Zanshin

No entries match these filters. Clear filters

1. Novidades do Zanshin | Setembro de 2026 Sep 3, 2026 · issue 064

   Zanshin adds SAQSAQSelf-Assessment Questionnaire: a PCI DSS compliance form that merchants and service providers complete to validate how they handle cardholder data, with different variants scoping different payment environments. scoring automation, in-platform notifications, Portuguese third-party reports, org profile firmographics, and Zoom Workplace monitoring.

   ⤢ ⤢ ⤢
   └──▷ HOW TO FIND IT
   Onboard Zoom Workplace for continuous security-configuration monitoring across your SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. estate.
   📍In the platform, go to Painel de Ambientes › SaaS, locate Zoom Workplace, and follow the Zoom Workplace - Cadastro de Ambiente setup guide to grant minimum required permissions.
   Review third-party supplier posture and share findings in Portuguese with local partners, including any unmonitored environment gaps and ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability. 27001 / PCI DSSPCI DSSThe Payment Card Industry Data Security Standard, security requirements for protecting payment account data. It covers organizations that store, process or transmit that data and relevant service providers. compliance status.
   📍Navigate to the third-party report for the target supplier, select Portuguese as the report language, and export — the report will include the Ambientes Ausentes section and ISO 27001 / PCI DSS compliance overview.
   Configure a SAQ with risk-weighted scoring and automatic Accept/Reject thresholds to speed up vendor assessment reviews.
   📍Go to SEGUIDAS › Questionários, open or create a questionnaire, assign severity weights (Informativo through Crítico) to individual questions, set per-answer score values, and define acceptance thresholds — Zanshin will auto-recommend Accept, Reject, or Request Clarification on submission.
   • Adds weighted scoring and auto-grading to Self-Assessment Questionnaires (SAQs), with configurable severity levels (Informativo to Crítico) per question and per answer, plus automatic Accept/Reject/Request Clarification recommendations against defined risk thresholds.
   • Introduces a partial-assessment engine that flags free-text or evidence-file answers requiring mandatory human review before a final grade is issued.
   • New reviewer interface for SAQ assessments includes a side navigation panel, auto-advance to next item, and manual override of automated scoring recommendations — accessible via SEGUIDAS > Questionários and SEGUIDAS > Avaliações.
   • Introduces an in-platform Notifications Center (bell icon, top-right) delivering clickable, action-oriented alerts scoped to the active Organization and filtered by RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. permissions; unread alerts persist for 30 days, read alerts are retained for 7 days.
   • Third-party reports can now be generated fully in Portuguese, removing language barriers when sharing findings with local suppliers and partners.

   +6 more show less

   • Third-party reports gain a dedicated Ambientes Ausentes (Missing Environments) section that surfaces unmonitored scan targets and gaps in supply-chain visibility.
   • Third-party reports now display ISO 27001 and PCIPCIA hardware bus standard that connects peripheral devices to a computer's motherboard; cyber tools targeting hardware-level forensics or memory analysis use it to access device registers and DMA regions directly. DSS compliance coverage alongside existing frameworks.
   • Third-party reports include exact generation date/time for version control and an updated default file-naming convention.
   • The Configurações menu is replaced by a new Perfil hub (under MINHA ORGANIZAÇÃO > Perfil > Detalhes) supporting firmographic data: multiple legal IDs (CNPJ etc.), employee count, annual revenue, and NAICS sector codes, with address autocomplete and sector-code suggestions.
   • Organization profile supports multiple department-specific contacts (Security, Compliance, Legal, etc.) with individual names, emails, and phone numbers, replacing the single generic contact email.
   • Adds Zoom Workplace as a new supported SaaS environment type, available under Painel de Ambientes > SaaS, monitored using minimum-permission read-only security-configuration access.

   11 details in Everything

2. Novidades do Zanshin | Setembro de 2026 Sep 3, 2026 · release notes

   Zanshin adds weighted SAQSAQSelf-Assessment Questionnaire: a PCI DSS compliance form that merchants and service providers complete to validate how they handle cardholder data, with different variants scoping different payment environments. scoring with auto-approval, a notification center, Zoom Workplace environment support, and enhanced third-party reports.

   • Adds ability to assign weights (Informativo to Crítico) to individual SAQ questions and precise score values to answers for automated final grade calculation
   • Adds smart approval criteria that automatically recommend Accept, Reject, or Request Clarification for incoming SAQs based on acceptable risk thresholds
   • Introduces a new reviewer interface with a quick navigation sidebar and automatic advancement to the next item
   • Adds partial scoring identification to flag complex responses (free text paragraphs, evidence files) requiring strict human review before final grade issuance
   • Introduces a centralized Notifications Center accessible via a Sino icon in the upper right corner, with action-oriented alerts adapted to selected Organization and RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. permissions

   +7 more show less

   • Adds support for generating Third-Party Reports entirely in Portuguese
   • Adds an Ambientes Ausentes section to third-party reports to highlight unmonitored environments or verification targets
   • Adds official display of ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability. 27001 and PCI DSSPCI DSSThe Payment Card Industry Data Security Standard, security requirements for protecting payment account data. It covers organizations that store, process or transmit that data and relevant service providers. adherence to the compliance overview section of third-party reports
   • Updates third-party report file naming convention and adds exact generation timestamp for version control
   • Adds a new Perfil central in Settings to manage firmographic data including multiple Legal Identifications (CNPJ), employee count, annual revenue, and NAICS sector classifications
   • Expands contact management to support multiple department-specific points of contact (Security, Compliance, Legal) with individual names, emails, and phone numbers
   • Adds Zoom Workplace as a new supported environment type under the SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. section of the Environment Dashboard

   12 details in Everything

3. Novidades do Zanshin | Maio de 2026 May 14, 2026 · release notes

   New My Organization dashboard for executives, automatic Microsoft 365 integration, Azure DevOps and JumpCloud support, and unshared environment detection.

   • Adds Minha Organização (My Organization) dashboard consolidating risk scores and compliance history for executives
   • Enables automatic integration of Microsoft 365 via the organization panel interface
   • Adds monitoring support for Azure DevOps and JumpCloud Open Directory Platform environments
   • Introduces auto-detection alerts for unshared relevant environments not explicitly registered

   4 details in Everything

4. Novidades do Zanshin | Fevereiro de 2026 Feb 23, 2026 · release notes

   Zanshin adds a Third-Party Follows Dashboard, AI-powered SAQSAQSelf-Assessment Questionnaire: a PCI DSS compliance form that merchants and service providers complete to validate how they handle cardholder data, with different variants scoping different payment environments. summaries, Okta/Sophos scans, PCI DSSPCI DSSThe Payment Card Industry Data Security Standard, security requirements for protecting payment account data. It covers organizations that store, process or transmit that data and relevant service providers. v4.0.1 support, and public third-party scores.

   • Adds Seguidas > Painel dashboard for strategic third-party risk overview including Business Impact matrix, Score distribution, Sankey evolution diagram, and Active Assessments summary
   • Adds Resumir with IA button in Avaliações > pendente de revisão to generate AI summaries of attached evidence files (PDF only) during SAQ review
   • Adds support for Okta Workforce Identity and Sophos Endpoint scan targets via the Scan Targets Dashboard under Identity and Access Management (IAM) and Security Tools sections respectively
   • Adds support for PCIPCIA hardware bus standard that connects peripheral devices to a computer's motherboard; cyber tools targeting hardware-level forensics or memory analysis use it to access device registers and DMA regions directly. DSS v4.0.1 compliance reporting in Minha Organização and Seguidas > Compliance
   • Adds public third-party score view on the Organization Details > Painel tab showing historical scores based solely on public scan targets

   5 details in Everything

5. Latest Product Updates | October, 2025 Oct 24, 2025 · release notes

   Zanshin adds RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists., SentinelOne/Intune scan targets, business impact assignment, new reports, and SAQSAQSelf-Assessment Questionnaire: a PCI DSS compliance form that merchants and service providers complete to validate how they handle cardholder data, with different variants scoping different payment environments. history.

   • Adds Role-Based Access ControlRole-Based Access ControlRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. (RBAC) with predefined and customized roles accessible via the Roles tab in the Members section.
   • Expands scan target support to SentinelOne Singularity and Microsoft Intune (under Microsoft 365) for continuous monitoring.
   • Enables assignment of Business Impact levels to third parties, visible as filters in the Following Organizations List and Portfolio Dashboard.
   • Introduces new Generate Report functionality for Third-Party assessments and Self-Assessment Report generation from questionnaires.
   • Adds historical information view for SAQs, showing answer/comment history per question and status changes via the See history toggle.

   5 details in Everything

6. Latest Enhancements and Updates | September/25 Sep 2, 2025 · release notes

   Zanshin adds historical score analysis (12mo), new scan targets, and updated compliance standards.

   • Analyze historical security score records for up to 12 months.
   • Scan Digital Ocean and Trend Micro Vision One as new target types.
   • Generate compliance reports aligned with CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. Controls 8.1, NIST CSFNIST CSFThe NIST Cybersecurity Framework, a set of outcomes for managing cybersecurity risk. Organizations use it to describe their current posture, priorities and improvement goals. v2.0, and ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability. 27001:2022.

   3 details in Everything

7. Pre-Contract Due Dilligence Jun 4, 2025 · release notes

   Zanshin launches Pre-Contract Due Diligence for third-party security assessment with one-time or continuous monitoring modes.

   • Adds Pre-Contract Due Diligence feature to assess vendor security posture via one-time assessment or continuous monitoring
   • Adds Anonymous Mode and Cooperative Mode relationship options for third-party assessments
   • Updates scoring to display initial security score within six hours of configuration with updates every six hours

   3 details in Everything

8. Updates | May, 2025 May 30, 2025 · release notes

   Zanshin adds Scan Target sharing controls, CrowdStrike/Defender scanning support, and new dashboard filters.

   • Adds All Followers, Selected followers, and Private sharing types for Scan Targets during creation or via the Tags and Sharing tab on the details page
   • Adds visibility of Domain Scan Target findings to all licensed Organizations without explicit sharing
   • Adds CrowdStrike Falcon as a new Scan Target Type under the Security Tools section in the Scan Targets Dashboard
   • Adds scanning support for Microsoft Defender for Endpoint within Microsoft 365 scans with zero additional configuration
   • Adds filtering by Scan Target Tags or names (up to 10) in My Organization Dashboard and My Organization Alerts

   +2 more show less

   • Adds filtering by Following Organization Tags or names (up to 10) in Following Alerts Dashboard and Following Organization Alerts
   • Enhances the IP Address with bad reputation detected Rule detection logic

   7 details in Everything

9. Recent Updates | April/25 Apr 23, 2025 · release notes

   Zanshin adds Organization Score metric and IBM Cloud/Bitdefender scan target support

   • Displays an Organization Score (1.0-10.0 numerical, A-F letter) on the My Organization Dashboard, Following Dashboard, Organizations List, and Organization Details pages.
   • Supports IBM Cloud as a new Scan Target type for assessing security configurations of IaaS/PaaS infrastructure.
   • Supports Bitdefender as a new Scan Target type for monitoring endpoint protection and alert status.

   3 details in Everything

10. Recent product updates | March/25 Mar 17, 2025 · release notes

    Zanshin adds Managed/Background modes for Domain Scan Targets and replaces direct removal with a Customer Success request workflow.

    • Adds Managed Mode to Domain Scan Targets for deeper insights, higher accuracy, and scan frequency control
    • Adds Background Mode to Domain Scan Targets for broad overview with less resource-intensive checks
    • Adds 'Why is this here?' option in the Scan Target list for Domain Scan Targets to explain visibility and initiate removal requests

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Users can no longer directly remove a Domain Scan Target; they must submit a request handled by the Customer Success Team.