source data model (SDM) attributes whose names differ only in case, or else data orchestration will fail
58. 11.24.21 May 1, 2024 · release notes

    Brinqa 11.24.21 adds Sankey and funnel visualizations, SDM text transforms, Data Warehouse toggle, and new data models for Remediation Validation Requests and Teams.

    • Adds Sankey diagram as a visualization type in dashboards.
    • Adds funnel visualization to dashboards.
    • Enables SDM attribute transforms (uppercase, lowercase, trim) via the new feature set.
    • Adds a toggle to enable or disable Data Warehouse from Administration > Advanced.
    • Redirects users immediately to their identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. when choosing SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. at login.

    +5 more show less

    • Adds new data models: Remediation Validation Request and Team.
    • Adds cweIds attribute to the CVE Record data model.
    • Adds attachments and comments attributes to Finding data models.
    • Adds isTopLevelWeakness and parentWeaknesses attributes to the Weakness data model.
    • Changes Entity Model sources attribute to reference Source model instead of Base model.

    10 details in Everything

59. 11.21.36 Apr 17, 2024 · release notes

    Brinqa 11.21.36 adds bulk user creation automation with role assignment.

    • Adds a new automation action to create users in bulk and assign roles.

    1 detail in Everything

60. 11.21.33 Apr 9, 2024 · release notes

    Remediation Campaigns enable tracking related tickets against due dates; new Incident data models and case-insensitive ID consolidation added.

    • Adds Remediation Campaigns to create collections of related tickets and track remediation against due dates
    • Adds support for case-insensitive consolidation on identifiers
    • Implements percentage measure for Analytics Source in charts
    • New data models: API Endpoint, Incident, Incident Definition, Incident Ticket, and Remediation Campaign
    • New scannedForVulnerabilities attribute added to Asset-extended data models

    5 details in Everything

61. 11.22.11 Mar 29, 2024 · release notes

    Brinqa 11.22.11 adds role-based data export permissions and percent measures for Analytics Source.

    • Adds a permission to limit which role can export data
    • Implements the percentage measure for Analytics Source

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Downloading connectors without authentication is now prohibited.
62. 11.18.19 Jan 25, 2024 · release notes

    Brinqa 11.18.19 introduces the Administrator dashboard and expands Brinqa Conditional Language (BCL) operators for one-to-many relationships.

    • Adds the Brinqa Administrator dashboard for monitoring environment performance and identifying emerging issues
    • Enables '> , <, =' operators in one-to-many relationships within the Brinqa Conditional Language (BCL)

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Upgrading from any version prior to 11.17.16 requires contacting the Brinqa team for a code scan because security constraints now block custom code in calculation scripts, flow scripts, and UDLs that could break deployments
63. 11.15.16 Nov 16, 2023 · release notes

    Brinqa 11.15.16 adds a Read everything permission for Admins and enables relationship attributes as report inputs.

    • Adds Read everything permission to the Administrator role
    • Enables use of relationship attributes as inputs in reports

    2 details in Everything

64. 11.14.36 Oct 31, 2023 · release notes

    Brinqa 11.14.36 adds Previous findings tab and Informed users cluster type

    • Adds Previous findings tab on the ticket Details view to gain historical context for a specific vulnerability definition
    • Adds Informed users cluster type to grant multiple users access to an asset or finding without standard permissions

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The defaultCluster attribute is removed from the RiskScoringModel data model; custom list views including this column will throw an error.
65. 11.13.5 Oct 5, 2023 · release notes

    Brinqa 11.13.5 adds flow toggling on Edit page and undo/redo in Report Builder, plus new Alert data models

    • Enables enabling or disabling flows directly from the flow's Edit page without navigating to All views
    • Adds undo or redo capability in the Report Builder editor for change management
    • Adds Alert and Alert definition as new available data models

    3 details in Everything

66. 11.11.4 Sep 6, 2023 · release notes

    Brinqa 11.11.4 adds report component copy/paste and BCL trigger conditions in Flows

    • Adds support for copying and pasting report components within a single report or across different reports in the Report Builder.
    • Adds Business Case Language (BCL) to the trigger condition of Flows.

    2 details in Everything

67. 11.10.27 Aug 29, 2023 · release notes

    Brinqa v11.10.27 adds BQL nested functions, HTML email template customization, report cloning, and new CVE attributes.

    └──▷ HOW TO FIND IT
    Calculate rounded averages for attributes in a report using nested BQL functions.
    📍round(average(attributeName))
    • Adds support for nesting BQL functions, such as round(average(attributeName)) for greater control when creating reports
    • Enables users to customize the HTML content of notification email templates
    • Adds a Clone button in the report list to create copies of existing reports

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The Asset data model (and models extending it) no longer has the Applications attribute
    • !The Person data model parent changed from Asset to Entity model, decreasing asset counts in reports
    • !The Person data model no longer has the Assets attribute; use Asset.owners instead
    • !The Software data model is renamed to Package; update data integrations and consolidation mappings accordingly
    • !The Risk scoring model display attribute changed from UID to Name
    • !The Software install data model is renamed to Installed package; update data integrations and consolidation mappings accordingly
68. 11.8.30 Jul 31, 2023 · release notes

    Brinqa 11.8.30 adds Visual Query Builder, Manual Entry for assets/findings, and ticket automation to VRM.

    • Adds Visual query builder accessible via the Filters menu on Asset or Findings pages for creating BQL queries
    • Adds Manual entry feature allowing creation and editing of findings or assets directly in Brinqa
    • Adds ticket automation in Vulnerability Risk Management that creates tickets from finding conditions and closes them when sources stop reporting
    • Adds ability to assign a default cluster for each cluster type so unmatched records fall into it
    • Adds source data list view for system administrators to see imported connector data

    +2 more show less

    • Allows setting negative numbers in the Due In field for SLAs, labeling findings as No SLA Required
    • Adds bulk update capability for Assets, Findings, and Tickets from their respective list pages

    7 details in Everything

69. 11.6.4 Jun 28, 2023 · release notes

    Brinqa v11.6.4 adds custom view cloning and editing on the data model page

    • Adds the ability to clone system views from the data model page and edit them as custom views for asset pages and finding pages.
    • Optimizes risk score calculations to lower orchestration calculation time by approximately 95%.

    2 details in Everything

70. 11.5.4 Jun 15, 2023 · release notes

    Adds agent log collection from UI and export status tracking in v11.5.4

    • Adds Collect Logs button in the Integrations > Data servers slide-out to download Brinqa Agent logs for troubleshooting

    1 detail in Everything

71. 11.3.14 May 17, 2023 · release notes

    Brinqa 11.3.14 adds Flow Management folders and major performance improvements to data orchestration.

    • Significantly improves performance of data orchestration compute and consolidation phases

    1 detail in Everything

72. 11.1.4 Apr 20, 2023 · release notes

    Brinqa v11.1.4 adds parallel data integrations, usage tracking toggle, and new risk finding attributes.

    • Administration > Advanced > Usage Tracking config allows system administrators to disable usage data collection
    • Data integrations now run in parallel instead of serially, significantly reducing processing time for external tool data
    • Security finding data models include a new Patch published date attribute indicating the most recent available patch date
    • Notification emails can now be configured separately for Success, Failure, or Success with skips events
    • Columns in the Edit columns dropdown (Selected tab) can now be reordered via drag-and-drop

    +1 more show less

    • Report configurations support a new Month of year transformation to format Month values more clearly

    6 details in Everything

73. 11.0.8 Apr 5, 2023 · release notes

    Brinqa 11.0.8 introduces automations to create Tickets and Sprints for remediation tracking with auto-closure logic.

    • Adds the ability to create Tickets via automations to collect findings for remediation
    • Adds Sprints for tracking remediation progress, including automatic ticket closure when findings are closed and movement of unclosed findings to new tickets

    2 details in Everything

74. 11.0.7 Mar 21, 2023 · release notes

    Findings detail page now displays EPSSEPSSExploit Prediction Scoring System, an estimate of the probability that a published vulnerability will be exploited in the next 30 days. It helps prioritize investigation and patching., CISA exploited status, and threat feed data

75. 11.0.5 Feb 24, 2023 · release notes

    Brinqa 11.0.5 adds finding exception requests and reference attribute filtering

    • Adds ability to create exception requests for findings via the Create a request action in the UI.
    • Enables filtering table views by attributes of references (e.g., CVE ID).
    • Exposes the AgentId field in system logs.

    3 details in Everything