Tenable Web App Scanning 2023 Release Notes

We are happy to announce an updated user experience for all of our WAS users.

• Tenable One Integration - WAS has been integrated into the Tenable One experience with a similar look, feel & navigation. Tenable One scoring is also featured throughout the application.

• WAS Landing Page - Provides overall health of all applications along with quick pivots to remediate current issues and prevent future issues.

• Applications - Updated view that maintains legacy WAS functionality along with adding a new view that shows the software technologies running on each web application.

• Findings - Updated view that maintains legacy WAS functionality along with the ability to generate three report variants: Executive Summary with OWASP, Vuln Findings by Plugins, and Vuln Findings by Asset.

• Scan Management -

  • Updated view that includes a query builder to enable users to quickly find the scan information needed.

  • Improved WAS scan creation workflow with additional scan categories, enabling users to efficiently scan their environment.

• Session Settings in Tenable Web App Scanning Scan Editing — Added a new optional configuration to provide your session token for faster authentication. Only available while you are editing an existing scan. For more information, see Advanced Settings.

• Tenable PCI ASV scan template now allows users to modify Request Redirect Limit —A Tenable PCI ASVscan assesses web applications for compliance with Payment Card Industry Data Security Standards and now allows you to view and edit the Request Redirect Limit. The default value for this limit is 3. This option exists under the Advanced tab in the Limits sub-menu. For more information, see Tenable-Provided Tenable Web App Scanning Templates.
• New Quick Scan scanning template —A new scan template called Quick Scan has been added to the list of Tenable Web App Scanning scan templates. This template allows for quick setup of basic web application scans and contains the following options:

  • Name

  • Description

  • Folder

  • Scanner Type

  • Scanner

  • Targets

  • Notifications

  • User Perms

  • Visibility

• Import/Export & VPR

  Updated Scan Export and New Scan Import:

  • Users now have the ability to h import exported scans. We’ve also included debugging information in Tenable Web App Scanning scan exports to assist with troubleshooting.

  VPR for Tenable Web App Scanning Findings:

  • Tenable Web App Scanning Findings in the Explore Workbench now support Tenable’s Vulnerability Priority Rating (VPR) scores. VPR is a dynamic score that helps state and local governments prioritize and strategize based on the immediate risk a vulnerability poses.
  • For more information on VPR, see the Tenable blog post: https://www.tenable.com/blog/what-is-vpr-and-how-is-it-different-from-cvss.

• Tenable Web App Scanning Tenable One User Interface —Tenable One customers now have an updated Tenable Web App Scanning user interface that provides a modern look and feel, and aligns more closely with the larger Tenable One experience. In addition to a new look and feel, we’ve include some additional features. Content and features are exclusive to Tenable One users. Not all features are available to all users. Refer to your product license for included content.

  • New landing page for Tenable Web App Scanning that includes high-level statistics, as well as a readout of your Tenable Web App Scanning vulnerabilities as they apply to the 2021 OWASP Top 10.

  • You can now view your discovered domains from the Tenable Web App Scanning Assets view and through the Actions menu and quickly create a new scan from any discovered domain record.

  • Tenable Web App Scanning assets now support AES & ACR scoring.

  • Tenable Web App Scanning findings now support Tenable’s Vulnerability Priority Rating (VPR) scores. VPR is a dynamic score that helps you prioritize and strategize based on the immediate risk a vulnerability poses.

  • For more information on VPR, check out our blog post: https://www.tenable.com/blog/what-is-vpr-and-how-is-it-different-from-cvss.

  • Updated scan export and a new scan import, giving you the ability to import exported scans and see debugging information in Tenable Web App Scanning scan exports to assist with troubleshooting.

  • You can now create a scan from any Tenable Web App Scanning view using the Quick Scan button located in the top navigation bar.

• Deduplicate Similar Pages — Tenable Web App Scanning users can use this check box option that allows you to specify whether you want the scanner to ignore pages in situations when similar pages have already been audited. For more information, see Scope Settings in Tenable Web App Scanning Scans.