Skip to content

PRISM 2.5.0 — Watchlists, Graph Export, Quotas & Chinese locale

Choose a tag to compare

View all tags
@NovaCode37 NovaCode37 released this 04 Jul 07:38
· 205 commits to main since this release
v2.5.0
d38c66e

PRISM 2.5.0

This release finishes everything that was on the 2.5 roadmap, plus some security fixes.

Watchlists and scheduled scans

You can now save a target and have PRISM re-scan it on a schedule. Instead of dumping the full results every time, it only alerts you when something actually changed — a port that opened, a new subdomain, a fresh breach, a modified DNS record. Timestamps and other noisy fields are ignored, so an alert means a real change.

Alerts can go to a webhook, and there's a Watchlists screen in the top bar. Endpoints: POST/GET/DELETE /api/watchlist and GET /api/watchlist/{id}/alerts.

Graph export for Gephi and Maltego

Any scan's entity graph can be exported as GraphML or GEXF, either from the Graph tab or via GET /api/scan/{id}/graph/export?fmt=graphml|gexf. Open it straight in Gephi or Maltego.

Per-key quotas and a usage endpoint

Set SCAN_QUOTA_PER_DAY to cap scans per API key. Over the limit returns a 429. GET /api/usage reports how many scans a key has used, its limit, what's left, and when the window resets.

Chinese locale

Added a full Simplified Chinese translation. That's nine languages now, with auto-detection from the browser.

Security fixes

  • Scan and watchlist targets that resolve to private, loopback, link-local, or cloud-metadata addresses are blocked by default. Self-hosters who actually want to scan internal hosts can set ALLOW_PRIVATE_TARGETS=true.
  • Fixed a path-traversal issue in the Maigret module: usernames are sanitized before they're used in filenames and passed after a -- so a username starting with - can't be read as a flag.

Smaller stuff

  • --quiet and --version flags on the CLI
  • Copy-as-cURL button, a Gravatar recon module, and empty-state placeholders in results
  • Contributor work: custom 404 page, aria-labels, Italian/Portuguese/Polish locales, a /api/health endpoint, target normalization, and more tests
  • The frontend now runs in CI

Thanks to everyone who sent a PR — 30+ people have contributed at this point.

Demo: https://getprism.su
Full list of changes: CHANGELOG.md

Assets 2
Loading