HomeGuidesAPI ReferenceChangelog
Changelog

[6.19.1.0] - 2025-04-29

Added

  • Method to User model to get users by role
  • AssessmentResult model

Changed

  • Data types for contractValue, fundedAmount, and actualCosts on the SupplyChain regscale_model

Fixed

  • Multiple import errors on regscale_models
  • Missing closed_count attribute
  • TypeError during the Tenable IO sync_assets and sync_findings commands
  • Error in save_to_json method when outputting the file name

[6.19.1.0] - 2025-04-29

Added

  • New version of Supplier Performance Risk System (SPRS) report for CMMC security plans
    • Includes rollups by family
  • New preview for inherited controls and component controls
  • Related catalogs lineage information for profiles on a SSP

Changed

  • Display caption for table views
  • Header for Business Risk view in a Risk Assessment to include Inherent Risk label

Fixed

  • Removed links being displayed in small footer
  • Display large number of items on horizontal axis in Risk Scorecard
  • Formatting in Risk Assessment header
  • Console errors in SSP Control Scorecard
    • Bad null checks
    • Removed write to read-only value
  • Formatting on Inheritance Checkbox in Control Builder
  • Display of RegScale logo in RegML Explainer
  • Sorting of Controls for a SSP with CMMC
  • Table header and titles for Lineage inside SSP
  • Console errors on navigation in the Lineage page
  • Detail display button for Framework Gap Report
  • Updating SPRS report to Report Builder
  • CISO Dashboard
    • Risk now display the correct values
    • Chart rendering for Fix Problems
    • Pie chart color corrected
    • Improved load time on the page and corrected console errors
  • Default password to be changed is no longer checked in the browser
  • Formatting on Global Admin Panel
  • Seeding behavior for new Module Reports

Security

  • Applied routine dependency upgrades to enhance security and stability

[6.19.0.1] - 2025-04-26

Fixed

  • Import error when using the Group regscale_model

[6.19.0.1] - 2025-04-25

Changed

  • RegML Extractor relevance score threshold for improved performance

Fixed

  • User permissions for Case and Change Roles to enable updating tasks

[6.19.0.0] - 2025-04-25

Added

  • Option to process STIG assets and vulnerabilities to a Component

Changed

  • Improved error handling when encountering errors while uploading files to RegScale
  • Improved performance in Qualys Total Cloud integration
  • Tenable SC to use jsonl scanner integration to reduce overhead and increase performance
  • Tenable IO and SC directory and commands to use variables and follow design pattern

Fixed

  • Application class being prematurely initialized causing unnecessary overhead
  • Tenable SC integration not honoring config minimum severity in init.yaml

[6.19.0.0] - 2025-04-20

Added

  • New Cyber Hygiene Report to easily view most risky components
    • Rollup vulnerability data by component
    • Rollup security check data to show posture and calculate overall system posture
    • Rollup by issue
  • Rollup metrics for size and quantity of data in the database
  • Parent information included in risk rollup

Changed

  • Layout of security checks to make most relevant data display first

Fixed

  • Password generator to always meet app requirements
  • Relationships between risk records to display correctly and include the correct identifier
  • Prevent running RegML Auditor when there is no data present
  • Can add new tests when there are no existing tests in the catalog
  • Vulnerability modal displays in dark mode
  • Layout of vulnerability data
  • Calculation of security check percentage is now correct
  • Removed soft deleted data from rollup status board

[6.18.0.0] - 2025-04-18

Added

  • SSP validation to the Nessus and Burp flat file imports
  • EDR/Endpoint connector in Automation Manager

Fixed

  • Prevent sending Authorization headers for validateToken endpoint in API requests

[6.18.3.0] - 2025-04-17

Added

  • Background scheduled task to automate database index maintenance

Performance

  • Database index defragmentation across multiple tables for improved performance

[6.18.2.0] - 2025-04-17

Added

  • Introduced the Report Builder role for additional access granularity to report builder

Changed

  • Modified the Project Status field on the Projects listing page to display as a string
  • Eliminated the requirement for Control Source in the Control Implementations module

Fixed

  • Ensured that LOI-compliant calculations no longer include the N/A status
  • Corrected the display of the Evidence Scorecard in the Policies Module ensuring it accurately shows evidence
  • Improved dark mode display
    • Evidence Scorecard
    • Project Scorecard
  • Enabled users to clear the Date Completed field in the Data Calls module
  • Enhanced the functionality of the Security Plan Status Board ensuring that search works correctly
  • Corrected the rendering of drop-downs
  • Ensured that FedRAMP SAR Export completes the container web and database sections accurately
  • Return expected 400 response code for missing field in POST or PUT to softwareInventory
  • Corrected the control status and originations for FedRAMP CIS/CRM exports when using compliance settings
  • Ensured that Control Implementations are sorted correctly on the Security Plan scorecards
  • Changed to an Edit prefix in the Compliance Settings header when editing existing settings
  • Prevented users from deleting RegScale-provided Compliance Settings
  • Implemented Swagger updates when new APIs are added to the system
  • Populated the Parent ID when creating new Continuous Monitoring records
  • Tailored exports corrections
    • Consistent font
    • Fixed large image sizes
    • Duplicated Implementation Statement
    • Spacing after Implementation Statement
    • Including additional data from the platform
  • Strengthened the form upgrade logic to prevent upgrades from hiding fields
  • Restored the paragraph formatting for the Control Implementation statement
  • Enhanced the functionality of the Questionnaire role ensuring it works as expected
  • Returning results when selecting All Time in Reports
  • Report titles working with custom labels
  • Respecting role permissions when navigating to Reports
  • Populating data calls by owner and status date dropdown in Reports
  • Performance issue for finalizing Continuous Monitoring Plan with a large number of controls
  • Check to prevent error response when pulling control implementation with bad data

[6.17.0.0] - 2025-04-11

Added

  • MasterAssessment model to RegScale Models
  • .msg file type support when uploading files to RegScale
  • EDR Connector type which adds the ability to ingest EDR data from multiple integrations like CrowdStrike, Microsoft Defender, Malwarebytes and future integrations via
  • Counting informational findings when processing vulnerabilities during
  • Using the sslVerify from init.yaml or environment variable: to DuroSuite and Sicura API calls

Changed

  • Better authentication errors with Tenable SC and Vulnerability Management (IO)

Changed

  • Required fields on SupplyChain model to match RegScale model
  • Improved performance when analyzing issues for closure during

Fixed

  • Multiple warning messages when was set to false in the file or environment variable
  • Error when counting vulnerabilities during Tenable SAP import
  • Error parsing vulnerabilities during OpenText import
  • Progress bars not behaving correctly during the SAP and SysDig flat file imports
  • Errors during Tenable SAP and Tenable SysDig integration

Removed

  • recommendations from the Risk model