Tag: release-notes

v4.3.0 lets AI apps connect to the MCP server with an OAuth sign-in, adds an evidence review queue with a four-eyes option, a briefing-style home page, a richer framework report with evidence zips, scenario selection across risk assessments and their exports, a denser control plan, federated service accounts, a dedicated space for third parties and optional memcached, plus ITSP.10.033, ISO 14001:2015, LYSS and a Hungarian NIS2 preset.

v4.2.2 adds NIS2 and GDPR incident follow-up with deadline reminders and CCB/APD notification worksheets, cumulative maturity levels and weakest-link scoring for Essential Eight and ASD Essentials, asset lifecycle stages, simpler metrics, per-role field access in audits, EBIOS RM study duplication, a report time zone, and new libraries: ASD ISM September 2026, Swift CSCF 2026 and 2027, SAMA BCM and the German NIS-2 Implementation Act.

v4.2.0 moves the frontend to SvelteKit 3, adds notifications for assignments, approvals and reviews, Typst templates for PDF audit reports, vendor posture views by tier, required evidence in questionnaires, a portals editor that links documents, EBIOS RM workshop 5 in Excel export, order-independent mapping inference, Norwegian Bokmål and Turkish, and new libraries: SOC-CMM, PIPEDA, Czech Decree 409/2025, NCA DCC and CSCC, OWASP Top 10 2025 and MonServiceSécurisé.

v4.1.3 to v4.1.5 bring tiering to solutions with propagation to their vendors, an experimental spreadsheet import wizard with column mapping, labels on assessments and studies with a label management view, DPIA import from CNIL PIA exports, a Microsoft Graph mail transport, questionnaire compliance on entity assessments, a rebuilt n8n node, SAML account-linking fixes and the Brotli fix.

v4.1.2 brings DPIA screening and assessment for GDPR, a processor register, computed metrics built from metric instances, a dependency analysis for business impact analyses, a single mail service with failover, OAuth for audit-log forwarding to Microsoft Sentinel, Plumber imports into technical postures, MCP tools for incidents and evidence, and new libraries: Hungarian NIS2, Costa Rica BCCR-SINPE NT-RCS and a question-based NCSC CAF.

v4.1.1 adds vendor tiering backed by scored criticality forms, outcome rules on frameworks that check the CyFun 2025 conformity criteria, an export to the official CCB CyFun tools, paginated external APIs and bulk writes in workflows, an experimental domain compliance tree, more MCP coverage (advanced EBIOS RM, assets, teams), and new libraries: China PIPL, OWASP SAMM v2.2, ISO 27001 ↔ HDS and IEC 62443 ↔ ANSSI mappings.