Xygeni User Guides
  • Welcome to Xygeni
  • Getting Started
    • Create a Free Trial account
    • Quick start with your code repository
    • Quick start with Xygeni CLI
    • Quick start with preloaded project
    • Log in to Xygeni
    • Subscribe to Xygeni
  • Introduction to Xygeni
    • Key Concepts
      • Projects in Xygeni
      • Project Baseline
      • Detected Issues
      • Remediation Actions
      • Policies
      • Risk Level
      • SDLC Inventory
      • Standards Compliance
      • GuardRails
    • Xygeni Products
    • How Xygeni works
    • Xygeni Web UI Overview
      • Projects Screen
        • Risk Level
    • Integrating Xygeni into your Workflow
    • Prioritization Funnels
      • Custom Funnels
      • Prioritization Criteria (Stages)
        • Reachability
        • Exploitability
        • Fixable
    • Guardrails
    • Generate a SBOM
    • Reports
      • Trends
      • Scans
    • Supported Integrations
    • Customizations
  • Xygeni Products
    • Application Security Posture Management (ASPM)
      • ASPM User Interface Guide
      • All Risks
        • Statistics
        • Issues Evolution
        • Issues comparison between different scans
      • Inventory
        • All Assets
        • Projects
        • Components
        • CI/CD Assets
        • Delivery Assets
        • Systems & Tools
        • Collaborators
      • Health Check
      • Inventory Scanner
        • Inventory Scanner Configuration
        • Inventory Collaborators Scan
      • Importing reports from 3rd party tools
        • External Scanners Supported
          • Report upload for Kiuwan
            • ExportRule (.java)
    • Code Security (CS)
      • CS User Interface Guide
        • Risks (SAST)
        • Malicious Code
      • Malware Scanner
        • Malware Scanner Configuration
        • Malware Detectors
      • SAST Scanner
        • SAST Scanner Configuration
    • Open Source Security (OSS)
      • OSS User Interface Guide
      • Open Source Components
      • Supported Package Managers for dependency resolution
      • Risks (SCA)
      • OSS Prioritization Funnels
      • OSS Auto-Remediation
      • Malware Early Warning (MEW)
        • How Malware Early Warning works
        • Common types of Malware found in open source packages
      • Malware EW
      • Dependency Scanner
        • Dependency scanner configuration
        • Dependency Analyzers
      • Suspect Dependencies Scanner
        • Suspect Deps Scanner Configuration
        • Suspect Deps Detectors
    • Software Supply-Chain Security (SSCS)
      • SSCS User Interface Guide
      • Risks (CI/CD)
      • Compliance
      • CI/CD Scanner
        • CI/CD Misconfigurations Scanner Configuration
      • Compliance Scanner
        • Supported compliance standards
    • Build Security
      • Build Security Concepts
      • Attestation format
      • How SALT works
      • Installing Salt CLI
      • Salt Command-Line Reference
      • SALT Architecture
      • SALT How To…​
    • Secrets Security
      • Secrets User Interface Guide
      • Secrets Scanner
        • Secrets scanner configuration
      • Secret Leaks Handling
        • Secret Leaks Handling
        • How to Prevent Hard-Coded Secrets
        • Secret Leaks Handling CheatSheet
      • Secrets Auto-Remediation
    • IaC Security
      • IaC User Interface Guide
      • IaC Scanner
        • IaC Scanner Configuration
    • Anomaly Detection
      • Anomaly Detection User Interface Guide
      • Xygeni Sensors
        • Xygeni Sensor for Azure
        • Xygeni Sensor for BitBucket
        • Xygeni Sensor for GitHub
          • GitHub Audit Log Processing
        • Xygeni Sensor for GitLab
        • Xygeni Sensor for Jenkins
        • Anomaly Detection's Detectors
      • Code Tampering Scanner
        • Code Tampering Scanner Configuration
  • Xygeni Scanner CLI
    • Xygeni Scanners
    • Xygeni CLI Overview
      • Xygeni CLI Prerequisites
      • Xygeni CLI Installation
      • Xygeni CLI Docker Image
      • Xygeni CLI Authentication
        • CLI Authentication with Xygeni
      • SCM, CI/ CD and Container Registry tokens
      • Xygeni CLI Operation Modes
        • Single scan
          • Scanning a docker image
        • Multi Scan
        • Organization scan
      • Xygeni CLI Configuration options
      • Xygeni CLI Output Formats
      • Exporting Xygeni results to 3rd party tools
      • Automatic Remediation
      • Generate SBOM with the Xygeni CLI
      • CLI utils
        • Credentials Encryption
        • Central Configuration
      • Xygeni Guardrails
        • CI/CD Audit Analysis
      • Xygeni CLI Error Codes
      • Xygeni Scanner Reference
  • Xygeni Administration
    • Platform Administration
      • Profile
      • Subscription
      • User Management
      • Projects Management
      • Projects Groups Management
      • Policies
      • Managed Scans
      • Integrations
        • Xygeni Single Sign-On (SSO) Authentication
          • SSO - OKTA
          • SSO - Microsoft Entra ID
        • Integrate Scanner CLI into CI/CD Systems
          • Azure Pipelines Integration
          • BitBucket Integration
          • CircleCI Integration
          • GitHub Actions Integration
          • GitLab Runner Integration
          • Jenkins Integration
          • Travis CI Integration
        • Git Hooks with Xygeni
        • Collaboration & communication Tools
        • Ticketing Systems
        • Remediation systems
      • Notifications
    • Rest API
  • Support
  • Changelog
    • Version 5.9 – March 26, 2025
Powered by GitBook
On this page
  • New Navigation Structure
  • Redesigned SAST Risk Screen
  • Detection, Performance & Usability Enhancements
Export as PDF
  1. Changelog

Version 5.9 – March 26, 2025

PreviousChangelog

Last updated 8 days ago

This release improves how users interact with the Xygeni platform, making it easier to assess risks, navigate insights, and manage security posture across the SDLC. With key enhancements to navigation, SAST visibility, and backend support, teams can move faster with greater clarity and precision—while strengthening their overall SDLC hygiene.

New Navigation Structure

We’ve simplified the menu to align more naturally with Xygeni’s product suite.

  • Risk types are now accessible with a single click

  • Modules are easier to locate with a flatter layout

  • Transitions across the platform feel faster and more intuitive

This change reduces friction in daily workflows and accelerates incident response. Security and engineering teams can now reach key data faster, improving operational efficiency and reducing the likelihood of missed threats.

Key changes include:

  • Scans → Scans History: Renamed to clarify its role as the central log for all past scans. Users can review scan results over time and track activity across the SDLC.

  • Malware EW → Malicious Package DB: Now listed separately from OSS to highlight its function as a global view of malware packages detected by Xygeni's Early Warning system—even if they don’t appear in scanned projects.

  • Manage Scans: A dedicated entry point to configure SCM integrations and trigger first-time scans of repositories, making onboarding faster and more transparent.

  • Governance (Enterprise only): New section with dashboards on key ASPM metrics like issue trends, exposure windows, and remediation times—designed to help align teams with internal policies and SLAs.

Redesigned SAST Risk Screen

The SAST risk view now prioritizes the most relevant information for faster decision-making.

  • Key details like vulnerability explanation and code location are highlighted

  • CEW information remains accessible without overwhelming the layout

  • Full filtering capabilities are preserved

This allows teams to review, triage, and act on findings with less effort and greater confidence—crucial when managing high volumes of code and complex static analysis data.

Detection, Performance & Usability Enhancements

This release also includes a set of improvements and fixes that enhance platform stability, expand coverage, and refine the overall user experience.

  • Improved ASPM support for Fortify: Better integration and stability

  • Enhanced SCA coverage for Go and .NET: Deeper analysis of dependencies and vulnerabilities

  • Extended CVSS v4 support: More accurate scoring aligned with modern risk models

  • Subscription update enhancements: Users can now adjust plans and capacity directly in the WebUI with fewer steps

These updates increase platform efficiency, reduce friction in administrative tasks, and improve the quality and relevance of security signals across technologies.