RegScale

No entries match these filters. Clear filters

1. CLI 7.0.0 (2026-10-31) Oct 31, 2026 · issue 126

   RegScale CLI 7.0.0 adds optional OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. and Datadog observability across all CLI commands via OTLP/gRPCOTLP/gRPCOpenTelemetry's wire protocol for shipping traces, metrics, and logs, using gRPC as the transport; tools adopt it to emit observability data to any OTLP-compatible backend without vendor lock-in.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

2. changelog Oct 28, 2026 · issue 123

   RegScale 6.55.0 adds per-change-type CCB routing, AlienVault OTXOTXAlienVault's Open Threat Exchange, a community platform where researchers share indicators of compromise; cyber tools integrate it to pull live threat intelligence feeds without building their own collection infrastructure. server override, Python 3.15 support, and per-asset issue creation for scanner syncs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ USE IT
   Route Emergency Change records to the CCB while sending standard release Changes directly, without requiring CCB review.
   yaml copy

   change:
     approval_by_type:
       Emergency: ccb
       Release: direct
       Deploy: request

   Point AlienVault OTX ingestion at an on-premise OTX mirror instead of the public cloud endpoint.
   copy

   $ export REGSCALE_OTX_URL=https://otx.internal.corp
   regscale alienvault ingest_pulses

   • Adds change.approval_by_type config key and --approval-mode CLI flag to route DevSecOps release/deploy Change records to direct completion, policy approval, or CCB per change type.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds otxUrl setting (environment variable REGSCALE_OTX_URL) to point alienvault ingest_pulses at a custom AlienVault OTX server, defaulting to https://otx.alienvault.com.
   • Adds REGSCALE_STRICT_EXIT_CODES=1 support for JCAM imports: exits 3 when records could not be imported instead of silently exiting 0.
   • Adds REGSCALE_STRICT_EXIT_CODES=1 support for AWS Security Hub syncs: exits 3 for assets and findings that could not be processed.
   • Adds --approval-mode reporting to devsecops change request-approval: now surfaces Change status and policy mode returned by the platform and fails only on enforced rejections.

   +5 more show less

   • Adds per-change-type CCB default for Emergency Change records (change.approval_by_type.Emergency: ccb), where policy rejection is reported but does not fail the job.
   • Adds --account_id filtering fix to aws sync_cloudwatch so it retains log groups in the specified account rather than collecting none.
   • Migrates packaging and dependency management from Poetry (poetry-core, poetry.lock) to uv (hatchling, uv.lock) for faster dependency resolution and container builds.
   • Adds Python 3.15 support with updated CI test matrices and wheel bounds.
   • Adds gcp sync_findings import of SCC findings with no NIST 800-53NIST 800-53A catalog of security and privacy controls for U.S. federal information systems, published by NIST. Cyber tools cite it to map their findings or features to a recognized compliance framework. control mapping, including every SOFTWARE_VULNERABILITY (CVE) finding, keyed on SCC finding name with CVE id and CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. v3 base score.
   • Adds change.approval_by_type config key and --approval-mode CLI flag to route DevSecOps release/deploy Change records to direct completion, policy approval, or CCB per change type.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds otxUrl setting (environment variable REGSCALE_OTX_URL) to point alienvault ingest_pulses at a custom AlienVault OTX server, defaulting to https://otx.alienvault.com.
   • Adds per-change-type CCB default for Emergency Change records (change.approval_by_type.Emergency: ccb), where policy rejection is reported but does not fail the job.

   7 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !set_permissions load now exits with an error (non-zero) after trying every row when the platform rejects a row or a row holds an invalid value; previously it logged a warning and exited 0.
   • !set_permissions load now rejects rows where the public | private cell is blank or mistyped — previously a blank visibility silently made the record public.
   • !AWS sync_cloudwatch and sync_cloudwatch_ex now fail AU-6, AU-9, AU-11, AU-12, and SI-4 controls when more than 20% of log groups fail them; assessments that previously passed because one log group passed are rewritten as Fail on the first run after upgrading.
   • !gcp sync_compliance no longer marks a control Pass or Fully Implemented when no SCC finding maps to it; controls previously auto-passing with no evidence will now be left unevaluated or failed.
   • !AWS sync_findings in consolidated mode replaces merged per-product catch-all vulnerability records with one record per Inspector CVE and one per GuardDuty finding type; the next unscoped sync closes the old catch-all records.
   • !Wiz inventory and stig_checks now set an asset's Disk Storage (GB) to 0 instead of the virtual machine's disk count; existing Wiz assets show 0 after their next sync.
   • !Every aws command now exits 4 on authentication failure before reading or writing anything, instead of reporting completed successfully and syncing an empty inventory.
   • !regscale import assessment_linker now exits 1 with an error when RegScale returns only a partial assessment list, instead of linking a partial set and exiting 0.
   • !The regscale-dev update_docs command has been removed.
   • !Packaging and dependency lock files have migrated from Poetry (poetry-core, poetry.lock) to uv (hatchling, uv.lock); build pipelines using Poetry must be updated.
3. CLI 6.55.0 (2026-10-22) Oct 22, 2026 · issue 117

   RegScale CLI 6.55.0 adds DevSecOps release/deploy Change records with flexible approval routing and Python 3.15 support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ USE IT
   Force all DevSecOps deploy Change records to route through the CCB rather than auto-completing, using the new per-type approval config.
   yaml copy

   change:
     approval_by_type:
       deploy: ccb
       release: policy

   • Adds change.approval_by_type config key and --approval-mode CLI flag to route Change records directly to completion, to policy approval, or always to the CCB, configurable per change type.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds DevSecOps release and deploy Change record types.
   • Adds Python 3.15 support with updated CI test matrices and wheel bounds.
   • Adds change.approval_by_type config key and --approval-mode CLI flag to route Change records directly to completion, to policy approval, or always to the CCB, configurable per change type.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds DevSecOps release and deploy Change record types.

   1 more in Everything

4. CLI 6.54.0 (2026-10-19) Oct 19, 2026 · issue 114

   RegScale CLI 6.54.0 adds run duration and peak memory to JSON output and a new scannerPrefetch background-fetch setting.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ USE IT
   Enable background prefetching to speed up scans when your vendor APIs respond slowly.
   yaml copy

   scannerPrefetch: true

   • Adds scannerPrefetch setting that fetches vendor findings and assets in the background while earlier ones are processed, speeding up scans against slow vendor APIs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • The --output json run summary now reports run duration and CLI peak memory use.
   • Adds scannerPrefetch setting that fetches vendor findings and assets in the background while earlier ones are processed, speeding up scans against slow vendor APIs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 more in Everything

5. CLI 6.53.0 (2026-10-14) Oct 14, 2026 · issue 109

   RegScale CLI 6.53.0 adds regscale trust-center evidence push and strict-exit-code failure reporting for eMASSeMASSA U.S. DoD web application that manages the Risk Management Framework process, tracking system authorizations, controls, and POA&Ms so cyber tools can automate compliance reporting into a single authoritative record. commands.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Adds regscale trust-center evidence push subcommand to push JSON evidence to a Trust Center evidence record by its evidence ID.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • eMASS commands now report failed records under REGSCALE_STRICT_EXIT_CODES, with importers counting failed saves, milestones, custom fields, and role assignments.
   • Adds regscale trust-center evidence push subcommand to push JSON evidence to a Trust Center evidence record by its evidence ID.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 more in Everything

6. CLI 6.52.0 (2026-10-13) Oct 13, 2026 · issue 107

   JCAM SSPSSPA System Security Plan — a formal document required by NIST SP 800-18 that describes how a federal system meets its security controls, giving cyber tools a structured artifact to parse or generate for compliance workflows. import now logs the RegScale security plan ID and a creation count per run summary.

   • New integration Acunetix XML scan import
   • Updated integration CrowdStrike Spotlight sync known-exploit data
7. CLI 6.50.0 (2026-10-06) Oct 6, 2026 · issue 096

   RegScale CLI 6.50.0 adds tag-filtered AWS Audit Manager syncs and richer Wiz asset and network vulnerability data.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ TRY IT
   Limit an AWS Audit Manager sync to only assessments tagged for a specific program or team, avoiding noise from unrelated assessments.
   copy

   $ regscale sync aws-audit-manager --tags Environment=Production

   • Adds --tags flag to AWS Audit Manager sync to filter which assessments are scoped for evidence collection.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Wiz asset syncs now populate the public-facing FQDN, IP address, and URL fields from confirmed application endpoints.
   • Wiz network exposure vulnerabilities now carry port and protocol data.
   • Adds --tags flag to AWS Audit Manager sync to filter which assessments are scoped for evidence collection.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   2 more in Everything

8. RegScale 6.34.4.0 Oct 4, 2026 · release notes

   RegScale 6.34.4.0 introduces rich text editor upgrade, preset config preview for disabled profile layering, and legacy token expiration warning.

   • Upgrades the Rich Text Editor to provide more reliable formatting for lists, tables, links, and Word-pasted content
   • Enhances Preset Configurations to show excluded catalogs and profiles in the preview when profile layering is disabled

   2 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !A limited set of legacy service account tokens expires 30 days after upgrading to 6.34.4.0; affected administrators receive an email identifying accounts and rotation steps. Integrations using expired tokens return 401 Unauthorized.
9. CLI 6.49.5 (2026-09-28) Sep 28, 2026 · issue 089

   Adds an about command to the Axonius v2 integration to display connected instance details.

   • Updated integration Axonius v2 integration
10. CLI 6.49.0 (2026-09-28) Sep 28, 2026 · issue 089

    RegScale CLI 6.49.0 enriches Wiz STIGSTIGA configuration standard published by DISA that specifies hardening requirements for a given OS, application, or device, giving cyber tools a concrete checklist to audit or enforce against./CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. findings with per-criteria observations and expands Ports & Protocols coverage to VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. and cross-account paths.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Wiz STIG and CIS benchmark results now record, in each control test's observations, which configuration criteria produced the pass or fail result and what Wiz found on the host.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Wiz Ports and Protocols records now include ports reachable over VPN and from another cloud account.
    • Wiz STIG and CIS benchmark results now record, in each control test's observations, which configuration criteria produced the pass or fail result and what Wiz found on the host.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    1 more in Everything

11. RegScale 6.34.2.0 Sep 22, 2026 · release notes

    RegScale 6.34.2.0 adds skipCustomFieldValidation for batch imports, new UI History panel for Admin Jobs, Vendor Dependency filter for POA&MPOA&MA Plan of Action and Milestones: a US federal government document that tracks known security weaknesses in a system, the remediation steps planned, and the deadlines for completing them, required under FISMA compliance., and User Field step assignee ty

    • Issues created or updated through the batch API now apply the same due date order as a single issue. With no due date supplied, RegScale uses the CISA Known Exploited VulnerabilitiesCISA Known Exploited VulnerabilitiesA catalog maintained by the US Cybersecurity and Infrastructure Security Agency listing CVEs confirmed to have been actively exploited in the wild, which cyber tools use as a high-signal prioritization feed for patching and scanning. catalog date first. It then uses the plan or tenant patching service level agreement, then the configured default table. A supplied due date is kept, and a batch update with no due date keeps the stored date. Computed due dates carry a UTC designator.
    • Automated imports that must accept incomplete records set the skipCustomFieldValidation request option to true on the batch create or update endpoint for issues.
    • An asset's Hardware Info tab has three separate fields for operating system data: OS/IOS, OS/IOS Version and FW Version. The single combined field is retired.
    • Step Assignee Type in the Workflow Designer offers User Field on every deployment, with no configuration change. A workflow designer can route an approval step to the person named in a record property, such as Issue Owner or Risk Owner.
    • Clearing a tenant's directory-sourced users reports the effect on administrator accounts. The result names how many accounts were cleared, how many of them were administrators, and how many administrators remain.

    5 details in Everything

12. CLI 6.48.0 (2026-09-21) Sep 21, 2026 · issue 081

    RegScale CLI 6.48.0 adds repeatable JCAM plan ID scoping and enriched Wiz issue sync with notes, links, and metadata.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Adds a repeatable plan id argument to JCAM import commands so a sync run can be scoped to specific plans without editing the configured filter.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Wiz issue sync now imports issue notes, the affected resource's cloud console link, project business impact, policy type, and linked service tickets.
    • Adds a repeatable plan id argument to JCAM import commands so a sync run can be scoped to specific plans without editing the configured filter.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    1 more in Everything

13. CLI 6.47.10 (2026-09-17) Sep 17, 2026 · issue 078

    RegScale CLI 6.47.10 adds shared security-plan lookup, multi-plan QRadar routing, and AWS Security Hub CSPMCSPMCloud security posture management, checking cloud resources for risky settings and policy violations. It helps teams find exposed services, overly broad permissions and other configuration gaps. command⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Adds a shared lookup that finds a security plan by an identifier held in any of its fields, native or custom.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds a QRadar command that routes events to many security plans by an identifier carried on the event.
    • Adds an AWS Security Hub CSPM command that routes findings to many security plans.

    3 details in Everything

14. CLI 6.47.0 (2026-09-17) Sep 17, 2026 · issue 077

    RegScale CLI 6.47.0 adds JCAM import for NIST 800-63NIST 800-63A suite of NIST guidelines defining digital identity assurance levels, covering identity proofing, authentication, and federation. Cyber tools use it to align credential and access controls to a federally recognized risk framework. digital identity data including assurance levels and federation rationale.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

15. docs update Sep 14, 2026 · issue 074

    RegScale: Adds archer subcommand for RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. Archer bidirectional integration (login and sync commands)

    • Adds ibm subcommand for IBM AppScan file processing
    • Adds veracode subcommand to process Veracode export files

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The csam subcommand is deprecated; DoJ renamed CSAM to JCAM — use regscale jcam instead.
16. CLI 6.46.0 (2026-09-13) Sep 13, 2026 · issue 074

    RegScale CLI 6.46.0 adds empty-role detection in jcam check_config and service account management from the CLI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ TRY IT
    Catch unmatched roles in your JCAM configuration before provisioning, so no empty roles are created in scope.
    copy

    $ regscale jcam check_config

    • Adds detection in jcam check_config that names any role declared in jcamSystemRoles that matches no point-of-contact position in any JCAM system in scope, surfacing roles that would be created empty before they are built.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds ability to create and manage RegScale service accounts from the CLI.

    2 details in Everything

17. docs update Sep 13, 2026 · issue 073

    RegScale CLI gains 60+ integrations and commands spanning SIEMsSIEMsSecurity Information and Event Management platforms that collect, normalize, and correlate log data across an infrastructure so cyber tools can detect threats and trigger alerts from a central point., CNAPPs, GRCGRCGovernance, Risk, and Compliance — a framework for aligning IT controls with business policy, regulatory requirements, and risk management so organizations can audit and report on their posture systematically. tools, SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue., OSCAL, SARIFSARIFStatic Analysis Results Interchange Format, a standard for sharing code-analysis findings, including locations and rule details. It lets scanners report results to a common review interface., and CI/CD pipeline compliance.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Adds regscale wiz command to integrate continuous monitoring data from Wiz.io.
    • Adds regscale crowdstrike command (Beta) to load CrowdStrike threat intelligence into RegScale.
    • Adds regscale cisa command to ingest CISA threat intelligence including KEVKEVCISA's Known Exploited Vulnerabilities catalog, a list of vulnerabilities with evidence of exploitation in real attacks. It helps teams prioritize fixes for problems attackers already use. (Known Exploited VulnerabilitiesKnown Exploited VulnerabilitiesCISA's Known Exploited Vulnerabilities catalog, a list of vulnerabilities with evidence of exploitation in real attacks. It helps teams prioritize fixes for problems attackers already use.) and security alerts.
    • Adds regscale prisma command for Prisma Cloud API integration covering authentication, host scans, image scans, and SBOM processing.

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The regscale csam command is deprecated and removed in favor of regscale jcam; existing scripts using csam must be updated to use jcam.
18. docs update Sep 13, 2026 · issue 073

    RegScale CLI gains OCSFOCSFAn open schema standard, maintained by the OCSF community under CISA and industry backing, that defines a common event format so cyber tools can share and ingest log data without per-source normalization work. ingestion, QRadar SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. sync, Jira Data Center, JCAM, Databricks, DuroSuite, Sicura, SentinelOne, Axonius V2, and more new integrations⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ TRY IT
    Ingest standardized security events from a SIEM or detection tool using the OCSF schema for unified compliance tracking.
    copy

    $ regscale ocsf

    Sync security events, findings, and assets from IBM QRadar into RegScale for continuous monitoring.
    copy

    $ regscale qradar

    Import CCI data from an XML file and map it to security controls, skipping objectives mapping.
    copy

    $ regscale cci_importer --disable-objectives

    • Adds ocsf command for OCSF (Open Cybersecurity Schema Framework) integration to standardize security event ingestion into RegScale⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds qradar command for IBM QRadar SIEM integration to sync security events, findings, and assets from QRadar into RegScale
    • Adds jira_dc command for Jira Data Center (on-prem) integration to sync issues, tasks, and attachments between Jira Data Center and RegScale
    • Adds jcam command for integration with DoJ's JCAM GRCGRCGovernance, Risk, and Compliance — a framework for aligning IT controls with business policy, regulatory requirements, and risk management so organizations can audit and report on their posture systematically. tool (Beta), replacing the deprecated csam command
    • Adds databricks command for Databricks integration to pull scan data from Databricks Catalogs (Beta)

    +39 more show less

    • Adds durosuite command to sync DuroSuite scan results and audits into RegScale
    • Adds sentinelone command to sync agents, threats, and vulnerabilities from SentinelOne into RegScale
    • Adds axonius_v2 command for Axonius V2 integration to sync assets and vulnerabilities using the Axonius SDK
    • Adds sarif command for SARIFSARIFStatic Analysis Results Interchange Format, a standard for sharing code-analysis findings, including locations and rule details. It lets scanners report results to a common review interface. integration to import vulnerabilities or sync compliance data from static analysis tools
    • Adds sbom command to import and manage Software Bill of MaterialsSoftware Bill of MaterialsA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. (SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue.) files in RegScale
    • Adds splunk command for Splunk integration covering search, export, job management, and evidence ingestion
    • Adds pipeline command for CI/CD Pipeline Compliance to track component-level compliance from GitLab and GitHub pipelines
    • Adds rapid7 command for Rapid7 InsightVM integration to sync assets and vulnerabilities via API
    • Adds panw command for Palo Alto Networks integrations covering SCMSCMSource Code Management: version-control systems (Git, SVN, etc.) that track changes to code over time, giving cyber tools reproducible builds, audit trails, and collaborative development workflows. Compliance Center, Prisma Cloud CSPMCSPMCloud security posture management, checking cloud resources for risky settings and policy violations. It helps teams find exposed services, overly broad permissions and other configuration gaps., and Prisma Cloud Compute
    • Adds orca command to integrate continuous monitoring data from Orca Security (agentless CNAPPCNAPPA cloud-native application protection platform that combines checks across cloud configuration, workloads and development. It helps teams connect risks that separate tools might report apart.)
    • Adds tanium command to sync assets, vulnerabilities, and compliance findings from Tanium into RegScale
    • Adds sap command for SAP integration
    • Adds config_backups command to list or restore configuration backups that are automatically created before each save operation
    • Adds cve-cleanup command to find and fix multi-CVE issue records and sync from custom fields
    • Adds cleanup command for data management to delete issues, assets, vulnerabilities, and mappings
    • Adds criticality_updater command to update the criticality of security controls in a catalog
    • Adds set_permissions command to bulk set permissions on records in RegScale from a generated spreadsheet
    • Adds upload_file command to upload a file from a local machine to a record in RegScale
    • Adds gui / tui command to launch an interactive Terminal User Interface (Beta)
    • Adds cci_importer command to import CCI data from XML files and map to security controls and/or objectives, with --disable-objectives flag
    • Adds bigquery command to sync assets from Google BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data. tables into RegScale
    • Adds opentext command to perform actions on OpenText export files
    • Adds openscap command to sync OpenSCAP scan results (ARF, XCCDF, CSV) into RegScale
    • Adds sicura command to sync assets and findings from Sicura into RegScale
    • Adds ibm command to perform actions on IBM AppScan files
    • Adds grype command to perform actions on Grype export files
    • Adds trivy command to perform actions on Trivy export files
    • Adds ecr command for Elastic Container Registry (ECRECRAmazon Elastic Container Registry, AWS's managed service for storing and distributing Docker and OCI container images, giving cyber tools a private, IAM-gated registry without self-hosting infrastructure.) scanner artifact actions
    • Adds sonarcloud sync to pull alerts from SonarCloud API or import from GitLab SASTSASTStatic application security testing, analyzing source code or compiled code for vulnerabilities without running the application. It helps developers find problems before deployment. report files
    • Adds salesforce command to sync data and attachments between Salesforce Cases and RegScale Issues
    • Adds ad command for Azure Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. (Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments.) integration to sync app and tenant admin memberships from Entra groups into RegScale
    • Adds crowdstrike integration to load threat intelligence to RegScale (Beta)
    • Adds dependabot command to create an assessment and child issues in RegScale from Dependabot alerts
    • Adds stig_mapper command to map data from STIGs to RegScale
    • Adds emass_api command for eMASSeMASSA U.S. DoD web application that manages the Risk Management Framework process, tracking system authorizations, controls, and POA&Ms so cyber tools can automate compliance reporting into a single authoritative record. API integration with bidirectional POA&MPOA&MA Plan of Action and Milestones: a US federal government document that tracks known security weaknesses in a system, the remediation steps planned, and the deadlines for completing them, required under FISMA compliance. and control sync, artifacts, and milestones
    • Adds import_all command to import scans, vulnerabilities, and assets to RegScale from scan export files
    • Adds alienVault / AlienVault OTXOTXAlienVault's Open Threat Exchange, a community platform where researchers share indicators of compromise; cyber tools integrate it to pull live threat intelligence feeds without building their own collection infrastructure. integration to load pulses into RegScale
    • Adds axonius command for Axonius integration
    • Adds jcam replacing deprecated csam for DoJ JCAM GRC tool integration

    44 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The csam command is deprecated; use regscale jcam instead (DoJ renamed CSAM to JCAM).
19. CLI 6.45.10 (2026-09-11) Sep 11, 2026 · issue 072

    RegScale CLI 6.45.10 adds @drop support to JCAM config fields for explicit import suppression.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ USE IT
    Explicitly suppress a point-of-contact role and an agency-defined attribute during JCAM import, making the exclusion auditable rather than invisible.
    yaml copy

    jcamPositionRoleNames:
      - "@drop"
    jcamAgencyDefinedDataItems:
      - "@drop"

    • Adds @drop as an accepted value for jcamPositionRoleNames and jcamAgencyDefinedDataItems in JCAM profile config, allowing tenants to explicitly record that a point of contact or agency-defined attribute is intentionally excluded from import rather than silently omitting it.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    1 detail in Everything

20. CLI 6.45.8 (2026-09-10) Sep 10, 2026 · issue 071

    JCAM imports can now auto-create missing system roles via a new jcamSystemRoles key in init.yaml.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

21. RegScale 6.34.0.1 (2026-09-09) Sep 9, 2026 · issue 070

    RegScale 6.34.0.1 introduces Artifact Hub for templated, recurring artifact generation with 16 ready-to-use templates.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ HOW TO FIND IT
    When you need to generate a recurring compliance artifact (such as a monthly evidence package) from a standardized template without rebuilding it each time.
    📍In RegScale, go to Artifact Hub, select one of the 16 ready-to-use templates, mark the fields that change each cycle, then follow the guided workflow to generate an updated artifact.
    • Adds Artifact Hub, a new workflow for creating reusable artifact templates, marking fields that change over time, and generating updated artifacts through a guided process.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Ships 16 ready-to-use templates in Artifact Hub for standardized artifact creation out of the box.

    2 details in Everything

22. CLI 6.45.0 (2026-09-09) Sep 9, 2026 · issue 070

    RegScale CLI 6.45.0 adds configurable console log format via init.yaml keys and environment variables.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ BREAKING ON UPGRADE

    • !jcam --help no longer lists the pre-rename spellings check_custom_fields and test_jcam.
23. CLI 6.44.0 (2026-09-03) Sep 3, 2026 · issue 063

    RegScale CLI 6.44.0 adds JCAM config validation via jcam check_config to catch misconfigured attribute mappings.

24. CLI 6.43.0 (2026-08-31) Aug 31, 2026 · issue 060

    RegScale CLI 6.43.0 adds dry-run milestone mapping for JCAM POA&MPOA&MA Plan of Action and Milestones: a US federal government document that tracks known security weaknesses in a system, the remediation steps planned, and the deadlines for completing them, required under FISMA compliance. imports before committing data.

    • The jcam dry_run command now follows POA&Ms through to their milestones, letting practitioners verify milestone mapping before a live import rather than after.
    • Samples a subset of POA&Ms per system during jcam dry_run by default, so the mapping is proven without enumerating every record.

    2 details in Everything

25. CLI 6.42.32 (2026-08-28) Aug 28, 2026 · issue 058

    RegScale CLI 6.42.32 adds FedRAMPFedRAMPA US government program that standardizes cloud security authorization, letting vendors get a single assessment accepted across federal agencies instead of repeating the process for each one. SSPSSPA System Security Plan — a formal document required by NIST SP 800-18 that describes how a federal system meets its security controls, giving cyber tools a structured artifact to parse or generate for compliance workflows. interconnect and cryptographic module import commands, plus optional SSP ID on docx import

    • Adds a new FedRAMP SSP interconnect import command to the CLI.
    • Adds a new FedRAMP SSP cryptographic module import command to the CLI.
    • Adds an optional SSP ID parameter to the FedRAMP docx import command so an existing System Security Plan is updated in place rather than duplicated.

    3 details in Everything

26. RegScale 6.33.3.0 (2026-08-28) Aug 28, 2026 · issue 058

    RegScale 6.33.3.0 adds a consolidated dashboard experience and a new Key Risk Indicator (KRI) monitoring system.

    • Introduces a Key Risk Indicator (KRI) system for organizations to monitor risk metrics.
    • Consolidates the dashboard experience into a unified view for accessing and reviewing organizational metrics.

    2 details in Everything

27. CLI 6.42.0 (2026-08-26) Aug 26, 2026 · issue 057

    RegScale CLI 6.42.0 adds JCAM dry-run position mapping, Splunk evidence owner/approver settings, and opt-in Wiz incremental pulls.

    • Adds splunkSids setting for offline Splunk evidence backfill runs.
    • Adds Splunk evidence owner and approver settings for controlling evidence attribution.
    • Adds JCAM position-to-role name mapping override to customize how positions are mapped during imports.
    • Adds a JCAM dry run mode that reports which positions' people would not be imported before committing the operation.
    • Adds opt-in Wiz incremental pulls that fetch only new or changed data.

    5 details in Everything

28. RegScale 6.33.1.0 (2026-08-14) Aug 14, 2026 · issue 046

    RegScale 6.33.1.0 expands AI Agent coverage to Lines of Inquiry, CAPs, Risk Treatment, Questionnaire Scoring, and more.

    • Extends AI Agent capabilities to Lines of Inquiry, Corrective Action Plans, Risk Treatment Mappings, Questionnaire Scoring, Lightning Assessment Tests, and Security Control Test Generation.
    • Adds RegML Mapping Recommendations (details not fully disclosed in release notes).

    2 details in Everything

29. CLI (2026-08-13) Aug 13, 2026 · issue 045

    RegScale CLI 6.40.0 adds configurable artifact output directory and optional Wiz data-retention reconciliation

    └──▷ USE IT
    Set a custom output directory so all scanner and integration artifacts land in a dedicated path instead of the default location.
    yaml copy

    artifactsDir: /var/regscale/artifacts

    Enable Wiz retention reconciliation to automatically close RegScale issues whose Wiz findings have aged out of Wiz's retention window.
    yaml copy

    wizRetentionReconciliation: true

    • Adds artifactsDir setting to configure the base directory for scanner and integration output files.
    • Adds optional Wiz data-retention reconciliation that closes issues whose findings have aged out of Wiz's retention window, enabled via wizRetentionReconciliation and tuned with additional w… settings.

    2 details in Everything

30. CLI 6.39.0 (2026-08-11) Aug 11, 2026 · issue 042

    RegScale CLI 6.39.0 adds Splunk integration with asset/finding ingestion and evidence import via splunk sync

    └──▷ TRY IT
    Pull Splunk saved search results into RegScale to automatically populate assets, findings, and control evidence without manual export/import.
    copy

    $ regscale splunk sync

    • Adds splunk sync command that runs saved searches listed in splunkSavedSearches and imports assets, findings, and control evidence into RegScale.
    • New Splunk integration supports search, streaming export, saved searches, search job management, asset and finding processing, and evidence ingestion.

    2 details in Everything

31. RegScale 6.33.0.1 (2026-08-10) Aug 10, 2026 · issue 042

    RegScale 6.33.0 adds application hierarchy definition and global visibility controls in App Builder.

    • Adds the ability to define a hierarchy of applications on the App Management page.
    • Adds a global visibility toggle within the application's Advanced Security tab.

    2 details in Everything

32. CLI 6.38.0 (2026-08-06) Aug 6, 2026 · issue 037

    RegScale CLI 6.38.0 adds eMASSeMASSA U.S. DoD web application that manages the Risk Management Framework process, tracking system authorizations, controls, and POA&Ms so cyber tools can automate compliance reporting into a single authoritative record. CAC authentication support for custom CA bundles (e.g. DoD PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets.) via config, env var, and CLI flag.

    └──▷ TRY IT
    Register an eMASS API connection trusting a DoD PKI CA bundle when running in a CI/CD pipeline where env vars are preferred over config files.
    copy

    $ EMASS_SSL_CA_CERT=/etc/ssl/dod-root-ca.pem regscale emass_api register

    Persist the DoD PKI CA bundle path in the RegScale config so all eMASS commands trust it without repeating the flag.
    yaml copy

    emass:
      ssl_ca_cert: /etc/ssl/dod-root-ca.pem

    Supply the CA bundle inline at registration time without modifying config or environment.
    copy

    $ regscale emass_api register --ca-cert /etc/ssl/dod-root-ca.pem

    • Adds emass.ssl_ca_cert config key to trust a custom CA bundle (e.g. DoD PKI) when verifying the eMASS server certificate during CAC authentication.
    • Adds EMASS_SSL_CA_CERT environment variable as an alternative to emass.ssl_ca_cert for supplying the custom CA bundle path.
    • Adds --ca-cert option to the emass_api register command to specify the custom CA bundle at registration time.

    3 details in Everything

33. CLI 6.37.69 (2026-07-31) Jul 31, 2026 · issue 031

    RegScale CLI 6.37.69 adds asset-free Qualys/Prisma sync and Tanium ports/protocols integration.

    • Adds option to sync Qualys and Prisma vulnerabilities and issues without creating or updating assets.
    • Adds Tanium open ports and protocols synchronization to assets and the system Ports, Protocols, and Services table.

    2 details in Everything

34. RegScale 6.32.3.0 (2026-07-25) Jul 25, 2026 · issue 026

    RegScale 6.32.3.0 adds an Asset Scanning Tool De-Duplication option for administrators to control duplicate finding consolidation.

35. CLI 6.37.45 (2026-07-22) Jul 22, 2026 · issue 023

    RegScale 6.37.45 adds eMASSeMASSA U.S. DoD web application that manages the Risk Management Framework process, tracking system authorizations, controls, and POA&Ms so cyber tools can automate compliance reporting into a single authoritative record. full-system sync and AWS Inspector tag-based exclusion filtering.

    └──▷ TRY IT
    Perform a full one-shot sync of all eMASS structural records (assets, controls, POAMs, milestones, artifacts) for an SSPSSPA System Security Plan — a formal document required by NIST SP 800-18 that describes how a federal system meets its security controls, giving cyber tools a structured artifact to parse or generate for compliance workflows. without manually ordering dependent calls.
    copy

    $ regscale emass sync_system

    Run AWS Inspector sync while excluding resources tagged for non-production environments to keep findings scoped to production assets only.
    copy

    $ regscale aws inspector sync --exclude_tags Environment=dev,Environment=staging

    • New eMASS sync_system command synchronizes all structural records (assets, controls, POAMs, milestones, artifacts) between a RegScale SSP and its linked eMASS system in a single dependency-ordered invocation.
    • New --exclude_tags option for AWS Inspector sync to skip resources carrying specified tags.

    2 details in Everything

36. RegScale 6.32.2.0 (2026-07-20) Jul 20, 2026 · issue 020

    RegScale 6.32.2.0 expands AI provider support to Azure OpenAI, AWS Bedrock, and OpenAI-compatible endpoints.

    • Supports Azure OpenAI, AWS Bedrock, and OpenAI-compatible endpoints as AI providers, broadening deployment options for enterprise environments.

    1 detail in Everything

37. CLI 6.37.39 (2026-07-16) Jul 16, 2026 · issue 018

    RegScale 6.37.39 adds eMASSeMASSA U.S. DoD web application that manages the Risk Management Framework process, tracking system authorizations, controls, and POA&Ms so cyber tools can automate compliance reporting into a single authoritative record. asset inventory sync and expanded stakeholder address fields in the API.

    • New eMASS API hardware and software baseline sync commands pull asset inventory from eMASS, create or update RegScale assets, and push new assets back to eMASS.

    1 detail in Everything

38. RegScale 6.31.1.5 (2026-07-16) Jul 16, 2026 · issue 017

    RegScale 6.31.1.5 adds custom rules support for POA&MPOA&MA Plan of Action and Milestones: a US federal government document that tracks known security weaknesses in a system, the remediation steps planned, and the deadlines for completing them, required under FISMA compliance. configuration.

39. RegScale 6.32.1.0 (2026-07-08) Jul 8, 2026 · issue 014

    RegScale 6.32.1.0 adds PIV card authentication architecture for high-assurance identity environments.

    • Supports PIV card authentication architecture, enabling organizations with advanced identity requirements (e.g., federal agencies) to integrate Personal Identity Verification-based access into the platform.

    1 detail in Everything

40. RegScale 6.32.0.0 (2026-07-03) Jul 3, 2026 · issue 014

    RegScale 6.32.0.0 introduces a redesigned UI navigation experience with new features available exclusively in it.

    • New UI navigation experience replaces the legacy layout; most new features and improvements are available only in the new UI going forward.

    1 detail in Everything

41. RegScale 6.31.1.4 (2026-06-29) Jun 29, 2026 · issue 014

    RegScale 6.31.1.4 adds Wiz STIGSTIGA configuration standard published by DISA that specifies hardening requirements for a given OS, application, or device, giving cyber tools a concrete checklist to audit or enforce against. sync via XCCDF Benchmark and pre-flight validation for eMASSeMASSA U.S. DoD web application that manages the Risk Management Framework process, tracking system authorizations, controls, and POA&Ms so cyber tools can automate compliance reporting into a single authoritative record. exports.

    • Supports synchronizing Wiz STIG checks through the XCCDF Benchmark workflow for streamlined Wiz integration.
    • Introduces pre-flight validation for eMASS exports to surface potential issues before submission.

    2 details in Everything

42. RegScale 6.31.1.3 (2026-06-25) Jun 25, 2026 · issue 014

    RegScale 6.31.1.3 adds XCCDF TestResults import and enhanced CKL/CKLB ingestion for broader assessment data coverage.

    • Supports importing XCCDF TestResults into the assessment pipeline, enabling additional security assessment data sources within RegScale.
    • Enhanced CKL/CKLB import capabilities for expanded vulnerability management and assessment data ingestion.

    2 details in Everything

43. CLI 6.35.0 (2026-06-23) Jun 23, 2026 · issue 014

    RegScale CLI 6.35.0 streams Nessus imports and routes STIGSTIGA configuration standard published by DISA that specifies hardening requirements for a given OS, application, or device, giving cyber tools a concrete checklist to audit or enforce against./CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. compliance findings to checklists and POA&Ms.

    • Nessus scan imports now use a single streaming pass per file, enabling faster and lower-memory processing of large scan files.
    • Nessus STIG and CIS compliance results now generate security checklists and POA&MPOA&MA Plan of Action and Milestones: a US federal government document that tracks known security weaknesses in a system, the remediation steps planned, and the deadlines for completing them, required under FISMA compliance. issues instead of vulnerabilities, with re-scans automatically closing remediated compliance findings.

    2 details in Everything

44. CLI 6.34.65 (2026-06-17) Jun 17, 2026 · issue 014

    RegScale CLI 6.34.65 changes compliance scan default behavior and documents vulnerabilityCreation options.

    └──▷ USE IT
    Opt back in to auto-creating POAMs from failed compliance control assessments, restoring pre-6.34.65 behavior.
    yaml copy

    complianceCreation: POAM

    • Changes compliance scan default: failed control assessments no longer auto-create issues; failed controls remain visible on assessments, with opt-in via complianceCreation set to Issue or POAM.
    • Documents vulnerabilityCreation configuration options for controlling how vulnerability findings are handled.

    2 details in Everything

45. CLI 6.34.59 (2026-06-16) Jun 16, 2026 · issue 014

    RegScale CLI 6.34.59 adds eMASSeMASSA U.S. DoD web application that manages the Risk Management Framework process, tracking system authorizations, controls, and POA&Ms so cyber tools can automate compliance reporting into a single authoritative record. API sync commands and automatic artifact upload on XML import.

    • New emass_api commands enable synchronization of POA&Ms, controls, milestones, and artifacts directly with eMASS via its API.
    • eMASS XML import now automatically uploads referenced artifact files to the System Security Plan when those files are present alongside the export.
    • Supports per-asset Issue/POAM creation, allowing findings to be tracked at the individual asset level.

    3 details in Everything