Skip to main content

Release Notes Highlights - v2025.1

Itamar Rotem avatar
Written by Itamar Rotem
Updated over 2 weeks ago

🛡️ Top New Features

🧭 Compass AI - Smart Answers for Complex Infrastructure Questions

Ask anything. Get answers - instantly.

Compass AI is Faddom’s new assistant that lets you query your environment in natural language. No dashboards, no filters, no syntax. Just type your question.

⚡ Highlights

  • Cross-domain intelligence - Combine topology, traffic, CVEs, user access, and more

  • Live answers - Always reflect your current mapped state

  • Zero learning curve - Just ask your question

  • Runs privately - All data stays inside your environment

Disclaimer: Faddom can see the typed query, but never accesses your database or the AI-generated results.

🔓 Try It Free

Now available for a limited time - 30 days free for existing customers.

🚨 Lighthouse AI for Traffic Anomaly Detection (Available for “Early Access Program” members only)

Faddom’s new Lighthouse AI automatically detects unusual traffic behavior and security threats — from DoS attacks and rogue connections to performance issues like outages and packet loss.

Powered by a multi-layer ML model (including VAE), Lighthouse highlights what matters, learns your environment, and reduces noise over time.

🧠 Covers:

• DoS, MITM, DNS spoofing, port scanning, data theft

• Outages, packet loss, network & app performance issues and more.

🔒 All data sent to Lighthouse is obfuscated for enhanced privacy and security.

⚙️ Early Access Only:

  • Lighthouse AI is currently in alpha and available to customers and design partners in our Early Access Program.

  • Want to try it? Contact your CSM or Faddom support.

🗺️ New Tier-Based Application Map View (Now Default)

Faddom's application maps just got a major upgrade. The new tier-based view organizes servers by logical layers like Web, App, and DB - giving you a clearer, more structured view of application dependencies.

This enhanced layout is now the preferred default, designed for better visibility, easier navigation, and faster decision-making in complex environments.

Need the old view? It’s still accessible via the "View" toggle - but we think you’ll like the upgrade.t.

🔥 New “Servers at Risk” View with Faddom Risk Score

We’ve introduced a dedicated view to spotlight the most at risk servers in your environment - powered by the new Faddom Risk Score.

This unique scoring mechanism goes beyond basic CVE data. It adjusts for exploitability, real-world impact, and actual risk exposure based on everything

Faddom knows - including live traffic analysis, user access, and system context.

What’s New:

  • Faddom Risk Score combines CVEs, SSL posture, and policy violations with weighted and delta-based logic

  • Events regarding server risk will no longer appear as “red” indicator on the map, they are now part of the calculated Faddom risk score.

  • Red indicator on maps will still appear for “Operational Events” which may impact the application’s ability to function.

  • Prioritized view helps teams focus on what matters most- fast

  • Built to help you spot risks sooner and act faster.

Shadow IT – Redesigned for Improved Visibility

Revamped the Shadow IT screen with a new look and enhanced context on potential exposure. This update helps teams prioritize overlooked assets that may introduce security risk.

  • Displays servers with minimal traffic to spotlight unmonitored assets.

  • Adds insights into each server’s vulnerability:

    • CVEs present

    • SSL certificate status

    • User logins

  • UI updated to match the latest design system.

  • Settings now include “search as you type” to easily locate specific servers.

Shadow IT – Redesigned for Improved Visibility

Revamped the Shadow IT screen with a new look and enhanced context on potential exposure. This update helps teams prioritize overlooked assets that may introduce security risk.

  • Displays servers with minimal traffic to spotlight unmonitored assets.

  • Adds insights into each server’s vulnerability:

    • CVEs present

    • SSL certificate status

    • User logins

  • UI updated to match the latest design system.

  • Settings now include “search as you type” to easily locate specific servers.

🛡️ More Features

Redesigned Import Data & Custom Tags UI

Redesigned the Import Data screen in Settings to improve usability and accessibility:

  • Tag management is now more intuitive with a table view

  • Improved CSV import access for enriching custom fields

  • Clear separation between Custom Tags, Port Aliases, and Structured Data

  • Tag usage reporting added (e.g., "App Owner", "Comments")

  • Includes built-in search to locate tags faster

This update ensures cleaner workflows and better visibility for admins working with external data enrichment and tagging.

LDAP Authentication – Now Configurable via the UI

LDAP can now be configured directly from the UI, simplifying setup and removing the need for manual config file edits. This integrates with FaddomAuthenticator and supports:

  • Automatic group listing for role assignment

  • Compatibility with LDAP over SSL (LDAPS) for secure password handling

🗺️ UX Improvement: Map types Indications

Replaced “Track Search” with clearer “Save this search as Map” wording, added distinct classifications for Application, Tag-Based, and Tracked Search maps, and removed the legacy “Track Search” tree node. All map types can now be added to folders.

🔐 Certificate-Based Authentication for Linux Software Discovery

Added support for authenticating to Linux servers using certificates (keystores), enabling credential-less software discovery across environments aligned with modern cloud security practices.

GCP: Added Performance Statistics Collection for GCP VMs

Faddom now collects CPU and memory usage metrics for Google Cloud VMs, just like we do for AWS and Azure. This enables performance visibility across all major cloud providers.

🗂️ Migration View: Filter by Custom Status

You can now filter migration targets by their custom status—making it easier to focus only on what matters most in your workflow.

🔐 Credentials: AD Password Verification

When adding credentials, we now verify the password against Active Directory. If it doesn't match—an error will be shown.

📅 Traffic Policies: Timestamps for Policy Edits

You can now see when external and subnet traffic policies were created or edited—plus, sort them by timestamp for easier tracking.

🔐 Users Can Now Change Their Own Passwords

Users with limited permissions (like VIEWER) can now change their own passwords from the UI—no admin needed. This was previously restricted to admins only.

🛡️ CVEs Screen: Trendline Updated + CVSS Column Added

We’ve added a CVSS column and moved the CVE trendline to the bottom of the screen. The “Secure” dashboard is now hidden from the main tree, as it’s available via custom dashboards.

⚙️ New Setting: Filter Out Service Dependencies

Added a global toggle under Global Parameters to enable/disable “Service Dependency” filtering across all maps.

🔔 Notifications: Track Who Marked as "Close"

Update notifications logic to record and display the user who marked a notification as "close" for improved traceability.

🧾 Software Export: Filter by Specific Software

Add export option to generate a list of servers filtered by specific software.

Includes:

  • Hostname

  • IP address

  • Software name, version, vendor

  • Risk rating

📍 Application Maps: Choose Which Events to Show

New “Tracked Operational Events” option in map settings

Lets users pick which event types are shown on servers.

🖥️ Improved OS Details: Most Accurate Data Shown Everywhere

We now prioritize and unify OS information across all parts of the platform. Data is collected from multiple sources—network traffic, hypervisor APIs, and software discovery—and only the most reliable result is shown. A new update priority logic ensures we don’t overwrite better data with older or less accurate inputs. This logic also now applies when updating custom fields. The result: cleaner, more consistent OS details everywhere, including server properties and Shadow IT.

📦 Migration Export: Now Includes Software Details

The migration wave export now includes an additional tab listing all software details (such as SQL and server versions) for each server in the wave-offering deeper insights and eliminating the need to export the software inventory separately.

🔍 Azure Discovery: Display Accessible Subscriptions

When discovering Azure environments, users can now see which subscriptions were detected by the app registration. This helps confirm expected access and provides guidance if additional permissions are needed.

Server Connections: Add Multiple Connections to Map

You can now select multiple servers and use Add to map after revealing connections via Show Incoming or Show Outgoing.

This improves efficiency when working with several connections at once.

SSL Certificates: Added 'Last Seen' Per Certificate

The ‘Last Seen’ timestamp is now shown per SSL certificate directly in the UI.

This improvement makes it easier to verify certificate activity without querying the database.

Disk Free Space Collection Extended

Expanded disk free space collection to include all data sources - previously limited to VMware and Nutanix only.

Subnet Dependencies: Throughput by Connection and Port

A new Throughput column has been added to the subnet dependencies view, showing per-port traffic levels.

This helps you quickly spot incoming vs. outgoing traffic trends, especially between on-prem and cloud environments.

External Traffic Dashboard: Outgoing Port Filtering

You can now filter outgoing traffic by port in the Secure > External Traffic Dashboard — just like with incoming traffic.

This enhancement helps manage large-scale environments where per-server port filters are not practical.

Connection Properties: Tooltips Added

Tooltips have been added to the Connection Properties section to help users better understand the data presented.

Connections List: Partial Name Filtering

You can now filter source and target servers in the Connections List using partial names—no need for exact matches.

This makes it easier to locate, select, and filter multiple related servers in one go.

CVEs Table: Show Server Name Instead of IP

The Related Servers field in the CVEs table now shows server names instead of IP addresses, making it easier to recognize and interpret affected systems at a glance.

CVEs Table: Added Software Column

The CVEs dashboard now includes a Software column.

If multiple software entries exist, we show the first one followed by “+X more” for a clean, concise view.

🛠 Fixes:

Implemented Retry Loops When Reading Azure Flow Logs

Resolved an issue where flow log reads failed due to concurrent writes, leading to HTTP header errors and potential failures.

Improved Error Handling for Unsupported vCenter Sensor Deployment

The sensor deployment screen now clearly notifies users when their vCenter version is unsupported, with a helpful message and link to relevant guidance. Prevents confusing "undefined" UI messages.

SSL Insights: Improved Load Time for Large Result Sets

To address slow performance with large datasets, the SSL Insights table now limits initial API and DB loads to 100 results. Full search and filtering remain functional across the entire dataset.

User Inventory: Support for Non-English Characters

User details in the inventory now display non-English characters correctly. This resolves an issue where such characters previously appeared as gibberish, particularly under Active Directory integration scenarios.

Assets Count Mismatch: Dashboard vs My Account

The mismatch between asset counters in the Dashboard and My Account was caused by each pulling from a different source.

This has now been resolved and the values are aligned.

Custom Tags: Fix for Tag Edit Not Saving Properly

Fixed an issue where editing a custom tag properties failed in some instances.

Advanced Search: Timestamp Shown for 24-Hour or Shorter Time Ranges

When selecting a time range of 24 hours or less in Advanced Search, a timestamp is now displayed so users can easily confirm the data’s timeframe.

Migrate Database Script Fix

  • Fixed disk space check to prevent false failures.

  • Validates both source and destination paths.

  • Improved user guidance and resolved issues with DB connectivity, proxy reset, and key transfer.

Disk Recommendation Handles Missing Data Smoothly

Improved the migration wave logic to gracefully handle cases where disk sizing data is unavailable.

Software Export: Vendor Commas No Longer Break CSV

Fixed an issue where commas in vendor names disrupted the CSV export format. Vendor names are now properly quoted to preserve row structure.

SNMP Passwords with DES Now Redacted in Audit Logs

Audit logs now correctly redact passwords when using DES authentication for SNMP mapping. Parameters are fully covered by the exclusion list to ensure sensitive data is never exposed.

Full Dependency Export in Migration Waves

Resolved an issue where migration wave exports showed only one side of each connection. Both source and target systems now appear correctly in dependency exports.

sFlow Hosts No Longer Duplicated in Inventory

Resolved an issue where sFlow hosts were incorrectly listed twice—once as VMs and once as hosts. They now appear only in their correct role.

Did this answer your question?