Release Notes - February 2025

Release Notes

Release v4.1.99

February 24, 2025

1. Introducing Risk Burndown Trend

Risk Burndown Trend allows users to track treatment effectiveness over time, compare current vs. target risk trends, and link treatment plans to Groups. This provides greater transparency and supports better decision-making in risk management.

Furthermore, the "Update Analysis" button now previews numbers in a confirmation modal before committing changes.

2. Exception Handling for IPs & Domains - Third-party

Introducing Exception Management to reduce false positives and improve data accuracy in external risk assessments. Users can now flag exceptions for incorrectly attributed IPs and domains and provide comments when raising requests. Additionally, users can request additions to the digital assets by requesting the addition of IPs/Domains. Once a request is submitted, the SAFE support reviews and approves or rejects it within 5 days.

3. AI-Driven Summary for Risk Scenarios, Third Parties & Control Center

Introducing AI-powered summaries to help users make better decisions by highlighting key insights for risk scenarios, third parties, and the control center. This enhancement improves usability and accelerates decision-making by presenting critical information in a concise and actionable format.

4. Enhanced Control Maturity Calculation for Improved Risk Assessment

Aligning with frameworks like NIST CSF and others, the control maturity calculation now considers the average maturity across multiple mapped questions rather than the lowest maturity level. This enhancement provides a more accurate estimation of risk likelihood by better reflecting the overall control effectiveness. Organizations can re-upload previously submitted questionnaires to update control maturity scores based on this improved methodology.

5. Management and Filtering of Third Parties Using Tags (Early Access)

Enhanced third-party management using tags for better management, filtering, and risk reporting. Users can now add, edit, bulk update, and filter third parties by tags, improving visibility and risk assessment. Tags are also supported in exports and the Top Risky Group Chart for deeper analysis.

6. New Asset and User Details Page (Early Access)

Enhancing asset and user visibility with a detailed view page in SAFE. Users can now click to view specific asset/user details, including findings and mitigation status, enabling better asset management and issue tracking.

7. Enhanced Custom Roles with granular permissions (Early Access)

Role Management in SAFE has been enhanced with flexible, attribute-based permissions for Organizations. Users can now define custom roles with Read, Write, Create, and Delete access based on smart criteria, ensuring improved security, compliance, and user management.

8. Threat Intel updates

  • 429 security incidents added in the library for third-party breach notifications

  • 79 new CVEs are marked as Exploitable

  • 180 new Threat Events added to the Threat Center as a part of the 5th Feb to 18th Feb Threat Hunting exercise

Release v4.1.98

February 10, 2025

1. See What Changed

"See What Changed" feature is now available for aggregated risks for groups and organisations. Now, you can easily compare past and current information to see changes at a glance for aggregated risks. See What Changed highlights the below

  • Change Tracking & Composition Insights

    • View timeline-based trends to understand how aggregate risk has evolved.

    • Analyze changes to aggregate risk composition, including adjustments in contributing scenarios.

  • Additionally, the trend also now highlights exact data points on each date for all risk scenarios.

2. NIST 800-171 R3 Questionnaire

Safe now supports security Questionnaire NIST 800-171 R3.

3. Enhanced Group Details

SAFE introduces improvements to Group Details navigation and quick edit capabilities, usability, and workflow efficiency.

4. Threat Center Update

This Release we have added below threat Intel

  • 280 security incidents added in the library for third-party breach notifications

  • 33 new CVEs are marked as Exploitable

  • 125 new Threat Events added to Threat Center in between 22nd Jan and 4th Feb  

5. ServiceNow ITSM Integration

SAFE now offers ServiceNow ITSM integration, available as Early Access for select customers. This feature enables seamless service request creation and management directly from the Treatment Plan page.

  • Initiates service requests from Treatment Plans.

  • Capture priority, assignee, and scope details.

  • Auto-link request IDs with an option to de-link.

  • Display real-time request status within SAFE.

  • Automatically include Treatment Plan details in tickets.

This integration streamlines risk mitigation, improves operational efficiency, and ensures seamless coordination between SAFE and ITSM workflows.

6. PAN-Cortex XDR Integration

This Integration is available as Early Access to select customers. Support for PAN Cortex XDR Integration has been introduced to enhance risk calculations in SAFE. Users can now incorporate EDR findings from PAN Cortex XDR into Likelihood risk calculations

7. Miscellaneous Enhancement

  • New Widget “Risk Comparison within a Group”

    Safe now supports the widget to compare 10 unique Risk Scenarios within a group sorted by ALE, Loss Magnitude and Likelihood with a threshold line.  

  • Ability to add Attack surfaces to smart and Static Groups

    Safe allows the creation of groups by manually selecting attack surfaces to smart and static groups, enabling the application of appropriate controls to build risk scenarios.

  • Support for Non-ISO  date formats in phishing reports in YYYY-MM-DD format.

  • Asset counts under Susceptibility