https://cybertoolchain.io/tools/regscale New releases and features in RegScale, tracked by The Cyber Toolchain. en Sat, 31 Oct 2026 06:19:50 GMT https://regscale.readme.io/changelog/cli-700 https://regscale.readme.io/changelog/cli-700 Sat, 31 Oct 2026 06:19:50 GMT RegScale CLI 7.0.0 adds optional OpenTelemetry and Datadog observability across all CLI commands via OTLP/gRPC⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enable OpenTelemetry and Datadog observability across all CLI commands, outbound HTTP/GraphQL requests, sync item counters, and secret-redacted structured logs over OTLP/gRPC by installing the `telemetry` extra and configuring via `REGSCALE_OTEL` environment variable.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog https://regscale.readme.io/changelog Wed, 28 Oct 2026 07:53:47 GMT RegScale 6.55.0 adds per-change-type CCB routing, AlienVault OTX server override, Python 3.15 support, and per-asset issue creation for scanner syncs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `change.approval_by_type` config key and `--approval-mode` CLI flag to route DevSecOps release/deploy Change records to direct completion, policy approval, or CCB per change type.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `otxUrl` setting (environment variable `REGSCALE_OTX_URL`) to point `alienvault ingest_pulses` at a custom AlienVault OTX server, defaulting to `https://otx.alienvault.com`. • Adds `REGSCALE_STRICT_EXIT_CODES=1` support for JCAM imports: exits 3 when records could not be imported instead of silently exiting 0. • Adds `REGSCALE_STRICT_EXIT_CODES=1` support for AWS Security Hub syncs: exits 3 for assets and findings that could not be processed. • Adds `--approval-mode` reporting to `devsecops change request-approval`: now surfaces Change status and policy mode returned by the platform and fails only on enforced rejections. • Adds per-change-type CCB default for Emergency Change records (`change.approval_by_type.Emergency: ccb`), where policy rejection is reported but does not fail the job. • Adds `--account_id` filtering fix to `aws sync_cloudwatch` so it retains log groups in the specified account rather than collecting none. • Migrates packaging and dependency management from Poetry (`poetry-core`, `poetry.lock`) to `uv` (`hatchling`, `uv.lock`) for faster dependency resolution and container builds. • Adds Python 3.15 support with updated CI test matrices and wheel bounds. • Adds `gcp sync_findings` import of SCC findings with no NIST 800-53 control mapping, including every `SOFTWARE_VULNERABILITY` (CVE) finding, keyed on SCC finding name with CVE id and CVSS v3 base score. Breaking changes: • `set_permissions load` now exits with an error (non-zero) after trying every row when the platform rejects a row or a row holds an invalid value; previously it logged a warning and exited 0. • `set_permissions load` now rejects rows where the `public | private` cell is blank or mistyped — previously a blank visibility silently made the record public. • AWS `sync_cloudwatch` and `sync_cloudwatch_ex` now fail AU-6, AU-9, AU-11, AU-12, and SI-4 controls when more than 20% of log groups fail them; assessments that previously passed because one log group passed are rewritten as Fail on the first run after upgrading. • `gcp sync_compliance` no longer marks a control Pass or Fully Implemented when no SCC finding maps to it; controls previously auto-passing with no evidence will now be left unevaluated or failed. • AWS `sync_findings` in consolidated mode replaces merged per-product catch-all vulnerability records with one record per Inspector CVE and one per GuardDuty finding type; the next unscoped sync closes the old catch-all records. • Wiz `inventory` and `stig_checks` now set an asset's Disk Storage (GB) to 0 instead of the virtual machine's disk count; existing Wiz assets show 0 after their next sync. • Every `aws` command now exits 4 on authentication failure before reading or writing anything, instead of reporting 'completed successfully' and syncing an empty inventory. • `regscale import assessment_linker` now exits 1 with an error when RegScale returns only a partial assessment list, instead of linking a partial set and exiting 0. • The `regscale-dev update_docs` command has been removed. • Packaging and dependency lock files have migrated from Poetry (`poetry-core`, `poetry.lock`) to `uv` (`hatchling`, `uv.lock`); build pipelines using Poetry must be updated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-6550 https://regscale.readme.io/changelog/cli-6550 Thu, 22 Oct 2026 20:18:21 GMT RegScale CLI 6.55.0 adds DevSecOps release/deploy Change records with flexible approval routing and Python 3.15 support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `change.approval_by_type` config key and `--approval-mode` CLI flag to route Change records directly to completion, to policy approval, or always to the CCB, configurable per change type.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds DevSecOps release and deploy Change record types. • Adds Python 3.15 support with updated CI test matrices and wheel bounds. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-6540 https://regscale.readme.io/changelog/cli-6540 Mon, 19 Oct 2026 19:10:57 GMT RegScale CLI 6.54.0 adds run duration and peak memory to JSON output and a new `scannerPrefetch` background-fetch setting.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `scannerPrefetch` setting that fetches vendor findings and assets in the background while earlier ones are processed, speeding up scans against slow vendor APIs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • The `--output json` run summary now reports run duration and CLI peak memory use. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-6530 https://regscale.readme.io/changelog/cli-6530 Wed, 14 Oct 2026 16:42:11 GMT RegScale CLI 6.53.0 adds `regscale trust-center evidence push` and strict-exit-code failure reporting for eMASS commands.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `regscale trust-center evidence push` subcommand to push JSON evidence to a Trust Center evidence record by its evidence ID.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • eMASS commands now report failed records under `REGSCALE_STRICT_EXIT_CODES`, with importers counting failed saves, milestones, custom fields, and role assignments. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-6520 https://regscale.readme.io/changelog/cli-6520 Tue, 13 Oct 2026 10:55:57 GMT RegScale CLI 6.52.0 adds Acunetix XML import, CrowdStrike Spotlight enhancements, and richer SSP import logging.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `regscale acunetix import_acunetix` command to import Acunetix XML scan exports as assets, vulnerabilities, and issues.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • JCAM SSP import now logs the RegScale security plan ID assigned to each newly created plan, with a count in the run summary. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-6500 https://regscale.readme.io/changelog/cli-6500 Tue, 06 Oct 2026 11:21:46 GMT RegScale CLI 6.50.0 adds tag-filtered AWS Audit Manager syncs and richer Wiz asset and network vulnerability data.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `--tags` flag to AWS Audit Manager sync to filter which assessments are scoped for evidence collection.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Wiz asset syncs now populate the public-facing FQDN, IP address, and URL fields from confirmed application endpoints. • Wiz network exposure vulnerabilities now carry port and protocol data. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-6495 https://regscale.readme.io/changelog/cli-6495 Mon, 28 Sep 2026 22:20:20 GMT RegScale CLI 6.49.5 adds an `about` command to the Axonius v2 integration to surface connected instance details.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds an `about` command to the Axonius v2 integration to display connected instance details.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-6490 https://regscale.readme.io/changelog/cli-6490 Mon, 28 Sep 2026 20:14:30 GMT RegScale CLI 6.49.0 enriches Wiz STIG/CIS findings with per-criteria observations and expands Ports & Protocols coverage to VPN and cross-account paths.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Wiz STIG and CIS benchmark results now record, in each control test's observations, which configuration criteria produced the pass or fail result and what Wiz found on the host.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Wiz Ports and Protocols records now include ports reachable over VPN and from another cloud account. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-6480 https://regscale.readme.io/changelog/cli-6480 Mon, 21 Sep 2026 11:43:59 GMT RegScale CLI 6.48.0 adds repeatable JCAM plan ID scoping and enriched Wiz issue sync with notes, links, and metadata.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a repeatable `plan id` argument to JCAM import commands so a sync run can be scoped to specific plans without editing the configured filter.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Wiz issue sync now imports issue notes, the affected resource's cloud console link, project business impact, policy type, and linked service tickets. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-64710 https://regscale.readme.io/changelog/cli-64710 Thu, 17 Sep 2026 18:21:43 GMT RegScale CLI 6.47.10 adds shared security-plan lookup, multi-plan QRadar routing, and AWS Security Hub CSPM command⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a shared lookup that finds a security plan by an identifier held in any of its fields, native or custom.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a `QRadar` command that routes events to many security plans by an identifier carried on the event. • Adds an `AWS Security Hub CSPM` command that routes findings to many security plans. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-6470 https://regscale.readme.io/changelog/cli-6470 Thu, 17 Sep 2026 04:13:01 GMT RegScale CLI 6.47.0 adds JCAM import for NIST 800-63 digital identity data including assurance levels and federation rationale.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds JCAM import support for NIST 800-63 digital identity data, including assessed and implemented Identity, Authenticator, and Federation assurance levels, rationale for differences between them, comparability demonstrations, and rationale for not accepting federated identities.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-6460 https://regscale.readme.io/changelog/cli-6460 Sun, 13 Sep 2026 19:54:16 GMT RegScale CLI 6.46.0 adds empty-role detection in jcam check_config and service account management from the CLI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds detection in `jcam check_config` that names any role declared in `jcamSystemRoles` that matches no point-of-contact position in any JCAM system in scope, surfacing roles that would be created empty before they are built.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds ability to create and manage RegScale service accounts from the CLI. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-64510 https://regscale.readme.io/changelog/cli-64510 Fri, 11 Sep 2026 17:37:42 GMT RegScale CLI 6.45.10 adds @drop support to JCAM config fields for explicit import suppression.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `@drop` as an accepted value for `jcamPositionRoleNames` and `jcamAgencyDefinedDataItems` in JCAM profile config, allowing tenants to explicitly record that a point of contact or agency-defined attribute is intentionally excluded from import rather than silently omitting it.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-6458 https://regscale.readme.io/changelog/cli-6458 Thu, 10 Sep 2026 15:21:08 GMT JCAM imports can now auto-create missing system roles via a new `jcamSystemRoles` key in `init.yaml`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `jcamSystemRoles` key to `init.yaml` to declare system roles that JCAM imports should create when a plan is missing them, along with the five values RegScale requires that JCAM does not send; omitting the key preserves existing behaviour.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/regscale-63401 https://regscale.readme.io/changelog/regscale-63401 Wed, 09 Sep 2026 21:33:08 GMT RegScale 6.34.0.1 introduces Artifact Hub for templated, recurring artifact generation with 16 ready-to-use templates.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds Artifact Hub, a new workflow for creating reusable artifact templates, marking fields that change over time, and generating updated artifacts through a guided process.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Ships 16 ready-to-use templates in Artifact Hub for standardized artifact creation out of the box. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-6450 https://regscale.readme.io/changelog/cli-6450 Wed, 09 Sep 2026 15:38:40 GMT RegScale CLI 6.45.0 adds configurable console log format via init.yaml keys and environment variables.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `logFormat` and `logDateFormat` keys to `init.yaml` to configure console log output format and date format, overridable via `REGSCALE_LOG_FORMAT` and `REGSCALE_LOG_DATEFORMAT` environment variables (environment takes precedence).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Breaking changes: • `jcam --help` no longer lists the pre-rename spellings `check_custom_fields` and `test_jcam`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-6440 https://regscale.readme.io/changelog/cli-6440 Thu, 03 Sep 2026 01:01:23 GMT RegScale CLI 6.44.0 adds JCAM config validation via `jcam check_config` to catch misconfigured attribute mappings. • Adds validation to `jcam check_config` that checks `jcamAgencyDefinedDataItems` mappings against attributes JCAM actually carries, reporting entries configured for attributes JCAM does not have and attributes JCAM has that are not mapped. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-6430 https://regscale.readme.io/changelog/cli-6430 Mon, 31 Aug 2026 12:56:51 GMT RegScale CLI 6.43.0 adds dry-run milestone mapping for JCAM POA&M imports before committing data. • The `jcam dry_run` command now follows POA&Ms through to their milestones, letting practitioners verify milestone mapping before a live import rather than after. • Samples a subset of POA&Ms per system during `jcam dry_run` by default, so the mapping is proven without enumerating every record. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-64232 https://regscale.readme.io/changelog/cli-64232 Fri, 28 Aug 2026 13:00:45 GMT RegScale CLI 6.42.32 adds FedRAMP SSP interconnect and cryptographic module import commands, plus optional SSP ID on docx import • Adds a new FedRAMP SSP interconnect import command to the CLI. • Adds a new FedRAMP SSP cryptographic module import command to the CLI. • Adds an optional SSP ID parameter to the FedRAMP `docx` import command so an existing System Security Plan is updated in place rather than duplicated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/regscale-63330 https://regscale.readme.io/changelog/regscale-63330 Fri, 28 Aug 2026 11:52:35 GMT RegScale 6.33.3.0 adds a consolidated dashboard experience and a new Key Risk Indicator (KRI) monitoring system. • Introduces a Key Risk Indicator (KRI) system for organizations to monitor risk metrics. • Consolidates the dashboard experience into a unified view for accessing and reviewing organizational metrics. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-6420 https://regscale.readme.io/changelog/cli-6420 Wed, 26 Aug 2026 07:36:35 GMT RegScale CLI 6.42.0 adds JCAM dry-run position mapping, Splunk evidence owner/approver settings, and opt-in Wiz incremental pulls. • Adds `splunkSids` setting for offline Splunk evidence backfill runs. • Adds Splunk evidence owner and approver settings for controlling evidence attribution. • Adds JCAM position-to-role name mapping override to customize how positions are mapped during imports. • Adds a JCAM dry run mode that reports which positions' people would not be imported before committing the operation. • Adds opt-in Wiz incremental pulls that fetch only new or changed data. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/regscale-63310 https://regscale.readme.io/changelog/regscale-63310 Fri, 14 Aug 2026 14:00:44 GMT RegScale 6.33.1.0 expands AI Agent coverage to Lines of Inquiry, CAPs, Risk Treatment, Questionnaire Scoring, and more. • Extends AI Agent capabilities to Lines of Inquiry, Corrective Action Plans, Risk Treatment Mappings, Questionnaire Scoring, Lightning Assessment Tests, and Security Control Test Generation. • Adds RegML Mapping Recommendations (details not fully disclosed in release notes). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-3 https://regscale.readme.io/changelog/cli-3 Thu, 13 Aug 2026 13:34:17 GMT RegScale CLI 6.40.0 adds configurable artifact output directory and optional Wiz data-retention reconciliation • Adds `artifactsDir` setting to configure the base directory for scanner and integration output files. • Adds optional Wiz data-retention reconciliation that closes issues whose findings have aged out of Wiz's retention window, enabled via `wizRetentionReconciliation` and tuned with additional `w…` settings. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-6390 https://regscale.readme.io/changelog/cli-6390 Tue, 11 Aug 2026 02:06:12 GMT RegScale CLI 6.39.0 adds Splunk integration with asset/finding ingestion and evidence import via `splunk sync` • Adds `splunk sync` command that runs saved searches listed in `splunkSavedSearches` and imports assets, findings, and control evidence into RegScale. • New Splunk integration supports search, streaming export, saved searches, search job management, asset and finding processing, and evidence ingestion. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/regscale-63301 https://regscale.readme.io/changelog/regscale-63301 Mon, 10 Aug 2026 22:13:32 GMT RegScale 6.33.0 adds application hierarchy definition and global visibility controls in App Builder. • Adds the ability to define a hierarchy of applications on the App Management page. • Adds a global visibility toggle within the application's Advanced Security tab. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-6380 https://regscale.readme.io/changelog/cli-6380 Thu, 06 Aug 2026 01:37:53 GMT RegScale CLI 6.38.0 adds eMASS CAC authentication support for custom CA bundles (e.g. DoD PKI) via config, env var, and CLI flag. • Adds `emass.ssl_ca_cert` config key to trust a custom CA bundle (e.g. DoD PKI) when verifying the eMASS server certificate during CAC authentication. • Adds `EMASS_SSL_CA_CERT` environment variable as an alternative to `emass.ssl_ca_cert` for supplying the custom CA bundle path. • Adds `--ca-cert` option to the `emass_api register` command to specify the custom CA bundle at registration time. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-63769 https://regscale.readme.io/changelog/cli-63769 Fri, 31 Jul 2026 03:27:21 GMT RegScale CLI 6.37.69 adds asset-free Qualys/Prisma sync and Tanium ports/protocols integration. • Adds option to sync Qualys and Prisma vulnerabilities and issues without creating or updating assets. • Adds Tanium open ports and protocols synchronization to assets and the system Ports, Protocols, and Services table. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/regscale-63230 https://regscale.readme.io/changelog/regscale-63230 Sat, 25 Jul 2026 18:43:37 GMT RegScale 6.32.3.0 adds an Asset Scanning Tool De-Duplication option for administrators to control duplicate finding consolidation. • Adds an Asset Scanning Tool De-Duplication option, giving administrators control over how duplicate findings are identified and consolidated during asset scanning workflows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-63745 https://regscale.readme.io/changelog/cli-63745 Wed, 22 Jul 2026 23:01:09 GMT RegScale 6.37.45 adds eMASS full-system sync and AWS Inspector tag-based exclusion filtering. • New eMASS `sync_system` command synchronizes all structural records (assets, controls, POAMs, milestones, artifacts) between a RegScale SSP and its linked eMASS system in a single dependency-ordered invocation. • New `--exclude_tags` option for AWS Inspector sync to skip resources carrying specified tags. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/regscale-63220 https://regscale.readme.io/changelog/regscale-63220 Mon, 20 Jul 2026 03:35:36 GMT RegScale 6.32.2.0 expands AI provider support to Azure OpenAI, AWS Bedrock, and OpenAI-compatible endpoints. • Supports Azure OpenAI, AWS Bedrock, and OpenAI-compatible endpoints as AI providers, broadening deployment options for enterprise environments. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-63739 https://regscale.readme.io/changelog/cli-63739 Thu, 16 Jul 2026 22:09:13 GMT RegScale 6.37.39 adds eMASS asset inventory sync and expanded stakeholder address fields in the API. • New eMASS API hardware and software baseline sync commands pull asset inventory from eMASS, create or update RegScale assets, and push new assets back to eMASS. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/regscale-63115 https://regscale.readme.io/changelog/regscale-63115 Thu, 16 Jul 2026 00:23:04 GMT RegScale 6.31.1.5 adds custom rules support for POA&M configuration. • Adds custom rules configuration support for POA&M (Plan of Action & Milestones) items. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/regscale-63210 https://regscale.readme.io/changelog/regscale-63210 Wed, 08 Jul 2026 20:52:45 GMT RegScale 6.32.1.0 adds PIV card authentication architecture for high-assurance identity environments. • Supports PIV card authentication architecture, enabling organizations with advanced identity requirements (e.g., federal agencies) to integrate Personal Identity Verification-based access into the platform. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/regscale-63200 https://regscale.readme.io/changelog/regscale-63200 Fri, 03 Jul 2026 12:40:41 GMT RegScale 6.32.0.0 introduces a redesigned UI navigation experience with new features available exclusively in it. • New UI navigation experience replaces the legacy layout; most new features and improvements are available only in the new UI going forward. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/regscale-63114 https://regscale.readme.io/changelog/regscale-63114 Mon, 29 Jun 2026 19:42:46 GMT RegScale 6.31.1.4 adds Wiz STIG sync via XCCDF Benchmark and pre-flight validation for eMASS exports. • Supports synchronizing Wiz STIG checks through the XCCDF Benchmark workflow for streamlined Wiz integration. • Introduces pre-flight validation for eMASS exports to surface potential issues before submission. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/regscale-63113 https://regscale.readme.io/changelog/regscale-63113 Thu, 25 Jun 2026 15:12:45 GMT RegScale 6.31.1.3 adds XCCDF TestResults import and enhanced CKL/CKLB ingestion for broader assessment data coverage. • Supports importing XCCDF TestResults into the assessment pipeline, enabling additional security assessment data sources within RegScale. • Enhanced CKL/CKLB import capabilities for expanded vulnerability management and assessment data ingestion. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-6350 https://regscale.readme.io/changelog/cli-6350 Tue, 23 Jun 2026 16:28:58 GMT RegScale CLI 6.35.0 streams Nessus imports and routes STIG/CIS compliance findings to checklists and POA&Ms. • Nessus scan imports now use a single streaming pass per file, enabling faster and lower-memory processing of large scan files. • Nessus STIG and CIS compliance results now generate security checklists and POA&M issues instead of vulnerabilities, with re-scans automatically closing remediated compliance findings. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-63465 https://regscale.readme.io/changelog/cli-63465 Wed, 17 Jun 2026 12:59:51 GMT RegScale CLI 6.34.65 changes compliance scan default behavior and documents vulnerabilityCreation options. • Changes compliance scan default: failed control assessments no longer auto-create issues; failed controls remain visible on assessments, with opt-in via `complianceCreation` set to `Issue` or `POAM`. • Documents `vulnerabilityCreation` configuration options for controlling how vulnerability findings are handled. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale https://regscale.readme.io/changelog/cli-63459 https://regscale.readme.io/changelog/cli-63459 Tue, 16 Jun 2026 03:31:43 GMT RegScale CLI 6.34.59 adds eMASS API sync commands and automatic artifact upload on XML import. • New `emass_api` commands enable synchronization of POA&Ms, controls, milestones, and artifacts directly with eMASS via its API. • eMASS XML import now automatically uploads referenced artifact files to the System Security Plan when those files are present alongside the export. • Supports per-asset Issue/POAM creation, allowing findings to be tracked at the individual asset level. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/regscale