Vulnerability Management

Would like to have the ability to perform a suppression on external scan data for insecure ports identified and mitigating controls or accept risk is in place. Key example is VPN port 4433 is open and by default is insecure. However, the requirement of user credentials, MFA, specified internal group membership, and other measures are in place to help mitigate the business accepted risk. Without suppression, the asset will negatively impact risk score for those items with compensating controls.

Requesting domain expiration be added as part of domain scanning for either external asset scanning or attack surface mapper scanning. The expiration date of a domain is publicly available for most domains. As an MSP, it would be extremely beneficial for us and our clients if domain scanning included the expiration date of our clients' domains, so that we can alert our clients when their domain is nearing expiration. If added, it would be best for this to be included as an event set so we can setup alerting for a client's domain nearing expiration.

I maintain a single global application baseline policy that detects 200+ RMM tools. Some customers are explicitly approved to use specific tools (e.g., Alpha‑Company is approved for Zoho Assist). Today, there is no way to exclude a single application for a specific customer while keeping the rest of the baseline intact. Current behavior: * Tags apply at the policy level, not per application * Excluding Zoho Assist via a tag suppresses alerts for all tools in the policy * The only workaround is splitting the baseline into individual policies, which creates unnecessary policy sprawl Requested capability: * Allow per‑customer / per‑application exclusions within a consolidated policy, so approved tools can be exempted without breaking apart the entire baseline. * This would significantly reduce policy overhead while preserving strong baseline detection.

Similar to Microsoft but suppress for Mac OS

With Essential 8 there is a need to monitor for Online-Services which in scope would be SAAS Applications used in an environment, would love to see a feature where detecting potentially accessed SAAS apps via some form of network monitoring can occur or manually adding SAAS apps to a company to monitor health status, for example: End of life or End of Support status Health example Online/Offline/Unhealthy Compliance checks (does the platform have any trust center that details if they are SOC/ISO27001 compliant for example and still are compliant?) Monitor vendor risk for example known compromise where potentially the company may need to be aware of data leakage or password leakage risks. Service example like: M365, Google & Amazon Varonis Employment Hero & Job Adder Cloudflare Verisign Bluebeam LastPass Keeper Xero

Instead of having to create the same exclusions at each client, add the ability to create a global exclusion list.

Looking to enhance our Suppression capabilities. Is it possible to have the Include/Exclude Tags filter available when setting a Suppression? Example: I click to Suppress a set of vuls and in the menu we display the Include/Exclude Tags

install agent on mac > m5 chip support

Extended support for Windows 10

I am trying to streamline the onboarding of a new company into the CS portal. When creating a new company, the system will automatically apply any of the Global scheduler settings (Scan, Patch, and Report options). The ask: Is there a way to have an option like a checkbox to 'exclude Global schedules' from a newly added company automatically at creation? What I am finding is the experience is very manual when creating a new company and needing to remove them from the Global schedulers. Each of the setups have to be clicked into one a time to 'deny' the newly added company. Example here > I have to manually go in and edit each of the lines. It would be nice to have a simple checkbox or toggle indicator that allows us to 'exclude from Global' or something alike.