Skip to main content

Release 4.27

Release Notes
Conviso Team
Conviso Team
Conviso AppSec

Release date: October 23rd, 2026

Key Benefits​

Introduction​

Release 4.27 expands control over application security workflows, access governance, and integrations. It introduces AI Pentest Assisted, improves certificate automation and Security Gate configuration, and brings a more flexible experience to Trust Center and DAST management.

New Feature

AI Pentest Assisted​

  • Introduced AI Pentest Assisted, a new AI Pentest mode that combines autonomous testing with live human analyst supervision.
  • Create assisted artifacts with a lead analyst, participants, and configurable notifications for important execution events.
  • Use the dedicated War Room to follow an assessment in real time, provide directives to the agent, hold or release the run, stop an individual step, and ask questions during the execution.
  • Findings arrive as drafts and become vulnerabilities only after an analyst confirms them; dismissed findings are treated as false positives before they reach the vulnerability list.
  • Assisted executions are started on demand and use the same credit model as autonomous AI Pentest runs.

Learn more in the AI Pentest Assisted documentation.

New Feature

SSL Certificate Automation with ACME​

  • Configure and manage ACME certificate automation directly in the SSL Certificates module.
  • Register and validate domains, manage server credentials, and generate the information required to connect ACME-compatible clients.
  • Monitor the status of domains, credentials, and certificate issuance in one place.

Learn more in the ACME documentation.

Improvements

More Flexible Security Gate Policies​

  • Configure which pull request target branches should enforce the Security Gate.
  • Pull requests to other branches can continue to be scanned and report findings without blocking merges.
  • Configure branch rules globally or at the asset level, including the repository default branch.

Learn more in the Security Gate documentation.

New Feature

Azure DevOps Service Principal Authentication​

  • Connect Azure DevOps using a Service Principal as an alternative to OAuth.
  • Configure tenant ID, client ID, client secret, and authorized organizations through the Platform.
  • Receive clearer feedback when credentials or organization permissions need attention.

Learn more in the Azure DevOps Service Principal documentation.

Improvements

Access Control and Default Profiles​

  • Improve access governance for users, teams, and service API keys.
  • Allow team profiles to cover users who do not need an individual profile.
  • Show the impact of access changes before saving, helping administrators avoid unintended loss of responsibility for assets, projects, or vulnerabilities.
  • Add more granular control over who can manage the vulnerability SLA matrix.

Learn more in the User Management documentation.

Improvements

Trust Center Administration​

  • Reorganize Trust Center configuration into dedicated tabs for general settings, content, VDP program, sharing, and preview.
  • Save changes automatically as drafts and publish them through a centralized action.
  • Improve content selection with search, counters, and filters for selected items.
  • Support editable public page addresses and clearer publication status.

Improvements

DAST Configuration​

  • Configure custom HTTP headers for DAST scans, with validation that keeps authentication-sensitive headers in the dedicated authentication configuration.
  • Support cookie-based authentication secrets.
  • Add a direct shortcut from DAST configuration to scope documentation.

Learn more in the Conviso DAST documentation.

Improvements

Integrations and Scan Management​

  • Support multiple GitHub organization connections.
  • Improve repository and branch handling for external-scan synchronization.
  • Add configuration for handling false positives across branches.
  • Improve visibility and guidance for GitHub and Azure DevOps integration workflows.

👉 Access the Conviso Platform to explore these updates in action.

Products:AI PentestWeb and API Scan
Modules:Developer ExperienceCompliance & GovernanceAutomations