{"id":33452,"date":"2024-08-09T20:24:23","date_gmt":"2024-08-09T14:54:23","guid":{"rendered":"https:\/\/www.getastra.com\/blog\/?p=33452"},"modified":"2024-08-09T20:28:48","modified_gmt":"2024-08-09T14:58:48","slug":"summer-2024-product-release-whats-new-at-astra-security","status":"publish","type":"post","link":"https:\/\/www.getastra.com\/blog\/astra-product\/summer-2024-product-release-whats-new-at-astra-security\/","title":{"rendered":"Summer 2024 Product Release: What\u2019s New at Astra Security?"},"content":{"rendered":"\n

Cybersecurity has evolved from a technical challenge to a strategic business imperative. CXOs now grapple with a complex interplay of technological advancements, organizational shifts, and human error, which is only intensified by Generative AI, insider threats, third-party vulnerabilities, and persistent threat exposure. <\/p>\n\n\n\n

Thus, how can you continue building and maintaining an effective and sustainable cybersecurity program? <\/p>\n\n\n\n

Simply put, your company needs to stop investing in cybersecurity tools and instead invest in achieving tangible security outcomes. Understanding and prioritizing vulnerabilities is essential to prioritize such defensible targets and determine the appropriate level of protection. <\/p>\n\n\n\n

While traditional security measures like firewalls and password managers form a solid foundation, advanced VAPT service providers like Astra Security provide the granularity needed to pinpoint and prioritize risks.<\/p>\n\n\n\n

TL:DR:<\/strong> Running over 9300 security tests, our platform blends automation and human expertise to provide in-depth security insights across various industries and assets while seamlessly integrating real-time reporting, agile pentesting methodologies, modern SIEM practices, and tools.<\/p>\n\n\n\n

In addition to the above, this summer, to keep up with the new curveballs and emerging threats, we dedicated ourselves to streamlining workflows, improving vulnerability discovery, and optimizing scan management, to deliver a more efficient and powerful solution. So what are we waiting for, let\u2019s get started!<\/p>\n\n\n\n

<\/span>1. Leverage Our Updated Crawler <\/span><\/h2>\n\n\n\n
\"Leverage<\/figure>\n\n\n\n

The Update<\/h3>\n\n\n\n

We have turbocharged our crawler, which now excels at uncovering hidden endpoints, with a 40% increased detection in full scans and 20% in lightning scans. <\/p>\n\n\n\n

The above endpoint discovery enhancements are complemented by advanced navigation features, including automated form-filling and refined authentication processes, enabling the crawler to explore websites with an improved efficiency.<\/p>\n\n\n\n

The Problem<\/h3>\n\n\n\n

Building upon the existing foundation, we optimized the same to deliver a superior vulnerability discovery experience. By incorporating customers’ needs, we have designed the latest updates to offer a significant leap forward in speed, accuracy, and adaptability.<\/p>\n\n\n\n

The Impact<\/h3>\n\n\n\n

1. Deeper vulnerability discovery:<\/strong> Uncover hidden endpoints leads to gain a more comprehensive understanding of your application’s attack surface.<\/p>\n\n\n\n

2. Greater flexibility:<\/strong> The adaptable architecture powered by automation enables your team to quickly address emerging threats and customize scans to meet specific security requirements.<\/p>\n\n\n\n

<\/span>2. Update to Google’s Developer Tools Recorder<\/span><\/h2>\n\n\n\n
\"Update<\/figure>\n\n\n\n

The Update<\/h3>\n\n\n\n

To enhance scan-behind-login capabilities, we’ve adopted Chrome’s built-in Developer Tools Recorder. This recorder captures user actions on a webpage as a series of steps, allowing for automated login sequences that can be replayed and analyzed to streamline testing and improve efficiency. <\/p>\n\n\n\n

The Problem<\/h3>\n\n\n\n

Due to Chrome’s deprecation of Manifest V2 support, we discontinued our Astra Chrome extension for scan-behind-login recording and transitioned to the Chrome DevTools-based sequence recorder. <\/p>\n\n\n\n

This shift improves our alignment with Chrome’s evolving ecosystem and allows you to streamline workflow by providing a built-in, integrated solution, eliminating the need for additional extensions and improving performance and reliability.<\/p>\n\n\n\n

The Impact<\/h3>\n\n\n\n

1. Streamlined Workflow:<\/strong> Google\u2019s Developer Tool Recorder eliminates the need for additional extensions, simplifying your development process.<\/p>\n\n\n\n

2. Optimized Performance:<\/strong> By reducing browser clutter, it improves overall performance by consolidating tools as well.<\/p>\n\n\n\n

<\/span>3. Automatically Cancel Stuck Scans<\/span><\/h2>\n\n\n\n
\"Automatically<\/figure>\n\n\n\n

The Update<\/h3>\n\n\n\n

We’ve updated the Astra dashboard to proactively monitor your scheduled scans,<\/a> pinpoint those that get stuck, and automatically hit the cancel button. The dashboard automatically cancels these stalled scans to save you time and effort.<\/p>\n\n\n\n

The Problem<\/h3>\n\n\n\n

Automating stuck scan identification and cancellation frees up your team’s time, ensures the maintenance of efficient scan schedules, and facilitates the elimination of the need to monitor scheduled scans.<\/p>\n\n\n\n

The Impact<\/h3>\n\n\n\n

1. Boosts efficiency:<\/strong> Automatic identification and cancellation of stuck scans ensures that scan schedules run smoothly without interruptions, improving overall system efficiency.<\/p>\n\n\n\n

2. Improves user experience:<\/strong> By eliminating the hassle of managing stuck scans, users can enjoy a more seamless and frustration-free experience with the Astra dashboard.<\/p>\n\n\n\n

<\/span>4. Enhance Threat Detection with 80 New Emerging Threat Scanner Rules<\/span><\/h2>\n\n\n\n
\"Enhance<\/figure>\n\n\n\n

The Update<\/h3>\n\n\n\n

With 80 new rules added to our emerging threat scanner, Astra’s automated scanner now detects a broader range of potential vulnerabilities, quickly adapting to the evolving threat landscape\u2014like the critical RegreSSHion<\/a> vulnerability\u2014in days, not months.<\/p>\n\n\n\n

The Problem<\/h3>\n\n\n\n

Recognizing the dynamic nature of cyber threats like FleetCart\u2019s Information Disclosure, SolarWinds\u2019 Directory Traversal, and other vulnerabilities, our security team is dedicated to safeguarding your systems. We continuously expand our scanner\u2019s capabilities by adding new rules approximately every two weeks, ensuring you’re protected against the latest threats.<\/p>\n\n\n\n

The Impact<\/h3>\n\n\n\n

1. Enhanced protection:<\/strong> The new scanner rules equip your infrastructure with the latest defenses against emerging cyber threats, safeguarding sensitive data.<\/p>\n\n\n\n

2. Proactive defense:<\/strong> The rules allow for early detection of threats, enabling rapid response and minimizing potential damage.<\/p>\n\n\n\n

<\/span>Summary<\/span><\/h2>\n\n\n\n

This summer, Astra has been dedicated to empowering your security team with powerful tools and insights. By streamlining workflows with the Google Developer Tools Recorder, automating routine tasks like canceling stuck scans, and enhancing threat detection, we’ve made it easier to protect your organization.<\/p>\n\n\n\n

But our commitment to your security doesn’t stop there. Our revamped dashboard is now in testing, promising intuitive navigation, a sleek design, and advanced features like bulk scanning and improved target selection. Stay tuned and stay safe!<\/p>\n\n\n