What’s in This Release
- A Documents section holding every client file, with linking and structured export
- Reports and documents Cynomi generates, saved automatically as point-in-time snapshots
- Weekly and monthly scan schedules, with saved scope and full scan history
- Seven new vulnerability management integrations feeding findings into Cynomi
Documents: Every Client File in One Searchable Place
Audits and client reviews ask for the paperwork behind a security program, and that paperwork accumulates across every engagement. The new Documents section, reachable from the main menu, gives each client one searchable view of all of it, including attachments, system-generated reports from dashboards and reporting, and direct uploads. When a client or an assessor asks for something, it is one search rather than a hunt.
Two behaviors make it more than a folder:
- File linking – a file is stored once and linked to multiple tasks, controls in compliance management, and policies, so the same document supports different parts of the program without being uploaded again. When you link a file, Cynomi suggests other areas where it may be useful
- Structured file export – export files from the section as a single package, filtered by framework, control, tag, or other attributes, so collecting what an audit asked for is one action rather than an afternoon
Reports and documents that Cynomi generates are now saved into the client’s Documents section automatically, with no action from you. They sit alongside manually uploaded files, are identified as Platform-generated by their type, generation date, and source, and are stored as an immutable point-in-time snapshot.
Why this matters
The immutable snapshot preserves the exact version of a report that was presented at a given point in time, creating a consistent historical record.
Scheduled Scans Run Weekly or Monthly Without You
Risk advice is only as good as the data behind it, and providers are being asked to keep more client environments current without adding headcount. Scheduled Scans refreshes security data on a cadence you set per client, so dashboards, reports, and risk insights reflect the latest results without anyone triggering a run. You define weekly or monthly schedules for connected integrations and the Cynomi external scanner, and each scan source profile runs on its own schedule with its next run date shown once the schedule is active. On-demand scans stay available for the times you need one now.
Two supporting pieces come with it. For the Cynomi external scanner, Saved Scope Configuration lets you define IP and URL targets once in Configurations and reuse them across scheduled and on-demand runs, which keeps scope consistent instead of drifting each time somebody sets one up. Scan history records every run, scheduled or on-demand, by source, date, trigger type, and status.
One thing to know before you set these up: schedules are configured at the Client account level, with independent control over each scan source profile. There is no single schedule that covers your whole book at once.
Seven New Vulnerability Management Integrations
Cynomi now connects to seven more vulnerability management tools, which brings findings from your clients’ existing scanners into the platform for review and follow-up rather than leaving them in a separate console:
- Qualys Vulnerability Management
- Tenable Vulnerability Management
- Rapid7 InsightVM
- Tanium Exposure Management
- CrowdStrike Falcon Spotlight
- SentinelOne Singularity Vulnerability Management
- Upwind Vulnerability Management
Findings arrive centralized, which is what makes them workable: your team reviews and follows up alongside risk management rather than reconciling two lists. The full set of connected tooling is on the integrations page.
What This Adds Up To
Taken together, these three changes reduce the amount of coordination it takes to keep a client’s security data current. Scans refresh themselves, findings arrive from the tools your clients already run, and every file the engagement produces lands in one place you can search and export from. For partners managing a growing client base, this makes it easier to keep security data current between compliance reviews.