In the Policies section of our Platform, you can stipulate a minimum score according to CVSS 3.1 to apply for a temporarily accepted treatment vulnerability.

If you want to know more about the policy Temporal acceptance: minimum CVSS 3.1 score allowed for assignment, click here. We want to keep you updated on the features of our Platform; that is why we recommend you subscribe to our News channel so that you don’t miss any announcements.

We are pleased to announce a new option to delete groups on the platform called "Created by mistake." If you have accidentally created a group, this option will allow you to correct it. We invite you to go to our official documentation to see the different options we handle when deleting a group. We invite you to subscribe to our News, where we publish important information about our platform weekly.

How about having the Surface section data in a CSV extension file? You can get it through the Export button that you will find in Lines, Inputs and Ports tabs. With this downloaded data you will be able to have information about your Target of Evaluation (ToE) in the analysis process. If you want to know more about Surface section we invite you to enter here. We invite you not to miss any of these updates by subscribing to our News channel.

If you have the Agent in your pipeline, you can stipulate the policy called DevSecOps: Days before agent starts breaking the build for new vulnerabilities, which sets a period of days permitting new vulnerabilities to pass the pipeline successfully without breaking the build.

Let us know what you think about this policy in the comments section of this announcement, or you can email us at help@fluidattacks.com. We want to keep you updated on the features of our Platform; that is why we recommend you subscribe to our News channel so that you don’t miss any announcements.

In the Analytics section of your Organization and Portfolios, we have a chart called Open vulnerabilities by group. There, you can see the share of open vulnerabilities between the groups in your organization and portfolio.

In the Files section in the Scope tab, you can add new files that you find helpful or necessary for testing in your specific group. To add new files, click on the add button; you can add files up to 5GB and briefly describe their purpose or usefulness. 

Let us know what you think about this feature. Do you use it frequently? We like to read our users; you can leave us a message in the post or send us an email at help@fluidattacks.com. We also invite you to not miss any News announcements by subscribing to our channel.

Thanks to our DevSecOps agent, depending on your set policies, we can break the build to force the remediation of vulnerabilities, preventing vulnerable code from reaching production. On the Platform, in your group’s Analytics sections, you can find the information about the agent regarding service status, service usage, repositories and branches, your commitment towards security, and builds risk. Thanks to this information, you can learn how the agent operates on your system.

The version used for this section is NIST 800-53, Rev. 5, September 2020. Please remember that if you would like to learn more about this standard or others that we are implementing, we invite you to visit the Compliance section of our documentation.

We improved the Vulnerability Details Window for you! Now you will see a new item called Technique, which will give you information about the security technique used to identify specific locations of that particular vulnerability.

If you want to know how to enter this information, it is very easy; you can do it through the Locations view by selecting one of these or in the To Do view. Feel free to explore this section! Don’t forget to subscribe to our News channel so that you don't miss any of the news we post every week.

In our Technical Report, you will see the column called Technique, which will give you detailed information about the security technique used to identify this specific location. You can access our official documentation to find out what the technical report gives you information. Stay up-to-date with all our announcements by subscribing to our News channel.