New visual redesign

Our designers have been working to completely overhaul the application interface to be more modern and integrated. Both the main interface and the individual projects view now use the same visual style, and you have access to all the application’s sections from the project view, so now you can go straight to your mappings or IssueLibrary from your project, rather than having to go through the Dashboard first.

Gateway Services and Questionnaires

As we continue to improve the features and possibilities of the Dradis Gateway, we have now created a new Services section of the portal. Here you can create questionnaires, which you can then send to Gateway Contributors. For example, you could use a questionnaire to establish the scope and goals of a penetration test before starting a Dradis project for them. On the basis of their responses, you can create a new project for their team right from the questionnaire results.

MFA with one-time passcodes

We have now created our own multi-factor authentication integration, Dradis OTP. You are no longer limited to using DuoWeb for free MFA in Dradis. With Dradis OTP, you can create and scan a QR code to use for MFA in whichever MFA app you prefer.

Audit logging

By popular request, we have created the Dradis Audit integration, which tracks activity in Dradis on a deeper level than the Recent Activity tabs and gathers it in one place. Your logs for the whole Dradis instance are now easily accessible for your security, compliance, and accountability needs.

Release Notes

• Contributors:
  • Add an intermediate login page to prevent Microsoft Safe Links from consuming the one-time token
  • Add Notification Settings link
• Forms: Add a combobox for selecting, filtering, and creating options
• Hera: Add new layout with redesigned navigation
• Navigation: Replace Turbolinks with Hotwire
• QA:
  • Add project states and QA stats in the active projects card
  • Add View History link when viewing Issues/Content blocks
  • Add a ‘Reviewer’ role for publishing Issues/Content blocks
  • Automatically go to the next record after reviewing
• Revisions: Show state changes in the revisions view
• Usage Tracking: Track the choice of toggling on/off
• Upgraded gems:
  • capybara, mysql2, net-imap, nokogiri, paper_trail, rack, rails, rails-html-sanitizer, rexml, rspec-rails, selenium-webdriver
• Bug fixes:
  • Report Templates: Make the uploaded template available in the “copy template properties” select menu for subsequent template uploads
• New integrations:
  • Dradis Pro OTP: two-factor authentication using OTP
  • Dradis Pro Audit: enable tracking of key actions for improved visibility and compliance
• Integration enhancements:
  • Azure DevOps: Add support for ‘Iteration Path’ and ‘Tags’ fields
  • Burp: Fix HTML importer associating issues in the wrong node
  • Dradis Plugins: Default to ‘Draft’ state on tool upload
  • Gateway:
    • Add overview of projects using active project cards
    • Services: Implement Services and Questionnaires to initiate a pre-project process
  • Issuelib: Update syntax of default entries
  • Netsparker: Add support for Additional Websites as nodes
  • Nexpose: Fix UnorderedList/OrderedList formatting to work with Textile
  • PDF Export: Add table of contents
• Reporting enhancements:
  • Export: Default export button to ‘All’ if all records in project are in ‘draft’ state
  • Word: Fix links containing special characters by no longer double escaping
• REST/JSON API enhancements:
  • Nodes: include Node properties

Not using Dradis Pro?