https://cybertoolchain.io/tools/panorays New releases and features in Panorays, tracked by The Cyber Toolchain. en Sun, 02 Aug 2026 10:09:38 GMT https://panorays.com/release-notes https://panorays.com/release-notes Sun, 02 Aug 2026 10:09:38 GMT Panorays Q2'26 adds MCP-based AI/LLM integration, new Live Dashboard widgets, and expanded public API for questionnaire automation. • New Panorays Axis integration enables AI/LLM tools to securely connect with Panorays tenants via a remote MCP server, providing access to third-party risk data with guided workflows for questionnaire analysis, assessment reports, and supplier onboarding. • Live Dashboards gains interactive widgets, pre-configured dashboards, and expanded filtering options for building flexible, use-case-tailored reports. • Public API expanded with new entities, endpoints, questionnaire lifecycle management, evidence validation retrieval, and additional questionnaire data fields. • Updated API documentation introduces a new structure under the Panorays domain with dedicated sections for Panorays Axis (MCP), TPCRM lifecycle use cases, and additional endpoint references. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://resources.panorays.com/hubfs/assets/Third-Party_Inventory.pdf https://resources.panorays.com/hubfs/assets/Third-Party_Inventory.pdf Thu, 23 Jul 2026 15:50:00 GMT Panorays Q1'23 adds third-party inventory, endpoint detection, questionnaire collaboration, risk policy controls, remediation management, and automated reevaluation. • Adds Third-Party Inventory: a single consolidated view to classify, manage, and upload security documentation for all third parties regardless of tier or evaluation type. • Introduces Endpoint Detection as a new external attack surface assessment category, giving visibility into third-party endpoint security posture and its impact on cyber risk ratings. • Adds Questionnaire Conversations, enabling real-time in-platform collaboration with third parties and internal team members on individual questionnaire questions before submission. • Introduces Correlated Insights, displaying questionnaire results and external attack surface assessment findings side-by-side for cross-validation in a single pane of glass. • Adds customizable Risk Policy controls allowing admins to adjust weighting between questionnaires and external assessments, factor in critical tests and expired questionnaires, and modify the risk rating matrix. • Introduces Override Risk Rating, letting admins manually adjust a third party's bottom-line risk rating to account for external factors, with changes visible to all users in real time. • Adds centralized Remediation Management with a new Cyber Impact Score to prioritize tasks, assign them to third-party contacts, and track resolution through a dedicated remediation tab. • Introduces Automated Reevaluation to schedule recurring third-party assessments based on inherent risk, frequency, and priority, with email reminders and relevant question templates. • Adds Approval Snapshot to automatically capture and store risk rating scores at status-change events, enabling historical comparison across reevaluation cycles. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://support.panorays.com/?category=Reviewing-a-Questionnaire&sub-category=Smart-Questionnaires&article_num=000001691 https://support.panorays.com/?category=Reviewing-a-Questionnaire&sub-category=Smart-Questionnaires&article_num=000001691 Thu, 23 Jul 2026 15:50:00 GMT Panorays Q1'24 adds AI-powered answer validation, asset-based segmentation, richer supply chain discovery, and automatic remediation reminders. • New Smart Validation AI automatically parses third-party documents (questionnaire attachments or Files & Documentation uploads), correlates them with specific questions, and generates confidence scores plus supporting/contradicting evidence. • New Segments feature lets you group third parties into subsets by domain or geolocation assets, generating a focused attack surface assessment for those specific assets. • Supply Chain Discovery now surfaces detailed evidence and navigation controls for direct and unregistered Nth parties, with the ability to select which to add for assessment and continuous monitoring. • Remediation Management adds automatic email reminders to third parties 3 days before open remediation task due dates, removing the need for manual follow-up. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://support.panorays.com/?article_num=000001670 https://support.panorays.com/?article_num=000001670 Thu, 23 Jul 2026 15:50:00 GMT Panorays Q1'25 adds supply-chain risk insights, customizable executive reports, a new dashboard widget, and custom integrations. • New Risk Insights and Response Portal gives a single-page view of cyber event impact across direct and indirect third parties for faster, data-driven response. • Adds customizable executive reports with mix-and-match widgets and export capability, tailored for board and management audiences. • New Live Dashboards 'Criterion Summary' widget surfaces unresolved criteria with criticality, sources, and affected third parties in one consolidated view. • Introduces custom integrations to connect Panorays features with existing security systems for streamlined data exchange. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://support.panorays.com/?category&sub-category=Supplier-Management&article_num=000001669 https://support.panorays.com/?category&sub-category=Supplier-Management&article_num=000001669 Thu, 23 Jul 2026 15:50:00 GMT Panorays Q2'23 adds Supply Chain Discovery, Risk Insights portal, KEV prioritization, and enriched Asset Details. • New Supply Chain Discovery maps direct and indirect suppliers automatically, surfaces Shadow IT, assigns cyber posture and Commonality ratings, and lets users add discovered suppliers to their inventory in one click. • New Risk Insights and Response Portal delivers real-time alerts on vulnerabilities, breaches, news, and zero-day events across the digital supply chain, identifies affected direct and indirect suppliers, and enables immediate breach-questionnaire dispatch. • CISA Known Exploited Vulnerabilities (KEVs) are now ingested and automatically prioritized as Critical findings within technology-vulnerability detection. • New Asset Details sidebar exposes enriched DNS, Network, Registration, and Web data for first- and third-party discovered assets, including discovery path and criticality context. • New Bulk Task Creation lets users multi-select findings and questions simultaneously and consolidates all resulting remediation tasks into a single outbound email to the third party. • Expanded API documentation adds new endpoints for automating a broader set of rules and actions; admins can now create, modify, and revoke API Tokens with access-permission controls directly inside the platform. • New customizable email templates allow full editing of copy, subject line, and CTA for Security Questionnaire, Remediation Task, and Security Passport communications. • Centralized Inventory Management view surfaces all unassessed third parties in one place and lets admins selectively trigger evaluations and choose assessment type per supplier. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://support.panorays.com/?category&sub-category=Smart-Questionnaires&article_num=000001674 https://support.panorays.com/?category&sub-category=Smart-Questionnaires&article_num=000001674 Thu, 23 Jul 2026 15:50:00 GMT Panorays Q2'23 adds Smart Match, an AI feature that suggests pre-answered responses to streamline questionnaire completion. • Adds Smart Match, an AI-powered capability that surfaces previously answered questions ranked by similarity score while completing a questionnaire, accelerating response time and ensuring answer consistency. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://support.panorays.com/?article_num=000001692 https://support.panorays.com/?article_num=000001692 Thu, 23 Jul 2026 15:50:00 GMT Panorays Q2'24 adds internal questionnaires, AI answer lookup, SEC 8-K cyber news, CSP findings, live dashboards, and custom risk factors. • New Internal Questionnaires feature lets admins circulate questionnaires within their own organization to gather third-party information from relationship owners at any assessment stage (due diligence, SLA reviews, etc.). • New Risk Policy Custom Factors lets admins add or reduce points from a supplier's bottom-line risk rating based on external factors (offline questionnaires, SOC2 completion, trusted vendor status), with per-supplier configuration and mandatory evidence requests. • New Live Dashboards enable customizable reporting dashboards built from selectable data-visualization widgets, tailored for management and board reporting. • New centralized Findings Management page provides enriched finding details and in-place actions such as confirming resolutions or disputing findings. • New AI-powered Answer Lookup search bar helps third parties surface past questionnaire responses, showing similar questions, their answers, source questionnaires, and a similarity match score. • Adds SEC 8-K filings as a new cyber news source, with alerts on cyber events filed by breached companies. • New Content Security Policy (CSP) Cyber Posture finding checks CSP configuration against security best practices, classified at High and Low severity levels. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://support.panorays.com/?category=Smart_Questionnaires&subCategory=Submitting-a-Questionnaire&article_num=000001764 https://support.panorays.com/?category=Smart_Questionnaires&subCategory=Submitting-a-Questionnaire&article_num=000001764 Thu, 23 Jul 2026 15:50:00 GMT Panorays Q2'25 adds Gemini-powered answer suggestions, simplified supplier onboarding, richer AI business snapshots, and Cyber News webhooks. • New AI Answer Advisor powered by Google Gemini generates intelligent questionnaire answer suggestions drawn from publicly available data, complementing SmartMatch's existing scan of prior responses. • Redesigned 'Add Supplier' flow enables onboarding suppliers without prior background knowledge, with automatic cyber posture assessment initiated upon addition. • Enhanced Business Snapshot aggregates a broader spectrum of public data sources using advanced AI to enrich supplier profiles with company identifiers, financial attributes, and improved compliance accuracy. • Public API now supports Cyber News webhooks, delivering real-time threat intelligence for custom integrations with existing security systems. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://support.panorays.com/?category&sub-category=Supplier-Management&article_num=000001680 https://support.panorays.com/?category&sub-category=Supplier-Management&article_num=000001680 Thu, 23 Jul 2026 15:50:00 GMT Panorays Q3'23 adds Workflow Automation, Smart Match questionnaire uploads, and Internal References for reviewers. • New Workflow Automation feature lets you define preset rules to automatically approve or reject third parties, generate remediation tasks, and assign responsibilities to multiple stakeholders — triggered by Questionnaire Ratings, Cyber Posture Ratings, Risk Ratings, business impact, and third-party risk status. • Smart Match now accepts uploaded questionnaires from outside Panorays, improving auto-answer accuracy for new questionnaires based on previously completed responses. • New Internal References capability lets reviewers leave internal notes on questionnaires to surface company policy and compliance context, accelerating the review process. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://support.panorays.com/?category&sub-category=Smart%20Questionnaires&article_num=000001700 https://support.panorays.com/?category&sub-category=Smart%20Questionnaires&article_num=000001700 Thu, 23 Jul 2026 15:50:00 GMT Panorays Q3'24 adds DORA reporting, third-party portfolios, activity logging, dark web CTI alerts, and task management. • New DORA File Generator add-on module generates a complete DORA Register of Information report as a ready-to-send file for Supervisory Authorities, with built-in questionnaire templates pre-coded for DORA's Excel format. • New Portfolios feature lets you organize third parties into distinct groups segmented by criticality, sensitivity, geolocation, company department, and more for risk-based prioritization. • New Activity Center provides a consolidated log of all supplier activities on Panorays, with filtering and export for reporting and audit trails. • Enhanced Dark Web monitoring surfaces mentions relevant to your company and third parties with added metadata fields (Source Type, Site, and more) and CTI-backed alerting. • New Task Management: General Tasks enables opening customized tasks for internal teams or third parties from a single centralized location. • Business Snapshot now incorporates publicly available certifications into the Bottom Line risk rating, manually reviewed by Panorays experts. • Internal Questionnaires status is now surfaced via a Live Dashboards widget and included in executive summary PDF reports. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://support.panorays.com/?category=Advanced-Settings&sub-category=Settings&article_num=000001668 https://support.panorays.com/?category=Advanced-Settings&sub-category=Settings&article_num=000001668 Thu, 23 Jul 2026 15:50:00 GMT Panorays Q3'25 adds supplier inventory management, per-supplier Live Dashboard reports, enhanced tag management, and questionnaire re-submission. • New Inventory view provides a centralized location to manage your supplier list, view automatic risk indicators, and move suppliers into tiered assessments based on risk level or priority. • Live Dashboards now support single-supplier reports, letting you build and save multiple tailored report versions per supplier using interactive widgets. • New Tags Management page lets you group and label vendors by characteristics such as location, department, or risk level, and manage all tagged vendors from a single centralized view. • Segments now support configurable Questionnaire Rating calculation — choose to mirror the parent company's questionnaires or create dedicated questionnaires per segment. • Internal Questionnaire responders can now update answers on already-submitted questionnaires without requiring a new submission; senders are automatically notified of any changes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://support.panorays.com/?category&sub-category=Supplier-Management&article_num=000001685 https://support.panorays.com/?category&sub-category=Supplier-Management&article_num=000001685 Thu, 23 Jul 2026 15:50:00 GMT Panorays Q4'23 adds supplier intake forms, archival status, AI-powered cyber news, internal notes, and an expanded API v2.0. • New Intake Form lets internal stakeholders add suppliers via a one-time verification process without requiring a Panorays sign-in. • New 'Archived' status pauses cyber assessments for inactive or terminated third parties while preserving their files and documents. • Cyber News enriched with additional data sources and an AI-based categorization and classification system for business-specific risk exposure. • Risk Insight and Response Portal gains an Internal Note feature for team communication, memos, and decision-rationale documentation within the portal. • API v2.0 expands access to questionnaire templates, remediation data retrieval, and Portfolio assignment to third parties, with faster response times. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://support.panorays.com/?category=Smart_Questionnaires&subCategory=Customizing-the-Questionnaire&article_num=000001704 https://support.panorays.com/?category=Smart_Questionnaires&subCategory=Customizing-the-Questionnaire&article_num=000001704 Thu, 23 Jul 2026 15:50:00 GMT Panorays Q4'24 adds SIG 2025 support, task consolidation, drill-down dashboards, and security event audit trails. • Adds SIG 2025 evaluation with mapping to DORA and NIS2, per-supplier scoping by material risk, and seamless third-party SIG uploads across all SIG versions. • Adds Inherent Risk Questions to questionnaires, enabling business impact assessments with internal and external stakeholder collaboration. • Adds Task Management Consolidation — a single centralized view to find, track, and manage all tasks assigned to suppliers and internal teams. • Adds drill-down capability to Live Dashboard widgets, surfacing detailed supplier breakdowns for report types and tracking critical findings and remediation task status. • Adds a security events category to the Activity Center audit trail, tracking user login activities per supplier and across all suppliers. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://panorays.com/release-notes#april-2026 https://panorays.com/release-notes#april-2026 Thu, 30 Apr 2026 00:00:00 GMT New AI Vendor Detection with dashboard widgets, new IRQ questionnaire template for risk assessment, and expanded Activity Center audit logs • Adds `AI Vendors` identification with dedicated dashboard widgets and a predefined AI questionnaire to track suppliers using AI technologies • Introduces the `IRQ questionnaire template` for calculating Business Impact and allows customizing risk assessments by selecting which templates and questions to include or exclude • Expands Activity Center audit logs to capture time-stamped events for asset management, dispute workflows, remediation tasks, user lifecycle events, and company user invitations Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://support.panoraysapp.com/en/articles/517613-smart-match https://support.panoraysapp.com/en/articles/517613-smart-match Fri, 30 Jan 2026 00:00:00 GMT Panorays Q4’25 adds Smart Match autofill from compliance docs, DORA RoI submission workflow, segment-level custom factors, and API entity expansion. • `Smart Match` now analyzes uploaded compliance documentation (certifications, attestations, formats like SOC 2) using Gemini-powered intelligence to generate referenced answer suggestions • New DORA “Register of Information” solution with automated tools for submission-ready ZIP file generation that complies with regulatory and technical formatting requirements • `Activity Center` captures new events including additional remediation details, reminders, and API tokens with timestamps • Segments now support assigning a dedicated business owner, applying unique `Custom Factors` at the segment level, generating Approval Snapshots, and adding internal notes/comments/tagging colleagues • `Smart Validation` adds an explanation field to provide context behind AI-suggested questionnaire reviews • Public API expanded to support additional platform entities and workflows for custom integrations Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://support.panorays.com/?category=Advanced-Settings&sub-category=Settings&article_num=000001668 https://support.panorays.com/?category=Advanced-Settings&sub-category=Settings&article_num=000001668 Tue, 30 Sep 2025 00:00:00 GMT Panorays Q3’25 adds Live Dashboards per supplier, granular Tags management, questionnaire segments, and answer updates. • `Live Dashboards` with interactive widgets allow building and saving multiple versions of single-supplier reports to highlight specific data for stakeholders • `Tags Management` enables grouping and labeling vendors by location, department, or risk level from a single page for targeted assessment plans • `Segments` feature allows defining how each segment’s Questionnaire Rating is calculated, including mirroring parent company questionnaires or creating dedicated ones • `Internal Questionnaires` enhancements allow responders to update answers to already-submitted questionnaires without requesting a new one, with automatic notification to the sender Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://support.panorays.com/?category=Smart_Questionnaires&subCategory=Submitting-a-Questionnaire&article_num=000001764 https://support.panorays.com/?category=Smart_Questionnaires&subCategory=Submitting-a-Questionnaire&article_num=000001764 Tue, 22 Jul 2025 00:00:00 GMT Panorays Q2'25 adds Gemini AI answer suggestions, simplified supplier onboarding flow, enriched Business Snapshots, and Cyber News webhooks via public API. • `Gemini Answer Advisor` generates questionnaire answer suggestions from public data and SmartMatch results • New `Add Supplier` flow initiates a cyber posture assessment automatically upon creation without prior background knowledge • `Business Snapshot` aggregates broader public data sources for deeper supplier profile visibility • Public API now supports new `Cyber News webhooks` for real-time threat intelligence Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://support.panorays.com/?article_num=000001670 https://support.panorays.com/?article_num=000001670 Wed, 21 May 2025 00:00:00 GMT Q1'25 release adds Executive Report Customization with widget mixing/export and a new Criterion Summary Widget for Live Dashboards. • Adds customizable executive reports allowing users to mix and match widgets and export them via a newly enhanced interface • Adds the `Criterion Summary` widget to Live Dashboards, providing consolidated views of unresolved criteria including criticality, sources, and affected third parties Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://support.panorays.com/?category=Smart_Questionnaires&subCategory=Customizing-the-Questionnaire&article_num=000001704 https://support.panorays.com/?category=Smart_Questionnaires&subCategory=Customizing-the-Questionnaire&article_num=000001704 Wed, 08 Jan 2025 00:00:00 GMT Panorays Q4'24 adds SIG 2025 mapping, inherent risk question selection, centralized task management, and live dashboard supplier breakdowns. • Configure panoramic surveys with the new SIG 2025 model mapped to DORA and NIS2 regulations for third-party evaluations • Select specific questions within Panorays’ questionnaires to define which items are included in the business impact assessment (Inherent Risk Questions) • Track and manage all tasks assigned to suppliers and internal teams from one centralized Task Management location • Drill down into Live Dashboard widgets to see detailed supplier breakdowns for report types and monitor critical findings • View user login activities in a new security events category within the Activity Center audit trail page Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://support.panorays.com/?category&sub-category=Smart%20Questionnaires&article_num=000001700 https://support.panorays.com/?category&sub-category=Smart%20Questionnaires&article_num=000001700 Wed, 09 Oct 2024 00:00:00 GMT Panorays Q3’24 adds DORA generator, Portfolios, Activity Center, Dark Web updates, and task management • DORA File Generator module enables generation of a complete DORA Register of Information report for Supervisory Authorities using built-in questionnaire templates to automate Excel coding values. • Portfolios feature allows organization of third parties into distinct groups based on criteria such as criticality, sensitivity, geolocations, and company departments. • Activity Center provides a consolidated view of logs to track supplier activities with filtering and export capabilities for reporting. • Dark Web Enhancements add Source Type and Site details for third-party mentions, leveraging Cyber Threat Intelligence (CTI) to categorize information and send alerts. • Task Management: General Tasks allows opening customized tasks for internal teams or third parties from a centralized place to streamline follow-ups. • Business Snapshot: Certifications Improvements incorporate public certifications into the Bottom Line risk rating of third-party cyber assessments, subject to manual expert review. • Internal Questionnaires Report adds visibility of questionnaire status via a widget in Live Dashboards or an executive summary PDF report. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://support.panorays.com/?article_num=000001692 https://support.panorays.com/?article_num=000001692 Wed, 03 Jul 2024 00:00:00 GMT Panorays Q2’24 adds Risk Policy custom factors, SEC 8-K cyber news, CSP findings, Live Dashboards, and centralized Findings Management. • Enables admins to set default configurations adding or reducing points from the bottom-line risk rating based on external factors via Risk Policy: Custom Factors • Adds SEC 8-K filings as a new source for cyber news alerts to view latest cyber events filed by breached companies • Introduces New Cyber Posture Findings for Content Security Policy (CSP) checking configuration against security best practices with High and Low severity levels • Launches Live Dashboards allowing users to build customized reporting dashboards using various data visualization widgets • Releases centralized Findings Management page with intuitive UI and data enrichment for confirming resolutions or disputing findings • Deploys AI-powered Answer Lookup search bar enabling third parties to find past responses to previous questionnaire questions Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://support.panorays.com/?category=Reviewing-a-Questionnaire&sub-category=Smart-Questionnaires&article_num=000001691 https://support.panorays.com/?category=Reviewing-a-Questionnaire&sub-category=Smart-Questionnaires&article_num=000001691 Tue, 09 Apr 2024 00:00:00 GMT Panorays Q1'24 adds Smart Validation AI scores, third-party Segments, Nth-party Supply Chain Discovery, and automatic remediation reminders. • Adds AI-generated confidence scores and evidence to Smart Validation for questionnaire responses submitted by third parties • Introduces 'Segments' to group third parties by specific assets, domain, or geolocation for focused attack surface assessments • Enhances Supply Chain Discovery visibility into direct, unregistered Nth parties with options to add them for assessment and monitoring • Enables automatic email reminders for third parties 3 days prior to a remediation task due date Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://support.panorays.com/?category&sub-category=Supplier-Management&article_num=000001685 https://support.panorays.com/?category&sub-category=Supplier-Management&article_num=000001685 Wed, 17 Jan 2024 00:00:00 GMT Panorays Q4'23 adds supplier archival status, internal Risk Insight notes, enriched Cyber News categorization, and API v2.0 enhancements. • Adds 'Archived' status for third parties to stop assessments and preserve documents • Enables internal notes on Risk Insight events for team communication and rationale documentation • Enhances Cyber News with AI-based categorization and richer data sources • Updates API v2.0 with performance improvements and expanded capabilities for questionnaire templates, remediation data, and portfolio assignment Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://support.panorays.com/?category&sub-category=Supplier-Management&article_num=000001680 https://support.panorays.com/?category&sub-category=Supplier-Management&article_num=000001680 Mon, 30 Oct 2023 00:00:00 GMT Panorays Q3'23 adds Workflow Automation for vendor approval, Smart Match questionnaire uploads, and internal reviewer notes. • Adds `Workflow Automation` feature to define preset rules based on Questionnaire Ratings, Cyber Posture Ratings, Risk Ratings, business impact, or third-party risk status to automatically approve/reject third parties and assign stakeholders. • Enables uploading previously answered questionnaires from outside Panorays via the `Smart Match: Upload Questionnaires` feature. • Introduces the ability to leave internal references (notes) for questionnaire reviewers within the platform. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://panorays.com/release-notes https://panorays.com/release-notes Tue, 08 Aug 2023 00:00:00 GMT Panorays Q2’23 AI Release adds 'Smart Match' AI feature to streamline questionnaire submission. • Adds 'Smart Match' AI capability that suggests pre-answered questions ranked by similarity score to accelerate questionnaire response time. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://support.panorays.com/?category&sub-category=Supplier-Management&article_num=000001669 https://support.panorays.com/?category&sub-category=Supplier-Management&article_num=000001669 Mon, 24 Jul 2023 00:00:00 GMT Panorays Q2'23 adds Supply Chain Discovery, Risk Insights Portal, KEV prioritization, Asset Details sidebar, bulk remediation tasks, API token management, and custom email te • `Supply Chain Discovery` maps direct and indirect suppliers with Shadow IT detection and cyber posture ratings to expand attack surface monitoring. • `Risk Insights and Response Portal` provides automated alerts on vulnerabilities, breaches, and zero-day attacks across the supply chain with one-click breach questionnaire sending. • Known Exploited Vulnerabilities (KEVs) are now prioritized as `Critical` findings in detection for actionable risk assessment. • `Asset Details` sidebar offers enriched DNS, Network, Registration, and Web data to understand asset discovery and criticality. • `Bulk Task Creation` allows selecting multiple findings/questions at once to send condensed remediation emails with task IDs. • `Custom Email Templates` for Security Questionnaires, Remediation Tasks, and Security Passport allow editing copy, subject, and CTA. • Inventory Management provides a centralized view of unassessed third parties with selectable evaluation types. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays https://resources.panorays.com/hubfs/assets/Third-Party_Inventory.pdf https://resources.panorays.com/hubfs/assets/Third-Party_Inventory.pdf Wed, 19 Apr 2023 00:00:00 GMT Panorays Q1’23 adds Third-Party Inventory, Endpoint Detection, Smart Questionnaires with Conversation, Remediation Management with Cyber Impact Score, and Override Risk Ratin • Adds `Third-Party Inventory` to view and manage all third parties in one place, including uploading security control documentation for unassessed vendors. • Adds `Endpoint Detection` as a new category in external attack surface assessments to provide visibility into third-party devices such as desktops and laptops. • Adds `Questionnaire Conversations` feature allowing real-time communication with third parties on questions and internal team messaging during the assessment process. • Adds `Integration and Ratings Correlated Insights` view to display questionnaire results and external assessment findings side-by-side for validation. • Adds `Risk Policy` customization capability for admins to adjust weighting methodology, factor in critical tests or expired questionnaires, and modify risk rating matrix values. • Adds `Override Risk Rating` permission allowing admins to manually adjust the bottom-line risk rating for transparency and control. • Adds `Remediation Management` tab as a centralized location to create tasks, assign contacts, and track resolution of security issues. • Adds `Cyber Impact Score` metric to prioritize remediation tasks by showing how mitigation enhances the third party's rating. • Adds `Automated Reevaluation` feature allowing customization based on inherent risk, frequency, and priority with email reminders and recurring scheduling. • Adds `Approval Snapshot` feature that automatically captures screenshots of bottom line risk rating scores when status changes occur. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/panorays