Unified Security Management

Dashi USM™ v1.4.3

This release includes a number of bug fixes and improvements to the USM platform. No need to install anything, these changes are available to all users immediately.

Improvements

• Updated dashboard with a new bento box layout. This makes it easier to see recent events, scan results, activity, incidents and statistics at a glance.
• Policies can now be tagged with a Classification to make it clear who the policy can be shared with.
• When adding or editing policies, control references are now shown alongside the control name.

Dashi USM™ v1.4.2

This release includes a number of bug fixes and improvements to the USM platform. No need to install anything, these changes are available to all users immediately.

Bug fixes

• Fixed a number of minor bugs in the UI that were reported after pushing 1.4.1 live.

Dashi USM™ v1.4.1

This release includes a number of bug fixes and improvements to the USM platform. No need to install anything, these changes are available to all users immediately.

New features

• A new Risk Criteria configuration page enables you to define exactly how you calculate risk scores. When scoring risks and assigning impact scores to events and incidents, you can now use the Guide Me link, and Dashi USM™ will help you figure out the correct way to score based on your criteria.
• The Controls (Statement of Applicability) now includes a change log and version number. You'll need this for your ISO 27001 certification.

Improvements

• Event detail view now includes repeat event information, making it easier to identify patterns in your event data.
• All your risks are now displayed in the Event detail view, with selected risks highlighted. Simply click a risk to select or de-select it. This makes tagging related risks much quicker and easier, helping to improve your risk management process.
• Risk and impact scoring now uses a scale of 1-5 instead of 1-10. We like to keep things simple, and we found that a 1-5 scale is easier to understand and use, and still granular enough to make sure scores are specific.

Bug fixes

• Fixed pagination of Incidents list view.

Dashi USM™ v1.4.0

This release includes a number of bug fixes and improvements to the USM platform. No need to install anything, these changes are available to all users immediately.

Improvements

• Open port map is now limited to 100 nodes to prevent the map from becoming too cluttered or even crashing your browser. Filter by port numbers or endpoints to focus on the most important information.
• Updated the Asset Exposure report to include location information and improve formatting.

Dashi USM™ v1.3.9

This release includes a number of bug fixes and improvements to the USM platform. No need to install anything, these changes are available to all users immediately.

New features

• Locations: you can now add locations to your assets to help you understand where your assets are physically located. This is useful for understanding the impact of a breach on your organization.
• Heatmap now includes pins for any locations you have defined, and will draw connections between locations that share assets. This makes it easy to see at a glance how data flows across physical locations within your organization.

Bug fixes

• Fixed a bug with policy version history.

Dashi USM™ v1.3.8

This release includes a number of bug fixes and improvements to the USM platform. No need to install anything, these changes are available to all users immediately.

Bug fixes

• Fixed an issue with images in Policy documents being blocked by the content security policy.

Dashi USM™ v1.3.7

This release includes a number of bug fixes and improvements to the USM platform. No need to install anything, these changes are available to all users immediately.

New features

• Bulk edit Controls in the ISMS section. You can now select multiple controls and edit them all at once.

Improvements

• Optimized performance of the Dashboard and Reports, especially with large datasets.

Dashi USM™ v1.3.6

This release includes a number of bug fixes and improvements to the USM platform. No need to install anything, these changes are available to all users immediately.

New features

• New Reports section in the sidebar. We've got 3 useful reports for you to start with: Asset exposure report, Policy User register report, and an open ports report. More to come in future releases.

Improvements

• Added risk scoring to the Assets register to help you prioritize your security efforts and protect your most valuable assets.
• Assets can now be linked to Enforcement mechanisms to give you a clearer picture of the potential legal and contractual implications of a breach. Endpoint detail view now lists which enforcement mechanisms are applicable to it.
• Asset register now includes "Retention period" and "Responsibility" fields so you can document who is responsible for each asset and how long you need to keep it.
• Users can now add their job title to their profile. This is displayed in the Team view to help you understand who is responsible for what in your organization.

Dashi USM™ v1.3.5

This release includes a number of bug fixes and improvements to the USM platform. No need to install anything, these changes are available to all users immediately.

Improvements

• Improvements to the Event feed filters to make it easier to filter by event state.
• New bar chart to better visualize risk scores in the Risk Register and event impact scores in the event feed and detail views.
• Repeat events are now displayed in the Event feed view with a count in the "Repeat" columns to help identify patterns.

Dashi USM™ v1.3.4

This release includes a number of bug fixes and improvements to the USM platform. No need to install anything, these changes are available to all users immediately.

Improvements

• Users can now select which types of events they would like to be notified about. This can be configured in My Profile.
• Users can now choose their favorite color to represent their user account in feed views. This can be configured in My Profile.
• Events now have a timeline including created, acknowledged, closed times and a timeline of comments. This replaces the previous freeform "notes" field.

Dashi USM™ v1.3.2

This release includes a number of bug fixes and improvements to the USM platform. No need to install anything, these changes are available to all users immediately.

Improvements

• Added a Legend for impact scores. This makes it easier to understand the impact of an incident at a glance. Click the "i" icon next to the Impact score to see the legend.
• New Risk Scoring matrix in the Risk Register.
• Minor UI tweaks to improve readability and consistency across the platform.
• New design for the login, forgot password, and reset password pages. We hope you like it!

Dashi USM™ v1.3.1

This release includes a number of bug fixes and improvements to the USM platform. No need to install anything, these changes are available to all users immediately.

Improvements

• Improvements to the Incident list, incident detail view, and Events feed to improve clarity of Impact ratings.
• New events can be added directly from the Incident view, simplifying the process of timeline creation.
• We built a secret page that lets you reset your management system to a clean slate. This is useful if you want to start fresh or if you just want to clear out all your data. It's destructive though, so use with caution. Just navigate to /management_system/reset while logged in to your account to access it.

Dashi USM™ v1.3.0

This release greatly expands on the information security management system (ISMS) capabilities of Dashi USM™ with the launch of USM ISMS.

USM ISMS

• Controls: your one-stop shop for managing your organization's security controls. Define your controls, link them to risks, and track their implementation status. Your "Statement of Applicability" in ISO 27001 lingo.
• Attributes: new in the ISO 27001:2022 standard, Attributes help you refine and categorize your controls. Define your attributes and link them to controls to provide more context and detail.
• Policies: define your organization's security policies and link them to controls. Built-in version history, peer review and print views make it easy to manage your policies in line with best practices.
• Template controls, attributes and policies to help you kick-start your ISMS.
• New "ISMS" section in the sidebar to access all your ISMS features. Access it all for just $149 per month for your entire organization.

Improvements

• UI tweak: feedback from actions such as saving or updating a record are now shown as 5-second notifications in the bottom right corner of the screen.

Bug fixes

• Risk scope can now contain more than 255 characters.

Dashi USM™ v1.2.1

This release includes a number of bug fixes and improvements to the USM platform. No need to install anything, these changes are available to all users immediately.

Improvements

• For those of you who prefer to combine your risk register and risk treatment plan, you can now do so directly in Dashi USM™. We've added new Risk Treatment details to the Risk Register view where you can define your risk treatments for each risk.
• You can now filter Events by acknowledgement status in the Event feed view. This makes it easier to see which events have been acknowledged by a human.
• Enforcements can now be linked to incidents, giving you a clearer picture of the impact of a breach on your organization.
• Events can now be attached to Incidents directly from the feed view.

Bug fixes

• When editing an event, newly added risks are now saved correctly.
• For the verbose among you, enforcement descriptions can now contain more than 255 characters.

Dashi USM™ v1.2.0

This release includes a number of bug fixes and improvements to the USM platform. No need to install anything, these changes are available to all users immediately.

Improvements

• Much more granular role based access control
• REST API for managing endpoints. You can now add, update and delete endpoints via the API.
• New "API keys" section in the user menu where you can generate and manage API keys for programmatic access to the USM API.

Bug fixes

• Fixed a minor XSS vulnerability in the event feed view that was picked up by our scanning software.

Dashi USM™ v1.1.3

This release includes a number of bug fixes and improvements to the USM platform. No need to install anything, these changes are available to all users immediately.

Bug fixes

• Fixed a bug in the email ingestion engine that caused specific types of emails to fail to parse.
• Fixed a bug in the Scan Results page where the timestamp listed for a vulnerability scan was showing the scan request date instead of the results timestamp.

Dashi USM™ v1.1.2

This release includes a number of bug fixes and improvements to the USM platform. No need to install anything, these changes are available to all users immediately.

Improvements

• Results of vulnerability scans, port scans, subdomain scans and Website security scans are now unified in a Scan results view, so you can see all your scan results in one place.

Bug fixes

• Subdomain scans can now be deleted.

Dashi USM™ v1.1.1

This release includes a number of bug fixes and improvements to the USM platform. No need to install anything, these changes are available to all users immediately.

Improvements

• A count of open events is now displayed in the navigation bar, so you can see at a glance how many events need attention.

Bug fixes

• Fixed a bug saving regular expressions in rules
• Long event names are now truncated in the feed view to prevent overlap with other elements
• Fixed an error on the Create App Key page

Dashi USM™ v1.1

This release includes a number of new features and improvements to the USM platform. No need to install anything, these changes are available to all users immediately.

Improvements

• Powerful new rules engine replaces per-ingestion rules.
• Improved performance when working with large list views.
• Add multiple URLs per endpoint and request security scans of your URLs directly from the USM interface.
• Subdomain scans now automatically run weekly instead of on demand. An event will be logged if any new subdomains are detected, or if any subdomains are no longer present.
• Events can now be acknowledged and closed, so you can keep track of which events still need attention.
• Port map scan results now highlight newly opened ports and closed ports between scans.

Bug fixes

• When viewing subdomain scanning results, endpoints that have already been added to USM are now marked as such.
• Short event log messages are now displayed correctly in the event log view.
• When adding an endpoint, the hostname field is now validated on the client side to help prevent invalid hostname errors.
• Fixed bug that caused incidents to fail to save if the resolved datetime was empty.
• nmap port scan results would not render in Safari as it would not load the XML stylesheet. Results are now converted to HTML and displayed correctly in all browsers.

New rules engine

Per-ingestion rules were complicated and tedious to manage. The new Rules engine in USM enables you to configure rules that are applied to all ingested event logs. This makes it easier to manage rules and ensures that the same rules are applied consistently across all data sources.

A simple graphical rule configuration interface allows you to create complex and powerful rules quickly and easily.

Supports matching event log source, endpoint (host) or endpoint name (string match). The event log message can be matched against a case-sensitive string, or for more powerful searching you can use a regular expression.

Lastly you can configure the rule to match only if the event message does or does not match the previously received event message from the same source. This is useful for detecting when output has changed, without receiving a flood of notifications every time the same event is logged.

Dashi USM™ v1.0

Version 1.0 of Dashi USM™ is now available for public consumption!

Dashi USM™ is our new unified security management platform. It's designed to be easy to use, with a simple and intuitive interface and powerful features to discover, observe, analyze and respond to security threats.

Sign up for free at https://dashiusm.com/