11 posts tagged with "Offensive & Audit Manager"

Launched the PCI GAP Analysis feature as part of the Offensive & Audit Manager product, enabling teams to run and document the full set of PCI assessments natively in the platform.

• Supports assessments across PCI DSS, PIN and SSF.
• Covers Gap Analysis, SAQ and the evaluation of the secure software development process, all performed and documented inside the Conviso Platform.
• Each control includes a clickable Guidance area with filling instructions, reducing the need for external consulting during self-assessments.

Watch how PCI DSS fits application security: O Papel do PCI DSS na Segurança de Aplicações.

Introduced a new Tickets module, bringing support requests directly into the Conviso Platform.

• Open and track support tickets without leaving the platform, no need to switch to email or external channels.
• Centralized history: all your support interactions live in one place.
• A more fluid, transparent support experience, fully integrated into your application security workflow.

Published the Compliance area on the Conviso Platform, starting with a PCI overview that centralizes how the platform supports PCI programs.

• Documents how PCI assessments, evidence, and controls are handled within the platform.
• Serves as the entry point for the broader Compliance & Governance capabilities (GAP Analysis, SAQ, SLA, retention).

Learn more in the PCI overview documentation.

Introduced Remediation SLA for vulnerabilities, giving teams managerial control over remediation deadlines.

• Real-time deadline states based on severity and the asset's business impact: on-time, near-due (75% of time elapsed), breached, and resolved.
• Dashboard & filters: SLA states are visible in the dashboard and issue filters, so teams can prioritize what is about to breach or already breached.
• Proactive notifications (email/platform) alert the asset's responsible teams as deadlines approach or are exceeded.
• Purely managerial and monitoring-focused, it does not block deploys/builds/merges, does not change vulnerability status automatically, and does not trigger the Security Gate (which remains the independent enforcement mechanism).

Learn more in the Remediation SLA documentation. Watch: Como priorizar vulnerabilidades baseado em riscos reais.

Improved the ClickUp defect-tracker integration to save time for teams that need to create configurations for many different assets.

• Reuse and replicate ClickUp configurations across multiple assets instead of setting up each one manually.
• Significantly reduces effort for operations mapping hundreds of assets, removing the need for custom scripting.

Redesigned the manual vulnerability registration flow for simplicity and better usability.

• Creating a vulnerability manually is now much simpler, with the full process on a single page.
• The same usability improvements apply to editing, making it easier to update details such as a vulnerability's severity.
• A meaningful UI/UX optimization for anyone who registers vulnerabilities at scale.

Performed a complete refactor of our technical documentation, making it more intuitive and better aligned with the platform's processes and offerings.

• Reorganized content and navigation for an easier reading experience.
• Updated a large amount of content, addressing multiple support tickets and update requests.

👉 Access the Conviso Docs to experience these updates.

Shipped several improvements across vulnerability visualization, retest projects, and evidence handling.

• Vulnerability details & timeline: clearer visualization of a vulnerability's details and history.
• Retest projects: status changes for vulnerabilities associated with retest-type projects.
• Projects Calendar: a new calendar tab on the projects page, improving planning and visibility of project schedules.
• Evidence on status change: attach evidence files when changing a vulnerability's status — including use cases such as associating a file with a risk acceptance — strengthening auditability and traceability across the lifecycle.

Watch: Como elevar a maturidade da gestão de vulnerabilidades com foco no risco.

Improved the Conviso MCP Server and published new governance documentation.

• Broader compatibility: the MCP now works across all Claude products — Desktop, Cowork/Projects, and CLI.
• Improved MCP documentation for easier setup and usage.
• New Skills documentation.
• Documented data retention policy.

👉 Access the Conviso Platform to experience these updates.

Release date: March 23rd, 2026

Key Benefits​

• Continuous Living Threat Modeling;
• Defect Tracker Recent Deliveries;

Introduction​

Release 4.23 made Secure by Design workflows more continuous and improved visibility into the delivery of findings to engineering backlogs.

---

New Feature

Continuous Living Threat Modeling​

• Introduced living, versioned threat-modeling artifacts driven by architecture diagrams.
• Keeps security requirements synchronized with architectural changes and preserves their evolution as an auditable history.

---

New Feature

Defect Tracker Recent Deliveries​

• Added visibility into recent synchronization events for defect trackers such as Jira, ClickUp, and ServiceNow.
• Helps teams troubleshoot delivery issues with detailed context and status information.

Expanded and stabilized Badge (Seal) workflows.

• Domain field support in badge creation/editing.
• Badge deletion support and improved scope isolation.
• Audit validation improvements through Conviso Seal API routing.