[6.24.0.0] - 2025-09-17

Added

• CCI (Control Correlation Identifier) importer utility:
  • Clean code refactored implementation with low complexity methods
  • CLI integration as command
  • Default file path support for
  • NIST 800-53 revision 4 and 5 support
  • Configurable catalog ID parameter for flexible deployment environments
  • Dry-run and verbose modes for testing and validation
  • Comprehensive type hints and error handling
• Added configuration option to prevent automatic issue closure by scanner integrations, defaults to True

Changed

• Enhanced Wiz integration status mapping to correctly handle IN_PROGRESS status as Open

Fixed

• Default date format for scan_date parameter in Sarif import command
• Typo in FormFieldValue.save_custom_fields method
• Wiz issues being prematurely closed by auto-closure logic when still active in Wiz platform
• Added issue protection mechanism to prevent specific issues from being automatically closed
• Issue Org field not being populated during Issue creation process or by Issue ingest: if Issue Owner is set, use the Issue Owner’s Org. If Issue Owner’s Org is not available, use the SSP Owner’s Org

[6.25.1.0] - 2025-09-16

Fixed

• Test string removed from Task Kanban header
• Tailored Export generates inherited control data (Export Builder version)
• Security Plan scorecard sorts by Sort ID field

[6.25.0.0] - 2025-09-15

Added

• Ability to select multiple Security Plans on Compliance Hygiene Statusboard
• Ability to bulk add security controls via catalog to Security Plans and Components
• RegML Auditor grouped-by-family visualizations
• Ability to generate OSCAL SAR from RegML Auditor
• Evidence Statusboard for tracking evidence status and analytics
• Evidence Approval List
• Evidence Statusboard quick action menu for uploading evidence, requesting evidence, approving evidence, and adding mappings
• RegML Recommended Evidence Mappings added to Evidence Mapping Utility
• Risk analytics on Security Plans module
• Ability to save default row count to user profile
• "My Controls" filter on Security Plans scorecard
• Bulk evidence request
• Evidence automation instructions
• Evidence Request lists for SCF, FedRAMP, CMMC, CRI

Changed

• Evidence Mapping Utility redesigned
• Login banner supports rich text
• Manager field is no longer required in Organizations
• Task Kanban added to Subsystem quick launch
• Icon used for RegML rich text editor to Wand

Fixed

• Breadcrumbs consistently appear
• Users can remove roles in the Control Implementations module
• ProjectUserRole updated to reflect documentation
• RegML Auditor updates based on changes to Control Implementations
• FedRAMP POA&M exports properly include affected controls
• FedRAMP POA&M exports point of contact correctly
• Categorization Engine works correctly
• RegML Auditor history updates properly
• Evidence records refresh after file upload
• Request ID is searchable
• Right-side navigation panel accessibility
• Workflow renders correctly in dark mode
• Reverted unintended change to response for GetListByParent API call

[6.24.0.2] - 2025-09-11

Fixed

• Saving populated fields on initial creation for Form Builder records

[6.24.0.1] - 2025-09-10

Fixed

• General user role is able update Control Implementations
• Form Builder field data displays properly on forms
• Export Builder properly orders Control Implementations in exports

[6.24.0.0] - 2025-09-06

Added

• Inherited Control Implementations now display System Implementation, Inherited/Cloud Responsibility, and Customer Responsibility fields, which automatically update based on changes to the source system
• Security Plans built with Components now display System Implementation, Inherited/Cloud Responsibility, and Customer Responsibility in Control Implementations, automatically updating when the Component’s Control Implementation changes
• Inheritance Utility allows optional inheritance of:
  • Control Owner (append) 
  • Parameters (replace) 
  • Assessment Frequency (replace) 
• Compliance Settings supported in the Components module
• Compliance Setting Migration API supports migration of Component Compliance Settings

Changed

• Control Implementations are automatically added to Security Plans when linking a Component with Control Implementations
• A Control Implementation can have multiple sources via inheritance or component selection
• Control Owner field in Control Implementations is now multi-select
• Exports updated to support new enhancements

Fixed

• Parts progress indicator functions correctly

[6.23.0.1] - 2025-09-05

Fixed

• scan_date parsing during Vulnerabilities connector

[6.23.0.0] - 2025-09-03

Added

• Support for importing SARIF file(s) via , which will create Vulnerabilities against an asset in RegScale
• Additional logic if scan_date is not provided during any of the vulnerability jobs

Fixed

• Default value for scan_date on vulnerability jobs when it is not provided

[6.22.0.1] - 2025-09-02

Fixed

• Import errors for jobs in Automation Manager

[6.23.25.1] - 2025-08-31

Fixed

• Migration issue preventing upgrades from completing successfully