Lucent Sky AVM 3.1.1 is a maintenance release that provides improvements on result categorization, including the introduction of new vectors. Additionally, the licensing scheme was also revised to allow more flexibility of larger scale deployment of Lucent Sky AVM.

Updates in Lucent Sky AVM 3.1.1 include:

• Improved result categorization - Two new source vectors, MVC Entry Points and Public Method were introduced to allow finer categorization of scan results. While Lucent Sky AVM has always been able to identify and mitigate vulnerabilities resulting in MVC applications, these vulnerabilities were not separated from those from Web Requests until the current release. The vector Public Method was added in Lucent Sky AVM 3.0, but was disabled and can only be enabled through modifying the rule packages. With the current release, it remains disabled by default, but users will be able to enable/disable it within the Web UI and the CLI.
• Revised licensing scheme - Prior to this release, Lucent Sky AVM is licensed through both User Client Access License and Concurrent Scan License. Starting with version 3.1.1, CSL has been replaced with Per Core licensing. Per Core licensing requires you to have one license for every core on the server(s) License Sky AVM is installed on. This change will allow a simplified experience for multiple teams accessing a single Lucent Sky AVM Server or Server Cluster. To learn more about how Lucent Sky AVM licensing works, see Lucent Sky AVM Server licensing overview.

Updating to 3.1.1

If you are using Lucent Sky AVM Standard or Enterprise (either on-premise and cloud), you can update to Lucent Sky AVM 3.1.1 immediately. Our support team will reach out to you shortly to schedule an update. If you are using Lucent Sky AVM On-Demand, your server will be updated to Lucent Sky AVM 3.1.1 in the next few days.