Dradis

No entries match these filters. Clear filters

1. docs update Oct 8, 2026 · issue 097

   VulnDB HQ gains token-based API auth, a dedicated /api/ endpoint with versioning via Accept header, and an open-source Ruby client library.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢
   • Adds token-based authentication for the VulnDB HQ API, replacing HTTP Basic auth — retrieve your token from the Profile page and pass it via a custom HTTP header; regenerate it at any time to revoke third-party access.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Introduces a dedicated /api/ endpoint for VulnDB HQ API access, with API version negotiation via the Accept HTTP header (v2).
   • Open-sources a Ruby client library (vulndbhq) for integrating VulnDB HQ with external tools, available at https://github.com/securityroots/vulndbhq.
   • Enforces strict SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. on all VulnDB HQ API connections — plain-text HTTP access is fully disabled.
   • Migrates VulnDB HQ Help documentation to http://vulndbhq.com/help/, including improved curl proof-of-concept examples with request payloads, response codes, and response content for each API method.
   • Adds token-based authentication for the VulnDB HQ API, replacing HTTP Basic auth — retrieve your token from the Profile page and pass it via a custom HTTP header; regenerate it at any time to revoke third-party access.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Introduces a dedicated /api/ endpoint for VulnDB HQ API access, with API version negotiation via the Accept HTTP header (v2).
   • Open-sources a Ruby client library (vulndbhq) for integrating VulnDB HQ with external tools, available at https://github.com/securityroots/vulndbhq.

   2 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !Plain-text HTTP access to the VulnDB HQ API is fully disabled — all API clients must use HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate..
   • !HTTP Basic authentication is removed from the VulnDB HQ API — clients must switch to token-based authentication via a custom HTTP header.
2. docs update Oct 8, 2026 · issue 097

   Dradis adds white-labeling, MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. calculator, kit downloads, REST export/upload endpoints, and a /jobs view.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢ ⤢ ⤢ ⤢
   └──▷ HOW TO FIND IT
   Apply your organization's branding to the Contributor login and UI so clients see your logo and colors.
   📍1. Click the cogwheel (top right) › Instance Configuration › White Labeling. 2. Upload your logo file and set your preferred brand color. 3. Save — contributors will now see your branding on the login page and throughout the UI.
   • Adds an endpoint for uploading tool outputs via the REST/JSON API.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds a /jobs view to view and manage background jobs.
   • Adds a MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language. ATT&CKATT&CKA publicly maintained knowledge base by MITRE cataloguing adversary tactics, techniques, and procedures observed in real attacks, giving cyber tools a common taxonomy for classifying and correlating threat behavior. calculator supporting Enterprise, Mobile, and ICSICSIndustrial Control Systems — hardware and software that monitor and control physical processes like power grids, pipelines, and manufacturing lines, making them a target for cyber tools focused on operational technology environments. matrices, accessible from the MITRE tab on Issues and as a standalone tool from the Tools menu.
   • Adds name_identifier_format to the SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. config generator, defaulting to emailAddress instead of unspecified.
   • Adds white-labeling for contributor-facing views — admins can set a custom logo and brand color under Instance Configuration > White Labeling.

   +6 more show less

   • Adds offline activation option for when online activation fails.
   • Adds kit download option for report templates, bundling template properties and mappings.
   • Adds click-to-reveal functionality for the API token on the Profile page.
   • Adds multi-word field support to the Analyzer.
   • Enables LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. installation and editable configuration through the Tool Manager.
   • Adds name_identifier_format in the SAML config generator.
   • Adds an endpoint for uploading tool outputs via the REST/JSON API.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds a /jobs view to view and manage background jobs.
   • Adds a MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language. ATT&CKATT&CKA publicly maintained knowledge base by MITRE cataloguing adversary tactics, techniques, and procedures observed in real attacks, giving cyber tools a common taxonomy for classifying and correlating threat behavior. calculator supporting Enterprise, Mobile, and ICSICSIndustrial Control Systems — hardware and software that monitor and control physical processes like power grids, pipelines, and manufacturing lines, making them a target for cyber tools focused on operational technology environments. matrices, accessible from the MITRE tab on Issues and as a standalone tool from the Tools menu.
   • Adds white-labeling for contributor-facing views — admins can set a custom logo and brand color under Instance Configuration > White Labeling.
   • Adds kit download option for report templates, bundling template properties and mappings.

   6 more in Everything

3. docs update Oct 8, 2026 · issue 097

   Dradis Pro v4.18 adds BI Dashboard year-over-year trends, custom properties view, and mapping copy-on-upload for kits and report templates.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢ ⤢ ⤢

   ▶ ⤢
   └──▷ HOW TO FIND IT
   After uploading an updated report template, copy your existing field mappings to it rather than rebuilding them from scratch.
   📍In Dradis Pro, go to Mappings Manager › Upload Kit or Report Template, select your new template file, then choose Copy existing mappings to apply your current mappings to the updated template.
   Review year-over-year trends in vulnerabilities and custom properties across all projects to brief leadership on remediation progress.
   📍In Dradis Pro, go to Business Intelligence › Dashboard to view the Year-Over-Year insights panel, then navigate to Business Intelligence › Custom Properties for a breakdown by custom field.
   • Adds an option to copy existing mappings when uploading kits or report templates, so you can quickly apply or migrate mappings to new or updated templates.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds a Business Intelligence Dashboard view with year-over-year insights into activities and custom properties, plus lists of most common issues across projects.
   • Adds a Custom Properties view to the Business Intelligence section.
   • Adds sub-navigation to the Business Intelligence section.
   • Replaces OAuth with Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. for the Azure DevOps integration.

   +2 more show less

   • Includes methodology name in all methodology actions in the Activities feed.
   • Adds custom error pages to the layout.
   • Adds an option to copy existing mappings when uploading kits or report templates, so you can quickly apply or migrate mappings to new or updated templates.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds a Custom Properties view to the Business Intelligence section.
   • Adds custom error pages to the layout.

   4 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !The Azure DevOps integration replaces OAuth with Microsoft Entra ID — existing OAuth-based Azure DevOps connections will need to be reconfigured.
4. docs update Oct 8, 2026 · issue 097

   Dradis v4.19 introduces local-LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. AI assistance via Ollama (Dradis Echo), Gateway webhooks, CSV bulk-import and bulk-delete for IssueLibrary, and a new contributor dashboard.

   • Adds Dradis Echo, an optional AI integration that deploys a local LLM via Ollama to summarize raw scanner output, rewrite tester notes into executive language, and enhance remediation advice — no external connections required.
   • Adds CSV file upload to IssueLibrary for bulk-importing custom issues.
   • Adds bulk-delete action for entries in the IssueLibrary view.
   • Surfaces each IssueLibrary entry's QA status when adding entries to a project, preventing accidental import of unreviewed issues.
   • Adds a contributor dashboard with Gateway, Remediation Tracker, and Notification widgets.

   +3 more show less

   • Adds inline code and highlight code buttons to the editor toolbar.
   • Adds user select-all functionality in project creation.
   • Moves Trash and Project Configurations into the main navigation bar.

   8 details in Everything

   • New integration Gateway Webhooks integration
5. docs update Oct 8, 2026 · issue 097

   Dradis: Adds a new API endpoint for exporting and downloading reports, and adds Node Properties to the Node endpoint.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢ ⤢ ⤢ ⤢
   └──▷ HOW TO FIND IT
   Trigger a Slack notification whenever a client submits a new project request through Gateway — no manual polling needed.
   📍In Dradis, go to Gateway › Services › Webhooks, click New Webhook, select the Contributor request submitted event, and enter your Slack incoming webhook URL as the target.
   Bulk-import an existing internal issue library into Dradis without manual re-entry.
   📍In Dradis, go to Issue Library, click Import, choose your CSV file, and confirm the upload to populate your custom issue set.
   • Adds Docker Hub releases and a new command-line interface for streamlined remote-server deployment of Dradis CE.
   • Adds Dradis OTP, a built-in MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. integration supporting any TOTPTOTPA one-time password algorithm (RFC 6238) that generates short-lived codes from a shared secret and the current time, giving cyber tools phishing-resistant second-factor authentication without a server round-trip. authenticator app via QR code scan, replacing the DuoWeb-only limitation.
   • Adds Audit Logging that tracks instance-wide activity in one place and supports CSV export.
   • Adds Echo, a context-aware LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. automation feature (Beta) supporting local deployment with no external connections for data sovereignty.
   • Adds a Gateway Services section for creating and sending questionnaires to Gateway Contributors, with the ability to create new projects from questionnaire responses.

   +3 more show less

   • Adds project-level QA States (customizable via BI as a custom project property) to surface project readiness without opening individual projects.
   • Introduces Hera, a redesigned navigation layout with a main nav bar, secondary nav bar, and left/right sidebars.
   • Adds Plugin Manager validation feature that shows which fields are correctly mapped and which are missing for a selected plugin and report template.
   • Adds Docker Hub releases and a new command-line interface for streamlined remote-server deployment of Dradis CE.
   • Adds Dradis OTP, a built-in MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. integration supporting any TOTPTOTPA one-time password algorithm (RFC 6238) that generates short-lived codes from a shared secret and the current time, giving cyber tools phishing-resistant second-factor authentication without a server round-trip. authenticator app via QR code scan, replacing the DuoWeb-only limitation.
   • Adds Audit Logging that tracks instance-wide activity in one place and supports CSV export.
   • Adds Echo, a context-aware LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. automation feature (Beta) supporting local deployment with no external connections for data sovereignty.
   • Adds a Gateway Services section for creating and sending questionnaires to Gateway Contributors, with the ability to create new projects from questionnaire responses.

   +2 more show less

   • Adds project-level QA States (customizable via BI as a custom project property) to surface project readiness without opening individual projects.
   • Adds Plugin Manager validation feature that shows which fields are correctly mapped and which are missing for a selected plugin and report template.

   1 more in Everything

6. docs update Oct 8, 2026 · issue 097

   Dradis: Introduces Echo, a context-aware LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. automation layer (Beta) for rewriting findings and summarizing scanner output, deployable locally with no external connections.

   ⤢ ⤢ ⤢ ⤢
7. docs update Oct 8, 2026 · issue 097

   Dradis: Adds instance-wide Audit Logging with CSV export, tracking activity beyond the existing Recent Activity tabs for security, compliance, and accountability needs.

   ⤢ ⤢ ⤢ ⤢
   └──▷ HOW TO FIND IT
   Trigger a Slack notification automatically whenever a client submits a new project request through Gateway, keeping your team informed without manual checking.
   📍In Dradis, go to Gateway › Webhooks, click New Webhook, set the event to Contributor request, and enter your Slack incoming webhook URL as the target endpoint.
   Bulk-load your organisation's existing issue library into Dradis instead of re-entering issues one by one.
   📍In Dradis, navigate to Issue Library › Import, select CSV, and upload your issues CSV file to bulk-import all entries at once.
8. docs update Oct 8, 2026 · issue 097

   Dradis Pro v4.19.0 adds a full Business Intelligence Dashboard with custom Team/Project properties, trend analysis, and data-query views.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢ ⤢ ⤢ ⤢
   └──▷ TRY IT
   Run the top10.rb script against a specific project to populate PortScanning, OSEnumeration, and ServiceEnumeration Content Block tables from a large Nessus import.
   copy

   $ $ cd /opt/dradispro/dradispro/current/
   $ RAILS_ENV=production bin/rails runner /tmp/top10.rb 123

   Access the Business Intelligence Dashboard after upgrading to Dradis Pro v4.19.0+ to review year-over-year Project and Issue trends.
   📍In the Dradis Pro web UI, navigate to Tools › Business Intelligence to open the dashboard and view activity summaries and overview charts.
   Initiate a side-by-side Trend Analysis across selected projects to identify Issue patterns by tag.
   📍In the Business Intelligence Dashboard, click + Trend analysis in the sidebar, select the projects to compare using the filter, then click 'Compare!' to view the Issue-by-tag graph, project analysis table, Issue analysis, and Node analysis.
   • Adds the Business Intelligence Dashboard (available in Dradis Pro v4.19.0+), accessible via Tools > Business Intelligence, replacing the previous command-line Year in Review script with an in-app UI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds custom Team Properties (Integer, String, and List field types) to tag clients by industry, region, revenue, or any user-defined dimension for BI analysis.
   • Adds custom Project Properties (Integer, String, and List field types) to categorize engagements by project type, scope accuracy, complexity, or testing methodology.
   • Automatically generates visual overview charts for every List property defined, showing distribution breakdowns (e.g., webapp vs. infrastructure, healthcare vs. finance).
   • Adds a Data Analysis sidebar for querying projects and teams by custom property values, returning results in a togglable-column table with associated Issues and Node data.

   +3 more show less

   • Adds Trend Analysis (via + Trend analysis in the sidebar) to compare multiple projects side-by-side, showing Issue-by-tag graphs, project analysis tables, Issue analysis, and Node analysis.
   • Adds activity summary views comparing current-year to prior-year counts for Projects, Issues, Teams, and Contributors.
   • Adds a top10.rb Rails runner script (from the Dradis scripting repo) that computes top-10 ports/protocols, operating systems, and services across a project and writes the results into a Content Block with PortScanning, OSEnumeration, and ServiceEnumeration fields.

   8 details in Everything

9. docs update Oct 8, 2026 · issue 097

   Dradis: Adds custom Team Properties and Project Properties with Integer, String, and List field types for Data Analysis queries in the Business Intelligence Dashboard.

   ⤢ ⤢ ⤢ ⤢
   └──▷ HOW TO FIND IT
   Navigate to the Business Intelligence Dashboard to view year-over-year project and issue trends and drill into specific client segments.
   📍In Dradis Pro, go to Tools › Business Intelligence. Define a List property (e.g. Industry with options Healthcare, Finance, Retail) under Team Properties, then use the Data Analysis sidebar to filter all teams by Industry = Healthcare and view their associated Issues.
   Compare two retest engagements side-by-side to confirm remediation progress across Nodes and Issue tags.
   📍In the Business Intelligence Dashboard, click + Trend analysis in the sidebar, select the original and retest projects using the filter, then click 'Compare!' to view the Issue-by-tag graph, project analysis table, Issue analysis, and Node analysis.
   Bulk-import an existing internal issue library into Dradis without manual copy-pasting.
   📍In Dradis, navigate to the Issue Library and use the CSV import option to upload your formatted CSV file of custom issues.
   • Adds a Services section to Dradis Gateway for creating and sending Questionnaires to Gateway Contributors, enabling pre-engagement scoping, post-engagement surveys, and retest request workflows.
   • Adds Dradis OTPOTPOne-time password: a short-lived numeric or alphanumeric code valid for a single authentication attempt, generated via TOTP or HOTP standards, giving cyber tools phishing-resistant second-factor verification without stored shared secrets., a built-in multi-factor authenticationmulti-factor authenticationMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. integration.

   2 details in Everything

10. docs update Sep 22, 2026 · issue 082

    Dradis: Warns a user if another user is currently editing the same Issue record.

    ⤢ ⤢ ⤢

    ▶ ⤢
    └──▷ HOW TO FIND IT
    Use QA states to gate Evidence out of client deliverables — only published Evidence appears in Excel and Word exports.
    📍In Dradis Pro, open a piece of Evidence, then set its QA state from the Evidence view (e.g. mark it Published once reviewed). Repeat for each Evidence item before exporting your Word or Excel report.
    Draft an executive summary or methodology section using Roslin directly inside a Content Block, drawing on the full project context.
    📍Open a Content Block in your project, navigate to the Roslin tab, and ask it to draft the section — for example: 'Draft an executive summary based on all Issues and Evidence in this project.'
11. docs update Sep 22, 2026 · issue 082
    ⤢ ⤢ ⤢

    ▶ ⤢
    └──▷ HOW TO FIND IT
    Mark reviewed Evidence as published so only approved findings appear in client-facing Excel and Word exports.
    📍1. Open a piece of Evidence in your project. 2. Locate the QA state control in the Evidence view. 3. Set the state to Published once review is complete. 4. Export the report — only Evidence marked as published will appear in the Excel or Word output.
    Draft a recurring report section (e.g. executive summary) from full project content without leaving the Content Block.
    📍1. Open a Content Block in your project. 2. Select the Roslin tab. 3. Ask Roslin to draft the section — for example: 'Draft an executive summary based on this project'. 4. Roslin responds using the full project content, including Issues and Evidence.
12. docs update Sep 22, 2026 · issue 082
    ⤢ ⤢ ⤢

    ▶ ⤢
    └──▷ HOW TO FIND IT
    Mark Evidence as reviewed before export to ensure only published Evidence reaches the client Word or Excel report.
    📍In a project, open a piece of Evidence › locate the QA state selector in the Evidence view › set the state to Published before generating a Word or Excel export.
    Draft an executive summary for a Content Block using the full project context — Issues and Evidence included — without leaving the block.
    📍Open a Content Block › select the Roslin tab › type a prompt such as 'Draft an executive summary based on the findings in this project' › review and insert the generated text.
13. docs update Sep 22, 2026 · issue 082
    ⤢ ⤢ ⤢

    ▶ ⤢
    └──▷ HOW TO FIND IT
    Gate client deliverables by marking each piece of Evidence with a QA state before export, ensuring only reviewed Evidence appears in Word and Excel reports.
    📍In a project, open a piece of Evidence, then set its QA state to Published from the Evidence view. When you export the report (Excel or Word), only Evidence marked as published will be included.
    Draft an executive summary for a Content Block using Roslin, drawing on all Issues and Evidence already in the project rather than rewriting from scratch.
    📍Open a Content Block, navigate to the Roslin tab, and ask Roslin to draft the section (e.g. 'Draft an executive summary based on all Issues and Evidence in this project').
14. docs update Sep 22, 2026 · issue 082
    ⤢ ⤢ ⤢

    ▶ ⤢
    └──▷ HOW TO FIND IT
    Gate client deliverables by marking Evidence through QA review before export — only published Evidence appears in Word and Excel reports.
    📍In a project, open a piece of Evidence, then use the QA state selector in the Evidence view to mark it as reviewed/published before generating your Word or Excel export.
    Draft a recurring report section such as an executive summary directly from all project findings without leaving the Content Block.
    📍Open a Content Block, navigate to the Roslin tab, and prompt Roslin to draft the section — it reads from the full set of project Issues and Evidence to produce the content.
15. docs update Sep 22, 2026 · issue 082
    ⤢ ⤢ ⤢

    ▶ ⤢
    └──▷ HOW TO FIND IT
    Mark Evidence as reviewed before export so only published Evidence appears in client-facing Word and Excel deliverables.
    📍In Dradis, open a piece of Evidence › locate the QA state control in the Evidence view › set the state to Published before generating the report.
    Draft an executive summary or methodology section for a recurring Content Block using the full project context without leaving the block.
    📍In Dradis, open a Content Block › select the Roslin tab › type a prompt such as 'Draft an executive summary based on all Issues and Evidence in this project' › review and save the generated content.
16. New in Dradis Pro v5.4 (2026-09-22) Sep 22, 2026 · issue 082

    Dradis Pro v5.4 adds QA states to Evidence, Roslin AI drafting for Content Blocks, List fields as dropdowns, and Webhook CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. events.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    ⤢ ⤢ ⤢

    ▶ ⤢
    └──▷ HOW TO FIND IT
    After completing review of a piece of evidence, mark it as published so it is included in the Word or Excel report export — unpublished evidence is now excluded automatically.
    📍In the project, open a piece of Evidence › set its QA state to Published from the Evidence view › generate the Word or Excel export — only published Evidence will appear in the deliverable.
    Draft an executive summary for a recurring Content Block without leaving Dradis, using the full project context (Issues and Evidence) as source material.
    📍Open a Content Block › click the Roslin tab › type a prompt such as 'Draft an executive summary based on the issues and evidence in this project' › review and accept the drafted section.
    • Adds Evidence, Node, and Note CRUD events to Webhooks, enabling external systems to react to evidence lifecycle changes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds QA states to Evidence so teams can track review status and gate client-facing deliverables — Excel and Word exports now only include published Evidence.
    • Adds a Roslin agent tab to Content Blocks to draft report sections (executive summaries, methodology, scope notes) from the full project content including Issues and Evidence.
    • Renders List fields as selects (dropdowns) when editing existing Issues, Evidence, and Content Blocks, enforcing consistent field values across a project.
    • Adds support for numeric (integer and double) Work Item fields and required fields in the DevOps integration.

    +1 more show less

    • Adds support for float custom fields and multiselect custom fields when sending issues to Jira.
    • Adds Evidence, Node, and Note CRUD events to Webhooks, enabling external systems to react to evidence lifecycle changes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds QA states to Evidence so teams can track review status and gate client-facing deliverables — Excel and Word exports now only include published Evidence.
    • Adds a Roslin agent tab to Content Blocks to draft report sections (executive summaries, methodology, scope notes) from the full project content including Issues and Evidence.
    • Renders List fields as selects (dropdowns) when editing existing Issues, Evidence, and Content Blocks, enforcing consistent field values across a project.

    2 more in Everything

17. announced Sep 22, 2026 · issue 082
    ⤢ ⤢ ⤢

    ▶ ⤢
    └──▷ HOW TO FIND IT
    Track Evidence review status before sending a report to a client, keeping unreviewed material out of exported deliverables.
    📍In a project, open a piece of Evidence, then set its QA state from the Evidence view. Only Evidence marked as published will appear in Excel and Word exports.
    Draft a recurring report section such as an executive summary or methodology note without leaving the Content Block.
    📍Open a Content Block, navigate to the Roslin tab, and ask Roslin to draft the section — it draws on the full project content including Issues and Evidence.
18. docs update Aug 13, 2026 · issue 044

    Dradis Pro v5.3 adds multiplayer Echo chat, reusable CSV and ServiceNow field mappings, and Gateway PDF exports from projects.

    ⤢ ⤢ ⤢ ⤢
    └──▷ HOW TO FIND IT
    Set up a reusable ServiceNow mapping with Liquid so your team's standard Dradis fields populate automatically every time a Vulnerable Item is created.
    📍In Dradis Pro, go to Mappings Manager → ServiceNow → New ServiceNow Mapping, then define each Dradis field (e.g. using Liquid like {{ issue.fields.severity }}) mapped to the target ServiceNow field across the Application, Container, or Vulnerability Response module.
    Generate a polished, print-ready PDF report directly from a project without sharing it through the Results Portal.
    📍In Dradis Pro, open your project, go to the Export tab, select HTML / PDF, choose the Athena Gateway theme, then print the resulting browser view to PDF.
    • Adds ServiceNow to the Mappings Manager — define how Dradis fields map to ServiceNow fields (with Liquid templating support) across the Application, Container, and Vulnerability Response modules, so mapped fields populate automatically when creating a Vulnerable Item; configure via Mappings Manager → ServiceNow → New ServiceNow Mapping.
    • Adds CSV import support for the Mappings Manager — define column-to-Issue/Evidence field mappings once per Report Template and have them applied automatically on future uploads with the same column headers.
    • Adds HTML / PDF Gateway export option directly from a project's Export tab — generates themed HTML output (including the Athena theme optimised for print-to-PDF) without requiring access to the Results Portal.
    • Adds multiplayer Echo chat on Issues — start a conversation from a saved prompt, send follow-up messages, and watch Roslin's replies stream live to all project members viewing the same Issue.
    • Adds Type as an available Issue field in the Burp integration.

    +6 more show less

    • Adds Work Item attachment support to the VSTS integration.
    • Adds Recent Activity entries for API edits on Content Blocks.
    • Sets the author field to the authenticated user when creating notes and evidence via the API.
    • Adds CTA cards and an onboarding view on the dashboard for authors without active projects, plus a What's New feed and contextual widget panels.
    • Adds an option to move a card task to a different list.
    • Allows Admins to request 1:1 training for new users.

    11 details in Everything

19. docs update Aug 13, 2026 · issue 044

    Dradis Pro v5.3 adds multiplayer Echo chat, reusable CSV and ServiceNow field mappings, and Gateway PDF exports from projects.

    ⤢ ⤢ ⤢ ⤢
    • Adds multiplayer Echo chat on Issues: start a conversation from a saved prompt, send follow-up messages, and watch Roslin's reply stream live to every teammate viewing the same Issue simultaneously.
    • Integrates CSV imports with the Mappings Manager so column-to-field mappings are saved per Report Template and applied automatically on future uploads with matching headers.
    • Integrates ServiceNow with the Mappings Manager — define Dradis-to-ServiceNow field mappings once (across Application, Container, and Vulnerability Response modules) with Liquid templating support, and they are populated automatically when creating Vulnerable Items.
    • Adds Gateway HTML/PDF export directly from the project's Export tab — choose HTML / PDF and select a Gateway theme (the Athena theme is recommended for print-ready PDFs) without needing the Results Portal.
    • Adds Type as an available Issue field in the Burp integration.

    +6 more show less

    • Adds Work Item attachment support to the VSTS integration.
    • Adds Recent Activity entries for API edits to Content Blocks.
    • Sets the author field to the authenticated user automatically when creating notes and evidence via the API.
    • Redesigns the author dashboard with contextual widget panels, a What's New feed, CTA cards, and an onboarding view for authors without active projects.
    • Adds an option to move a task card to a different list.
    • Allows Admins to request 1:1 training for new users.

    11 details in Everything

20. docs update Aug 13, 2026 · issue 044

    Dradis Pro v5.3 adds multiplayer Echo chat, reusable CSV/ServiceNow field mappings, and Gateway HTML/PDF export from projects.

    ⤢ ⤢ ⤢ ⤢
    └──▷ HOW TO FIND IT
    Set up reusable ServiceNow field mappings with Liquid so every Vulnerable Item export is pre-populated consistently.
    📍In Dradis Pro, go to Mappings Manager → ServiceNow → New ServiceNow Mapping, then define each field mapping using Liquid (e.g. {{ issue.title }}) to control exactly what is sent to each ServiceNow field across the Application, Container, and Vulnerability Response modules.
    Generate a print-ready PDF deliverable from a project without sharing it through Gateway.
    📍Open your project → Export tab → select HTML / PDF → choose the Athena Gateway theme → open the generated HTML in your browser → File → Print → Save as PDF.
    • Adds ServiceNow to the Mappings Manager — define Dradis-to-ServiceNow field mappings once (including Liquid expressions) and have them auto-populate across the Application, Container, and Vulnerability Response modules whenever a Vulnerable Item is created; configure via Mappings Manager → ServiceNow → New ServiceNow Mapping.
    • Adds Mappings Manager support for CSV imports — map CSV columns to Issue and Evidence fields once per Report Template, and Dradis automatically re-applies the saved mapping on future uploads with matching column headers.
    • Adds Gateway HTML/PDF export directly from the project Export tab — select HTML / PDF, choose a Gateway theme (Athena recommended for print-ready PDFs), and generate themed output without going through the Results Portal.
    • Adds Burp integration field Type as an available Issue field.
    • Adds VSTS support for Work Item attachments.

    +6 more show less

    • Adds Recent Activity entries for API edits to Content Blocks.
    • Adds multiplayer Echo chat — conversations on Issues are now shared, ongoing threads where teammates can follow Roslin's streamed replies live and add their own messages to the same session.
    • Sets the author field to the authenticated user automatically when creating notes and evidence via the API.
    • Adds an option to move a task card to a different list.
    • Adds admin ability to request 1:1 training for new users.
    • Preserves line breaks in streamed Ollama responses for models that emit them as standalone tokens.

    11 details in Everything

21. docs update Aug 13, 2026 · issue 044

    Dradis Pro v5.3 adds multiplayer Echo chat, reusable CSV/ServiceNow field mappings, and Gateway HTML/PDF export from projects.

    ⤢ ⤢ ⤢ ⤢
    └──▷ HOW TO FIND IT
    Collaborate with your team to refine a finding using Echo multiplayer chat without losing context between messages.
    📍In Dradis Pro, open an Issue → Echo tab → select a saved prompt → send your initial message. Teammates viewing the same Issue see Roslin's reply stream live and can add follow-up messages to the same thread.
    Eliminate repetitive CSV column mapping on recurring imports by saving a mapping for a project's Report Template.
    📍In Dradis Pro, import a CSV into a project that has a Report Template assigned → map columns to Issue/Evidence fields when prompted → Dradis saves the mapping. On the next upload with the same column headers, the saved mapping is applied automatically.
    Produce a polished PDF deliverable from a project without sharing it through Gateway.
    📍In Dradis Pro, open your project → Export tab → select HTML / PDF → choose your Gateway theme (e.g. Athena) → open the generated HTML in your browser → use browser print-to-PDF to save the report.
    • Adds multiplayer Echo chat sessions on Issues via the Echo tab: start a conversation from a saved prompt, send follow-up messages, and watch Roslin's reply stream live to all project viewers in real time.
    • Adds CSV imports to the Mappings Manager so column-to-field mappings are saved per Report Template and applied automatically on future uploads with the same headers.
    • Adds ServiceNow to the Mappings Manager — configure once under Mappings Manager → ServiceNow → New ServiceNow Mapping, covering the Application, Container, and Vulnerability Response modules, with Liquid support for field content.
    • Adds Gateway HTML/PDF export directly from a project's Export tab (HTML / PDF option with Gateway theme selector), removing the need to visit the Results Portal; recommends the Athena theme for print-to-PDF output.
    • Adds VSTS (Azure DevOps) support for Work Item attachments via the VSTS integration.

    +4 more show less

    • Adds Burp integration support for Type as an available Issue field.
    • REST/JSON API now sets the author field to the authenticated user when creating notes and evidence, and records a Recent Activity entry for Content Block edits.
    • Adds a dashboard redesign with contextual widget panels, a What's New feed, CTA cards, and an onboarding view for authors without active projects.
    • Adds an option to move a card/task to a different list.

    9 details in Everything

22. docs update Aug 13, 2026 · issue 044

    Dradis Pro v5.3 adds multiplayer Echo chat, reusable CSV/ServiceNow field mappings, and Gateway HTML/PDF exports from projects.

    ⤢ ⤢ ⤢ ⤢
    • Adds Mappings Manager support for CSV imports — define column-to-field mappings once and have them applied automatically on future uploads when the same column headers are detected for a project associated with a Report Template.
    • Adds Mappings Manager support for ServiceNow — map Dradis fields to ServiceNow fields (supporting Application, Container, and Vulnerability Response modules) with Liquid templating, auto-populating fields when a Vulnerable Item is created; configure via Mappings Manager → ServiceNow → New ServiceNow Mapping.
    • Adds VSTS Work Item attachment support.
    • Adds Type as an available Issue field in the Burp integration.
    • Adds Recent Activity entries for API edits to Content Blocks.

    +6 more show less

    • Adds Gateway HTML/PDF export directly from the project Export tab (select HTML / PDF and choose a Gateway theme, including the print-optimized Athena theme), alongside existing Word, Excel, and CSV options — no longer requires the Results Portal.
    • Adds multiplayer Echo chat on Issues — start a conversation with Roslin from a saved prompt, send follow-up messages, and have all replies stream live to every team member viewing the same Issue.
    • Sets the author field to the authenticated user automatically when creating notes and evidence via the REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services..
    • Adds card task management option to move a task to a different list.
    • Adds CTA cards and onboarding view on the author dashboard for users without active projects, plus a contextual widget panel redesign and a What's New feed.
    • Allows Admins to request 1:1 training for new users.

    11 details in Everything

23. docs update Aug 13, 2026 · issue 044

    Dradis Pro v5.3 adds multiplayer Echo chat, reusable CSV/ServiceNow field mappings, and Gateway HTML/PDF exports from projects.

    ⤢ ⤢ ⤢ ⤢
    └──▷ HOW TO FIND IT
    Set up a reusable ServiceNow field mapping with Liquid so every Vulnerable Item created from Dradis populates the correct fields automatically.
    📍In Dradis Pro, go to Mappings Manager → ServiceNow → New ServiceNow Mapping. Define how each Dradis field (e.g. Title, CVSS Score) maps to the target ServiceNow module field, using Liquid syntax such as {{issue.fields.title}} where you need dynamic content. Save the mapping; it will be applied automatically each time a Vulnerable Item is created.
    Export a polished PDF deliverable from a project without sharing it via the Results Portal.
    📍Open your project in Dradis Pro, go to the Export tab, select HTML / PDF, choose the Athena Gateway theme, and generate the report. Open the resulting HTML in your browser and use the browser print dialog to save as PDF.
    Collaborate with teammates on refining a finding using multiplayer Echo chat on an Issue.
    📍Open an Issue in Dradis Pro, navigate to the Echo tab, select a saved prompt, and send your first message to Roslin. Follow up with additional messages in the same thread — teammates viewing the same Issue will see replies stream live and can add their own messages.
    • Adds Mappings Manager support for CSV imports so column-to-field mappings are saved per Report Template and applied automatically on subsequent uploads with matching headers.
    • Adds Mappings Manager support for ServiceNow under Mappings Manager → ServiceNow → New ServiceNow Mapping, covering the Application, Container, and Vulnerability Response modules with Liquid templating support for field values.
    • Adds Gateway-themed HTML and PDF export directly from the project Export tab (HTML / PDF), alongside existing Word, Excel, and CSV options — no longer requiring the Results Portal.
    • Adds VSTS support for Work Item attachments.
    • Adds Type as an available Issue field in the Burp integration.

    +7 more show less

    • Adds Recent Activity entries for API edits to Content Blocks.
    • Sets the author field to the authenticated user automatically when creating notes and evidence via API.
    • Adds Echo Multiplayer Chat: conversations on Issues are now shared, persistent threads visible to all project members, with replies streaming live as they are generated.
    • Adds an option to move a task card to a different list.
    • Adds a What's New feed and contextual widget panels to the author dashboard, plus CTA cards and an onboarding view for authors without active projects.
    • Allows Admins to request 1:1 training for new users.
    • Preserves line breaks in streamed Ollama responses for models that emit them as standalone tokens.

    12 details in Everything

24. New in Dradis Pro v5.3 (2026-08-13) Aug 13, 2026 · issue 044

    Dradis Pro v5.3 adds multiplayer Echo chat, reusable CSV/ServiceNow field mappings, and Gateway HTML/PDF exports from projects.

    ⤢ ⤢ ⤢ ⤢
    └──▷ HOW TO FIND IT
    Generate a polished PDF deliverable from a project without sharing it through the Results Portal.
    📍In your project, go to the Export tab, select HTML / PDF, and choose the Athena Gateway theme. Open the generated HTML in your browser and use browser print-to-PDF — print-specific styles remove interactive elements such as the comment box automatically.
    • Adds ServiceNow to the Mappings Manager — define how Dradis fields map to ServiceNow fields once (via Mappings Manager → ServiceNow → New ServiceNow Mapping) and have them auto-populated on every Vulnerable Item creation; supports Liquid templating in mapped values across the Application, Container, and Vulnerability Response modules.
    • Integrates CSV imports with the Mappings Manager so column-to-field mappings are saved per Report Template and applied automatically on future uploads with matching column headers.
    • Adds Gateway HTML/PDF export directly from the project Export tab (Export → HTML / PDF → choose Gateway theme), including the print-optimised Athena theme, without requiring the Results Portal.
    • Adds Type as an available Issue field for Burp integration.
    • Adds support for Work Item attachments in the VSTS integration.

    +6 more show less

    • Adds Recent Activity entries for Content Block edits made via the REST/JSON API.
    • Sets the author field automatically to the authenticated user when creating notes and evidence via the REST/JSON API.
    • Enables multiplayer Echo chat on Issues — start a conversation from a saved prompt, send follow-up messages, and watch Roslin's reply stream live to all project members viewing the same Issue.
    • Redesigns the author dashboard with contextual widget panels, a What's New feed, CTA cards, and an onboarding view for authors without active projects.
    • Adds an option to move a Card task to a different list.
    • Adds an Admin control to request 1:1 training for new users.

    11 details in Everything

25. New in Dradis Pro v5.2 (2026-07-09) Jul 9, 2026 · issue 014

    Dradis Pro v5.2 adds List fields with multi-column issue sorting, broader ServiceNow module coverage, and a redesigned CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. Calculator.

    ⤢ ⤢ ⤢
    └──▷ HOW TO FIND IT
    When you need to capture and paste a CVSS vector string into a ticket or report, use the redesigned calculator to score a finding and copy the vector in one click.
    📍In Dradis Pro, open a finding and click CVSS Calculator. Adjust metrics in the two-column layout — the score and severity badge update live in the sticky results panel. Click Copy vector string to copy the full CVSS vector to your clipboard.
    • New List field type lets you define ordered value sets (e.g., Critical > High > Medium > Low) for Issue fields, complete with configurable font and cell background colours.
    • Multi-column Issue sorting now lets you stack multiple List and numeric fields as ordered sort criteria, so reports emerge in exactly the priority sequence your methodology demands.
    • ServiceNow integration now creates Vulnerable Items across the Application, Container, and Vulnerability Response modules automatically — no extra configuration required.
    • Redesigned CVSS Calculator features a two-column layout with a sticky results panel, severity badges for instant visual context, and a one-click vector string copy button.
    • New default Welcome kit option added for Kits.

    +2 more show less

    • Issue Library now defaults imported issue state to draft.
    • Dark mode support added to the login and setup wizard pages.

    7 details in Everything

26. New in Dradis Pro v5.1 (2026-06-09) Jun 9, 2026 · release notes

    Dradis Pro v5.1 adds Roslin Echo Agent with LanguageTool grammar checking, new LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. providers, and BI date fields.

    └──▷ HOW TO FIND IT
    Enable self-hosted grammar checking for findings by configuring the Roslin agent in the UI
    📍In the console, go to Tools → Echo → Agents, click Edit next to Roslin, and configure the LanguageTool connection.
    Connect a cloud LLM provider like OpenAI for AI-assisted writing in Echo
    📍In the console, go to Tools → Echo → Providers, click Add Provider, select OpenAI, and enter your API key and default model.
    Create a structured date property in Business Intelligence for tracking remediation deadlines
    📍In the BI settings, create a new custom property and select Date as the field type.
    • Adds Roslin Echo Agent to connect a self-hosted or local LanguageTool instance for inline grammar, spelling, and style checking in the findings editor
    • Adds OpenAI, Anthropic, and Google Gemini as new LLM provider options for Echo alongside existing Ollama support
    • Adds a dedicated date field type for Business Intelligence custom properties to store structured engagement dates

    3 details in Everything

27. Claude audited Dradis, then used Dradis to report the findings (2026-04-24) Apr 24, 2026 · release notes

    Dradis 5.0 adds Personal Access Token authentication, OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10 2025 kit with three new report templates, and Dradis Echo as a standard framework module.

    └──▷ HOW TO FIND IT
    Organize an audit using the new OWASP Top 10:2025OWASP Top 10:2025A ranked list of the ten most critical web application risk categories, maintained by the Open Worldwide Application Security Project, used by cyber tools to prioritize detection, testing, and remediation coverage. methodology and sample project structure.
    📍Select OWASP Top 10:2025 schema when creating a new Dradis project
    • Adds Personal Access Token strategy for authenticated API access with scope and expiration controls
    • Ships OWASP Top 10:2025 methodology schema, sample project, and three new report templates

    2 details in Everything

28. New in Dradis Pro v5.0 (2026-04-20) Apr 20, 2026 · release notes

    Dradis Pro v5.0 adds Docker deployment, scoped Personal Access Tokens, dark mode UI, and configurable Echo prompts.

    └──▷ USE IT
    Deploy Dradis Pro using the new Docker method for easy setup.
    shell copy

    curl -fsSL https://get.dradis.com | /bin/bash

    Create a scoped Personal Access Token with limited API permissions for an automated workflow.
    shell copy

    curl -X POST https://dradis.example.com/api/v1/personal_access_tokens -H 'Authorization: Bearer <master_token>' -d '{"name": "agent-token", "scopes": ["issues:create", "findings:read"], "expires_at": "2027-01-01"}'

    • Adds Docker deployment via curl -fsSL https://get.dradis.com | /bin/bash with pre-installed add-ons
    • Adds support for Dark Mode (light, dark, auto) in the sidebar toggle and QA scheduler
    • Adds scoped Personal Access Tokens (PATsPATsA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it.) with per-user, CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information.-per-type permissions and expiry dates via the REST/JSON API
    • Adds configurable, reusable prompts for Dradis Echo to connect a local LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. to Dradis
    • Adds Business Intelligence data access for Read-only Contributor users on assigned projects

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !ActivityTracking is removed for Issues in favor of EventPublisher
    • !Recurring tasks are migrated to SolidQueue background jobs
    • !Default attachments, templates and themes locations moved to storage/
29. Turn Your Pentests Into Insights: The New Business Intelligence Dashboard (2026-02-06) Feb 6, 2026 · release notes

    Dradis Pro v4.19 adds a Business Intelligence Dashboard with custom Team/Project properties and trend analysis via Tools > BI

30. ICYMI: What we shipped in 2025 🚀 (2025-12-17) Dec 17, 2025 · release notes

    Dradis adds Echo automation, Hera layout, Gateway webhooks, Issue CSV import, and audit logging export

    • Adds Echo context-aware automation for Dradis to deploy a local LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. for improving issue write-ups and summarizing scanner output
    • Adds Services section in Dradis Gateway portal to create questionnaires that can automatically generate new projects from responses
    • Adds Whitelabling capability allowing admins to set a custom logo and brand color visible throughout the Dradis UI
    • Adds Docker Hub deployment options for Dradis CE with a new command-line interface for remote server streamlining
    • Introduces Hera unified layout with main/secondary navigation bars and left/right sidebars replacing complex legacy navigation

    +6 more show less

    • Adds Webhook support in Gateway to trigger automated actions on events like contributor requests or project completions
    • Adds CSV import capability to the Issue Library for bulk-uploading custom issues without manual copy/pasting
    • Adds Dradis OTPOTPOne-time password: a short-lived numeric or alphanumeric code valid for a single authentication attempt, generated via TOTP or HOTP standards, giving cyber tools phishing-resistant second-factor verification without stored shared secrets. as a built-in multi-factor authenticationmulti-factor authenticationMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. integration allowing QR code generation with standard authenticator apps
    • Adds Project QA overall states accessible in BI analytics to track project readiness across the instance
    • Adds instance-wide Audit Logging feature with CSV export capability for security and compliance accountability
    • Improves API by adding an endpoint for exporting/downloading reports and exposing Node Properties on the Node endpoint

    11 details in Everything

31. New in Dradis Pro v4.19 (2025-11-27) Nov 27, 2025 · release notes

    Dradis Pro 4.19 adds Dradis Echo AI integration, Gateway webhooks, and IssueLibrary CSV import.

    • Adds dradis-echo optional LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. integration to summarize scanner output, rewrite notes, and enhance remediation advice
    • Adds webhooks for Dradis Gateway events (contributor requests, remediation progress, project completions) to trigger automated actions
    • Adds CSV upload capability to the IssueLibrary for bulk-importing custom issues
    • Adds bulk-delete action for entries in the IssueLibrary view
    • Adds QA status visibility when adding IssueLibrary entries to a project

    +1 more show less

    • Adds inline code and highlight code buttons to the Release Notes Editor toolbar

    6 details in Everything

32. New in Dradis Pro v4.18 (2025-09-30) Sep 30, 2025 · release notes

    Dradis Pro v4.18 adds YoY BI trends, custom mappings copy, and Azure DevOps Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. support

    └──▷ HOW TO FIND IT
    View year-over-year activity trends and common issues in the BI Dashboard
    📍In the Dradis Pro web console, navigate to Business Intelligence › Dashboard to view YoY insights.
    Copy existing template mappings when uploading an updated kit
    📍In the Mappings Manager, upload a new or updated kit/template and select Copy existing mappings to apply them.
    Configure Azure DevOps integration with Microsoft Entra ID
    📍In the Integration settings for Azure DevOps, switch the authentication method from OAuth to Microsoft Entra ID and save.
    • Adds Business Intelligence Dashboard views showing year-over-year activity trends and common issue lists
    • Adds Mappings Manager option to copy existing template mappings when uploading new or updated kits/templates

    2 details in Everything

33. 4.10.0 Sep 1, 2023 · release notes

    Dradis 4.10 adds issue.author liquid variable, initial API implementation for Boards/Lists/Cards

    • Adds issue.author to liquid issue drop for sidebar templates
    • Initial REST/JSON API implementation for Boards, Lists, Cards

    2 details in Everything

34. 4.9.0 Jun 1, 2023 · release notes

    Dradis 4.9.0 adds an Issue plugin_type field and enhances Acunetix, Burp, Nexpose, and Qualys imports.

    • Adds plugin_type as an available Issue field.
    • Extends Burp integration to parse strong and code tags from findings
    • Extends Acunetix integration to parse inline code in addition to code blocks
    • Adds Request/Response Evidence fields for Web Application Scans (WAS) in Qualys integration
    • Wraps ciphers in the ssl-weak-message-authentication-code-algorithms finding format

    +1 more show less

    • Shows state changes in the QA activity feed

    6 details in Everything

35. 4.7.0 Feb 1, 2023 · release notes

    Dradis 4.7.0 adds tag management, Burp large base64 support, OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. 2021 classifications, and an author field to the REST/JSON API.

    • tags add a new tag_management integration capability for managing project tags
    • Nessus importer now supports the issue.classification_owasp2021 field for OWASP 2021 classifications
    • Burp importer enhanced to support large base64 responses
    • REST/JSON API adds an author field for notes, issues, and evidence

    4 details in Everything

36. 4.5.0 Aug 1, 2022 · release notes

    Dradis 4.5.0 adds :rtp plugins to HTML export and renames CSV export integration

    • HTML Export now supports :rtp plugins for enhanced report generation

    1 detail in Everything

    └──▷ BREAKING ON UPGRADE

    • !CSV export integration has been renamed from the default name to dradis-csv_export
37. 4.4.0 Jun 1, 2022 · release notes

    Dradis v4.4.0 adds mobile-friendly login view, resource title header, and Nikto reference integration

    • Adds Nikto issue field references for imported vulnerabilities
    • Displays the resource title in the header when viewing a resource

    2 details in Everything

38. 4.3.0 Apr 1, 2022 · release notes

    Dradis 4.3.0 adds sample data pre-population in Setup Wizard and Openvas label parsing enhancements

    • Adds option to pre-populate sample data during the Setup Wizard
    • Adds subsequent file upload support for existing scanners without re-selection
    • Updates Openvas integration Node label parsing to include :hostname and :asset_id properties

    3 details in Everything

39. 4.2.0 Feb 1, 2022 · release notes

    Dradis 4.2.0 adds asynchronous evidence loading, multi-delete for issues, a Setup Wizard, and new Qualys WAS integration.

    └──▷ HOW TO FIND IT
    Import findings from a new Qualys Web Application Scanner scan into your Dradis project.
    📍Use the Import Wizard and select Qualys Web Application Scanner as the source.
    Bulk remove all evidence attached to a specific finding during review.
    📍Select multiple evidence rows in the issue view and click Delete All.
    • Adds the SetupWizard to guide initial configuration during setup
    • Enables multi-deletion of evidence records at the issue level via the UI
    • Loads evidence tab content asynchronously to improve table performance on large projects
    • Updates content in real-time while creating evidence records at the issue-level
    • Adds element.qualys_collection as an issue field for Qualys integration

    +1 more show less

    • Adds support for Qualys Web Application Scanner (WAS) imports

    6 details in Everything

40. 4.1.0 Nov 1, 2021 · release notes

    Dradis 4.1.0 adds evidence-to-issue creation, CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. toggle, and import fixes.

    • Evidence: Create a new issue (optionally) when creating new evidence
    • Dread Calculator: Settings: show/hide the calculator in the Issues view
    • CVSS Calculator: Settings: show/hide the calculator in the Issues view
    • Nessus: Add product_coverage & cvss3_impact_score as available Issue fields
    • Qualys Add <dd>, <dt> support

    +4 more show less

    • Integration enhancements: CVSS Calculator: Settings: show/hide the calculator in the Issues view
    • Dread Calculator: Settings: show/hide the calculator in the Issues view
    • Nessus: Add product_coverage & cvss3_impact_score as available Issue fields
    • Qualys Add <dd>, <dt> support

    9 details in Everything

41. 4.0.0 Jul 1, 2021 · release notes

    Adds pagination support to the REST/JSON API in Dradis v4.0.0.

42. 3.22.0 Apr 1, 2021 · release notes

    v3.22.0 introduces WCAG 2.0 AA accessibility improvements, asynchronous feed loading, and a Kit upload CLI command update.

    └──▷ TRY IT
    Import configuration kits via CLI
    copy

    $ dradis kit upload /path/to/kit.zip

    • Adds kit upload CLI command update for managing kits
    • Loads subscriptions feed asynchronously to improve performance

    2 details in Everything

43. 3.20.0 Jan 1, 2021 · release notes

    Adds Nipper integration to Dradis and improves sidebar navigation

    • Adds Nipper integration for importing findings.
    • Allows adding nodes directly in a collapsed state via the main sidebar.
    • Moves the navbar dropdown menu off the right edge of the browser window.

    3 details in Everything

44. 3.19.0 Sep 1, 2020 · release notes

    Direct attachment support for Cards, Evidence, Issues, Notes; editor drag-and-drop; browser notification badges

    └──▷ HOW TO FIND IT
    Upload an image directly into a note's editor without moving files through a staging queue.
    📍Steps: Open any Note in the Dradis UI. Drag and drop an image file (e.g., screenshot.png) directly into the text area. The image is embedded immediately.
    Attach a report artifact directly to a Finding without intermediate staging steps.
    📍Steps: Navigate to an Issue (Finding). Click the attachment icon or use the context menu to upload a file directly. No staging area interaction required.
    • Cards, Evidence, and Issues now have their own direct attachment support without requiring the staging area
    • Notes now support direct attachments independently of the staging area
    • Browser tab displays a notification badge when there are unread notifications
    • Editor allows drag & drop, copy & paste, and direct image uploading for attachments
    • Node properties column size increased by changing it to LONGTEXT

    5 details in Everything

45. 3.17 May 1, 2020 · release notes

    v3.17 adds author attribution to evidence/notes/comments, board rename/delete via UI, nested Nikto support, and tags to Issues API

    • Uploads layout adjusted to show the output console with more visibility
    • Boards can be renamed and deleted through their dots menu in the UI
    • Activity Feed now shows board name and link for cards
    • Form data for Card, Evidence, Issue, and Note is preserved even if not saved explicitly
    • Comments display the author's name instead of email in the update feed

    +5 more show less

    • Side-by-side editor preview auto-updates while editing notes or issues
    • Navigation sidebar in projects can be kept open across views
    • Adds tags field support to the Issues REST/JSON API endpoint
    • Nexpose integration: better cipher wrapping coverage
    • Nikto integration: supports new nested <niktoscan> XML format

    10 details in Everything

46. 3.16 Feb 1, 2020 · release notes

    Dradis v3.16 adds card revision history and a new Tylium UI layout.

    └──▷ HOW TO FIND IT
    Review past versions of a note or finding within the Dradis interface.
    📍Open any card in the new Tylium layout and select the revision history tab to view previous iterations.
    • Adds revision history for cards to track changes over time
    • Upgrades the application to the new Tylium layout

    2 details in Everything

47. 3.15 Nov 1, 2019 · release notes

    v3.15 introduces Methodologies v2 with Kanban boards and new SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. notification config.

    • Adds Methodologies v2 feature replacing checklists with Kanban-style boards for task management
    • Adds ability to export Methodology details into reports
    • Adds email notification settings to control frequency of alerts

    3 details in Everything

48. 3.13 Jun 1, 2019 · release notes

    Dradis v3.13 adds auto-save for textarea fields and prioritizes user-provided content.

    • Adds auto-save functionality for textareas using localStorage on textchange events.
    • Prioritizes user-provided content over default local fields in node creation.

    2 details in Everything

49. 3.11 Nov 1, 2018 · release notes

    Adds comments, subscriptions, notifications for notes/evidence and fixes display issues

    • notes now support comments, subscriptions and notifications
    • evidence items now support comments, subscriptions and notifications
    • Note and evidence comments are included in dradis-projects export/import

    3 details in Everything

50. 3.10 Aug 1, 2018 · release notes

    v3.10 adds comment notifications and subscriptions for project issues in Dradis CE.

    • Adds the ability to add comments to issues
    • Adds subscriptions for issues within a specific project scope

    2 details in Everything

51. 3.9 Jan 1, 2018 · release notes

    Dradis 3.9 adds node view enhancements, plugin metadata support, and a CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. metric calculator.

    └──▷ HOW TO FIND IT
    View attached evidence files directly within a specific finding's node details.
    📍Navigate to Findings › Nodes in the web UI and select a node to access the new Evidence tab.
    Capture granular CVSS details for a finding using the updated calculator fields.
    📍Open the CVSS Calculator field group on an Issue and input values into the newly exposed metric-specific fields.
    • Adds evidence tab to the node view
    • Adds metric-specific fields to the CVSS calculator
    • Updates the CE theme with a green palette

    3 details in Everything

52. 3.6 Mar 1, 2017 · release notes

    Dradis 3.6 adds HTTP API for attachments, simpler add-on interface, and upgrades to Rails 5.

    • Adds an HTTP API for managing attachments, enabling programmatic upload and retrieval of evidence files
    • Simplifies the framework-to-add-on interface, allowing users to combine multiple issues more easily
    • Improves search efficiency for faster issue discovery within Dradis instances

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Upgrades the underlying framework to Rails 5, which may require updates to existing add-ons or custom plugins dependent on Rails 4 APIs.
53. 2.9.0 Feb 1, 2012 · release notes

    Adds Retina, ZAP, and VulnDB upload plugins; improves Nessus/Nikto/Nmap import performance

    • Retina Network Security Scanner upload plugin
    • Zed Attack Proxy upload plugin
    • VulnDB import plugin for VulnDB HQ integration
    • Nessus, Nikto, and Nmap upload plugins are orders of magnitude faster

    4 details in Everything

54. 2.8.0 Oct 1, 2011 · release notes

    Dradis v2.8.0 introduces a three-column layout and updated Nmap/Nessus upload plugins.

    • Adds a cleaner three-column layout to the UI
    • Updates the Nmap upload plugin to a new version
    • Updates the Nessus upload plugin to a new version

    3 details in Everything

55. 2.7 Apr 1, 2011 · release notes

    Dradis 2.7 improves the Thor CLI API and adds Configuration and Upload Managers plus new import plugins.

    └──▷ TRY IT
    List all available Thor commands for the new CLI interface.
    copy

    $ thor -T

    • Improves the command-line API with Thor; use thor -T to view commands.
    • Introduces a New Configuration Manager for managing application settings
    • Introduces a New Upload Manager for handling file uploads
    • Adds Metasploit import plugin support
    • Adds NeXpose (.xml) upload plugin support

    +5 more show less

    • Adds OpenVAS (.xml) upload plugin support
    • Adds SureCheck (.sc) upload plugin support
    • Adds w3af (.xml) upload plugin support
    • Adds Web Exploitation Framework (wXf) upload plugin support
    • Improves Nessus plugin to support .nessus v2 format

    10 details in Everything

56. 2.5.0 Feb 1, 2010 · release notes

    Dradis v2.5.0 adds Burp and Nikto upload plugins, HTML export, RSS feed, and First Time User Wizard

    • Adds Burp Upload plugin to import Burp Scanner output
    • Adds Nikto Upload plugin to import Nikto scan results
    • Adds new HTML Export reporting plugin
    • Integrates built-in RSS feed for activity tracking

    4 details in Everything

57. 2.4 Sep 1, 2009 · release notes

    Dradis v2.4 adds OSVDB Import plugin, Nmap parser upgrade, and dradis:rake tasks.

    └──▷ TRY IT
    Clear the database and uploaded files to start a new project.
    copy

    $ rake dradis:reset

    Create a backup of the current project state.
    copy

    $ rake dradis:backup

    • OSVDB Import plugin added to query the independent vulnerability database
    • Nmap Upload plugin now uses Nmap::Parser library for parsing
    • New dradis:reset Rake task clears database and removes uploaded files
    • New dradis:backup Rake task creates a project backup

    4 details in Everything

58. 2.3 Aug 1, 2009 · release notes

    Dradis 2.3 adds server upload plugins for Nmap/Nessus import and a beta Meta-Server for multi-project management.

    • Adds upload plugin category to import file contents (nmap, nessus) into Dradis
    • Introduces beta Meta-Server component for multi-project management
    • Adds .zip export format for projects including DB and attachments

    3 details in Everything

59. 2.2 Jun 1, 2009 · release notes

    Dradis v2.2 adds node attachments, tree/notes refresh buttons, and improved REST error handling.

    • Adds the ability to attach files to nodes within Dradis CE v2.2
    • Adds refresh buttons to the tree view and notes list for manual UI updates
    • Enables autoExpandColumn functionality on Internet Explorer in the client component
    • Improves error handling for REST web service communication errors
    • Simplifies REST credentials configuration via ./conf/dradis.xml

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Server component now forces webrick as the server even if mongrel is installed, removing mongrel support due to lack of SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. in mongrel
60. 2.1 Apr 1, 2009 · release notes

    Dradis 2.1 adds import/export plugin architecture and nmap/WordXML support

    • Introduces an import/export plugin architecture allowing new data formats to be added via plugins

    1 detail in Everything

61. 2.0.1 Feb 1, 2009 · release notes

    Dradis v2.0.1 adds multi-word CLI parameters, add extension node support, and ruby 1.8.7 compatibility

    └──▷ USE IT
    Pass multi-word parameters to the console client using quotes.
    shell copy

    dradis --param "value with spaces"

    • Console client accepts multi-word parameters using quotes for smart command line parsing
    • add extension allows adding nodes and categories with description support

    2 details in Everything

62. 2.0 Jan 1, 2009 · release notes

    Dradis v2.0 shifts to REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. and adds SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination./user auth

    • Adds SSL transport for encrypted communication between client and server
    • Adds user authentication required for accessing the service
    • Replaces SOAP with a REST web service interface for client-server communication
    • Introduces a Nodes data model replacing the previous Hosts/Services/Protocols structure

    4 details in Everything