Platform

Rootshell Platform – Patch Notes October 2025

3 min read
Stay ahead of the game
Loading

click here to copy URL

October 2025

Application Features

ServiceNow Ticketing for Affected Instances

ServiceNow ticketing has been enhanced to support creation at the affected instance level. This update brings ServiceNow in line with other supported ticketing systems, enabling users to raise tickets for specific affected instances or asset groups.

This is particularly valuable for large organisations where issues are resolved by different teams, ensuring tickets can be targeted to the right owners with greater precision.

Remove Ticketing Exports at Affected Instance Levels

Users can now remove ticketing exports at the affected instance level, giving greater flexibility when managing tickets created from specific hosts. This enhancement allows you to break the link and create a new ticketing instance, whether working within an issue or directly from an individual asset’s page.

This update ensures consistent control of ticketing exports across both issue-level and asset-level workflows.

CVE Management API Endpoint

To simplify the management of issues with large numbers of CVEs, we’ve introduced a dedicated CVE API endpoint, similar to the existing Issue Tags functionality.

Supported Methods:

  • GET – Retrieve CVEs linked to an issue
  • POST – Add CVEs in bulk to an issue
  • DELETE – Remove CVEs from an issue

This enhancement makes it far easier and faster to manage CVEs, reducing manual effort when handling issues with extensive CVE lists.

Read-Only Access Without Export Permissions

We’ve introduced a new ACL option that allows enterprise admins to restrict report exports while still granting read-only access to projects and results.

Key Enhancements

  • New “Export Data” ACL: Control which users can export PDFs, spreadsheets, and other report formats.
  • Granular Project/Phase Read-Only Options:
    • View Only – Can view issues but cannot download reports.
    • View Only (with reports) – Can view issues and download reports.
  • Export Controls Apply To: Project, Phase, Issues, Assets, and any other page with export functionality.
  • Separate From Ticketing ACLs: Export restrictions do not affect creating tickets in integrated systems.

This update helps enterprises encourage users to work within the platform while reducing the risk of unauthorised data exfiltration.

Improvement: Fix for Row Deselection on Multi-Page Tables

We’ve resolved an issue affecting list views across the platform—most notably on the Assets page—where deselecting a single row on the final page of a multi-page filtered result would inadvertently deselect all previously selected items.

This fix ensures that:

  • Selecting all rows across pages works as intended.
  • Deselecting a single row will only deselect that row.
  • Selections persist accurately across paginated lists.

This update improves bulk actions like deletions and tagging by providing a more predictable and reliable multi-select experience.

Picture of Jon Bellard
Jon Bellard
Jon Bellard is the Head of Product at Rootshell Security, where he leads the development of innovative cybersecurity solutions. With a strong background in security consulting and technical sales, Jon drives product strategy and client engagement to meet evolving security needs.

Other posts you might like