ShadowTrackr

Log in >
RSS feed

Better alert emails, improved group account

06 October 2025
The email alerts should be more usable now. Before, you had to open the attachment to see the actuals results. Most results are just about a few assets and listing those in the email body itself would save a click. So that's what is done now. Some results are shown, up to a maximum of 10. If there are too many columns to show properly, the middle ones are cut out in the email body (but still all included in the attachment).

Another update is on group accounts. Some of you are responsible for multiple organisations that are not supposed to see each others data. This can be done with a groupaccount, where the subaccounts behave just like regular ShadowTrackr accounts but the groupaccount admins can see and search all data of all subaccounts.

As a groupaccount admin you can enter a subaccount and go back to the grouplevel, but it wasn't always very clear where exactly you were at a given moment. That is fixed now (it's shows in the bottom left, in bright yellow). Also some extra menu items are added to the groupadmin menu for better navigation.

In Beta: RPKI checks in internet standards report

29 September 2025
The internet standards report has been in ShadowTrackr for quite some time, but so far the RPKI checks where skipped. They are now implemented and rolled out over all assets to verify if this new update works properly.

On most assets, it does. Sometimes multiple overlapping prefixes are found, with one of them resulting in an "invalid length" problem. These will be filtered out in the coming week.

The Internet standard report is by default enabled for all domains. You can add specific urls or subdomains if you want: Go to the url page and click "add to internet standards report" in the action menu (the three dots) in the upper right corner.

Sorted vulnerabilities and certificate scans

22 September 2025
The vulnerabilities reports and the vulnerabilities overview in the GUI are better ordered now. The goal is that you can immediately see which software you should update first to reduce your risk. Last week the order changed so that the software is in the first column and the assets that run that software are second. This week the sort order changed so that the software with the worst vulnerabilities (in score and number) is now on top. The vulnerabilities per line are also ordered with the worst at the front. This should better enable you to prioritize actions.

Another update is in the way the certificates are scanned. Some edge cases were not handled properly. They are now.
Older posts >

Resources
API
Blog
Documentation
Integrations
Shodan
OpenCTI