New Features and Improvements - June 2024

Tim Cowell
28 June 2024
2 min Read
Tim Cowell
Create free account


This month we’ve added improvements to FractalScan, to help you gain more insights into scan results, and to check the security of your own FractalScan users.

In this blog we’ll describe how you can now see which of your FractalScan user accounts have MFA enabled, and how an update to the certificates widget allows you to list which certificates have expired.

Visibility of certificate expiry

An expired TLS certificate or one nearing expiry can impact the security of the domains it is securing, and to protect people browsing the web, most modern browsers will stop users accessing websites which have expired certificates.

FractalScan Surface will already find and extract details on TLS certificates found in scan results. This includes the validation dates, when a certificate is valid from and when it is valid to. FractalScan already raises a risk for any discovered certificates which have expired.

To make it even easier to identify all the expired certificates or those which are nearing expiry, we’ve made a change to the Certificates widget on the Overview page. This widget now includes the expiry date for all found certificates, which you can sort on, allowing you to quickly see those certificates which may be at risk.

Expiring Certificates Widget

User MFA status

When following any guidance on securing online user accounts, enabling MFA is always at the top of the list, and for this reason we’ve supported MFA in FractalScan from day zero. To help you audit which of your users have MFA enabled, we’ve updated the user management page, to clearly show which users have MFA enabled, and which don’t. Allowing you to take any steps to follow your own security practices.

User MFA status is available to any user in the organisation roles, Owner, Admin or Manager, those which are used to manage user access and which can view an organisation’s users page.

Users MFA Status

You can also filter the user list of MFA status, allowing you to quickly see all users without MFA enabled.

MFA Users Filter

Coming soon

  • Increased visibility and control over Apache risks, which may have been resolved by backports
About Tim Cowell
Tim is an experienced software engineer, who has worked across the Defence, Government and Commercial sectors for the past 21 years. After leading a diverse range of projects Tim has a strong background in Cyber Security, software engineering, research and development practices.
Tim Cowell


What our customers think