Tenable Web App Scanning 2024 Release Notes

Tenable is pleased to announce a major update of features and functionality to all Tenable Web App Scanning containers in FedRAMP Moderate. These updates align product functionality in FedRAMP Moderate with comparable functionality in commercial instances of Tenable Web App Scanning.

To learn more, see the following resources:

• Tenable Web App Scanning Update in FedRAMP Moderate

• Tenable FedRAMP Moderate Update: FAQ

Tenable is pleased to announce the General Availability of Remediation Scanning! This enables you to validate fixed vulnerabilities, without the having to re-run a full WAS scan in your Tenable Web App Scanning workflows. This closes a significant gap between our Tenable Web App Scanning and Tenable Vulnerability Management user experiences, and further maturing our WAS offering in the market. Remediation scans can be launched from the WAS Findings views within the WAS App.

To learn more, see the Launch a Remediation Scan in the Tenable Web App Scanning user guide.

Tenable is pleased to announce the release of vulnerability state tracking. With this new feature, you can see whether vulnerabilities are new, active, fixed, or resurfaced—just like in Tenable Vulnerability Management.

As part of this release, Tenable Web App Scanning no longer displays non-VM data older than 90 days in WAS Findings. This data is only available in historical WAS scan results. For more information, see the documentation.

Tenable recommends that you run web application scans before January 16, 2024. By running scans, you can ensure that these results are available in the Web Applications Finding views once vulnerability state tracking is released.

To learn more about vulnerability state tracking, reach out to your Tenable Customer Success Manager.

Note: This feature is currently not available in Tenable Web App Scanning FedRAMP Moderate.