OpenKAT 1.23, released under the name Cody, is now available. This release shows more of what is out there: more software, more context around leaks and more results from external sources. OpenKAT also runs on new platforms and scales better in large environments.

Better insight into software

OpenKAT now recognises software from Shodan banners, nmap results (CPEs) and service banners, including over IPv6. This gives a more complete picture of what is running on systems. Version 1.23 also uses a newer version of the Playwright browser to take more complete snapshots of web pages, which reveals more of the software in use.

More context around leaks and exposure

  • LeakIX: findings now include evidence, source, scope and authentication status, supplemented with certificates, software and TLS data.
  • Censys: results are processed in more detail.
  • InternetDB: now also returns open ports.

More targeted vulnerability detection

  • Nuclei templates are included by default. Findings about admin panels and subdomain takeovers are linked to the exact URL where they were found.
  • OpenKAT checks for vulnerable SSH keys (CVE-2023-34039).
  • The OpenKAT TLS guidelines have been updated.

More insight in the interface

  • An observation now also shows the underlying raw file, so you can immediately verify what a finding is based on.
  • The explanation of inherited clearance levels is back in the interface and has been greatly improved.

Suited to larger environments

  • New database indexes, smarter page counts in the scheduler and more efficient handling of scan profiles and rescheduling of scan tasks reduce the load. As a result, OpenKAT keeps working smoothly even with many organisations and objects.
  • A new systemd service for Octopoes takes care of clearance level propagation and only does so when needed, instead of always and every minute. Installations with 75,000 scans a day or more have been tested and work correctly.

New platforms and easier administration

  • Packages for Debian 13 and Ubuntu 24.04, with newer and faster Python versions.
  • Container images are pulled from the LibreKAT registry by default.
  • New PostgreSQL users automatically receive the correct schema permissions.

Secure and reliable

Dependencies have been updated and pinned to safe versions. This release also contains a series of improvements to the processing of scan results and considerably expanded test coverage.

Upgrading

This release includes a number of migrations of the task database. All changes are listed in the full changelog.