Detected country: US
logo
API Docs

Getting Started

  • How to get started with Cobalt

Assets

  • Assets are what we pentest
  • Asset Types
  • Create an Asset
  • Risk Advisories

Pentests

  • Pentests
  • Create a Pentest
    • Overview
    • Asset Details
    • Pentest Details
    • Scope & Test Period
    • Preparation
  • Create an Autonomous Pentest
    • Launch a Saved Autonomous Pentest
    • Review a Closed Autonomous Pentest Report
  • Pentest Process
  • Pentest States
  • Coverage Checklist
  • Pentest Expectations
  • In House Pentests
    • Complete an In-House Pentest (For Pentesters)
    • Set Up an In-House Pentest
  • Findings
    • Remediate Findings
    • Finding States
    • Severity Levels
  • Reports
    • Contents of a Pentest Report
    • Customize Your Report
    • Co-branded Reports
  • Preparation

Engagements

  • Engagements Overview
  • Digital Risk Assessment
  • Secure Code Review

Findings

  • Findings

Insights

  • Insights

Planning

  • Planning

Methodologies

  • Cobalt Methodologies Overview
  • Web Methodologies
  • Autonomous Web Methodologies
  • API Methodologies
  • External Network Methodologies
  • Internal Network Methodologies
  • Mobile Methodologies
  • Cloud Configuration Review Methodologies
  • Cloud Pentest Methodology
  • Desktop Methodologies
  • AI/LLM Methodologies
  • Digital Risk Assessment Methodology
  • Secure Code Review Methodologies

Attack Surface

  • Attack Surface Monitoring (ASM)

DAST Scanner

  • DAST Scanner Overview
  • Best Practices
  • FAQ
  • Integrations
  • Partial Scans: Reduced Scope
  • Scans
  • Sequence recorder
  • Targets
  • Target Authentication
  • Extra Hosts
  • Blackout Period

User Account

  • Account Overview
  • Account Settings
  • Password Best Practices
  • Sign In to Cobalt
  • Troubleshoot Sign-in Issues

Collaboration

  • Collaboration Overview
  • Collaborate on Pentests
  • Groups
  • Manage Pentest Collaborators
  • User Roles and Permissions
  • Manage Notifications

Organization

  • Organization Overview
  • Manage Users
  • Your Cobalt Contract
  • Configure Organization Settings
    • Configure SAML SSO
    • SAML Migration: Update Your Configuration
    • SCIM Provisioning Setup Guide

Credits

  • Cobalt PtaaS Tiers
  • Cobalt Credits
  • Track Your Credits

Integrations

  • Cobalt Integrations Overview
  • Integration Builder
    • Connect your applications
    • How to Guides
      • Create Azure DevOps Work Item for Findings
      • Create GitHub tickets for Findings
      • Create GitLab tickets for Findings
      • Send email notifications for Findings from Outlook
      • Send MS Teams notifications for Findings
      • Create Jira tickets for Findings
      • HTTP Connector
      • Import Assets from Google Sheets
      • Map Cobalt Pentest Finding Severity to Jira Issue Priority
      • Modify Jira Issue Summary to contain Pentest Title
    • Troubleshooting
  • Integrate Jira with Cobalt
    • Jira Cloud Integration
    • Jira Data Center Integration
    • Push Cobalt Findings to Jira
    • Synchronize Cobalt Severity Levels with Jira
    • Switching to a New Jira Instance
    • Troubleshoot Your Jira Integration
  • Slack
  • Microsoft Teams
  • Webhooks
  • DefectDojo
  • Kenna Security
  • Vanta
  • Carried Over Findings
  • Create Test Finding
  • Wiz

Cobalt API

  • Cobalt API Overview
  • Create a Personal Cobalt API Token
  • Get an Organization Token
  • Revoke Your Personal Cobalt API Tokens
  • Create or Modify an Asset
  • Import Findings to Google Sheets

Glossary

  • Glossary

What's New

  • May 2026
  • April 2026
  • March 2026
  • February 2026
  • January 2026
  • November 2025 
  • August 2025
  • July 2025
  • June 2025
  • May 2025
  • April 2025
  • March 2025
  • January 2025
  • December 2024
  • November 2024
  • October 2024
  • September 2024
  • August 2024
  • July 2024
  • June 2024
  • May 2024
  • April 2024
  • March 2024
  • January 2024
  • Product Updates
  • August 2026
‌
‌
‌
logo

Powered by

Assistant

Ask new question

Powered by
  • Home
  • What's New
  • March 2026

March 2026

2min read

Share

Release Notes: March 2026

:::info Explore What’s New from Cobalt This Month

:::

Streamline Your Security with User Management via IdP (SCIM)

You can now manage Cobalt user access directly from your Identity Provider (IdP) using the SCIM 2.0 protocol. By syncing your Cobalt organization to an access group in centralized identity tools like Okta or Entra ID, you can eliminate manual invites and ensure new team members have instant, frictionless access. This update also automates offboarding, instantly revoking access to secure your pentest data and maintain audit-ready compliance for SOC2 and ISO 27001. Experience zero-touch scalability and centralized governance by enabling SCIM provisioning in your Organization Settings today. Learn More >


CWE Data available in Integration Builder Recipes

The Integration Builder Recipes has been upgraded to provide more context captured on findings. You can now include CWE (Common Weakness Enumeration) IDs and Titles directly in your downstream tickets and notifications, ensuring your development teams have immediate access to industry-standard vulnerability classifications.

Depending on your current setup, here is how you can start using this new data:

  • For Existing Recipes: Simply edit your active recipes and add the new CWE data pill to your existing field mappings. This allows you to keep your custom configurations intact while enriching your tickets with more granular data.
  • For New Recipes: Any new recipes created from our library will now feature these CWE values pre-populated in the Description field by default, streamlining your setup process from day one.

Learn More About Mapping Fields >


Meet Our New & Improved Product Documentation Site!

We know how important it is for you to get the right answers quickly, so we’ve upgraded our product documentation to make finding information easier than ever.

What’s new?

  • AI-Powered Search: No more digging through multiple articles to piece together an answer. You can now ask a question in the search bar (on the right side of the page) exactly how you would ask a human, and our new AI will instantly generate a clear, customized answer based on our documentation.
  • Redesigned Browsing Experience: Prefer to explore on your own? We’ve updated the look, feel, and structure of our article library so you can easily navigate through categories, guides, and tutorials.
  • Faster Updates: Behind the scenes, we've adopted a new platform that allows our team to publish and update documentation much faster, ensuring you always have access to the most up to date information.

:::info Note: Old bookmarks and links will automatically redirect to the right place on the new site

:::

Share