Improved logging

Although as a user you'll not see much new things, a lot is going on under the hood. This week a new logging infrastructure for scanner nodes has been rolled out. Due to the increasing number of nodes, modules and assets it had become harder to hunt down bugs. Since that is fixed, most development time for now will be spent on the newly surfacing minor bugs that went unnoticed before. Guarding quality is important, so I'm sure everyone is happy with this choice :-)

Query based alerts

The completely revamped alert section has just gone live! You can now use the results of any query you can think of to fire an alert. The results can be send to an email address or you can have the alert call a webhook and deliver the data in JSON format. Here is a screenshot of an alert

This new feature allows for a lot of creativity when setting alerts, just like with reports. You can set alerts for expired certificates, certain ports opening on hosts, websites coming up or going down, or even specific technology being found like an Exchange server coming online.

Trouble crafting an alert? Please Contact us !

New: Internet Standards Report

There is an updated version of the GUI live. The old style reports and custom reports have now been integrated in one report section, giving you a better overview of your reports. Custom reports can be scheduled and are available in several formats like Excel and PDF. All old reports are available as built-in reports, but not all have these scheduling and format options available (yet). The weekly pdf has moved too the new report section too. Open it and click "edit" in the upper right corner to add recipients to the mailinglist.

A new addition is the internet standards report. It's based on the checks on the internet.nl website. At this time it is still in beta and there are some minor differences. The ipv6 check for your dns server on internet.nl only checks the availability of ipv6 on the server, but ShadowTrackr checks if your AAAA record actually resolves over ipv6 on that server. And some checks are still missing, like the 0-RTT check on TLS certificates.

If you have an opinion on this new report, I'd love to hear from you :-)