Version 3.0

Version 3.0 - June 26th 2026

Version 3 is the most significant update to the Ethiack portal since launch. We've rebuilt the experience from the ground up, not just visually, but structurally to reflect what Ethiack has become: a platform that supports both continuous adversarial exposure validation and on-demand Pentests, all within your control. Everything from onboarding to findings has been redesigned to surface what matters faster and give your team full autonomy to act.

🚀 What's New

🔀 Onboarding That Matches Your Goal

Setting up Ethiack now starts with a simple but important choice: are you here for Continuous Adversarial Exposure Validation or a Pentest? Each path is purpose-built.

For continuous validation, adding your domains is now easier than ever. Ownership and testing responsibility assertion has been simplified and you can now import multiple domains at once with a CSV upload. For Pentest, you define your assets, set your testing policy, optionally add credentials for Depth testing, and launch. No back-and-forth with the Ethiack team required.

📊 Dashboard Rebuilt Around Your Security Posture

The new dashboard gives you an immediate read on where you stand the moment you log in. At the top, your Risk Score, risk trend, and unresolved vulnerability count give you an instant posture snapshot. Below that, the Security Trends section lets you explore vulnerability data over time (resolved, unresolved, and by period) alongside your Mean Time to Resolve (MTTR), so you can track how efficiently your team is responding.

The Deep Dive section rounds out the picture with a live list of critical or latest findings, your most vulnerable assets, a snapshot of active tests, and the latest comments from across your findings, all without leaving the dashboard.

🗺️ Attack Surface Management: Asset Details That Go Deeper

The asset listing has been cleaned up to remove noise and make management more efficient. The bigger addition is the new Asset Details page, which centralises everything you need to understand an asset's exposure: risk level and importance, IP, provider, location, and technology stack, identified vulnerabilities (unresolved or all), services, technologies and paths discovered, associated tests, and screenshots where available.

⚡ Tests: Self-Serve Agentic Pentests, Now Available

The Tests page has been redesigned for clarity, creation dates, start and end dates, and in-scope assets are now front and centre. Continuous tests show the date of the last run and let you pause or reactivate them directly. Pentests now show credit allocation at a glance.

More importantly: you can now launch Agentic Pentests powered by Hackian directly from the portal, with no involvement from the Ethiack team.

Two types are available:

Swift — for single, simpler external applications. No grey-box access. Results within 24 hours.
Depth — for multiple or more complex applications. Supports grey-box testing with credentials. Results within 3 days.

🔍 Findings: More Signal, Less Friction

The findings list has been redesigned to de-emphasise low-value information and bring critical context forward. Filtering has moved into a dedicated panel, making it easier to build and manage complex views without losing your place.

On the finding detail page, a new Quick Info section surfaces the asset, test, CWE, and CVSS score immediately. CVE identifiers appear here where applicable. An EPSS score and KEV catalogue presence are now shown in the Risk Indicators panel when relevant — giving you an evidence-based view of real-world exploitability, not just theoretical severity.

New to this release: the Exploit Timeline, which shows how quickly Hackian identified the finding and how your resolution time compares to known exploitation timelines in the wild.

The finding report itself is unchanged — it remains one of the portal's strengths.

The right-side activity panel has been renamed Updates to better reflect its purpose and avoid confusion with testing activity.

🛠️ Other overall changes

Credits replace hours across the platform to support the flexibility required by Agentic Pentest types. Existing customers will receive separate communication on their credit balance and the conversion from their existing hours.
Reports, activity, and assistant pages have received a full visual refresh aligned with the new design system.
Preferences and settings have been improved throughout, including the ability to copy IPs and user agents for whitelisting and to update your organization's logo and name directly from the portal.