SandboxAQ AQtive Guard

No entries match these filters. Clear filters

1. changelog Sep 25, 2026 · issue 085

   AQtive Guard on-premises packages now available for RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence. 10.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

2. changelog Sep 24, 2026 · issue 084

   SandboxAQ AQtive Guard: Adds on-premises package support for RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence. 10, enabling AQtive Guard deployment on Red Hat Enterprise Linux 10 hosts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

3. changelog Sep 22, 2026 · issue 082

   AQtive Guard on-premises packages now available for RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence. 10.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

4. AQtive Guard Changelog↑ Sep 16, 2026 · release notes

   AQtive Guard adds on-prem RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence. 10 support and configurable Redis queue limits via new env vars.

   • Adds on-premises packages for RHEL 10
   • Adds new configuration options RQ_QUEUE_SIZE_LIMIT_ANALYSIS, RQ_QUEUE_SIZE_LIMIT_HIGH, RQ_QUEUE_SIZE_LIMIT_LOW, and RQ_QUEUE_SIZE_LIMIT_CROWDSTRIKE to limit Redis queue sizes (default 10,000; set to 0 for unlimited)
   • Adds queueStatus field to the GraphQL schema to monitor current queue sizes and limits
   • Serves feature flags from application configuration instead of an external service

   4 details in Everything

5. 25.01.0 Jan 9, 2025 · release notes

   SandboxAQ AQtive Guard 25.01.0 adds CrowdStrike integration for scan orchestration and a new Scans page

   • Adds CrowdStrike integration for Scan orchestration with settings and test connection functionality
   • Introduces new Scans page for filesystem scan orchestration allowing manual scans through CrowdStrike
   • Adds a table of scans with scan status, success, and number of affected hosts
   • Adds a nested hosts table with details of each host scan

   4 details in Everything

6. 24.12.3 Dec 20, 2024 · release notes

   SandboxAQ AQtive Guard 24.12.3 enhances Java analysis to detect Password-Based Encryption issues.

7. 24.11.1 Nov 13, 2024 · release notes

   SHA-1SHA-1A cryptographic hash function standardized by NIST that produces a 160-bit digest; tools use it for file integrity checks, though it is now considered cryptographically broken and unsuitable for collision-resistant applications. rule now evaluates risk by usage context (RNG, HMACHMACA keyed hash that proves a message came from someone holding a shared secret and was not altered. Webhooks and API request signing commonly use it., signature) rather than uniform severity.

   └──▷ HOW TO FIND IT
   Verify how AQtive Guard now classifies SHA-1 usage in your codebase to distinguish between risky signatures and safer RNG/HMAC patterns.
   📍In the console, navigate to the Java application analysis view and check the SHA-1 rule results for updated severity ratings.
   • Modifies SHA-1 rule severity logic to evaluate context, changing ratings from static Medium to Pass for RNG, Low for HMAC, High for digital signatures, and Medium for other uses.

   1 detail in Everything

8. 24.10.4 Oct 30, 2024 · release notes

   ServiceNow integration added via new APIs (updateServiceNowIntegration, checkServiceNowIntegration, etc.) and Jira export changes.

   • Adds updateServiceNowIntegration API to configure ServiceNow integration
   • Adds checkServiceNowIntegration API to validate ServiceNow configuration
   • Adds unlinkServiceNowIntegration API to unlink a ServiceNow integration
   • Adds serviceNowExportInstance API to export a single instance to ServiceNow
   • Adds serviceNowExportReport API to export an entire report to ServiceNow

   +3 more show less

   • Adds serviceNowCancelReportExport API to cancel a bulk export to ServiceNow
   • Changes Jira export behavior: now exports all failed instances instead of only the 50 with highest priorities
   • Persists the exported URL for future reference when exporting one or more instances to Jira or ServiceNow

   8 details in Everything

9. 24.10.3 Oct 23, 2024 · release notes

   SandboxAQ AQtive Guard 24.10.3 reverts deprecation of jira_export_instance mutation for single-instance export.

   • jira_export_instance mutation no longer deprecated, enabling controlled single instance export via API

   1 detail in Everything

10. 24.10.2 Oct 16, 2024 · release notes

    Adds ReportDone.locations and Location.instances GraphQL connections for location data retrieval.

    └──▷ TRY IT
    Retrieve all locations associated with a specific completed report via GraphQL.
    copy

    $ query {
      reportDone(id: "<report_id>") {
        locations {
          instances {
            id
            name
          }
        }
      }
    }

    Filter location instances by specific criteria within a report.
    copy

    $ query {
      reportDone(id: "<report_id>") {
        locations(filter: {"field": "value"}) {
          instances {
            id
          }
        }
      }
    }

    • Adds ReportDone.locations connection in the GraphQL API to retrieve all locations found in a report
    • Adds filtering support to the Location.instances connection

    2 details in Everything

11. 24.10.1 Oct 9, 2024 · release notes

    SandboxAQ AQtive Guard adds date-range filtering to Organization.overview API

    • Adds fromDate and toDate inputs to Organization.overview endpoint to filter summary by time range

    1 detail in Everything

12. 24.10.0 Oct 2, 2024 · release notes

    SandboxAQ AQtive Guard adds Tanium integration and UI enhancements in v24.10.0

    • Enabled Tanium integration for retrieval process
    • Migrated the project settings to a new UI
    • Enhanced retrieval logs with more detailed and enriched data for every retrieval step

    3 details in Everything

13. 24.09.2 Sep 11, 2024 · release notes

    Adds streaming flow API mutations for real-time application trace uploads and analysis

    • createStreamUpload, generatePresignedPartUrls, finalizeStreamUpload, and refreshStreamUpload mutations added to support the new streaming flow capability

    1 detail in Everything

14. 24.08.4 Aug 28, 2024 · release notes

    AQtive Guard 24.08.4 consolidates system configuration and API options in a new Settings dropdown

    └──▷ HOW TO FIND IT
    Access the new unified navigation hub for managing users, integrations, profiles, sensors, and API interactions from the menu bar.
    📍In the menu bar, click Settings to access Users, Integrations, Profiles, Sensors, and API Explorer.
15. 24.08.3 Aug 21, 2024 · release notes

    Adds GraphQL filters for trace type in ReportsFilter, TracesFilter, and related connections.

    • ReportsFilter.traceType added to the GraphQL schema to filter reports by their trace type
    • TracesFilter.traceType added to the GraphQL schema to filter traces by their trace type
    • New traceType fields accepted on Project.traces, Slot.traces, Project.reports, Slot.traces, and Trace.reports connections for filtering

    3 details in Everything

16. 24.08.1 Aug 14, 2024 · release notes

    Adds Network Analyzer to Sensors page UI and IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. auth support for managed secrets with DATABASE_URL.

    └──▷ USE IT
    Configure a secret provider to use IAM authentication for a PostgreSQL database via the DATABASE_URL label, replacing static password requirements.
    text copy

    SECRET_PROVIDER='{"provider": "aws", "config": {"region_name": "<region>"}, "labels":{"DATABASE_URL": {"label": {"hostname": "<rds-hostname>", "username": "postgres", "port": 5432}, "encoding": "RAW", "auth_type": "IAM"}}}'

    • auth_type: "IAM" is now supported for managed secrets labeled with DATABASE_URL, allowing direct AWS IAMAWS IAMAWS Identity and Access Management is Amazon's service for controlling who and what can call AWS APIs, by attaching policies that allow or deny actions on resources. Cyber tools use it to scope credentials to least privilege. authentication instead of static credentials.
    • The Network Analyzer view is added to the Sensors page in the UI.

    2 details in Everything

17. 24.07.3 Jul 31, 2024 · release notes

    Jira exports now include rule and instance numbers; UI updates for API Explorer/Knowledge Base menus and error messages.

    └──▷ HOW TO FIND IT
    View rule identifiers directly in Jira issue summaries when exporting from the Jira collector.
    📍N/A (UI-driven export behavior change)
    • UI: Menu bar is displayed on the API Explorer and Knowledge Base pages

    1 detail in Everything

18. 24.07.2 Jul 24, 2024 · release notes

    SandboxAQ AQtive Guard adds PQ crypto analysis, SSH handshake parsing, and improved UI sorting.

    • Parse, analyze, store and display SSH handshakes from network captures
    • Parse, store and display DilithiumDilithiumNIST's main post-quantum digital signature standard (FIPS 204), formerly Dilithium. It is the planned replacement for RSA and ECDSA signatures on certificates and code., Falcon and Sphincs keys
    • Independently analyze key exchange and signature algorithms for PQ readiness in TLS handshakes
    • Organization.inventory, Project.inventory and ReportDone.inventory now include Network reports via GraphQL
    • Organization.vulnerabilities, Project.vulnerabilities and ReportDone.vulnerabilities edges sorted by descending severity, descending numberOfSlots, ascending number

    +1 more show less

    • Vulnerability.slots and ReportVulnerability.slots connections sorted by descending instancesFailed

    6 details in Everything

19. 24.07.1 Jul 17, 2024 · release notes

    SandboxAQ AQtive Guard 24.07.1 adds sorting and filtering for Users via GraphQL API

    • Added UsersSorterFields.preferredName field to the GraphQL API for sorting users by preferred name
    • Added UsersSorterFields.origin field to the GraphQL API for sorting users by account type
    • Added UsersFilterFields.preferredName field to the GraphQL API for filtering users by preferred name
    • Added UsersFilterFields.origin field to the GraphQL API for filtering users by account type
    • Added UsersFilterFields.roles field to the GraphQL API for filtering users by permission roles

    +2 more show less

    • UI Users table now supports sorting by Preferred name and Account type columns
    • UI Users table now includes filters for Preferred name, Account type, and Roles

    7 details in Everything

20. 24.07.0 Jul 12, 2024 · release notes

    SandboxAQ AQtive Guard v24.07.0 adds SSH handshake visibility in reports and live secret rotation via DATABASE_URL

    └──▷ HOW TO FIND IT
    Inspect SSH handshake details within a network report alongside TLS data.
    📍In the Report Handshakes tab, use the Protocol selector to switch from TLS to SSH views.
    Query slots sorted by their unique identifier using the new GraphQL sorter.
    copy

    $ query { slots(sorter: { field: SlotsSorterFields.id }) { id name } }

    Query users sorted by whether they are currently logged in.
    copy

    $ query { users(sorter: { field: UsersSorterFields.current }) { id username } }

    • Adds support for viewing SSH handshakes in network report trace analysis via the Protocol selector.
    • Enables live rotation of managed secrets labeled with DATABASE_URL (e.g., via AWS Secrets Manager).
    • Adds GraphQL sorter fields (SlotsSorterFields.id, UsersSorterFields.id, UsersSorterFields.current, ProfilesSorterFields.preset) for sorting slots, users, and profiles in the API.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The file cryptography_operations_statistics.csv in bundled Report CSV export ZIP files is renamed to statistics.csv.
    • !Default report name format changed from Report 1 for {trace name} to Report for {trace name}.
21. 24.06.3 Jun 24, 2024 · release notes

    AQtive Guard 24.06.3 adds RC5 analysis, RDS credential retrieval via SECRET_PROVIDER, and Jira GraphQL mutations.

    └──▷ TRY IT
    Validate Jira project configuration before attempting an export via GraphQL.
    copy

    $ mutation { checkJiraIntegration(input: {projectKey: "PROJ", issueType: "Bug"}) }

    Ensure Jira export fields and priorities meet requirements.
    copy

    $ mutation { checkJiraExport(input: {issueType: "Task"}) }

    • RC5 analysis added to the backend scanning engine
    • Enhanced 2-key-3DES reporting capabilities
    • Added SECRET_PROVIDER=JSON support for retrieving RDS credentials in AWS deployments
    • Exposed checkJiraIntegration GraphQL mutation to validate project key and issue type
    • Exposed checkJiraExport GraphQL mutation to validate required fields and priority values for Jira exports

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Handshake.client_timestamp is renamed to timestamp
    • !Handshake.server_timestamp field removed
22. 24.06.1 Jun 5, 2024 · release notes

    AQtive Guard 24.06.1 adds REPORT Operations tab, GraphQL project sorting/filtering by lastAnalysis, and SESSION_DURATION_SECONDS config.

    • Adds the Report Operations tab to display all cryptographic operations identified in the analysis of compatible traces
    • Adds the optional configuration parameter SESSION_DURATION_SECONDS to set the timeout of web sessions with a default value of 86400 seconds
    • Adds the ProjectsSorterFields.lastAnalysis GraphQL field to sort projects based on their last created or completed report
    • Adds the ProjectsFilterFields.lastAnalysis GraphQL field to filter projects based on their last created or completed report

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The Project.lastUpdated field is deprecated and will be removed in a future release; use the Project.lastAnalysis field instead
    • !The ProjectsFilterFields.lastUpdated filter is deprecated and will be removed in a future release; use the ProjectsFilterFields.lastAnalysis filter instead
23. 24.05.5 May 30, 2024 · release notes

    24.05.5 adds GraphQL introspection config and Tanium timeout fields to the API

    └──▷ USE IT
    Enable schema introspection for API exploration debugging.
    config copy

    ENABLE_GRAPHQL_INTROSPECTION=true

    Customize Tanium integration timeouts via GraphQL mutation.
    copy

    $ mutation {
      updateTaniumIntegration(
        input: { requestTimeout: 60, downloadRequestTimeout: 120 }
      )
    }

    • Adds ENABLE_GRAPHQL_INTROSPECTION config value to control API introspection queries
    • Updates updateTaniumIntegration mutation to accept requestTimeout and downloadRequestTimeout inputs
    • Adds requestTimeout and downloadRequestTimeout fields to the TaniumIntegration GraphQL type

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The Project.tanium field now returns null if ProjectTanium.computerGroup is unset
    • !The Organization.users and Organization.testers connections will now return an empty list if the current user does not have permission to view other Users
24. 24.05.4 May 22, 2024 · release notes

    Adds OperationType enum and operationType field to GraphQL OperationsFilterFields and OperationsSorterFields

    └──▷ TRY IT
    Query operations filtered by specific operation types and sorted by category using the new enum fields
    copy

    $ query {
      operations(
        filter: { type: { value: "SCAN" } }
        sort: { field: CATEGORY, order: ASC }
      ) {
        id
        operationType
        category
      }
    }

    • Adds the OperationType enum to the GraphQL API, changing Operation.type return type from string to enum
    • Adds value (of OperationType enum) and category (of OperationCategory enum) fields to OperationsFilterFields and OperationsSorterFields types

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The return value of Operation.type changes from string to the new OperationType enum; clients must now use the Operation.operationType field to retrieve the string value.
25. 24.05.2 May 8, 2024 · release notes

    Adds type/category operation filters and sorters to GraphQL API

    └──▷ TRY IT
    Filter operations by category using the new GraphQL field.
    copy

    $ query {
      operations(filter: { category: "execution" }) {
        id
        type
      }
    }

    Sort operations by their technical type using the new sorter.
    copy

    $ query {
      operations(sort: [{ field: "type", order: ASC }]) {
        id
        type
      }
    }

26. 24.05.1 May 1, 2024 · release notes

    AQtive Guard v24.05.1 adds GraphQL sorters/filters for callsites and operations, plus new Operation fields.

    • Adds CallSitesSorter and CallSitesFilter to the CallSites GraphQL connection to sort and filter Report.callsites by fields like context and timestamp
    • Enables sorting and filtering for Report.operations, Key.operations, Instance.operations, and Certificate.operations connections using id, context, and timestamp
    • Adds the Operation.context field (returning OperationContext enum) and Operation.firstCallSite field to the GraphQL schema
    • Adds new fields role, cipherData, wrappedKeyId, and wrappedByKeyId to the edge of the Operation.keys connection

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !UI Handshakes and calls timestamps are now formatted as a ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability.-8601 string
27. 24.04.2 Apr 24, 2024 · release notes

    Adds report certificate sorting, project slots sorters, TLS vulnerable ciphersuites detection for DES/3DES/RC4

    • Added report certificate sorters in the UI.
    • Added project slots sorters in the UI.
    • Added CertificatesSorter to GraphQL API for sorting and filtering Report.certificates connection based on Certificate fields.
    • Added TLS vulnerable ciphersuites rules for network analysis detecting DES, 3DES & RC4.

    4 details in Everything

28. 24.04.1 Apr 17, 2024 · release notes

    Adds GraphQL Operation.timestamp/valueJson fields, Operation.calls connection, kept_by_filters arg, and cs logs bundle CLI tool

    └──▷ TRY IT
    Query only operations that are kept by current project exceptions via GraphQL API
    copy

    $ curl -X POST https://<host>/graphql -H 'Content-Type: application/json' -d '{"query": "{ instance { operations(kept_by_filters: true) { timestamp valueJson calls { ... } } } }"}'

    Inspect and merge logs from AQtive Guard services on an on-premises deployment using the new CLI tool
    copy

    $ cs logs bundle --help

    • Added Operation.timestamp, Operation.valueJson fields and the Operation.calls connection to GraphQL schema
    • Added kept_by_filters argument to Instance.operations, Instance.calls and Operation.calls connections for filtering by project exceptions
    • Added new cs logs bundle CLI tool for on-premises deployments to inspect, filter and merge logs emitted by AQtive Guard services

    3 details in Everything

29. 24.04.0 Apr 10, 2024 · release notes

    SandboxAQ AQtive Guard adds a logs subcommand, Tanium GraphQL mutations, and improved TLS detection rules in v24.04.0

    └──▷ TRY IT
    Inspect and filter logs from the local on-premises deployment without external tools.
    copy

    $ cs on-premises logs --filter 'severity:ERROR' --merge

    Trigger a stop action for an active Tanium scan using the new GraphQL mutation.
    copy

    $ curl -X POST https://<aqtiveguard-host>/graphql -H 'Content-Type: application/json' -d '{"query": "mutation { stopTaniumScan(id: \"<scan_id>\") { success } }"}'

    Query the associated Tanium computer group for a project to identify affected hosts.
    copy

    $ curl -X POST https://<aqtiveguard-host>/graphql -H 'Content-Type: application/json' -d '{"query": "{ project(id: \"<project_id>\") { taniumComputerGroup { name } status } }"}'

    • cs on-premises logs sub-command allows inspecting, merging and filtering logs locally
    • Tanium GraphQL API supports querying associated computer group and scan status fields
    • Rules improved to detect TLS ciphersuites using DES/3DES/RC4

    3 details in Everything

30. 24.03.5 Apr 4, 2024 · release notes

    AQtive Guard 24.03.5 adds certificate exclusion profiles and Jira URL display

    • Displays the configured Jira base url in a non-editable UI field for visibility

    1 detail in Everything

31. 24.03.4 Mar 27, 2024 · release notes

    Adds request_id to logs and multiple filters to Organization.inventory/overview/vulnerabilities GraphQL API fields

    └──▷ TRY IT
    Query organization inventory for vulnerabilities in a specific date range and overview type
    copy

    $ query {
      Organization(id: "org-123") {
        inventory(overviewTypes: ["VULNERABILITY"], from: "2024-01-01", to: "2024-03-27") {
          edges { node { id } }
        }
      }
    }

    Fetch vulnerabilities with exceptions for a specific overview type
    copy

    $ query {
      Organization(id: "org-123") {
        vulnerabilities(overviewTypes: ["HIGH_RISK"], withExceptions: true) {
          edges { node { id } }
        }
      }
    }

    • Adds request_id field to log entries for cross-source correlation
    • Adds overviewTypes, from, to, and withExceptions filters to Organization.inventory GraphQL API field
    • Adds overviewTypes filter to Organization.overview GraphQL API field
    • Adds overviewTypes, from, to, and withExceptions filters to Organization.vulnerabilities GraphQL API field
    • Adds overviewTypes filter to Organization.timeRepresentationSlices GraphQL API field

    5 details in Everything

32. 24.03.3 Mar 21, 2024 · release notes

    SandboxAQ AQtive Guard 24.03.3 adds TlsHandshakeStatus enum and new fuzzer profile management UI/API features.

    └──▷ TRY IT
    Check how many projects reference a specific fuzzer profile via GraphQL.
    copy

    $ curl -X POST https://<host>/graphql -H 'Content-Type: application/json' -d '{"query": "{ Profile(id: \\"<profile_id>\\") { projectCount } }"}'

    Filter TLS handshake reports by their current status using the new GraphQL argument.
    copy

    $ curl -X POST https://<host>/graphql -H 'Content-Type: application/json' -d '{"query": "{ handshakes(statuses: [INCOMPLETE]) { edges { node { id } } } }"}'

    • Adds viewing, creating and duplicating fuzzer profiles in the UI
    • Adds Profile.projectCount field to GraphQL API
    • Adds new statuses argument to handshakes connection in GraphQL

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Removed TlsOrphanHandshake type and orphanHandshakes connection in GraphQL
33. 24.03.1 Mar 6, 2024 · release notes

    SandboxAQ AQtive Guard 24.03.1 adds project exception and profile management GraphQL mutations

    • Project.exceptions connection enables retrieval of project exceptions
    • ProjectExceptionsSorter and ProjectExceptionsFilter added for sorting and filtering project exceptions by ProjectException fields
    • updateProjectException mutation allows updating an existing project exception
    • deleteProjectException mutation allows deleting a project exception
    • Expose Profile model with multiple new fields, including support for tracer and fuzzer profiles

    +5 more show less

    • createTracerProfile mutation adds a new tracer profile
    • createFuzzerProfile mutation adds a new fuzzer profile
    • updateTracerProfile mutation updates an existing tracer profile
    • updateFuzzerProfile mutation updates an existing fuzzer profile
    • deleteProfile mutation removes a profile

    10 details in Everything

34. 24.02.3 Feb 21, 2024 · release notes

    AQtive Guard 24.02.3 adds Profile lastUsed/timesUsed fields and updates user mutations.

    • Adds lastUsed and timesUsed fields to the GraphQL Profile model
    • Updates createLocalUser mutation arguments for uniqueness, case-insensitivity, and password requirements
    • Updates updateUser mutation argument behavior for level, roles, and authTags

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The fields Organization.keys and Organization.certificates now return an empty connection for users with the tester level
    • !Removed the createOpenIdUser mutation; use OID provider instead
35. 24.02.2 Feb 14, 2024 · release notes

    SandboxAQ AQtive Guard 24.02.2 adds OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. certificate config and default project sorting

    └──▷ HOW TO FIND IT
    Configure a custom CA bundle for OIDC verification using the new environment variable.
    📍export OIDC_SERVER_CERT=/path/to/custom-ca-bundle.pem
    • Adds OIDC_SERVER_CERT configuration option to specify a custom CA bundle for OpenIDOpenIDAn open standard for decentralized authentication that lets a user prove their identity to a site via a trusted third-party provider, so tools can delegate login without managing credentials themselves. Server SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. verification
    • Changes the Projects table UI to sort by creation date (most recent first) by default

    2 details in Everything

36. 24.02.0 Feb 1, 2024 · release notes

    SandboxAQ AQtive Guard 24.02.0 adds bulk JIRA export, Venafi/Tanium GraphQL mutations, and API opt-out flags.

    └──▷ USE IT
    Bulk create JIRA issues for multiple instances at once.
    api copy

    mutation {
      jiraExportInstances(input: ["inst_1", "inst_2"]) {
        ... on JiraExportIssue { id }
        ... on JiraExportError { reason }
      }
    }

    Update or check a Tanium integration via the API.
    api copy

    mutation {
      updateTaniumIntegration(input: { /* config */ }) {
        success
      }
    }

    • Adds jiraExportInstances mutation to create multiple JIRA issues in bulk from a list of at most 50 instance IDs
    • Adds checkVenafiIntegration, checkTaniumIntegration, updateVenafiIntegration, and updateTaniumIntegration GraphQL mutations for Venafi and Tanium integration management
    • Adds API opt-out flags to disable GraphQL and stacktrace logging

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The jiraExportInstance mutation is deprecated and will be removed in a future release; users must migrate to jiraExportInstances.
37. 24.01.2 Jan 24, 2024 · release notes

    Adds client_ip and forwarded_for_client_ip fields to audit logs for source IP visibility

    • Adds client_ip and forwarded_for_client_ip fields to audit log entries, recording the client's IP address and original proxy IP respectively
    • Improves UI accessibility in the project dashboard and project/slots views

    2 details in Everything

38. 24.01.1 Jan 18, 2024 · release notes

    AQtive Guard 24.01.1 adds server-side docs, GraphQL severities filter, and .sst detection.

    └──▷ TRY IT
    Query vulnerabilities filtered by severity via GraphQL.
    copy

    $ curl -X POST http://hostname/graphql -H 'Content-Type: application/json' -d '{"query": "{ organization { vulnerabilities(severities: [\"critical\"]) { id title } } }"}'

    • Ships General AQtive Guard documentation with the software at http://hostname/docs
    • Adds the severities filter to the Organization.vulnerabilities GraphQL field
    • Enables the host-scanner to detect .sst files (Serialized Certificate Store files)

    3 details in Everything

39. 24.01.0 Jan 11, 2024 · release notes

    Adds Project-level Jira configuration via GraphQL API

    • GraphQL endpoint now supports configuring Jira at the Project level.
    • The cipherSuite filter in Handshakes shows only selected ciphersuites.

    2 details in Everything

40. 23.12.0 Dec 12, 2023 · release notes

    SandboxAQ AQtive Guard 23.12.0 adds JiraIntegration GraphQL model and mutations for Tanium integration logging improvements.

    • Adds JiraIntegration GraphQL model to Organization.integrations
    • Adds several mutations to manage the updated JIRA integration
    • Improves logging context for the Tanium integration

    3 details in Everything

41. 23.11.2 Nov 30, 2023 · release notes

    Adds GraphQL query capability for key roles within the operations field

    └──▷ TRY IT
    Retrieve key roles assigned to specific operations via the API.
    copy

    $ curl -X POST https://<host>/graphql -H 'Content-Type: application/json' -d '{ "query": "{ operations { key_roles } }"}'

42. 23.11.1 Nov 22, 2023 · release notes

    Adds RuleObjectType type and mainObjectTypes field to AQtive Guard GraphQL API

    └──▷ TRY IT
    Retrieve the main object types associated with a specific rule via the GraphQL API.
    copy

    $ graphql '{ rule(id: "123") { mainObjectTypes { name } } }'

    • Adds the new GraphQL type RuleObjectType to expose rule object metadata
    • Adds the mainObjectTypes field to the Rule object in the GraphQL schema

    2 details in Everything

43. 23.11.0 Nov 15, 2023 · release notes

    SandboxAQ AQtive Guard 23.11.0 adds saved organization dashboard filters and improved issue severity readability.

44. 23.09.10 Nov 8, 2023 · release notes

    Adds AWS Secret Manager support, OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. multi-group roles, and refined cert display

    • Adds AWS_SECRET_MANAGER integration for certificate-based rules to fetch secrets
    • Allows OIDC_ROLE_CLAIM_NAME to map to a list of groups instead of a single group in OpenID ConnectOpenID ConnectOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. configuration
    • Displays only the relevant certificate in rule instances to reduce noise

    3 details in Everything

45. 23.09.9 Oct 20, 2023 · release notes

    Adds saved filters to org dashboard; adds RQ_NUM_WORKERS/RQ_NUM_WORKERS_ANALYSIS config keys for on-prem vertical scaling

    └──▷ BREAKING ON UPGRADE

    • !The Trace.size GraphQL API field type changes from Int to BigInt, requiring clients to handle larger integer values.
46. 23.09.7 Oct 11, 2023 · release notes

    AQtive Guard 23.09.7 adds Jira integration and fixes large trace uploads.

    • Adds Jira issue export to automatically create issues in Jira via the AQtive Guard Web Interface
    • Adds Jira form integration to launch an editable form for submitting individual instances as Jira issues
    • Changes CreateTraceInput.size GraphQL input field type from Int to BigInt

    3 details in Everything

47. 23.09.5 Sep 29, 2023 · release notes

    Adds S3 connectivity verification via STORAGE_EXTENDED_HEALTH_CHECK environment variable

    └──▷ USE IT
    Verify S3 storage connectivity and permissions during startup or health checks
    shell copy

    export STORAGE_EXTENDED_HEALTH_CHECK=true && ./aqtive-guard start

48. 23.09.4 Sep 28, 2023 · release notes

    SandboxAQ AQtive Guard 23.09.4 adds Network Analyzer Handshakes tab, audit log file/config options, per-project Tanium settings, tag-based auth, and Jira integration.

    └──▷ HOW TO FIND IT
    Configure audit logs to rotate daily and write to a specific path instead of stdout.
    📍N/A (Backend configuration)
    • Adds Handshakes & Ciphersuites tab to Network Analyzer reports with ciphersuite filtering
    • Allows configuring audit logging to file, rotating file, separate log level, and structured API via revamped backend
    • Enables per-project Tanium integration configuration instead of organization-level only
    • Introduces tag-based authorization for assigning roles based on OpenID ConnectOpenID ConnectOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. token claims
    • Adds Jira form integration and issue collector setup for company-managed projects

    5 details in Everything

49. 23.09.2 Sep 19, 2023 · release notes

    SandboxAQ AQtive Guard 23.09.2 adds filtering/sorting to HandshakesFilter API and improves GraphQL count performance

    • Adds filters: HandshakesFilter and sorters: [HandshakesSorter] parameters to the ReportDone.handshakes GraphQL query
    • Adds Rule.filterStatus field to the GraphQL schema for filtering logic
    • Improves performance of GraphQL queries that only retrieve the totalCount field

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The ReportDone.handshakes query now requires the new parameters and no longer accepts the previous signature without them.
50. 23.09.1 Sep 7, 2023 · release notes

    New UI available for on-premises deployments (disabled by default).

51. 23.09.0 Sep 1, 2023 · release notes

    SandboxAQ AQtive Guard 23.09.0 adds Tanium Computer Group scoping to projects and legacy UI locations box

    └──▷ HOW TO FIND IT
    Scope Tanium Computer Group integration to a specific project rather than the entire organization.
    📍Navigate to Project Settings › Integrations › Tanium and set the Computer Group
    • Tanium Computer Group setting is now configurable at the project level (formerly at the organization level).

    1 detail in Everything

52. 23.08.2 Aug 28, 2023 · release notes

    SandboxAQ AQtive Guard 23.08.2 adds UI trace naming, printable inventory charts, and GraphQL schema updates.

    └──▷ TRY IT
    Upload a trace with a specific name using the GraphQL API.
    copy

    $ mutation { createTrace(input: { fileName: "trace.bin", name: "my-secure-trace" }) { id } }

    Filter traces by instance number in GraphQL queries.
    copy

    $ query { traces(filter: { field: InstancesFilterFields.number, value: "1" }) { edges { node { id } } } }

    Retrieve certificate details including extensions and signature via GraphQL.
    copy

    $ query { certificates { edges { node { id extensions signature version } } } }

    • CreateTraceInput.name and CreateTraceInput.fileName allow specifying trace names via API
    • InstancesFilterFields.number enum enables filtering by instance number in GraphQL queries
    • Certificate fields (extensions, signature, version) available in GraphQL schema
    • Printable report export now includes inventory summary chart bars

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Location.fileType type changed from String to Filetype
    • !CreateTraceInput.name type changed from String! to String
53. 23.08.1 Aug 24, 2023 · release notes

    Adds ReportDone.rules GraphQL fields and types to the API backend.

54. 23.08.0 Aug 15, 2023 · release notes

    SandboxAQ AQtive Guard 23.08.0 adds UI dashboard/project filtering and GraphQL slots API enhancements.

    └──▷ USE IT
    Filter slots in your cyber tooling's GraphQL API by the state of their latest report.
    graphql copy

    query {
      Project(slots: { filter: { lastReportState: "done" } }) {
        slots {
          name
          lastReportState
        }
      }
    }

    Use the new UI organization dashboard to filter analysis results by specific tags.
    📍In the Organization dashboard, use the Tags filter dropdown to select and slice your data.
    • Adds UI Organization dashboard with slicing/filtering by tags, projects and profiles.
    • Adds Projects page capability to uncollapse top priority issues to show affected reports.
    • Adds Reports table displaying active/latest report per slot with status filter and sorters.
    • Adds GraphQL SlotsSorters argument to Project.slots for sorting slots in the API.
    • Adds enum values lastReportCreatedAt, lastReportState, lastReportTraceName to SlotsFilterFields.

    +2 more show less

    • Adds new fields Key.pkcs11Attributes, Key.source, Location.hostname, algorithmSummary, Operation.operationContext, Operation.operationType, Operation.report, Query.version, Report.project, Slot.distinctCallSites, Slot.lastReport, Slot.lastReportCreatedAt, Slot.lastReportState, Slot.lastReportTraceName, Slot.latestReport, Slot.reportCount to GraphQL schema.
    • Moves Organization issues summary to Projects tab and replaces Slots table with Reports table in UI.

    7 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Former Slots table is replaced by the new Reports table; slot information changes now use the three dot action menu instead of direct table editing.
    • !Manual report generation from UI is removed; reports are now analyzed automatically upon trace upload using the project default profile. To use a different profile, you must use the API.
55. 23.07.2 Jul 26, 2023 · release notes

    SandboxAQ AQtive Guard 23.07.2 adds GraphQL filters for report key, org key, and Instance nodes.

    • Adds reportKey filter to the GraphQL API
    • Adds orgKey filter to the GraphQL API
    • Adds filter support on Instance nodes in GraphQL

    3 details in Everything

56. 23.07.1 Jul 19, 2023 · release notes

    Adds Jira integration and project exceptions to GraphQL API; removes Redis dependency for all-in-one

    └──▷ TRY IT
    Export findings to Jira using the new integration capability
    copy

    $ mutation { jiraExportInstance(input: { projectId: "<project-id>", instanceId: "<instance-id>" }) { success } }

    Create an exception for a specific rule violation in a project
    copy

    $ mutation { createProjectException(input: { projectId: "<project-id>", reason: "<reason>" }) { id } }

    Uninstall external Redis after upgrading the all-in-one package since it is now built-in
    shell copy

    sudo apt remove redis-server

    • Integrates Jira exports via jiraExportInstance mutation and JiraIntegration type in the GraphQL API
    • Enables project exception management with createProjectException mutation and related types (ProjectException, ProjectExceptionType)
    • Bundles Redis directly into the AQtive Guard Analyzer Platform all-in-one package (running as cryptosense-analyzer-redis), removing the external dependency

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The Operation.type field in the GraphQL API now returns a String! instead of OperationType!, and the OperationType type is removed
    • !Fields Rule.access, Rule.consequences, Rule.expertise, Rule.explanation, Rule.kbLink, Rule.resources, and Rule.shortExplanation in the GraphQL API now return nullable String instead of non-null String!
57. 23.07.0 Jul 13, 2023 · release notes

    SandboxAQ AQtive Guard 23.07.0 adds GraphQL Overview types and profiles filtering.

    └──▷ USE IT
    Fetch profile statistics for an organization using the new filter fields.
    shell copy

    curl -X POST https://<aqtive-guard-host>/graphql \
      -H 'Content-Type: application/json' \
      -d '{
        "query": "{ organization { profiles(filters: { field: defaultProfile }) { items { summary { totalIssues } stat } } } }"
      }'

    • Adds GraphQL types Overview, OverviewItem, OverviewSecure, OverviewSummary, OverviewWithMeta, ProfilesFilter, ProfilesFilterFields, InstanceStat to the API
    • Adds new fields in Organization, ReportVulnerability, and Vulnerability GraphQL objects
    • Adds filters: ProfilesFilter parameter to Organization.profiles query

    3 details in Everything

58. 23.06.4 Jul 11, 2023 · release notes

    SandboxAQ AQtive Guard adds integrated PCAPPCAPA packet capture, recorded network packets that can be inspected later. Analysts use it to reconstruct communication and investigate protocol behavior or suspicious traffic. analysis with offline capture upload and new TLS/crypto attributes via GraphQL

    • Adds Offline Analysis of PCAP files allowing uploads via the API or UI for attribute extraction.
    • Adds GraphQL fields for PCAP analysis results: source_ip, target_ip, source_port, target_port, selected_cipher_suite, client_supported_cipher_suites, recommended_ciphersuite, certificate_info, key_info, client_timestamp, server_timestamp, server_name, incomplete_handshakes, and related crypto inventory correlations.
    • Adds ability to apply rules to detect vulnerabilities for Certs and Keys within PCAP traces.

    3 details in Everything

59. 23.06.2 Jun 16, 2023 · release notes

    PKCS#11PKCS#11The standard programming interface software uses to ask an HSM, smart card or token to sign or decrypt with a key it holds. Supporting it lets a tool keep its keys in hardware. rule number shift and singular report API, improved GraphQL field precision

    • Shifts PKCS#11 vulnerability rule numbers by +200 to prevent collisions with compliance rules (new IDs are old ID + 200).
    • Changes PKCS#11 trace analysis to generate a single report instead of two.
    • Replaces the CreateTracePayload.reports: [Report] field with CreateTracePayload.report: Report in the API schema.
    • Refines the GraphQL field Certificate.locations to return only relevant certificate locations, excluding unrelated public key or shared-key certificate data.

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The API field CreateTracePayload.reports is removed and replaced by CreateTracePayload.report.
60. 23.06.0 Jun 1, 2023 · release notes

    SandboxAQ AQtive Guard v23.06.0 adds generateReport field to CreateTraceInput GraphQL API and new report UI navigation.

    └──▷ USE IT
    Schedule a report to be generated immediately upon uploading a trace via the GraphQL API.
    graphql copy

    mutation {
      createTrace(
        input: {
          file: "trace.bin"
          generateReport: true
        }
      ) { id }
    }

    └──▷ BREAKING ON UPGRADE

    • !Modify field: CreateProjectInput.profileId is now required.
61. 23.05.2 May 25, 2023 · release notes

    AQtive Guard 23.05.2 adds project testers/maxItemCount via GraphQL API and custom SQL schema config for HA on-prem.

    └──▷ TRY IT
    Update a project's tester list and item limit using the new GraphQL fields.
    copy

    $ mutation {
      updateProject(input: { id: "<project_id>", maxItemCount: 10, testers: ["user@example.com"] }) {
        maxItemCount
        testers
      }
    }

    Configure the database schema for HA on-prem deployment.
    env copy

    DATABASE_SCHEMA=custom_schema_name

    • Add ability to change project testers and max item count via the GraphQL API
    • Add support for the use of a custom SQL database schema on premises in a highly available deployment controlled by DATABASE_SCHEMA

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The supported database URL scheme is now postgresql://; postgres:// prefixes are no longer supported.
62. 23.05.1 May 16, 2023 · release notes

    AQtive Guard 23.05.1 adds Instance.keys filtering via GraphQL and new Integration types

    • Instance.keys field in the GraphQL API now returns only relevant keys for a host scan instance, excluding irrelevant keys at the same filesystem location.
    • Adds Integration and TaniumIntegration types to the GraphQL schema with the Organization.integrations field.

    2 details in Everything

63. 23.05.0 May 2, 2023 · release notes

    SandboxAQ AQtive Guard 23.05.0 adds GraphQL nodes for keys, certificates and instances plus new mutations.

    └──▷ USE IT
    Query hardware inventory locations and their associated cryptographic keys, certificates, and instances.
    api copy

    graphql query {
      location {
        nodes {
          id
          key {
            nodes {
              id
            }
          }
          certificate {
            nodes {
              id
            }
          }
          instance {
            nodes {
              id
            }
          }
        }
      }
    }

    Report a newly discovered vulnerability in the system via GraphQL.
    api copy

    mutation {
      reportVulnerability(
        input: { description: "Example vuln" }
      ) {
        id
      }
    }

    Delete a specific slot programmatically using the new mutation.
    api copy

    mutation {
      deleteSlot(input: { slotId: "slot-123" }) {
        success
      }
    }

    • Location node added to the GraphQL API with connections to Key, Certificate and Instance objects
    • New ReportVulnerability and OrganizationCertificate GraphQL nodes exposed
    • Added deleteSlot mutation for slot removal via GraphQL
    • generateTraceUploadPost mutation response now includes a method field

    4 details in Everything

64. 23.04.2 Apr 18, 2023 · release notes

    Adds GraphQL OrganizationKey types and key metadata fields

    • Organization.keys and Key.organizationKey fields added to GraphQL schema
    • Key.keyMetadata, Key.keyType, Key.keyCategory renamed to Key.metadata, Key.type, Key.category respectively

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !GraphQL field Key.keyMetadata is renamed to Key.metadata. Existing queries using the old name will fail.
    • !GraphQL field Key.keyType is renamed to Key.type. Existing queries using the old name will fail.
    • !GraphQL field Key.keyCategory is renamed to Key.category. Existing queries using the old name will fail.
65. 23.04.1 Apr 11, 2023 · release notes

    SandboxAQ AQtive Guard 23.04.1 adds UI tags, new GraphQL objects, and profile sorting

    • Add support for tags in the AQtive Guard UI.
    • GraphQL API: Add Handshake and TlsHandshake objects
    • Add sorters to Organization.profiles
    • Expand project VulnerabilitySlot with latest report id

    4 details in Everything

66. 23.04.0 Apr 6, 2023 · release notes

    SandboxAQ AQtive Guard 23.04.0 adds filtering to Organization.projects, tags support in mutations, and new report analysis fields.

    └──▷ TRY IT
    Add tags to a project slot during an update operation.
    copy

    $ mutation { updateSlot(id: "<slot_id>", tags: ["tag1", "tag2"]) { id } }

    • Adds sorters and filters to Organization.projects API endpoint
    • Updates updateSlot mutation to accept tags parameter
    • Adds tags field to the Project model
    • Adds firstAnalysis, lastAnalysis, and distinctCallSites fields to the Report model

    4 details in Everything

67. 23.03.5 Mar 27, 2023 · release notes

    SandboxAQ AQtive Guard 23.03.5 adds GraphQL fields for project-level vulnerability statistics and organization trace settings.

    └──▷ TRY IT
    Delete a specific project using the new GraphQL mutation.
    copy

    $ mutation { deleteProject(projectId: "<project_id>") { success } }

    Retrieve vulnerability statistics by severity for a specific project.
    copy

    $ query { Project(id: "<project_id>") { vulnerabilityStatistics { critical high medium low } } }

    Check or update allowed trace types for an organization.
    copy

    $ query { Organization(id: "<org_id>") { allowedTraceTypes } }

    • Adds Mutation.deleteProject to the GraphQL API
    • Adds Project.vulnerabilityStatistics with rule counts for each severity at the project level
    • Adds Organization.allowedTraceTypes to specify trace types users can analyze in an organization

    3 details in Everything

68. 23.03.3 Mar 21, 2023 · release notes

    Adds CONTAINS operator for tag-based slot filtering and updateProject mutation to SandboxAQ AQtive Guard 23.03.3.

    • Adds filtering of slots based on their tags with a new CONTAINS operator

    1 detail in Everything

    └──▷ BREAKING ON UPGRADE

    • !GraphQL API: Remove duplicate api type in favor of the existing API type. Rename values to subFilters in SlotsFilter , ReportsFilter etc.
69. 23.03.2 Mar 10, 2023 · release notes

    GraphQL API expands Link host scan instances to keys and certificates via locations.

    └──▷ TRY IT
    Retrieve keys and certificates associated with a specific host scan instance via its node location.
    copy

    $ graphql query {
      Key {
        instances { id }
      }
      Instance {
        keys { id }
      }
      Certificate {
        instances { id }
      }
    }

    • Adds Key.instances, Instance.keys, and Certificate.instances fields that link through node location.

    1 detail in Everything

70. 23.03.0 Mar 7, 2023 · release notes

    SandboxAQ AQtive Guard v23.03.0 adds new GraphQL API fields for reports and keys, plus trace view capabilities.

    • Adds Key.report and Certificate.report fields to the GraphQL API for accessing detailed report data
    • Adds Operation.keys field to the GraphQL API to expose key information in operations
    • Adds Project.organization field to the GraphQL API to access organization context for projects
    • Adds defaultSlotName parameter to CreateTraceInput in the GraphQL API for trace creation

    4 details in Everything

71. 23.02.4 Feb 26, 2023 · release notes

    SandboxAQ AQtive Guard 23.02.4 adds GraphQL nodes for CallSite/Operation and expands Certificate/Trace fields.

    • Adds SignatureAlgorithm type to the GraphQL API, linked to the Certificate node
    • Adds notBefore, notAfter, and signatureAlgorithm fields to the Certificate node
    • Adds reports, jvmName, jvmVendor, jvmArguments, and javaClassPath fields to the Trace node
    • Adds the url field to the Report node

    4 details in Everything

72. 23.02.3 Feb 23, 2023 · release notes

    AQtive Guard v23.02.3 adds GraphQL field extensions, optional profileId, AWS IAMAWS IAMAWS Identity and Access Management is Amazon's service for controlling who and what can call AWS APIs, by attaching policies that allow or deny actions on resources. Cyber tools use it to scope credentials to least privilege. S3 auth, and default profiles.

    └──▷ TRY IT
    Fetch certificate trust chain details via GraphQL without needing prior profile configuration.
    copy

    $ query { projects(filter: {id: "123"}) { slots { traces { items { certificate { isCa isSelfSigned } } } } } }

    Create a project with a human-readable description for easier identification.
    copy

    $ mutation { createProject(input: { name: "web-scan", description: "Main web application traces" }) { id } }

    • Certificate.isCa and Certificate.isSelfSigned fields added to GraphQL API responses
    • Report.profile and Report.trace fields added to GraphQL API responses
    • Project.description field added and description accepted in CreateProjectInput
    • AnalyzeInput.profileId parameter made optional in GraphQL API
    • AWS IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. Role-based authentication supported for S3 on-prem deployments

    5 details in Everything

73. 23.02.2 Feb 14, 2023 · release notes

    Adds GraphQL InventoryRecap types and Key/Certificate fields to SandboxAQ AQtive Guard

    • Adds InventoryRecapLineData, InventoryRecapCategory and InventoryRecapData GraphQL types to query asset inventory summaries

    1 detail in Everything

74. 23.02.0 Feb 1, 2023 · release notes

    SandboxAQ AQtive Guard 23.02.0 adds PKCS#12PKCS#12A file format standard from RSA Labs, now maintained under IETF, that bundles a private key, certificate, and chain into one encrypted container, letting cyber tools ship or load credentials as a single portable file. Shrouded Keybag support and GraphQL query enhancements.

    • PKCS#12 host scan analysis now supports the Shrouded Keybag format.
    • Project.reports GraphQL field gains a new sorters parameter for result ordering.
    • User.projects GraphQL field gains new filters and sorters parameters.
    • New traceable fields added to the GraphQL schema: Trace.slot, Report.slot, Slot.project, and Project.slots.
    • New GraphQL mutation updateSlot allows changing slot properties programmatically.

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !On the project details page, obsolete trace and report links are replaced with a slot link.
75. 23.01.4 Jan 30, 2023 · release notes

    Link instances to keys/certs via API, add Rule type filter, and fix project membership mutation.

    • Adds ability to link instances to keys and certificates in the API
    • Adds Rule type attribute to instances in the API
    • Adds Stored Key operation filter to keys table

    3 details in Everything

76. 22.12.2 Dec 19, 2022 · release notes

    SandboxAQ AQtive Guard 22.12.2 adds OpenSSL and PuTTY PPK analysis pipelines

    • Adds new analysis pipeline for OpenSSL (libssl) traces
    • Adds analysis of PuTTY private key (PPK) files found by the host scanner

    2 details in Everything

77. 22.12.0 Dec 5, 2022 · release notes

    Adds Slots to organize traces and reports, enabling parallel analysis; adds PPK format support.

    • Organize traces and reports into Slots inside their project
    • Analyze multiple traces of the same type in parallel within the same project via Slots

    2 details in Everything

78. 22.09.0 Sep 5, 2022 · release notes

    AQtive Guard 22.09.0 adds PKCS#12PKCS#12A file format standard from RSA Labs, now maintained under IETF, that bundles a private key, certificate, and chain into one encrypted container, letting cyber tools ship or load credentials as a single portable file. cleartext analysis, editable trace/report names, and improved filesystem/cipher support.

    • Add the analysis of cleartext data in PKCS#12 keystores from filesystem scans
    • Make traces / reports names and descriptions editable in their summary box
    • OpenSSL (libcrypto) analysis now supports more cipher algorithms
    • Improve the overall quality of the filesystem analysis with a new implementation

    4 details in Everything

79. 22.07.3 Jul 26, 2022 · release notes

    New Export and Compare buttons on Inventory page, Keys column in operations table, and auto-cleanup of incomplete uploads.

    • Adds Export and Compare buttons to a report’s Inventory page
    • Adds the current AQtive Guard version to the footer
    • Adds a Keys column to the operations table in an instance details page for application tracing

    3 details in Everything

80. 22.06.1 Jun 17, 2022 · release notes

    Harden CSPCSPContent Security Policy: a browser security mechanism, standardized by the W3C, that lets a web server declare which sources of scripts, styles, and other resources a page may load, blocking injection attacks. header against inline JS, merge duplicate project bars in dashboard, and add pagination to organization certificates.

    • Merges bars for the same project in the Organization Issue Summary bar chart on the main dashboard.
    • Adds pagination to the organization certificates details page.

    2 details in Everything

81. 22.06.0 Jun 13, 2022 · release notes

    22.06.0 adds pagination to organization keys details and Venafi custom certificate support.

    └──▷ HOW TO FIND IT
    Navigate to the keys list in the UI to manage large volumes of organization keys without loading everything at once.
    📍1. Go to Organization Settings. 2. Select Keys from the menu. 3. Use the pagination controls on the organization keys details page.
    Configure the Venafi integration with a custom CA certificate instead of relying on system defaults.
    📍1. Go to Integrations › Venafi. 2. Click Test Configuration to verify connectivity. 3. Enable the option to define custom certificates and upload your file.
    • organization keys details page now supports pagination.
    • Venafi integration configuration now accepts custom certificates via a new option.

    2 details in Everything

82. 22.05.0 May 2, 2022 · release notes

    SandboxAQ AQtive Guard adds deleteReport mutation and createdAt field to GraphQL API

    └──▷ USE IT
    Programmatically delete a report using the new mutation
    api copy

    mutation {
      deleteReport(id: "<report-id>") {
        success
        message
      }
    }

    Retrieve the creation timestamp for trace and report objects
    api copy

    query {
      trace(id: "<trace-id>") {
        createdAt
        id
      }
    }

    • Adds deleteReport mutation to the GraphQL API for programmatically removing reports
    • Adds createdAt date field to trace and report types in GraphQL API

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Removes api field from project type in GraphQL API
83. 22.03.5 Mar 16, 2022 · release notes

    SandboxAQ AQtive Guard 22.03.5 adds Jira integration, Host Scanner download button, and trace metadata

    └──▷ HOW TO FIND IT
    Configure Jira integration via UI to export findings.
    📍Go to Integrations tab and configure Jira instance.
    • Add Jira integration to export findings as issues.
    • Add a Host Scanner download button for authorized users.
    • Improve report generation performance when the organization has a lot of keys.

    3 details in Everything

84. 22.02.2 Feb 15, 2022 · release notes

    AQtive Guard 22.02.2 adds asymmetric key-transport rule and enforces project name uniqueness.

    • Adds application analysis rule Asymmetric key-transport key outside cryptoperiod
    • Enforces the uniqueness of project names within each organization
    • Sets severity of certificate digest findings to low if the certificate is self-signed in host scan reports

    3 details in Everything

85. 21.12.1 Dec 20, 2021 · release notes

    AQtive Guard 21.12.1 adds two new Java analysis rules and organization name display.

    • Adds Invalid certificate rule to Java analysis
    • Adds Certificate validity too long rule to Java analysis
    • Show organization name on dashboard

    3 details in Everything

86. 21.12.0 Dec 13, 2021 · release notes

    AQtive Guard 21.12.0 adds filtering for key files and cert types in Host Scanner reports.

    • Add filters for key file type in host scanner reports
    • Add filters for self-signed and CA certificates for Java and host scanner reports

    2 details in Everything

87. 21.11.1 Nov 18, 2021 · release notes

    Enhanced key file categorization and location stats in host scan reports.

    └──▷ HOW TO FIND IT
    View key types directly in the report UI.
    📍In the console, go to Host Scan Reports › Keys tab to see the new key information column with file types.
    • Adds display of file type in the key information column for keys tab in host scan reports
    • Changes location stats computation to count locations and maximum severity per location instead of instances

    2 details in Everything

88. 22.03.2 Mar 8, 2002 · release notes

    SandboxAQ AQtive Guard adds Post Quantum Readiness profile and new analysis rules

    └──▷ HOW TO FIND IT
    Enable the pre-configured profile to evaluate an application's posture against post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. threats
    📍AQtive Guard: Select Post Quantum Readiness builtin profile for analysis
    • Adds a new Post Quantum Readiness builtin profile for application analysis
    • Adds 5 new application analysis rules related to post-quantum readiness, disabled by default

    2 details in Everything