Serie v5.4.x
v5.4.4 (2026-07-27)
Agentic AI
Network Traffic Trends via Assistant: You can now ask the assistant to break down your network traffic by day and protocol, making it easier to spot trends and anomalies over time.
Vulnerability Triage Now Shows Scores: Vulnerability triage through the assistant now includes the vulnerability’s score, giving you more context when prioritizing fixes.
More Reliable Vulnerability Lookups: Fixed an issue where the assistant could return incorrect results when looking up vulnerabilities for a resource.
v5.4.3 (2026-07-24)
Agentic AI
Alert Triage via Assistant: The assistant can now triage your security alerts for you, pulling in the alerts for a plant, grouping repeated occurrences, and linking the relevant rule.
Vulnerability Triage via Assistant: The assistant can now walk you through your open vulnerabilities and help you prioritize what to fix first.
Sensor
- Interface & Port Coverage Fix: Fixed an issue where some network interfaces and ports were not being scanned, closing gaps in device visibility.
On-Prem Console
- Faster, More Reliable Compliance Controls: Rebuilt the compliance controls engine for improved reliability and performance.
v5.4.2 (2026-07-19)
Agentic AI
- Introducing the Safetybits Assistant Integration (MCP): You can now securely connect your Safetybits data to an AI assistant, and ask it about your plants, devices, and resources directly.
v5.4.1 (2026-07-15)
Sensor
Link-Sharing Device Identification: Resolved a discovery conflict by filtering devices strictly by both IP and MAC addresses. This ensures that distinct physical devices sharing a common network link are no longer misidentified as a single asset.
Siemens Asset Lifecycle Mapping: Added the “Discontinued” lifecycle status for legacy Siemens products, enabling security and maintenance teams to identify and plan upgrades for obsolete hardware.
On-Prem Console
ISO 21434 Compliance Benchmark: Added official support for the ISO/SAE 21434 cybersecurity standard, helping automotive manufacturers and supply-chain partners assess, track, and audit vehicle-level and component-level OT security compliance.
Topological L3 Network Map Redesign: The interactive network map has been rebuilt into a topological L3 map driven dynamically by active network traffic, introducing several powerful features:
- Multi-Network Filtering: Select and display one, several, or all subnets simultaneously on the map with instant, real-time rerendering.
- Scale Optimization (80+ Assets): To maintain browser performance, the map automatically scales to show only the largest active subnet if there are more than 80 resources.
- Unicast Traffic Filter: Cleans up map clutter by showing only devices that have engaged in unicast communications within the past 24 hours.
- Device-Type Iconography: Added a complete suite of device-type icons (including dedicated badges for gateways and edge devices) for fast visual scannability.
- Inline Device Provisioning: Directly generate and provision a new managed device on your network from any unmapped traffic stream identified on the map.
Interactive Table Engine Upgrade: Migrated the platform’s data tables to the open-source fork of
mantine-react-table(-open), guaranteeing long-term support, faster sorting, and smoother table navigation.Advanced Traffic & Sankey Visualizations:
- Multi-IP Device Granularity: The Sankey diagram now renders individual IP addresses for multi-homed devices instead of grouping them under generic categories, making traffic paths much clearer.
- Sankey Noise Reduction: Removed transit gateway hops from Sankey views to focus the visualization strictly on direct, end-to-end device communications.
Asset Inventory Cleanups: Prevented empty Aruba device records from displaying in the inventory drawer if no telemetry data has been collected from them.
v5.4.0 (2026-07-10)
Sensor
- Reputation-Based Traffic Rules: Introduced a powerful new security rule that automatically monitors and flags external communications based on IP reputation. This allows you to immediately detect and block traffic exchange with known malicious IPs.
- Enriched Threat Alerts: Alerts involving external connections are now automatically enriched with real-time reputation intelligence. Security teams can instantly see threat scores and risk context directly within the alert card.
On-Prem Console
Smoother Map Queries: Added a loading indicator to the country traffic views on the World Map, providing instant visual feedback while the system retrieves communication metrics.
Siemens Asset Visualization Fix: Corrected how Siemens devices are evaluated and visualized, ensuring they consistently use standard catalog data definitions across the asset register.