December 2021 update for Invicti Enterprise On-Premises

We’re delighted to announce the release of Netsparker Enterprise On-Premises 2.2. The highlights of this release are tagging, a login warning banner, encryption, and the integrations with ServiceNow Vulnerability Management and DefectDojo. We have also added new security checks, improvements, and fixes.

Tagging

Netsparker Enterprise extends its tagging capabilities. In addition to issues, you can now tag websites, scans, and website groups with this release. The tagging lets you give additional context to scans, websites, website groups, and issues for easy viewing. Tagging also helps you group similar scans, websites, and issues. For further information, see Tagging in Invicti Enterprise.

Login warning banner

You can configure a login warning banner in Netsparker Enterprise. The banner provides security and legal notices to users accessing the system. It notifies them that they are subject to monitoring and may incur legal penalties for inappropriate or unauthorized use of the system. For further information, see Configuring Login Warning Banner.

Encryption

Netsparker Enterprise On-Premises encrypts and decrypts sensitive data by using AES encryption. For the encryption, Netsparker uses a secret key. With this release, Netsparker Enterprise now requires you to download and store your secret key. For further information, see Encryption Settings.

ServiceNow Vulnerability Response and DefectDojo integrations

Netsparker now supports additional integrations: ServiceNow Vulnerability Response and DefectDojo.

• ServiceNow Vulnerability Response helps you in tracking, prioritizing, and resolving vulnerabilities. The Vulnerability Response application imports and automatically groups issues according to group rules, allowing you to remediate vulnerabilities quickly.

For further information, see Integrating Netsparker Enterprise with ServiceNow Vulnerability Response.

• DefectDojo is an open-source application security vulnerability management tool that streamlines the application security testing process. It offers features such as importing third-party security findings, merging, report generation, and security metrics. For further information, see Integrating Netsparker Enterprise with DefectDojo.

Further Information

For a complete list of what is new, improved, and fixed in this update, refer to the  Netsparker Enterprise Changelog.