Skip to main content

Mondoo 11.29 is out!

· 3 min read
Tim Smith
Tim Smith
Mondoo Core Team

🥳 Mondoo 11.29 is out! This release includes asset risk factor customization, Windows Server 2025 support, and more!​

Get this release: Installation Docs | Package Downloads | Docker Container

🎉 NEW FEATURES​

Risk factor customization​

Tailor Mondoo's security model to match the needs of your business with risk factor customizations. Choose which risk factors matter to you and tune how much impact each risk factor has on the prioritization of findings. That way, the unique needs of your infrastructure determine which systems require urgent attention.

Custom Risk Factors

Expanded risk factors​

Focus on the most important systems first, with new risk factors for critical databases, file sharing, and directory services. These new risk factors surface your most critical systems first, so you can focus your energy on the highest risks to your business:

  • Cassandra
  • Elasticsearch
  • MariaDB
  • MongoDB
  • OpenLDAP
  • OpenSearch
  • Samba

Descriptions for organizations and spaces​

Communicate the intended purpose of organizations and spaces to your coworkers, or maybe just your future self, with long descriptions for organizations and spaces. Set a description in the new organization and space creation pages or edit them after the fact in the settings pages.

Space Description

🧹 IMPROVEMENTS​

Windows 2025 support​

It's been over three years since the last major Windows Server release, and Microsoft has been busy putting plenty of new security features in Windows 2025. If you're testing the waters on this new version, released this week, Mondoo has your back! We have full support for securing Windows Server 2025, including the new Arm processor variants.

If you're interested in learning more about everything new in this release, check out our Overview of Changes and New Security Features in Windows Server 2025 blog post.

CloudLinux support​

Query and secure CloudLinux assets with new support in Mondoo for the hosted-optimized Linux distribution.

CIS AWS Foundations benchmark 4.0​

Stay on top of the latest threats against your AWS infrastructure with the updated CIS AWS Foundations benchmark 4.0. This new release includes 14 new and updated recommendations for the most commonly used Amazon services.

Resource updates​

microsoft.user​

  • New mfaEnabled field

🐛 BUG FIXES AND UPDATES​

  • Improve the text describing policy scoring.
  • Improve the layout of the page when adding an integration and all recommended policies are already enabled.
  • Add more input validation for GitHub Enterprise URLs in the GitHub Issues integration setup.
  • Fix a panic querying aws.eks.clusters { * } when no disks are present.
  • Include RPM packages with the vendor of "(none)" in the packages resource.
  • Improve scalability of the GitHub provider in very large organizations.
  • Provide a helpful error message when clients can't authenticate with Mondoo Platform.
  • Report IBM dB2 and Amazon Aurora RDS instances in asset overviews.
  • Support fetching Windows Appx packages during filesystem scans.
  • Update policy and query pack download icons to be more consistent with other console icons.
  • Don't include the properties tab on policies that don't have any properties.
  • Include the create date in asset overviews for AWS EFS filesystem assets.
  • Fix a failure running some Microsoft 365 integration scans.
  • Update VMware ESXi 7 EOL to the new extended EOL date.
  • Don't show internal query packs on the query packs page.
  • Update Microsoft Teams notification support to use the new AdaptiveCard system in Teams.