New Features
- Added support for Apache Tomcat 11 in JAVA IAST sensor
- RAML API specs can now be uploaded to extend the coverage of API scanning → Learn more
- Implemented support for scanning HTTP/2 websites
- Runtime SCA findings are now available on the Scan Details page (Acunetix Online only, On-Premises coming soon)
- A new scan report for SCA is now available → Learn more
New Security Checks
Improvements
- Minor cosmetic UI/UX issues have been addressed across the app
- Updated list of exposed web installers reported
- The Scan Details screen for reviewing scan results has been modernized and upgraded
- Improved testing of path fragments
- The agent status now shows 'Unknown' instead of 'Error' when the agent hasn't shared its status for some time
- API Discovery: Added the ability to start scans directly from the list of discovered and linked APIs
- API Discovery: Added functionality to change the base URL of an already linked API
- Updated scanner to handle security definitions within Swagger
Fixes
- Updated the scanner to use default scan speed settings when scan speed settings are missing
- Fixed a false positive in the detection of Possible Virtual Host Found
- Fixed a false positive in the detection of CVE-2024-6387