White shape | Hexiosec Logo

New ASM Features and Improvements | December 2024

Tim Cowell
9 January 2025
|
3 min Read
|
Tim Cowell

Introduction

Happy New Year, and welcome to 2025! We’ve already started planning the updates we’ll be bringing to Hexiosec ASM in the coming year, and we will have some exciting features to tell you about in the coming months, keep watching this blog for future updates.

In the meantime, December 2024 updates included some changes you will already see in the app. We’ve:

  • included a new asset management page to manage IPs in a scan
  • made it easier to manage and navigate your organisation’s settings

New IPs page (Asset Management)

To give you more ways to view scan data, such as components and services, we will be adding various new asset management pages to Hexiosec ASM. The first of these new pages is for IP addresses, and means that we have also added a new sidebar grouping for all app pages relating to Asset Management.

The Hexiosec ASM sidebar menu for a scan with the new Asset Management grouping

Any existing links (URLs) to pages under this new group will still work as before.

The IP Addresses page follows a similar format to our Domains page, and includes information relating to:

  • Risks
  • Source domains
  • Services (open ports)
  • Hosting (ASNs)
  • Location (city)

Image showing the IP Addresses page for a demo scan in Hexiosec ASM

You will also find the usual search and filter options, as common across Hexiosec ASM.

Image showing the filter options for the new IP Addresses page, with some example filters applied

Following user feedback, we’ve included an option on this page to remove each IP from scope. Previously this option was only available from the Explore page for an IP. We will soon be adding the same option to the Domains page.

Image showing the option to remove an IP from scope on the new IP Addresses page

IP Addresses export

Not all plans include access to data exports feature describe below. If you don’t have access to the IP data exports, but would like to discuss adding it to your account, please contact us at [email protected]

Finally, and again like the Domains page, there is an export button, which will generate a CSV file for the IP address details and reflects the current filter you have applied. For example, you could filter on Cloudflare IPs using ‘CLOUDFLARENET’ as the ASN filter and export only these.

You can use the CSV files to export the IP data for use in other applications or to share information.

In addition to the columns in the app, the CSV file includes a few extra columns, including:

  • Seed (yes or no)
  • Type (IPv4 or IPv6)
  • DNS pointers
  • Cloud hosting regions

Organisation management

To continually ensure you get the best experience with Hexiosec ASM, it is important for us to listen to your feedback, and act upon what we hear. It was recent feedback from some of our users, which triggered the update to help you navigate organisation settings and actions, such as user invites.

Previously organisation management was accessed via the three dots (’…’) button on the scans browser (main page). You can still manage organisations from this point in the app, but:

  • we’ve made the button icon more representative
  • expanded what this button does
  • and included organisation management in the top right menu

This final point means you will always be able to access organisation management and if you have access to multiple organisations, you can manage them all from here.

The ‘…’ button now has a new icon, and we’ve included the menu items to access deleted scans and generated reports.

Image showing the updated organisation management button from scan browser page in Hexiosec ASM

The top menu includes the same options (and with the same icon), but if you have access to multiple organisation you can access them all from this top menu.

The new top menu item for organisation management, which include two sample organisations

Coming soon

  • Updates to Hexiosec ASM’s IP address data handling and protocol risks.
  • To reflect the different use cases of our customers, we will be updating scan type names for our MSP customers. Any changes will be communicated to you.
  • To help with pricing for our MSP customers, and understanding scan results generally, Hexiosec ASM will be updated to show a single value for the size of each scan (total domains and IPs).
About Tim Cowell
Tim is an experienced software engineer, who has worked across the Defence, Government and Commercial sectors for the past 21 years. After leading a diverse range of projects Tim has a strong background in Cyber Security, software engineering, research and development practices.
Tim Cowell