Zanshin now provides a score history graph for both 1st and 3rd parties.
First parties can now follow the score evolution of their third parties enabling them to validate security improvements and make data-driven decisions. To access this feature:
‍
1. Go to the “FOLLOWING” section and select “Organizations” from the left-hand menu.
2. Click on the organization you want to view.
3. On the organization’s information page, open the “Dashboard” tab.‍

Third parties can now follow the score evolution from the customer’s perspective. This  enables proactive self-improvement, allowing third parties to focus on what really matters to their customers, build trust, and strengthen their reputation with their first parties.

‍

To access this feature:

1. In the “FOLLOWER” section, select “Organizations” from the left-hand menu.

2. Click on the follower organization you want to view.

3. On the organization’s information page, go to the “My Score” tab.

New Score based exclusively on public scan target information

When you log in to Zanshin, you are immediately taken to the "My Organization Dashboard" page. The very first piece of information you will see about your organization's security posture is called "My Score". It offers two distinct perspectives on your organization's security:

1. Comprehensive Score: This represents a full evaluation of your organization's security posture. It takes into account all the scan targets that your organization has onboarded into Zanshin. This is essentially your internal, holistic view.
2. Score based exclusively on your public scan target information: This is a more specialized score that shows how your organization's security posture appears to external parties. It is calculated only based on your public scan targets – the kind of information that any organization can view without special access.
   

Added support for Digital Ocean and Trend Micro Vision One, expanding the platforms Zanshin can continuously monitor.

‍

Check the “IaaS | PaaS” section in the Scan Targets Dashboard page for “DigitalOcean” box and the “Security Tools” section for the “Trend Micro Vision One” box.

‍

As usual, Zanshin will scan these platforms without ever having access to your sensitive data, such as your organization’s databases data or credentials. We simply ask for the minimal set of permissions to review security-relevant settings, to ensure you stay as safe as possible.

‍

Zanshin now supports compliance reporting against NIST CSF v2.0, CIS Controls 8.1 and ISO 27001:2022 for your organization and for the organizations you are following, helping you meet the latest industry standards.

‍

In the “MY ORGANIZATION” or “FOLLOWING” sections, select “Compliance” from the left-hand menu.

‍

The compliance dashboard will appear.

For each framework, you can choose the desired version from the dropdown menu.

‍

Clicking on a framework lets you navigate through its specific compliance requirement.

‍

• Bulk Tagging: Easily organize and manage scan targets at scale. This capability allows users to categorize and group numerous scan targets simultaneously, streamlining what would otherwise be a time-consuming process.
• Unlimited Bulk Execution of Alert Tasks: Select and update the status of thousands of alerts in a single action — no more 1,000-alert limits. Click on the “Alerts” option in the “MY ORGANIZATION” section on the left-side menu. The alerts page will appear. On the left of each alert type, you can check the box to select all alerts of that type, or you can expand and select as many individual alerts as you want. Clicking on the “Actions” dropdown in the top right corner, you’ll be prompted to select any of the listed actions. The number of alerts that will be affected is listed with the action.

‍