We are excited to introduce our latest feature, the Import Dialog, to [SecApps Asset](https://asset.secapps.com)! This powerful feature allows users to quickly and easily import multiple assets at once. This is particularly useful for organisations or individuals who have multiple (in the range of 1000s) domains, URLs, and IPs to manage. With just a few clicks, users can upload multiple assets at once, helping them save time and effort.

![](//images.ctfassets.net/qgz2s3egbmql/1xYTkp0WXXuHp38r5Inc8C/bdd9c57b8f84dd833a6718004a1a49f8/image-20221129-144427.png)

SecApps Asset is a comprehensive asset management platform for organisations and individuals. Once the assets are imported, users can easily view, manage and assign automations. Users can search and filter assets, access detailed asset information, and even add custom fields to better manage their assets.


Quickly and easily import multiple assets at once, saving time and effort.

Introducing Asset Import

Introducing Raygun Multi-targets, the latest feature from SecApps Raygun that makes web security testing easier than ever before. Raygun Multi-targets allows users to scan and monitor multiple web URLs simultaneously. This means that users no longer have to manually configure each of their web targets inside the Raygun template - Raygun will do it all for them. With this new feature, users can save valuable time and resources, while also ensuring their web applications are secure.

The Multi-targets feature enabled by SecApps Asset service. SecApps Asset provides users with an up-to-date inventory of the web targets they have configured. The targets can be added manually or automatically imported through an automated discovery service such as SecApps Scout. This helps users quickly identify and manage all of their web targets from one place.

Raygun Multi-targets is an essential tool for any organisation that needs to manage multiple web scanning targets - especially new application that are not yet known to the Security and IT team. Not only does it save users time and resources, but it also helps them keep their web applications secure and compliant.

Just visit [https://raygun.secapps.com](https://raygun.secapps.com) to get started.


With Raygun Multi-targets, users can scan and monitor multiple web URLs simultaneously, allowing them to save valuable time and resources while also ensuring the security of their web applications.

Raygun Multi-target Support

Today, we are excited to announce the launch of the [SecApps Asset](https://secapps.com/docs/asset) integration with SecApps Connect. This new feature allows users to get notified in real-time when new assets are added to the inventory. This integration streamlines the process and ensures that both asset management and security teams are informed and can take the necessary steps to secure the new assets.

The new asset integration with SecApps Connect also offers the ability to automatically scan new assets for security regressions using [SecApps Raygun](https://secapps.com/docs/raygun), allowing users to quickly identify and address any vulnerabilities, ensuring that the assets are secure and preventing potential security breaches.

We believe this integration is a great step towards improving the overall security of assets within the organization. By providing users with the ability to quickly review and monitor new assets, users can ensure that the assets are secure and compliant with the organization’s security policies. 

Get started today and improve your asset security management!

Introducing the SecApps Asset integration with SecApps Connect, allowing real-time notifications for new assets added to inventory for streamlined, secure asset management.

Landing Asset Connect Integration

![SemGrep Connect](//images.ctfassets.net/qgz2s3egbmql/2bKaLtlrfaVCtJ79RR39E1/f6f2b3ffc6ad494ebaa3a8ed7bded371/Xnapper-2022-10-26-22.17.18.png)

SecApps is excited to announce a new feature of our Connect product: Semgrep Connect. Semgrep Connect allows you to connect Semgrep to SecApps Triage, giving you the ability to scan for vulnerabilities and find matches in both products. This provides an efficient way to triage vulnerabilities and speed up your remediation process combined with the power of Semgrep code analysis.

To get started, simply visit SecApps Connect and set up a new integration. Use SecApps Connect hook integration to generate a custom Semgrep ingestion endpoint. Set up the type to Triage because we want to receive all Semgrep reports directly into Triage.

On Semgrep side of things, all you have to do is pass the hook URL to Semgrep `--output` flag. Don't forget to use `--json` as well. Here is what the final command looks like:

```sh
$ semgrep --output "${SECAPPS_CONNECT_HOOK}" --json ...
```

You can also provide custom information about which project you are currently scanning by using the `?asset=' query parameter. This is useful if you want to set up multiple integrations with different upstream sources. For example:

```sh
$ semgrep --output "${SECAPPS_CONNECT_HOOK}?asset=my-project-name" --json ...
```

Now, whenever a new scan is run, the Semgrep results will be available in Triage for your inspection. You can use Triage in the same way you would use Semgrep, to filter and group results but also provide other useful automation such as sending notifications to Slack and email.

Semgrep is a great tool for finding code smells and potential security issues in your codebase. However, its usefulness can be limited if you have to manually triage the results. The new SecApps Connect feature solves this problem by integrating Semgrep with SecApps for full 360-degree visibility into your application security.

The new SecApps Connect feature integrates Semgrep with SecApps for full 360-degree visibility into your application security.

Introducing Semgrep Connect

It is now possible to use custom GitHub tokens in [SecApps Devcore](https://secapps.com/tools/devcore). This feature enables customers of Devcore to quickly scan and assess the security posture of any private GitHub repositories and continuously monitor the public git repositories of all GitHub organization members. This way, SecApps Devcore can detect disclosures of sensitive information and vulnerabilities in developer code traversing the boundary of the GitHub organization.

You can configure custom GitHub tokens directly in the [DevCore](https://secapps.com/tools/devcore) application. We are also working on a dedicated app called Secrets which will help you store and manage all your sensitive credentials in a completely secure and the most flexible way.

Stay tuned for more updates.

![DevCore Custom Github Credentials](//images.ctfassets.net/qgz2s3egbmql/6Yr5A0XZqicBADuVI7qo7c/93a5eda17bcb5f328ec124ac52bd83e3/Screenshot_2022-04-27_at_22.17.09.png)


It is now possible to use custom GitHub credentials for SecApps Devcore

DevCore Custom GitHub Credentials

The latest release of [Scout](https://secapps.com/tools/scout), [Devcore](https://secapps.com/tools/scout) and [Lookout](https://secapps.com/tools/scout) enable better integration between all tools. For example, you can now use your Scout configurations to create Devcore and Lookout testing instances. All configuration options are copied to create tool instances with the same name, description, tags, and target data.

![Scout | Main Screen with Integration Options](//images.ctfassets.net/qgz2s3egbmql/6hFtCpOwxg5evP0UzjMALJ/da64e5e7ab30cd9bb7f4abf9c9fd1c1a/Screenshot_2021-06-28_at_13.43.29.png)

With the latest release you can now create lookout and devcore from scout configuration

Better Tools Integration

The new SecApps Billing dashboard is out. The improved version of the old dashboard provides several vital improvements.

1. We have fixed several navigation issues - now all billing screens show together, which allow you to see all critical information at all times.
2. We have introduced additional confirmation messages. These messages are there is to ensure that our users have the correct information to make the right decisions when creating and cancelling subscriptions.
3. All the upcoming invoices are now consolidated with breakdown spent, future spent and account balance clearly outlined.
4. The new credit card screen accepts additional information to ensure that transactions are processed as smoothly as possible.
5. We have allocated more screen estate to the plan selection window.
6. The invoices are now sorted in the correct order. Most recent invoices appear first.

This version also includes several stability improvements.

![New Billing Dashboard](//images.ctfassets.net/qgz2s3egbmql/45CzYplcD9TibGSm7qNjsR/0507988a5dde61686b671e605cff2b5b/image.png)

![New Billing Card Screen](//images.ctfassets.net/qgz2s3egbmql/7mzZAMy8R8wzvV2DKIXVH1/144da4186fb5ae12ad19a02d606d66d0/image_1_.png)

![New Billing Plans Screen](//images.ctfassets.net/qgz2s3egbmql/EyHCoByMg0zBcfucfAd76/e621689fa14d7c38dfbae5eced22a3da/image_2_.png)

The new SecApps Billing dashboard is out. The improved version of the old dashboard provides several vital improvements.

Billing Dashboard Improvements

SecApps Triage helps categorise and remediate vulnerabilities aggregated from various sources such as a bug bounty program (SecApps Bountypage) or our automated security testing tools (Secapps Scout, Devcore and Lookout). With the latest update, you can now filter all vulnerability reports by severity and group by title, asset and even action.

The new filter and grouping options are available directly from the main screen allowing for a quick application when dealing with thousands of vulnerability reports. Previously you had to go through each vulnerability one by one. With these new features, it is now possible to remediate many vulnerabilities in a few simple steps.

The latest release also comes with enhanced statistics and usage reports. SecApps Triage is the first tool to implement our new Big Data architecture. This will be further developed as more of our tools are integrated into our system.

To find out more about SecApps Triage, check out our demo at https://secapps.com/tools/triage/ or sign up for a free trial.

You can now filter all vulnerability reports by severity and group by title, asset and even action.

Triage Workflow Improvements

The latest version of Devcore is equipped with two additional tabs: Developer and Repos. The developer tab list all developers identified during the recon step while the repos tab shows their associated repositories.

![Devcore Tesla Developers](//images.ctfassets.net/qgz2s3egbmql/2hnGO3BpnhPgZ1UlcGN8SP/e5f33bec778d1499864f3161083981ff/Screenshot_2020-11-28_at_08.55.54.png)

![Devcore Tesla Repositories](//images.ctfassets.net/qgz2s3egbmql/7MRFO6OXx6NRq7ZQ6GQSvw/3ec5e66aff01053f9ef3679fa910028b/Screenshot_2020-11-28_at_08.56.01.png)

![Devcore Tesla Leaks](//images.ctfassets.net/qgz2s3egbmql/6wak8GwgsXzFf0XaVVxpLi/3dd7d1f9d6089d3bdd184f6f805f93f1/Screenshot_2020-11-28_at_08.56.35.png)

Improved Devcore Developer and Repo Tabs

[SecApps Scout](https://secapps.com/tools/scout) is now able to extract and show ASNs (autonomous system number) related to your scan targets. ASN is a collection of connected Internet Protocol routing prefixes under the control of one or more network operators on behalf of a single administrative entity or domain that presents a common, clearly defined routing policy to the internet.

ASN data is useful when fingerprinting the networks associated with the target. Once the relevant ASNs are identified, further scanning and testing can be commissioned to increase the coverage of the test.

![Scout ASN data](//images.ctfassets.net/qgz2s3egbmql/6Tp6dK70u2P4fRJMve27W2/22184ea0161b464d952a63741639ddd2/Screenshot_2020-11-27_at_22.56.26.png)

ASN Extraction

Welcome the new [Launchpad](https://secapps.com/tools/launchpad). You can now switch between your top platform apps or the full suite of SecApps applications. In addition to that, you can adjust the number of recent files and projects. We hope that these changes will bring small but meaningful improvements to your daily routine.

![Screenshot 2020-09-29 at 10.06.30](//images.ctfassets.net/qgz2s3egbmql/7uQENNzUKtKv5bqaPJHwxi/2833e21f613944066c900016047db38b/Screenshot_2020-09-29_at_10.06.30.png)
![Screenshot 2020-09-29 at 10.06.33](//images.ctfassets.net/qgz2s3egbmql/6hClc0cTxEjHrgY2HKtF9n/c813e8864d4906dd9a7410daaac1e690/Screenshot_2020-09-29_at_10.06.33.png)

The New Launchpad

[SecApps BountyHQ](https://secapps.com/tools/bountyhq), our community target recon platform, now includes two additional bug bounty targets (Virustotal and Klarna) making a total of 383 tracked programs. The new datasets include detailed passive vulnerability reports, domains, IP and port fingerprints, HTTP scanning and much more.

![Screenshot 2020-09-28 at 21.16.09](//images.ctfassets.net/qgz2s3egbmql/7Izd1XGTHPl3xeCPR5OPCR/81a7be8ab67a113262421db82afaeed2/Screenshot_2020-09-28_at_21.16.09.png)
![Screenshot 2020-09-28 at 21.38.53](//images.ctfassets.net/qgz2s3egbmql/10hIl0hvhFJI25L3UdCvAn/f547d09bab098d4078aa978d39a05baf/Screenshot_2020-09-28_at_21.38.53.png)


New Bug Bounty Targets

We have introduced a new feature in [Scout](https://secapps.com/tools/scout) to help you group screenshots by title as well as by hash (the sha1 signature of the HTTP response body). This feature will significantly improve your ability to go through hundreds, if not thousands, of application screenshots effectively. In the demonstration below you can see that we managed to reduce the number of pages significantly by grouping by title and then hash.

![67bd966a-3f7e-4e2c-ad15-0f104e821537-01](//images.ctfassets.net/qgz2s3egbmql/2hstaNwZ2loIJRwxDsEslv/4c110a61027ef0d60aa3461a18ef46ac/67bd966a-3f7e-4e2c-ad15-0f104e821537-01.png)
![67bd966a-3f7e-4e2c-ad15-0f104e821537-02](//images.ctfassets.net/qgz2s3egbmql/22i2JBsPbPkjhWPvowLdF1/1db5ce1e122ceb4771cdbc953e0f465f/67bd966a-3f7e-4e2c-ad15-0f104e821537-02.png)
![67bd966a-3f7e-4e2c-ad15-0f104e821537-03](//images.ctfassets.net/qgz2s3egbmql/6kmBUmQdjCNhRvVDhjVpEp/afae3940be37f894bf0e4aae0e7cc513/67bd966a-3f7e-4e2c-ad15-0f104e821537-03.png)


Latest news