(Ithaca/USA, Offenburg/Germany, 13 September 2022)

• Support for open-source component detection in Mobile, Firmware, and Embedded software (a wide range of binaries are supported, including Android, iOS, VxWorks, QNX, Cisco and other popular embedded and firmware image formats)
• New support for binaries originating from C#, Go, and Java source code
• Detection of JavaScript and Python components and packages
• Expanded version detection to provide more accurate reporting of older and more vulnerable open-source components
• 11,000 new vulnerabilities have been added to the CodeSentry vulnerability database
• File system image formats such as ext2, ext3, VMDK and others can now be scanned

• The CodeSentry User Interface now has a Dark Mode option for easier viewing
• A summary of N-Day Findings is now available in the Detailed Vulnerability Report (PDF) to review the high-level security of detected components
• When uploading an artifact, the upload progress is now displayed in the UI

• The CodeSentry on-premise installer is now delivered via Replicated – this technology makes it even easier to deploy CodeSentry in an on-premise Kubernetes cluster or air-gapped network.

(Ithaca/USA, Offenburg/Germany, 2 May 2022)

• Software Bill of Materials can now be exported in SPDX format,
• CycloneDX SBOM format exports now include License and Supplier (Vendor) information where available,
• Security Attributes Service scans and results are now available via the UI,
  • Reports on binary security features such as ASLR, Stack Execution and more
• Enhanced Reports include new Scan Dashboard and Security Attributes Reporting
• Over 20,000 new and updated vulnerabilities including detection of the Log4Shell vulnerability
• Support for additional archive file formats
  • ISO, ext4, SquashFS
  For further information watch our video

(Ithaca/USA, Offenburg/Germany, 25 January 2022)

• Enriched vulnerability information
• 8 new fields including links to patches, component upgrades, and remediation information
• Open Source Component Licenses (GPL, BSD, etc) are now reported with the associated license risk
• New Zero-Day Shallow Scan with faster scanning times
• New Security Attributes Service
• Reports on binary security features such as ASLR, Stack Execution and more
• Enhanced CodeSentry Portal featuring new Application Dashboard and Custom Report Generation
• Expanded Component Database with improved component version detection
• Audit Logging of system activity is now available
• Support for additional archive file formats
• MacOS DMG (Extended), .pax archives, symlinks in archives