LogoLogo
  • AttackForge Support
  • Release Notes
    • 2025
    • 2024
    • 2023
    • 2022
    • 2021
    • 2020
    • 2019
  • Core & Enterprise
    • Getting Started
      • How It Works
      • Requesting A Project
      • Creating & Updating Projects
      • Invite User To Project
      • View Project Team
      • Project Scope
      • Project Workspace
      • Project Notes
      • Project Pages
      • Test Cases
      • Creating Vulnerabilities
      • Updating Vulnerabilities
      • Review & QA
      • Attack Chains
      • Reporting
      • Retesting & Remediation
      • Notifications
      • Custom Fields & Forms
      • Vulnerability SLAs
      • User Settings
      • Login Redirects
    • Modules
      • Dashboard
      • Analytics
      • Vulnerabilities
      • Projects
      • Scheduling
      • Portfolios
      • Groups
      • Attack Chains
      • Assets
      • Writeups
      • Test Suites
      • Report Templates
        • Overview
        • Tutorial
        • Tips & Tricks
        • Troubleshooting
        • Template - Report Templates
        • Template - Tags
        • Template - Options
        • Template - Functions
        • Template - Filters
        • Template - Styles
        • Template - Tables
        • Template - Charts
        • Template - Conditions
        • ReportGen CLI
        • ReportGen Library
      • Users
      • Administration
      • Flows
      • Self-Service RESTful API
        • GETTING STARTED
        • EXPORTING TO CSV
        • ADVANCED QUERY FILTER
        • ActivateUser
        • AddProjectMembershipAdministrators
        • AddTestcaseToTestsuite
        • AddTestcasesToTestsuite
        • AddUserToGroup
        • ApproveProjectRequestById
        • ArchivePortfolio
        • ArchiveProject
        • CancelProjectRetestRound
        • CloneProject
        • CompleteProjectRetestRound
        • CreateAssetInLibrary
        • CreateGroup
        • CreatePortfolio
        • CreateProject
        • CreateProjectNote
        • CreateProjectRequest
        • CreateProjectTestCase
        • CreateProjectWorkspaceNote
        • CreateRemediationNote
        • CreateScope
        • CreateTestcaseNote
        • CreateTestsuite
        • CreateUser
        • CreateUsers
        • CreateVulnerability
        • CreateVulnerabilityBulk
        • CreateVulnerabilityLibraryIssue
        • CreateVulnerabilityWithLibrary
        • DeactivateUser
        • DownloadProjectTestCaseFile
        • DownloadProjectTestCaseNoteFile
        • DownloadProjectTestCaseWorkspaceNoteFile
        • DownloadVulnerabilityEvidence
        • DownloadVulnerabilityLibraryFile
        • DownloadWorkspaceFile
        • GetApplicationAuditLogs
        • GetAssets
        • GetAssetsByGroup
        • GetAssetInLibrary
        • GetAssetsInLibrary
        • GetCustomFieldsConfig
        • GetFormConfig
        • GetGroup
        • GetGroups
        • GetMostCommonVulnerabilities
        • GetMostFailedTestcases
        • GetMostVulnerableAssets
        • GetPortfolio
        • GetPortfolios
        • GetPortfolioStream
        • GetProjectAuditLogs
        • GetProjectById
        • GetProjects
        • GetProjectsAndVulnerabilities
        • GetProjectsByGroup
        • GetProjectMembershipAdministrators
        • GetProjectNotes
        • GetProjectReport
        • GetProjectReportData
        • GetProjectRequests
        • GetProjectRequestById
        • GetProjectTestcasesById
        • GetProjectVulnerabilitiesById
        • GetProjectWorkspace
        • GetTestsuiteById
        • GetTestsuites
        • GetUserByEmail
        • GetUserById
        • GetUserByUsername
        • GetUserAuditLogs
        • GetUserGroups
        • GetUserLoginHistory
        • GetUserProjects
        • GetUsers
        • GetVulnerabilityById
        • GetVulnerabilities
        • GetVulnerabilitiesByAssetName
        • GetVulnerabilitiesByGroup
        • GetVulnerabilityLibraryIssues
        • GetVulnerabilityRevisionHistory
        • InviteUserToProject
        • InviteUsersToProjectTeam
        • RejectProjectRequestById
        • RegenerateAPIKey
        • RemoveProjectMembershipAdministrators
        • RemoveProjectTeamMembers
        • RequestNewProjectRetest
        • RestoreProject
        • SendEmail
        • SendDailyCommencementEmail
        • SendDailyCompletionEmail
        • UpdateAssetInLibrary
        • UpdateCustomFieldsConfig
        • UpdateExecSummaryNotes
        • UpdateFormConfig
        • UpdateGroup
        • UpdatePortfolio
        • UpdateProjectById
        • UpdateProjectMembershipAdministrators
        • UpdateProjectNote
        • UpdateProjectRequestById
        • UpdateProjectRetestRound
        • UpdateProjectWorkspaceNote
        • UpdateScope
        • UpdateTestcase
        • UpdateTestcaseOnTestsuite
        • UpdateTestsuite
        • UpdateUserAccessOnGroup
        • UpdateUserAccessOnProject
        • UpdateUser
        • UpdateVulnerabilityById
        • UpdateVulnerabilityLibraryIssue
        • UpdateVulnerabilitySLAs
        • UpdateVulnerabilityWithLibrary
        • UploadTestcaseFile
        • UploadVulnerabilityEvidence
        • UploadVulnerabilityLibraryFile
        • UploadWorkspaceFile
      • Self-Service Events API
        • GETTING STARTED
        • Project Created
        • Project Updated
        • Project Request Created
        • Project Request Updated
        • Project Retest Requested
        • Project Retest Completed
        • Project Retest Cancelled
        • Vulnerability Created
        • Vulnerability Updated
        • Vulnerability Evidence Created
        • Vulnerability Evidence Updated
        • Vulnerability Remediation Note Created
        • Vulnerability Remediation Note Updated
    • AFScript
    • Access Control Matrix
    • Raising Support Tickets
    • Security
  • Contact
Powered by GitBook

Check YouTube for more tutorials: https://youtube.com/@attackforge

On this page
  • 28 February 2025
  • Introducing Flows - Automation Module for AttackForge
  • Custom Domains for AttackForge Core
  • Updates to AFScript
  • Updates to Groups
  • Updates to Custom Time-Based Notifications
  • Updates to ReportGen
  • Updates to Writeups Libraries and Test Suites
  • UX Improvements
  • Enhancements to Self-Service APIs
  1. Release Notes

2025

PreviousRelease NotesNext2024

Last updated 2 months ago

28 February 2025

Introducing Flows - Automation Module for AttackForge

We're super excited 🤩 to finally reveal - AttackForge's comprehensive, end-to-end automation engine - powered by .

Flows can help you to automate AttackForge with nearly unlimited systems. You can streamline processes across your organization to save time and focus on what's most important.

Some examples you can do with Flows:

  • Create custom webhooks

  • Send custom email notifications on events

Flows is included in all AttackForge Enterprise plans and in the AttackForge Core SME plan. For all others plans, Flows can be added-on from the Administration -> Subscriptions page.

Some of the great features of Flows include:

  • Unlimited Flows and Flow Actions! Build as many automations and integrations as you need, start with simple Flows and level up to complex sequences and chains.

We will be releasing even more capabilities and examples for Flows in the coming months so stay tuned!

Custom Domains for AttackForge Core

We have released fully custom domain names for AttackForge Core!

You can now have your own personal domain for hosting and accessing your AttackForge tenant.

Currently only available on AttackForge Core SME plans

Updates to AFScript

You can now suggest values across all of your custom fields, everywhere, using AFScript.

We've also added String.replace() and String.replaceAll() functions.

Updates to Groups

This makes to possible to have a custom set of fields and forms for different Groups such as customers, security teams, technology and engineering teams, risk teams, subsidiaries and divisions, platforms and other ways in which you use groups.

You can configure Group custom fields and forms from Administration -> Groups.

Updates to Custom Time-Based Notifications

For example, you can now do this:

{project.start_date | dateFormat:["fullDate"]}

Updates to ReportGen

Updates to Writeups Libraries and Test Suites

UX Improvements

Now when creating a new Writeup in the Project Library from the Vulnerability form, the current project will be auto-selected.

Also after completing an Abuse Case, there is now a button to Create Another.

Enhancements to Self-Service APIs

We're always improving our Self-Service APIs to make automations and integrations even easier!

  • New RESTful endpoints:

  • Updates to REST endpoints:

Integrate your vulnerability data with ticketing tools like , , , and others.

Visualize your pentesting data in powerful tools like and

Help make better risk decisions by sending your vulnerability data to GRC platforms like , , and

Create workflow automations by chaining together

Trigger automated scanning activities in your security toolset like , and

Create messages on collaboration platforms like and

Prioritize vulnerabilities with threat-intelligence like

Flows can interact with any HTTP interface, including your own tools as well as the

We've made some Flows available on which you can to get started fast! Examples include:

to help collaborate on your Flows together

to get started fast! You can also to share your Flows with other people using AttackForge

Various to handle a variety of use cases and bespoke needs

Support for to protect your passwords, API tokens and keys

Powerful . Create your own custom logic and decision paths using

for robust testing. Tracking and monitoring for peace of mind. Access detailed logs to know exactly what your Flows are doing at any time.

We've extended yet again!

We've updated to now support .

In addition, we added support for mapping AttackForge Groups to SSO Identity Provider Groups to include support for assigning no access to the groups projects, as well as support for assigning access to .

We've added support for ability to use the filter to adjust the way the date and time is displayed in your custom time-based emails.

We added new including , , , and .

We also updated the styling and layout for the out-of-the-box to showcase even more possibilities for custom reports in ReportGen!

We also added a Retry button in the from Chrome users which makes building reports even faster! 🥳 You no longer need to re-select the template file or JSON data.

We've added MITRE ATT&CK Framework for ! Including , , . You can now leverage MITRE ATT&CK directly in your Writeups.

We've also updated to and including new tags to cross-reference between CWE and CAPEC.

We've also updated MITRE ATT&CK Framework for to the latest versions - , , .

- now supports new query filters

- now supports new query filters

- now supports new query filters

Atlassian JIRA
ServiceNow
Azure DevOps
BMC Helix
Power BI
Tableau
RSA Archer
MetricStream
OneTrust
LogicGate
AttackForge Self-Service APIs
Rapid7
Tenable
Qualys
Slack
Teams
VulnDB
AttackForge Self-Service APIs
our GitHub
import into your AttackForge
Create JIRA Issue
Update JIRA Issue
Create ServiceNow Incident
Create Azure DevOps Work Item
Prioritize Vulnerability with Threat Intelligence from VulnDB
Trigger an Automated Scan in Tenable
Create Slack Message
Create Teams Message
Send Vulnerability to PowerBI
Create a Salesforce Opportunity
Create a WebHook
Send a Custom Email
Share your Flows with multiple team members
Import and Export Flows
Triggers
Secrets
Actions
AFScript
Run History
AFScript
Groups
Custom Fields and Forms
Project Requests
dateFormat
Filters
isArray
isBoolean
isInteger
isString
Pentest Report Template
Offline Browser Tool
Writeups
Enterprise v16.1
ICS v16.1
Mobile v16.1
MITRE CWE v4.16
MITRE CAPEC v3.9
Test Suites
Enterprise v16.1
ICS v16.1
Mobile v16.1
Upload Writeup File
Send Email
Update Project Retest Round
Get Application Audit Logs
Get Project Audit Logs
Get User Audit Logs
Flows
AFScript