Updates and new features
Purplemet Cloud 1.25.0 is now available! This new version features several updates and enhancements compared to the previous version, as described hereafter.
Technology Release Dates
The release date of the installed version, when available, is now displayed on the technology details page for web applications. The publication dates of the latest version and the latest branch version followed by the web application are also displayed when available.
Technical Debt of Technologies
A "Technical Debt" indicator is now available for technologies installed on a web application, providing insight into the effort and importance of updating the technology.
A new "Technical Debt" column has been added to display this information directly in the list of technologies used by an application.
The value is calculated according to the following criteria:
- Whether the installed version is up-to-date
- Number of vulnerabilities affecting the installed version
- Whether the technology is still maintained
Detailed Information for Projects with Source Code Repositories
Information related to Open Source projects available on GitHub, GitLab, or WordPress plugin repositories is displayed on each project's information page. Depending on the repository, information may include:
- Number of forks
- Number of watchers
- Number of stars or project rating
- Number of people who rated the project
- Primary programming language used
- Repository creation date
- Last activity in the repository (commits, issues, etc.)
IP Address Detailed Information and Risk Level
Additional information has been added for IP addresses to better identify entities managing them:
- Autonomous System (AS) managing the IP address
- ISP managing the IP address
- Location of the IP address
A risk level is provided based on alerts from external sources monitoring the internet and potentially malicious server activities. This section includes:
- Identification of proxy systems like Tor
- Web crawling activities identified from this IP address
- Port scanning activities identified from this IP address
- Potential cyberattack source if packets from this IP are flagged as malicious
- Recognition of this IP as part of a botnet
Additional information is provided when oneof these alerts is triggered.
New columns available in the IP address list:
- Threat: Risk level for the IP address
- Organization: Organization managing the Autonomous System
- AS Name: Autonomous System name
- City: City hosting the IP address data center
Display Version Used by Each Web Application for a Given Technology
A new "Version" column is available in the web applications list on the technology detail page of the CMDB, directly displaying the installed version for each web application.
Granular Notification Configuration per Asset
It is now possible to configure notification options per asset: domains, web applications, and certificates. Asset managers can specify whether notifications should be sent when changes occur on the asset. A user may override this option at the account level to receive notifications even if notifications for the asset are disabled for other users, or vice versa.
Certificate Expiration Notification Delay Configuration
The Notifications section of the Subscription page includes a new option, Certificate Notifications, to set how many days before certificate expiration a reminder notification should be sent. By default, this is set to 30 days but can be adjusted according to internal policy.
It is also possible to fine-tune this delay per certificate, for instance, if renewal procedures take longer and require earlier notification.
Tag Customization
New tag configuration options are available to personalize the display and use of tags on the platform.
The Enable rating on tag option specifies whether a rating should be calculated for the tag, representing the average rating of associated web applications. Some tags are used solely for categorization purposes and do not necessarily need a rating. Keeping ratings only for relevant tags helps avoid unnecessary noise in consolidated tag ratings.
The tag display can now be configured as follows:
- Tag Rating: Available if Enable rating on tag is activated, the tag takes thecolor of its rating.
- User Defined: Users can choose a custom color.
- None: No specific color is associated with the tag.
The display of tags across the platform has been updated to reflect the chosen color.
Quick Search Bar
A quick search bar is now available for all users, allowing rapid lookup of a domain, web application, IP address, certificate, user, or tag by name. A maximum of 5 results per category is displayed.
Dark Mode Support
Users can now select the UI theme from the account settings page, with three options available:
- Light (default)
- Dark
- System (follows system theme configuration)
The selected theme is displayed in the user menu at all times.
Responsive Mode Support
The user interface now adapts to the user's screen size, enabling Purplemet usage on tablets, phones, or other devices.
Additional Updates
- Each user account can now have a secondary email address exclusively for notifications.
- Users can now select a default landing page upon login in their profile settings.
- A new "Analyze all web applications" action is available on the tag details page and tag list, allowing analysis of all associated web applications.
- A new option allows automatic analysis of newly discovered web applications on a domain.
- A new "Deleted By" column displays who deleted a web application or domain.
- The "# Web Applications" column now indicates if web applications have been deleted from the domain.
- A new "Web Application Tag Access" option allows users with restricted rights to view the full list of tags associated with accessible web applications, even if only a subset oftags is assigned.
- The password reset process has been strengthened, disallowing reuse of the last 5 passwords.
