Changelog

The SOC 2 Coverage Report shows how test scenarios from Auto and Hybrid pentests on your targets map to SOC 2 Trust Services Criteria. Generate it from Reports, the same way you generate your other PDF reports.

What's new

• Control-aligned coverage – The report maps pentest scenarios to SOC 2 Trust Services Criteria, so you can see which controls were exercised and how.

• Validated or At Risk, per control – Each in-scope control, area, scenario, and scan is marked Validated or At Risk. A coverage summary shows the overall picture before you open the details.

• One PDF across targets and scans – Select finished Auto or Hybrid pentests that were run with SOC 2 as the testing objective. Astra combines them into a single report, with per-scan sections so findings stay attached to the right target.

• Scenarios and vulnerabilities, together – Control coverage lists every test scenario. Vulnerabilities that map to those controls include the same write-up you’d expect in a full report: impact, proof of concept, and suggested fixes.

• Email or download – Generate from Reports → Compliance Report → SOC 2, then send it to your inbox or download it from the reports list.

Keeping Astra and Jira in step shouldn't mean configuring every target by hand. Jira sync is now available to everyone, with a new setup flow that lets you configure many targets at once.

What's new

• Two-Way or One-Way, Your Choice – Set up the webhook and changes in Jira flow back to Astra, so sync runs both ways. Skip it and Astra still creates and updates your Jira issues automatically, one way.

• One Place for Every Target – See each target next to its Jira project in a single table. Link, configure, or edit from there. Select multiple targets to configure them together, or copy the setup from a target that's already working.

• Guided Configuration – A step-by-step setup covers the Jira project, issue types, status, priority, custom fields, and webhook. Custom fields can fill in automatically for each issue, such as a date Astra works out or text that includes the target name or severity.

• Know Your Connection Is Healthy – The Jira card shows whether Astra can currently reach your Jira.

Less time setting up sync, more time fixing what matters. Give it a try and tell us what you think.

Your security data already lives in Astra. Your work happens in Cursor, VS Code, Claude, and ChatGPT. Astra MCP connects the two, so you can start scans, triage vulnerabilities, and pull reports by asking in plain language, without switching tabs to the dashboard.

What's new

• Connect in Minutes – Guided setup under Settings → MCP for Cursor, VS Code, Claude, ChatGPT, and any tool that supports remote MCP.

• Your Permissions, Not Extra Access – Sign in with your Astra account. The assistant only sees workspaces you already have.

• Ask in Plain Language – Copy a ready-made prompt to start or schedule a scan, prioritise open vulns and draft a fix, generate a report, or see which targets haven't been scanned in 30 days.