News

Major update to the ImmuniWeb AI Platform: new dashboards, EPSS, and improved AI analysis

News | 05.08.2025

ImmuniWeb has released a significant update to its award-winning AI Platform, introducing numerous new features and capabilities across all products. All enhancements are already available to customers at no extra cost. The updates are aimed at improving the accuracy, depth, and usability of cybersecurity management.

Expanded Visibility and Control of the Attack Surface

The ImmuniWeb Discovery product has received substantial improvements for more effective monitoring and management of digital assets:

  • New dashboards: Four new dashboards have been added, including panels for SBOM (Software Bill of Materials) and regulatory Compliance.
  • Threat detection: Improved detection of phishing, domain-squatting, and data leak incidents thanks to enriched feeds from ImmuniWeb's proprietary honeypots.
  • AI classification: A new AI model has been implemented for more accurate detection, triage, and automatic classification of IT assets.
  • Scanning reliability: The reliability of network vulnerability detection has been increased, and WHOIS monitoring has been expanded for more accurate domain attribution.

Increased Accuracy and Depth of Testing

The Application Security Testing product line has been enhanced with new AI models and checks to identify the most complex vulnerabilities:

  • EPSS risk scoring: Scoring according to the EPSS (Exploit Prediction Scoring System) standard is now available for all vulnerabilities, which helps to prioritize fixes more accurately.
  • Improved AI models: AI models have been updated for higher quality testing of API, Single Page Applications (SPA), and detection of DOM-based XSS, CSS injections, and JavaScript vulnerabilities (SAST).
  • Speed and integration: A distributed infrastructure has been implemented for accelerated scanning, and integration with Slack and JIRA has been improved.
  • New checks: 16 new checks for mobile applications have been added, and the detection of web server misconfigurations has been improved.