Serie v4.5.x

Serie v4.5.x

v4.5.4 (2026-02-04)

Network Posture card: Introduced a new Network Posture card in the resource view, providing a summarized overview of network characteristics and exposure.
Hardware address visibility: The MAC address (Hardware Address) is now displayed in the resource details for improved asset identification and troubleshooting.
Improved IP handling:
- Merged multiple IP entries belonging to the same resource into a unified representation.
- Ordered merged IP addresses consistently for better readability.
Sensor self-detection: Added logic to detect and properly identify Safetybits Sensors within the inventory.
Topology data consistency: Refactored map rendering logic to rely strictly on data present in the computed map structure, reducing inconsistencies and preventing stale references.

Internal refactoring: Minor internal refactors and parameter adjustments to improve consistency and maintainability.

Optimized NVD querying: Updated vulnerability queries to leverage the isVulnerable parameter when retrieving data from NVD, improving accuracy and reducing unnecessary processing.

Beckhoff device detection: Added native detection support for Beckhoff industrial devices, extending asset visibility across heterogeneous OT environments.

Dependency upgrades for performance and security: Updated core libraries to their latest stable versions to improve runtime efficiency, maintain compatibility with modern systems, and include recent security patches.

Advanced rule scoping with tags: Added support for filtering rule scope by resource tags, enabling more precise and contextualized detection boundaries.
Scope editor usability improvements: Replaced the single-line input with a textarea for scope expressions, improving readability and editing experience.
Resource-specific endpoints: Extracted dedicated endpoints for traffic, findings, and inventory changes per resource, improving API clarity and frontend performance.

Windows host detection: Introduced detection logic to identify Windows-based hosts within monitored networks, improving asset visibility in mixed IT/OT environments.
Reduced port scanning noise: Increased the z-score threshold for traffic-based port scanning detection to minimize false positives in stable networks.

Corrected packet direction evaluation: Fixed a typo where the source field was evaluated instead of using the destination, preventing incorrect packet classification.

Dependency upgrades for performance and security: Updated core libraries, and related tooling to their latest stable versions to improve runtime efficiency, maintain compatibility with modern systems, and include recent security patches.

Advanced scope filtering by resource traits: Rules can now be scoped dynamically using resource attributes, enabling more precise and context-aware detection coverage.