Minor version update

• Clarified language about reviewed false positives vs reviewed findings

• Add setting to include / redact findings in exported reports
• Add "Content Link" to exported findings

• Scanning performance improvements.
• Bug fix related to logging for exports.

• XML Parsing Robustness Improvement

• Minor logging bug fixes and improvements

• Fixes a bug where auto-scan did not scan all pages when using MS SQL Server as the Confluence backing database. Customers using MS SQL Server are advised to force re-scan their entire instance using our REST API to ensure that all pages are fully scanned.
• Fixes a rare bug when displaying space Security Analysis when there are many, many findings in a single page.

• Adds a REST API endpoint that allows you to configure which of your nodes run scans

• Scanning robustness improvements.

• Performance improvements for reviewing findings.
• Fixes for issues with scanning very old content.
• UI bug fixes and improvements.

• Unconditionally adds audit log entry when potentially sensitive information was detected in a triggered scan.

• Added a setting where additional users and groups can be granted access to change settings, run scans, view reports, and review findings.

Address rare scanning errors.

• Fixes a UI bug in the Settings page where custom rules would sometimes not clear after deletion

• Performance improvements and bug fixes related to database query performance.

• Fixes and issue where the dashboard wouldn't load under OracleDB.

• Reduce log noise when viewing scan results.

• Ability to cancel scheduled scans from dashboard.
• Dashboard now displays which scans are scheduled vs scanning.
• Minor performance improvements and bug fixes.

• Speeds up dashboard performance.
• Fixes a bug in queueing of large scans.

• Mitigated potential CSV injection attacks in exports.
• Fixed an issue where scans could get stuck in the queue due to lack of server resources.
• UI Bugfixes.
• The soteri-security service account is no longer required or created automatically, and will be automatically deleted when the plugin is upgraded.
• Added a setting allowing configuration of the number of parallel scans per node.
• Added the ability to export information to a CSV file about what findings were reviewed and by whom.

• Created a new setting allowing easy debug logging.
• Fixed an issue with the scanning REST API.
• Fixed an issue where certain plugin upgrade cases could have caused stuck scans.

• Reduces the false positive rate in some built-in rules. Note that if these rules are enabled, then scans will be marked as out of date, and your instance will need to be re-scanned.
  • AWS_SECRET_ACCESS_KEY
  • MAILCHIMP_API_KEY

• Display the number of pending scans in the dashboard.

• Distribute the scan queue to multiple nodes, rather than running all scans on one node.

• Fixes a bug which prevented new installations on Confluence 8.1.0 and later

• Displays detected issues with custom rules on the settings page
• Bugfixes in the scanning engine for certain old pages
• Fixes UI bugs related to managing scanning rules
• Fixes Minor OracleDB compatibility issue

• Increases the number of scans run in parallel to boost scanning speed.
• Faster exports of scan results.
• Fixes stuck scans on plugin install.
• Other minor robustness improvements.

• Fixes several issues which were causing large exports to fail.
• Bugfixes for rare issues when running scans.

• Adds a button to show the diff which first introduced a finding on the Security Analysis page

• Bugfixes in scanning for:
  • Confluence instances with non-standard character encodings.
  • Malformed pages from Confluence 3.

• Handle a wide range of issues queueing scans of spaces when clicking the "Scan All" button.

• Scan very old content versions from before Confluence 4.
• Improve exporting performance when exporting very large sets of findings.
• Fix issue where exports could fail for imported spaces.

• Fix issue with potentially large memory utilization while exporting.
• Fix issue where exporting could fail if a page had its permissions restricted such that a super-admin could not view it.

• Spend less time sorting through similar findings - Security for Confluence now groups similar findings on the same page when viewing the Space Security Analysis page.
• Fixes a bug where under certain conditions, the Security Analysis page would fail to show scan findings until a page refresh.

• Audit log events for manually triggered scans

• UI upgrades
• Scanning robustness improvements
• Various bugfixes

• Trigger scans for all your spaces at once with the new "Scan Whole Instance" button in the Soteri Dashboard
• A new padlock icon in Confluence's main toolbar will take you to the Soteri Dashboard
• Many UI improvements

• Various performance improvements.

• Fixes for some database compatibility issues
• UI Improvements

• Reduce false positives when scanning for AWS Client IDs

• Ignore formatting when scanning content
• Log plugin related events like settings changes to audit log. See our documentation for more details.
• "Keep scan reports up to date" option now applies to new spaces.
• Various other bugfixes & improvements.

• Detect new fine-grained Github personal access tokens. Note: this update contains a rule definition, which will mark old scans as out of date.

• Adds a new option to email content authors when they publish potentially sensitive information. See our documentation for more details.

• View the scan status and number of findings for all the spaces you administer in one convenient dashboard
• Trigger scans and exports directly from the new dashboard

• Admins can now create and manage custom scanning rules
• Once a space is scanned, new and updated content in that space is now automatically scanned (admins can disable)
• Assorted performance improvements

• Fix an issue where servers in certain timezones were unable to fetch scan results for individual pages.

• Bugfixes related to compatibility with instances running MySQL, Oracle DB, or Microsoft SQL Server.

• Export findings in CSV format using either the web interface or REST API.