Skip to content

Posture Cockpit v0.4.0 — HTTPS & Security Diagnostics

Choose a tag to compare

@vinzgithub vinzgithub released this 16 Oct 21:41
· 159 commits to main since this release
f19e09d

What's new in v0.4.0

Posture Cockpit v0.4.0 introduces a more detailed HTTPS security assessment, with improved diagnostics, scoring transparency, and reporting.

HTTPS security diagnostics

  • Multi-address HTTPS probing with explicit connection outcomes.
  • Detection of TLS negotiation failures, including obsolete protocol behavior.
  • Improved certificate and HTTPS configuration analysis.
  • More precise handling of unavailable, inconclusive, and dependent checks.

Scoring and coverage

  • New diagnostic states and dependency-aware evaluation.
  • Clearer distinction between scoring coverage and diagnostic coverage.
  • Improved handling of partial results to avoid misleading security scores.

Interface, reports and API

  • Updated French and English explanations.
  • Enhanced domain details, scan history, and PDF reports.
  • Additional diagnostic information exposed through the existing API.
  • Improved compatibility with mobile browsers and HTTP environments.

Quality and validation

  • Automated testing on Python 3.11, 3.12, and 3.13.
  • Browser tests and Docker build validation.
  • Successful isolated Docker acceptance testing before release.

Notes

This release introduces database schema version 4. Back up persistent application data before upgrading an existing deployment.

Minor presentation refinements are planned for v0.4.1.

License: PolyForm Noncommercial 1.0.0.