Edgescan — The Cyber Toolchain

Edgescan PHP2Shell (CVE-2026-109618 & CVE-2026-109619)

Fri, 23 Oct 2026 07:56:27 GMT

Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 6th Oct 2026

Tue, 06 Oct 2026 00:00:00 GMT

Edgescan adds sitemap filters for unmatched scope directives, manual sitemap upload for pentested assets, and inline scanner IP documentation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a filter on the sitemap view to show only URLs not yet matched to a scope directive, making it easier to identify unscoped requests during target selection.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enables manual upload of sitemap files (crawled and tested URL lists) for manually pentested assets, giving pen-tests full sitemap coverage and visibility in the customer portal. • Surfaces scanner source IP documentation directly on the asset page, so users can allowlist scan traffic without opening the create-asset form. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 3rd Sep 2026

Thu, 03 Sep 2026 00:00:00 GMT

Edgescan adds bulk asset scheduling improvements and global role cloning to organizations.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enables cloning a global role to a specific organization, scoping the same permissions to that organization.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Improves bulk asset workflow so that assessment scheduling confirmation only appears when actually setting or moving an assessment start date. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - Atomic (pre-release)

Tue, 01 Sep 2026 23:55:16 GMT

Edgescan Atomic adds live assessment timelines, path-traversal checks, multi-identity auth groundwork, and expanded injection/IDOR coverage across v0.1–v0.5. • Adds live assessment activity timeline in the platform: a running assessment now shows a readable, real-time timeline of tester activity while the assessment is in progress (v0.5.0). • Adds path-traversal detection: requests are manipulated to test whether files outside the intended directory can be read (v0.5.0). • Adds broader file-disclosure testing support (v0.5.0). • Introduces a separate, independent confirmation step for each potential finding before it is marked validated; findings that do not pass remain marked as 'suspected' (v0.4.0). • Adds foundational multi-identity authenticated testing: an assessment can now carry multiple sets of credentials as named identities (v0.4.0). • Strengthens session persistence through multi-step and session-rotating application flows, broadening coverage of authenticated areas (v0.4.0). • Expands injection detection (cross-site scripting, SQL injection, and similar) with more complete and durably recorded results (v0.4.0). • Extends access-control (IDOR) testing to more link and request types, and enables testing the same target as both a logged-in and anonymous user to expose access-control gaps (v0.4.0). • Expands business-logic detection in commerce flows, building on discount/coupon and quantity-manipulation checks (v0.4.0). • Adds phase indicator in the platform so assessments show which phase is currently running; access-control findings are categorised more accurately and results are saved even if an assessment ends early (v0.4.0). • Adds detection for quantity manipulation (e.g. negative values) to surface invalid order states in business-logic testing (v0.3.0). • Expands discovery phase to use `robots.txt` and sitemap entries to find additional testable areas (v0.3.0). • Adds business-logic testing agent team covering abuse of discount and coupon handling in commerce flows (v0.2.0). • Adds end-to-end automated assessments: the tester builds its own attack plan and produces findings without per-step human direction (v0.1.0). • Adds Credentials Vault integration so credentials can be passed to the harness for authenticated assessment of login-protected application areas (v0.1.0). • Adds injection modules covering cross-site scripting, SQL injection, and similar (v0.1.0). • Adds broken-access-control (IDOR) modules (v0.1.0). • Adds WAF-adaptive testing: assessment behaviour adapts based on how the application and any web application firewall respond (v0.1.0). • Adds retesting capability that re-checks previously reported issues and reports whether they appear fixed or still present (v0.1.0). • Adds de-duplication and mapping to standard weakness categories for consistent triage (v0.1.0). • Adds live assessment stream so findings and activity can be watched as an assessment runs (v0.1.0). • Adds support for custom request headers in assessments (v0.1.0). • Adds export support for completed assessments (v0.1.0). • Adds pause and resume capability so assessments can safely stop and restart around maintenance windows or deployments (v0.1.0). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 25th Aug 2026

Tue, 25 Aug 2026 00:00:00 GMT

Edgescan adds EASM service-discovery filtering, per-location-type default scan profiles, and TOTP support for authenticated DAST scans. • Adds a new EASM/ASM filter to scope the host and domain list to assets where no services were discovered, enabling investigation without a full CSV export. • Adds support for two separate organisation-default scan profiles based on asset location type — one for URL-only unauthenticated web app assets and one for URL+Network — so new assets automatically inherit the correct profile. • Adds TOTP support in authenticated DAST scans, enabling scanning of applications protected by MFA/time-based one-time passwords. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 10th Aug 2026

Mon, 10 Aug 2026 00:00:00 GMT

Edgescan adds bulk role permissions, POC assignment at asset creation, and new EASM filters for certificates, domains, ports, and APIs. • New EASM domain page filters let users narrow domains by open port, API presence, and API confidence for precise external attack surface triage. • New certificate filter in EASM allows filtering certificates by issue type. • Adds ability to assign asset owner, technical POC, and assessment notifier emails when creating a single asset, eliminating the need to configure them post-creation. • Bulk Actions on the organization index page now includes a 'create role' permission option, enabling bulk permission assignment within an organization's scope. • Domain names are now included in EASM export files for records and services. • Adds a tooltip to clarify the difference between the index page export option and the bulk actions export option. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 2nd July 2026

Wed, 15 Jul 2026 01:22:48 GMT

Edgescan adds custom policy compliance insights, split retest permissions, self-service domain management, and a Credential Vault across this release. • New Custom Policy Compliance insight: upload company policy documents and see how vulnerabilities align with those policies. • New `manage-retests` permission lets admins delegate retest execution without granting access to start new assessments. • Self-service creation, renaming, and removal of internal domain suffixes directly on the Organizations Scanning tab. • Hostname validation on asset location entry prompts for a fully qualified domain name when a bare machine name is entered. • Super-user email alert when a new user is created via SSO, enabling prompt permission review. • Reports now list assets assessed during the report period with zero findings, confirming coverage rather than omitting them. • Scheduled export and report file names now include the scheduled task title for easier identification. • Vulnerability risk rating is now visible inside the retest window to aid prioritisation. • URLs in remediation advice are now rendered as clickable hyperlinks. • Vulnerability severity/risk/threat filters now support 'in' / 'not in' operators for multi-value inclusion and exclusion. • Licence Dashboard now includes a tooltip and link to a KB article explaining utilisation and forecast figures. • Duplicate base-URL detection warns users when a new asset location shares scheme and host with an existing asset. • Swagger API documentation page now links directly to token-creation instructions. • Shared Credentials feature is renamed to Credential Vault across the application and API. • Scheduled reports now support intuitive day-specific scheduling (e.g. 1st of every month, every Monday). • New 'clear extracted tokens on re-authentication' toggle in token mappings prevents stale tokens from breaking fresh authenticated scan sessions. Breaking changes: • The Shared Credentials feature is renamed to Credential Vault across the application and API; any integrations, scripts, or documentation referencing the old name will need to be updated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Introduction to Shared Credentials, Browser Recordings and MFA in Edgescan

Mon, 13 Jul 2026 10:06:32 GMT

Edgescan adds Shared Credentials, Browser Recordings, and MFA-aware scanning workflows (Beta, GA Q2 2026). • Introduces a central Shared Credentials library at the organisation level, letting practitioners create one credential set and assign it to any number of assets instead of re-entering credentials per asset. • Adds Browser Recordings that capture real browser login flows — including multi-page, JavaScript-heavy, and MFA-prompted flows — and replay them during authenticated assessments. • Supports mapping Shared Credential fields (username, password, otp_code) to specific input steps in a browser recording, enabling credential reuse across multiple assets with the same recording. • Enables MFA-aware credentials with support for TOTP/authenticator apps, email-based OTP, SMS-based OTP, and API-push/out-of-band MFA patterns. • Supports QR code upload or scan during Shared Credential setup to automatically populate OTP URI and related TOTP fields. • Exposes MFA API endpoints that allow external systems to push OTP codes to Edgescan, enabling out-of-band MFA coordination with browser recordings. • Adds Chrome and Snyk recording format support for browser authentication capture. • Automatically migrates existing asset-level credentials into the Shared Credentials model; credentials that cannot be precisely typed are preserved as usable Legacy entries. • Surfaces credential-to-asset and asset-to-credential usage visibility on both the Shared Credentials page and individual asset pages. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 11th Mar 2026

Mon, 13 Jul 2026 10:06:32 GMT

Edgescan adds vulnerability detection history timeline, visible discard notes in reports, and expanded MFA/credential workflow capabilities. • Adds a 'Vulnerability detection history' timeline view that logs a new entry each time a vulnerability is re-detected during an assessment, providing richer retest audit trails. • Surfaces discard notes directly in the platform UI and in reports, and allows updating discard notes on already-discarded vulnerabilities. • Enables event notifications for changes to the superuser notes field. • Introduces a 'PT to be completed by' due-date field in the asset creation workflow for pentest targets (Alpha/Beta). • Adds post-authentication stabilization options configurable within authentication workflows (Alpha/Beta). • Supports MFA QR code scanning via webcam to auto-populate OTP details in the shared credentials form (Alpha/Beta). • Supports uploading a QR code image to auto-populate OTP MFA details in the shared credentials form (Alpha/Beta). • Enables bulk migration of legacy credentials to SharedCredentials, with ambiguous entries flagged as Legacy to preserve scan continuity (Alpha/Beta). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 14th Apr 2026

Mon, 13 Jul 2026 10:06:32 GMT

Edgescan adds checkbox-based bulk discard for vulnerability management alongside existing filter-based bulk actions. • Adds checkbox-based bulk discard option, letting users selectively discard individual findings alongside the existing filter-matched bulk-discard workflow. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 14th Jan 2026

Mon, 13 Jul 2026 10:06:32 GMT

Edgescan adds recorded login sequence uploads, single insight category views, and dark mode for insight graphs. • Enables users to record a login sequence and upload it to Edgescan for automated authentication during scanning. • Supports viewing a single insight category in isolation (e.g., CISO Report) within the Insights dashboard. • Adds dark mode support for insight graphs in the platform UI. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 14th May 2026

Mon, 13 Jul 2026 10:06:32 GMT

Edgescan adds saveable Asset Export filters, duplicate credential detection, in-asset credential creation, and bulk workflow credential vault support. • Saves export column selections alongside saved Asset Export filters, eliminating the need to reconfigure columns when switching between filters. • Adds controls to identify, filter, compare, and merge duplicate credentials directly within the credentials vault. • Enables credential creation and application from the asset scan configuration view, removing the need to navigate away from the asset page. • Updates the AI Insight Licence Forecast Report with org-level visibility into licence usage, expiries, and growth forecasts for capacity planning and renewal management. • Adds a legend to complex Mermaid line graphs in Insights for easier series identification. • Extends credentials vault support to bulk asset creation and update workflows, allowing credential vault IDs to be supplied directly in bulk operations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 15th June 2026

Mon, 13 Jul 2026 10:06:32 GMT

Edgescan adds asset assessment date filtering, AI Insights UI refresh, scoped token mappings, and a raft of workflow enhancements. • Adds 'Date of last assessment' column and filter, letting users view and filter assets by the date of a specific assessment type (e.g. last pen-test date, last retest date). • Refreshes the AI Insights page with a look and feel consistent with the rest of the Edgescan interface. • Enables scoped scheduled assessment exports to a single organization and its descendants. • Adds multi-severity filtering so users can filter vulnerabilities by multiple severity levels simultaneously. • Adds retest-in-progress status to the asset badge (e.g. 'scanning', 'validating'). • Requires a standardised reason (or free-text 'other') when disabling an asset, enabling clean aggregation of disabled-asset data. • Adds autocomplete suggestions to Blocker category and Blocker cause filter fields. • Supports naming an EASM investigation at creation time. • Automatically starts scanning internal network assets immediately after onboarding when a valid network location specifier is present, removing the need for a manual support ticket. • Adds an 'Organization (with children)' filter to the licensing page. • Supports correct display of configured pause-schedule hours for non-integer UTC offset timezones (e.g. IST +5:30, NPT +5:45). • Automatically scopes token mappings to their associated location specifiers by default, preventing sensitive tokens from being sent out-of-scope. • Supports custom scope directives for token mappings to enable complex session-management configurations in basic auth workflows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 16th Oct 2025

Mon, 13 Jul 2026 10:06:32 GMT

Edgescan adds tester notes for retests, vulnerability definitions in reports, tag visibility, and new vuln filters. • Auto-populates the current asset when navigating to the Report section from an asset details page. • Adds a definitions option in report generation to display each vulnerability's definition inline, immediately after the vulnerability. • Adds a Tags column to the asset table for at-a-glance tag visibility. • Adds new vulnerability filter options: filter by out-of-scope status and by asset status. • Adds a tester notes field allowing users to provide notes to the operations team when initiating a retest assessment, via assessment and vulnerability notes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 24th Nov 2025

Mon, 13 Jul 2026 10:06:32 GMT

Edgescan adds audit trail attribution, bulk asset report selection, and role-based access control. • Adds audit trail entries that identify which user triggered a retest or vulnerability assessment. • Enables bulk selection of multiple assets when generating reports. • Introduces role-based authorization support, allowing created and assigned roles to control access to resources within an Edgescan account. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 28th May 2026

Mon, 13 Jul 2026 10:06:32 GMT

Edgescan adds asset-creation notifications, AI Insights asset filtering, configurable asset exports, and improved CWE/assessment-export filtering. • Adds a new notification event triggered when an asset is created, enabling teams to react in real time to asset inventory changes. • Enables filtering of AI Insights data by asset IDs and tags, and supports generating personal Insights without affecting the organization-wide Insight. • Adds an option to omit risk-over-time graphs from the Asset List section of asset reports for cleaner exports. • Supports both numeric (e.g. 79) and full string (e.g. CWE-79) input when filtering vulnerabilities by CWE in the UI. • Applies active UI filters to Assessment Exports so the exported data matches exactly what is currently displayed. • Renames schedule sections in the UI to clearly distinguish Assessment Schedules from Scheduled Exports & Reports. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 29th Apr 2026

Mon, 13 Jul 2026 10:06:32 GMT

Edgescan adds webhook note payloads and new CISO AI Insight reporting period and time-unit controls. • Adds note content to webhook event payloads when the note-added trigger fires, enabling downstream systems to consume full note context. • Enables setting the CISO AI Insight report's time period to 'last completed quarter' and similar discrete reporting intervals. • Displays FTE time-saved calculations in hours (instead of minutes) on the CISO AI Insight report for clearer workforce-impact communication. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 29th Jan 2026

Mon, 13 Jul 2026 10:06:32 GMT

Edgescan reports now surface EXF, EPSS, and CISA KEV scoring metrics alongside each vulnerability. • Adds EXF, EPSS, and CISA KEV indicators to generated vulnerability reports for richer prioritization context. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 30th Mar 2026

Mon, 13 Jul 2026 10:06:32 GMT

Edgescan adds UX improvement to Roles permissions dropdowns, keeping selections open for faster multi-item configuration. • Improves Roles UI so permissions and resources dropdowns stay open after adding items, enabling faster multi-selection without repeated reopening. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 6th Nov 2025

Mon, 13 Jul 2026 10:06:32 GMT

Edgescan adds Out of Scope discard reason, discard reason in exports, and an automatic retest queue. • Adds 'Out of Scope' as a selectable discard reason when dismissing vulnerabilities. • Includes discard reason field in vulnerability exports for audit and reporting workflows. • New retest queue automatically schedules vulnerability retest requests that cannot fit into the current ongoing retest, eliminating manual retry loops. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 8th Dec 2025

Mon, 13 Jul 2026 10:06:32 GMT

Edgescan adds pentesting checklists in reports and retest/on-demand assessment start notifications. • Adds a penetration testing checklist to generated reports, summarising what was tested during an engagement. • Sends assessment start notifications when a user invokes a retest or on-demand assessment. • Includes a note in email notifications warning non-registered recipients that report links will not work for them. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 15th June 2026

Mon, 15 Jun 2026 00:00:00 GMT

Edgescan adds multi-severity filtering, asset disable reasons, named EASM investigations, and non-integer UTC pause schedules. • Adds filter by multiple severity levels for vulnerabilities • Adds the ability to name an EASM investigation during creation • Enables pausing scan schedules in non-integer UTC offset timezones (e.g. IST +5:30) • Requires a reason when disabling an asset, with standardized options or free text Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 28th May 2026

Thu, 28 May 2026 00:00:00 GMT

Edgescan adds asset creation notifications, role filtering, and enhanced AI Insight controls • Adds a new event notification trigger for when assets are created. • Improves role filtering to hide inactive roles by default in assignment flows. • Enhances vulnerability filtering to accept either CWE numbers or the full 'CWE-##' string format. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 14th May 2026

Thu, 14 May 2026 00:00:00 GMT

Edgescan adds saved Asset Export filters, inline credential vault management, and bulk workflow support. • Adds greater controls to identify, compare, and merge duplicate credentials in the credentials vault • Enables creation and application of credentials from the asset scan configuration view without navigating away from the asset page • Updates the AI Insight Licence Forecast Report to provide org-level visibility of licence usage, expiries, and growth forecasts • Adds a legend on complex mermaid graphs for line chart readability • Supports adding credential vault IDs in asset bulk create and update workflows Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 29th Apr 2026

Wed, 29 Apr 2026 00:00:00 GMT

Edgescan adds note content to webhook payloads and quarterly CISO reporting periods. • Includes note content in webhook event payloads when the `note-added` trigger fires • Allows setting the AI Insight CISO report period to 'last completed quarter' or similar periods via the UI Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 14th Apr 2026

Tue, 14 Apr 2026 00:00:00 GMT

Edgescan adds bulk discard via checkboxes in addition to existing filter-based bulk discard. • Adds the option to perform bulk discard operations by selecting items via checkboxes, complementing the existing filter-based bulk discard. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 30th Mar 2026

Mon, 30 Mar 2026 00:00:00 GMT

UX improvements to Roles dropdowns and Shared Credentials feature status labeling • Permissions and resources dropdowns in the Roles UI now remain open after adding items and remove selected items from the visible list. • Shared Credentials feature badge updated from 'Alpha' to 'Beta'. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 11th Mar 2026

Wed, 11 Mar 2026 00:00:00 GMT

Edgescan GA release adds vulnerability detection history timeline, visible discard notes, and superuser note event notifications. • Adds a “Vulnerability detection history” timeline view that logs a new entry each time a vulnerability is re-detected during retesting • Makes the Discard Vulnerability Notes action more visible in the platform UI and reports, and allows updating discard notes for already-discarded vulnerabilities • Enables event notifications when updates are made to superuser notes fields Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 12th Feb 2026

Thu, 12 Feb 2026 00:00:00 GMT

Edgescan adds MFA step recording for onboarding workflows. • Adds the ability to record Multi-Factor Authentication (MFA) steps during the user onboarding workflow. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 29th Jan 2026

Thu, 29 Jan 2026 00:00:00 GMT

Edgescan reports now include EXF, EPSS and CISA KEV indicators for each vulnerability. • Adds EXF, EPSS and CISA KEV indicators to individual vulnerability entries in Edgescan reports. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 14th Jan 2026

Wed, 14 Jan 2026 00:00:00 GMT

Edgescan adds recorded login sequence upload for automated auth and dark mode insight graphs • Allows users to record a login sequence and upload it to Edgescan for automated authentication. • Enables viewing insights graphs in dark mode. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 8th Dec 2025

Mon, 08 Dec 2025 00:00:00 GMT

Edgescan adds Pentesting Checklist to reports, Jira auto-sync for disabled projects, retest notifications, and screenshot quality improvements • Adds a 'Pentesting Checklist' section at the end of generated penetration test reports detailing what was tested • Enables Jira Cloud Boards to auto-sync even when the associated Project is disabled • Sends assessment start notifications for retest and on-demand assessments • Improves screenshot quality in reports to allow viewing of minute details Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 24th Nov 2025

Mon, 24 Nov 2025 00:00:00 GMT

Edgescan adds audit trail for retest triggers, bulk asset selection for reports, and role-based access control. • Adds audit trail entry showing who triggered a retest or vulnerability test • Adds ability to bulk select assets when generating report • Enables authorization refactor with created and assigned roles to control resource access Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 6th Nov 2025

Thu, 06 Nov 2025 00:00:00 GMT

Edgescan adds 'Out of Scope' discard reason, include it in exports, and introduces a Retest Queue for async scheduling. • Adds the `Out of Scope` option to vulnerability discard actions, allowing users to explicitly mark vulnerabilities as out of scope • Includes the discard reason (e.g., `Out of Scope`) in vulnerability export files • Creates a Retest Queue for the parallel retest system, automatically scheduling retests that do not fit into the currently ongoing window Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 16th Oct 2025

Thu, 16 Oct 2025 00:00:00 GMT

Edgescan adds report asset auto-population, vulnerability definitions in reports, tags column, new filters, and tester notes fields. • Report section now auto-populates the current asset when navigating from the asset details page • Added definitions option for report generation to display vulnerability definitions immediately after each finding • Added tags column to the asset table view • Added new filter options for vulnerabilities, including filtering by out-of-scope status and asset status • Added new field for tester notes when initiating a retest assessment Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 1st Oct 2025

Wed, 01 Oct 2025 00:00:00 GMT

Edgescan adds PDF export for AI Insights, notification bypass for admin credentials, and auto-archiving of inactive orgs. • Adds ability to download AI insights in PDF format • Adds notification bypass for credentials added by Edgescan admins • Automatically archives Assets/Organizations/Users and associated resources after 7+ days of inactivity • Marks out-of-scope vulnerabilities as 'discarded - out of scope' • Adds new filter to order vulnerabilities by last detected date Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 24th Sep 2025

Wed, 24 Sep 2025 00:00:00 GMT

Edgescan adds flexible date formats in UI, last edited metadata for credentials, staged asset notification controls, and improved scope config stability. • Adds support for flexible date formats across the entire UI to ensure unambiguous display • Displays the last edited date and editor name on the credentials modal within the asset details page • Allows configuration of credential-added event notifications to skip alerts when staging assets • Improves the initiate scanning/assessment start schedule flows for staged asset onboarding • Renames the permission label from 'Risk Accept Vulnerabilities' to 'Discard Vulnerability' • Enables scan result parsers to handle non-ASCII strings without export issues Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 9th Sep 2025

Tue, 09 Sep 2025 00:00:00 GMT

Adds last edited date and editor for credentials in asset details; fixes UI display issues. • Added 'Last Edited' and 'By Whom' fields to the credentials modal on the asset details page Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 19th Aug 2025

Tue, 19 Aug 2025 00:00:00 GMT

Edgescan adds EUVD support, superuser notes, asset-based user filtering, and batch retests to the UI. • Adds EUVD (EU Vulnerability Database) linkage to vulnerability entries so CVEs linked to EUVD entries are visible • Adds a `notes` field on vulnerabilities that is only visible to superusers • Adds filtering capability to show which users can view or edit specific assets based on cross-referenced permissions • Enables retesting all currently filtered vulnerabilities from the vulnerability index page in one action • Adds AND logic to existing filters for vulnerability locations, allowing multiple concurrent filter constraints Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 31st Jul 2025

Thu, 31 Jul 2025 00:00:00 GMT

Edgescan adds license upgrades from asset details, EASM mandatory task indicators, and enhanced vulnerability filtering/export. • Adds the ability to upgrade licenses directly from the asset details page • Adds visual indicators on EASM tasks to identify mandatory items • Adds the asset name column to the users table for visibility into user-asset access • Adds filtering and export support for the 'last detected date' field on vulnerabilities • Adds autocomplete support for oversight tags filters in the UI • Adds improved error messaging when superusers attempt to delete other superusers • Adds multi-select filtering for vulnerability severity levels • Adds a permission replication feature for copying permissions between users Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 24th Jun 2025

Tue, 24 Jun 2025 00:00:00 GMT

Edgescan adds license suggestion notes, asset metadata filtering, and Jira ticket sync exclusion. • Adds the ability to attach notes or select alternative licenses when accepting a licence suggestion in the UI • Enables filtering assets by custom metadata fields from the asset list view • Requires a reason to be provided when disabling an asset via the UI • Adds a "Last Detected on" column to the Vulnerabilities index table • Displays current license utilization summary on the individual Asset show page • Splits the license utilization chart by license type and allows filtering metrics by type on the Licensing Dashboard • Enables inclusion of comprehensive vulnerability details (descriptions, remediation steps, screenshots, analyst comments) in Jira integration tickets • Allows exclusion of existing pre-integration Jira tickets from Edgescan's sync to preserve history Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 10th June 2025

Tue, 10 Jun 2025 00:00:00 GMT

Edgescan adds Org ID to license exports, EASM investigation creation from ASM data, and configurable default jumpboxes. • Adds `Org Id` and `Org name` columns to Licence Utilization exports • Enables creation of EASM Investigations directly from existing ASM scan results • Sets Jumpbox and domain suffix as automatic defaults when only one exists in the organization Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 26th May 2025

Mon, 26 May 2025 00:00:00 GMT

Edgescan adds Jira Data Center integration, licensing filters, sitemap export, ASM asset creation, and vulnerability event re-sending. • Integrates Edgescan vulnerabilities into Jira Data Center for developer workflows. • Adds filtering of assets by Penetration_tests, licence status, auto renewal, and licence UUID. • Enables exporting sitemap data directly from the scope configuration page. • Allows creation of assets directly from ASM results. • Exposes a subset of vulnerability definitions in the user GUI. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 12th May 2025

Mon, 12 May 2025 00:00:00 GMT

Edgescan adds SLA metrics to customer dashboards and asset tier classification fields • Adds SLA-related metrics to customer dashboards for performance tracking and compliance monitoring • Adds an asset tier field to asset records to classify assets by tier • Adds improved indicators to distinguish manually scanned assets from fully automated ones • Adds the ability to display the user who accepted a risk on a vulnerability report • Adds custom Jira Issue name formatting option ` @ ` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 24th April 2025

Thu, 24 Apr 2025 00:00:00 GMT

Edgescan beta adds audit trail viewer, custom pause schedules, asset metadata fields, and column selection for exports. • New Audit trail viewer in limited Beta to track assignment/unassignment of licences and changes made to resources • Users can create and manage pre-defined pause schedules and assign these to assets • Asset management allows defining and editing additional metadata fields for categorization and filtering • Export functionality enables selecting specific columns to include in the output Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 9th April 2025

Wed, 09 Apr 2025 00:00:00 GMT

Edgescan adds asset filtering by status/licensing, org-hierarchy insights, last_vulnerability_assessment_date on Asset API, and custom field management via API • Adds `last_vulnerability_assessment_date` to the Asset API response for tracking assessment timing. • Enables filtering assets by licensing plan type to identify specific license requirements quickly. • Allows managing custom fields via the API for flexible asset metadata handling. • Implements an accordion structure for viewing insights and automatic inclusion of all org hierarchy data in Insights views. • Adds ability to filter Insights by organizations for granular reporting. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 16th March 2025

Sun, 16 Mar 2025 00:00:00 GMT

Edgescan now groups on-demand and scheduled assessments in the Asset show panel. • 'on-demand' and 'scheduled' assessments are now shown under 'vulnerability assessment' in the latest assessment panel on the Asset show page. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 26th February 2025

Wed, 26 Feb 2025 00:00:00 GMT

Edgescan adds configurable report filters for assessment type and CVSS scoring, plus improved plugin component support. • Adds the ability to specify `assessment_type` when filtering reports in the UI/API • Allows `cvss` scores to replace `exf` scoring in generated reports • Increases visibility into assessment progress status for paused assessments • Enhances Edgescan & Jira plugin to allow specifying component information Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 4th February 2025

Tue, 04 Feb 2025 00:00:00 GMT

Edgescan adds structural-only URL display in Sitemap asset scope configuration • Displays flagged structural-only URLs more clearly in the Sitemap on the asset scope configuration page. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan

Edgescan Release Notes - 20th January 2025

Mon, 20 Jan 2025 00:00:00 GMT

New licence/organization filters in assessments export and improved notification delay defaults. • Adds a default 1-hour event notification delay for new asset blocker events via the UI Full history on Cyber Toolchain: https://cybertoolchain.io/tools/edgescan