Product Updates
Release notes, feature announcements, and improvements from the product team.
Release notes, feature announcements, and improvements from the product team.
Release notes, feature announcements, and improvements from the product team.
Product Update: COGNNA Role-Based Access Control Update
We have upgraded COGNNA Nexus to unified Role-Based Access Control to enhance data isolation and give you more precise control over user permissions.
With COGNNA Role-Based Access Control, you can:
We’ve prepared a comprehensive guide to help you manage custom roles and review migration impacts.
Read the Knowledge Base article to learn more.
Do you know where every device, application, and cloud resource lives in your environment?
With COGNNA Asset Discovery, you can:
We’ve prepared a step-by-step guide to help you make the most of Asset Discovery.
Read the Knowledge Base article to learn more.
We're excited to announce the launch of our new "Case Watchers" feature!
Now, you can stay up-to-date on the progress of important cases, even if you're not the case owner or assignee. This feature allows you to follow cases and receive notifications for all updates, ensuring you never miss a critical updates.
Case Watchers are users who can monitor a case and receive notifications about its progress. This feature helps keep relevant team members informed about important updates.
To ensure key stakeholders are always in the loop from the start, certain users are automatically added as watchers the moment a case is created. These default watchers include:
This ensures that the right people receive notifications from the very beginning without any manual action required.
You will now be a watcher on this case and will receive notifications for all updates, including new comments, status changes, file uploads, and reassignments.
You will no longer receive notifications for this case. Note that case assignees and creators cannot stop watching a case.
If you are a case creator, case assignee, client admin, or COGNNA admin, you can add and remove other watchers from a case.
Adding Watchers:
Removing Watchers:
You can remove any watcher except for the mandatory default watchers (case assignee and creator).
The Watchers list provides a clear overview of everyone following a case. You can see each watcher's name, email, and organization.
As a watcher, you will receive the same real-time notifications for case activity as the case assignee, keeping you fully informed of every development.
We’re excited to introduce Case Management, a powerful new feature that enables security teams to track, investigate, and resolve security incidents efficiently—all from one centralized platform.
✅ Create and update cases – Quickly create, document, and update incidents from threats listing or details pages or open cases directly from case management for streamlined tracking.
✅ Track and monitor your cases – Stay on top of all security incidents with an interactive listing page that offers quick filters to refine results, search and sort cases to find cases instantly, export functionality for detailed case analysis, and date filtering to track incident trends over specific time periods.
✅ Case timeline updates – Track every action taken on a case with a clear timeline of update history, including timestamps and user details for full accountability.
✅ Mark cases as false positives – Reduce noise and focus on real threats by marking cases as false positives, with the ability to provide reasoning for future reference.
✅ Case reports & weekly/monthly insights – Export case report in PDF format including case’s timeline history for documentation and compliance, also receive weekly and monthly case management summary report with key insights to improve decision-making.
✅ Dashboard Overview – Gain actionable insights with visual charts and metrics that help you monitor cases by status and severity, track case aging to identify bottlenecks in resolution time, and measure MTTR (Mean Time to Resolve) for optimized efficiency.
✅ Seamless collaboration – Improve teamwork with streamlined workflows, allowing for smooth case assignment, status transitions, and real-time updates to keep all stakeholders aligned.
With Case Management, your security team can resolve incidents 25% faster, improve collaboration, and gain real-time visibility into incident statuses.
📍How to Use It:
Navigate to Respond > Case Management in COGGNA platform to explore it now!
👉 Try it now! Explore Case Management
For questions or feedback, reach out to us at [email protected].
Take Control of Your Threat Hunts Like Never Before!
Managing cybersecurity hunts just got smarter, faster, and more efficient! With our latest enhancements, you can now streamline scheduled hunts, gain deeper visibility into hunt cancellations, and optimize results management—all with an intuitive, user-friendly experience.
🔍 Manage Scheduled Hunts
Gain full visibility and control over your scheduled hunts with our new calendar view. Easily list, edit, cancel, or reschedule hunts, ensuring maximum efficiency and coordination across your security teams.
🚨 Intelligent Hunt Cancellations with Detailed Error Handling
No more generic errors—our enhanced cancellation process now provides granular error insights into why a hunt was stopped, including:
✅ Resource limits exceeded (Memory/CPU)
✅ Sensor updates or restarts
✅ User-initiated cancellations with attribution
✅ Asset unreachability alerts
✅ Automated time-out handling
📂 Asynchronous Hunt Result Management
Instantly download or delete hunt result files (YARA and others) without waiting. Our asynchronous processing ensures a smoother, non-blocking experience for faster incident resolution and smoother operations without workflow disruptions.
👤 Users & Last Logged-In User Visibility
Gain full visibility into logged-in users for any asset with a detailed list of all users and the last logged-in user—streamlining investigations and access audits.
🎨 UX/UI Enhancements for Seamless Navigation
✔ Bulk selection of assets for faster actions
✔ Sticky headers in tables for improved visibility
✔ Optimized scrollbars for better accessibility
✔ Dynamic breadcrumb shortening for clutter-free navigation
✔ Ascending/Descending sorting in tables for quick data analysis
✔ Universal country code & phone number validation for seamless integrations
These enhancements are designed to boost security operations, provide real-time visibility, and enhance analyst productivity.
COGGNA is excited to announce the release of version 2.2.0, a significant upgrade that elevates our platform’s capabilities in threat detection, threat hunting, and asset management.
In this release, we’ve introduced enhanced threat detection alerts, providing richer detail and insight that empowers our users to proactively understand their security posture and take targeted actions to improve it. Key advancements include an enriched threat hunting framework with expanded support for IOCs, Sigma, and Yara rules, which now seamlessly integrate with the MITRE ATT&CK framework. This powerful combination strengthens our rule parser, enabling even deeper, more precise threat identification. In response to the increasing demand for comprehensive visibility, we’ve launched user discovery capabilities within asset discovery. This addition enables organizations to monitor and manage user access to assets more effectively, driving stronger governance and security.
Additionally, COGGNA’s new Sensor Management Marketplace offers a streamlined onboarding experience, allowing users to quickly deploy and provision new assets directly through our platform. With in-app installation guides, customers can now activate and maintain their security infrastructure in just a few clicks.
COGGNA’s V2.2.0 release represents our ongoing commitment to equipping enterprises and MSSPs with the tools needed for a robust and dynamic cybersecurity posture.
In addition to the new features mentioned above, this release introduces additional major enhancements and fixes that help make COGNNA more stable, engaging, and reliable.
In the V2.1.0 release, COGNNA is introducing multiple new features that aim to enhance and ease the user experience, enhance threat detection capabilities, leveraging advanced threat intelligence feeds, and improve user access controls and security, along with providing in-app and email notifications and summary reports for better visibility and communication:
Enhanced the capabilities of our detection engine by enriching our detection rules through incorporating advanced threat intelligence, and correlation rules to empower our engine to identify and mitigate potential threats effectively before they can cause harm.
We have enriched our threat intelligence sources with unparalleled depth and breadth though integrating multiple Threat Intelligence Feeds and Open Source Intelligence (OSINT) into our threat intelligence ecosystem to amplify our ability to proactively identify, assess, and mitigate evolving cyber threats, empowering us to stay ahead of malicious actors and safeguard our assets with heightened precision and efficacy.
Summary Reports are designed to provide comprehensive Weekly and Monthly detailed analysis and insights into Threat Detection, Threat Intelligence, and Endpoints Monitoring. With Summary Reports, users can gain a consolidated view of key metrics, trends, and actionable insights across these critical areas of cybersecurity.
This new feature brings real-time notifications directly to user’s fingertips, ensuring that users stay informed and empowered to act promptly on critical updates and events. With In-app Notifications, users will receive instant alerts and updates while actively using the platform, enabling seamless communication and immediate action on important alerts and updates. Simultaneously, Mail Notifications provide users with the flexibility to stay informed even when they are not actively logged in, ensuring that no crucial information or updates are missed.
Designed to enhance user navigation experience on the platform. With Recent Visits, users can easily access their last visited destinations with just a click, streamlining their workflow and saving their valuable time. Whether users need to revisit a specific page, review recent activities, or resume work on an alert, a threat hunt, or any particular task.
In addition to the new features mentioned above, this release introduces additional major enhancements and fixes that help make COGNNA more stable, engaging, and reliable.