Skip to main content

August

· 4 min read

NG Production Release Update - APIsec_cloud_7.8.1.0 ( August 07, 2026 )​

This release introduces centralized metadata tag management, CSV export for the Security Hub Vulnerability Age Matrix, and deeper ServiceNow Vulnerability Response integration. Additional improvements enhance SSO team synchronization, parameter hydration, issue-tracker configuration, and hosted agent security, while several fixes improve Postman imports, automatic ticketing, and authentication detection accuracy.

What's New​

Application Metadata Tags​

Administrators can now create and manage metadata tag fields, assign tags to applications and instances, and search tags across the platform. Metadata tags are also included when creating tickets in the connected ServiceNow issue tracker.

Why this matters​

  • Simplifies application organization and search
  • Prevents duplicate metadata definitions
  • Provides richer context in issue-tracker workflows

ServiceNow Vulnerability Response Integration​

The ServiceNow integration now aligns with the native Vulnerability Response (VR) workflow. Risk Accepted and False Positive dispositions synchronize between ServiceNow and APIsec, and metadata tags are automatically included on Application Vulnerable Items (AVIs).

Why this matters​

  • Aligns remediation with existing ServiceNow approval workflows
  • Synchronizes vulnerability dispositions across both platforms
  • Improves filtering and routing using metadata tags

Export Vulnerability Age Matrix to CSV​

You can now export the underlying detections from the Security Hub Vulnerability Age Matrix directly to CSV for offline analysis and reporting.

Why this matters​

  • Simplifies reporting and data analysis
  • Exports all matching detections, not just the current page
  • Includes key vulnerability and application details for further processing

Improvements​

Improved Parameter Hydration Coverage​

Problem​

Parameter hydration provided limited coverage for certain request structures and authentication configurations.

Solution​

Parameter hydration has been enhanced to better support array-based request bodies and complex authentication scenarios.

Impact​

  • Improves parameter discovery coverage
  • Produces more complete scan inputs
  • Increases scan accuracy for complex APIs

Automatic Ticket Creation​

Problem​

Automatic ticket creation could fail if the owner of a scheduled scan had been deprovisioned from the tenant.

Solution​

Automatic ticket creation no longer depends on the original schedule owner's account.

Impact​

  • Ensures automatic ticket creation continues uninterrupted
  • Improves reliability across user and ownership changes

Test Connection Click Reliability​

Problem​

Buttons only responded when users clicked directly on the label text. Clicking elsewhere within the button did not trigger the action.

Solution​

Button interactions have been updated so the entire button surface is clickable.

Impact​

  • Improves usability and click responsiveness
  • Provides a more consistent user experience across the application

Postman Import for Array-Based Request Bodies​

Problem​

Importing Postman collections containing arrays of similar objects could result in incomplete request bodies.

Solution​

All array elements are now imported correctly.

Impact​

  • Preserves complete request payloads
  • Improves scan accuracy for bulk operations

Authentication Detection Accuracy​

Problem​

Certain APIs could generate false authentication findings when credentials were supplied in the request body or when authentication failures were returned within HTTP 200 responses.

Solution​

Authentication detection now evaluates both response content and configured authentication rejection indicators instead of relying solely on HTTP status codes.

Impact​

  • Reduces false authentication findings
  • Improves detection accuracy for modern API implementations
  • Provides more reliable authentication validation

Private Hosted Agent Security Updates​

The Private Hosted Agent has been updated with the latest runtime, dependency, and security improvements.

Why this matters​

  • Improves the security posture of hosted agent deployments
  • Incorporates the latest dependency updates
  • No changes are required to existing deployment workflows