[Work in progress] Additional Status for Update Available

OLLI_S

In the list of applications I often see the status "OK" but when I expand the entry then I see that VulnDetect recommends a newer version of this app.
So for many apps there is an update available but I don't see this in VulnDetect because by default all entries are collapsed and you show the Status "OK".

For users the status "OK" is confusing because it implies that everything is OK (secure and also Up-To-Date).
There is no separate visual indicator for "Up-To-Date" and "Update available".
So please add an additional status that shows if an application is Up-to-date or if there is an Update available.

You should also rename the status "OK" to "No known vulnerabilities" (maybe you find something shorter like "Probably Secure").
I know that "Secure" is not correct because there might be unknown vulnerabilities.

This way you can show if an application has vulnerabilities and if it is Up-To-Date.

Tom

I agree that we need something additional to indicate that an app is not at the "Recommended" version, but I don't think we will change the OK.
There can be a ton of reasons why people want to stick with an old version, and we don't want to push them away from an old version, as long as it isn't "Insecure" or "EoL". So we want to tread carefully here.

OLLI_S

Important is to see that there is an update available.

OLLI_S

I think you need a new orange label "Update" or "Update available" in addition to the existing labels like "OK" or "Insecure".

OLLI_S

In the suggestion List of Applications - Improved UI I made a suggestion for a improved user interface that also includes the label Update Available.
If you like the new UI, please upvote it.

Armin

I also miss an indicator that there is a new version available (status is OK but there is a newer recommended versions available).

Cheers

Armin

Armin

I am surprised (and very disappointed) that this is not yet implemented or has at least the status "Work in progress".
Seems like the guys at VulnDetect are busy with other stuff that has not such a great benefit than this feature here.
This is very very sad!

Tom

I can see that the current implementation isn't good enough.

Update available Download.png

The download icon indicates that an update is available, but only for Apps where we provide a download link.

So we need to find a better way to indicate this.

OLLI_S

@Tom said in Additional Status for Update Available:

The download icon indicates that an update is available, but only for Apps where we provide a download link.

This is exactly the problem: for some apps there are updates available, but you do not provide a download link.
So for these apps users will never see that there is an update available.

And in the business UI you do not show any download icon in the list of apps (so users do not see that there are updates available):

In the business UI you have to expand the entries manually to see the download icon:

This is the reason why I suggested here a new label "Update Available" (or just Update).
Here is a part of my mock up that I posted in List of Applications - Improved UI

@Tom You see that the label "Update" is very important and also increases the security of the system and the usability for users.

Armin

There are many good arguments for implementing this feature, @OLLI_S mentioned some above.
So @Tom you should implement this feature ASAP (otherwise you force us users to expand every application to see available updates).
You already know if there is a new version available or not.

Armin

I really don't get that.
You already have all required information (what versions are installed, what versions are available on the vendors sites), so why don't you show the "Update is available" information to users?
Is this really that hard?
It would really help us users a lot!

OLLI_S

Hello @Armin

I can understand that this feature would be very helpful for you and many other users.
And I can also understand that you are frustrated about the fact, that such an "easy to implement" feature is not implemented yet.

As far as I know, this feature has a higher priority at VulnDetect, but they have to implement some important features for business customers first.

But note:
I am not an employee of Secteer, just a normal user as you.
But I have a very good contact with @Tom, so I can tell you what Tom told me some time ago.

So, please be patient, this feature will be implemented!
I am also nerving Tom about this feature nearly every week

OLLI_S

I talked to @Tom about this feature and his answer was, that this feature is not requested by any other customer (therefore it has a lower priority).

Currently VulnDetect only has a label for "Insecure" applications, for normal updates (that are not security related), there is no separate label available.
You have to expand each app manually to see available updates.

I think it would be very useful to see, which apps have updates available.
Here the mock up I created some years ago:

@All Users

If you also think, this feature is useful, please upvote it (by clicking the "^" icon in the first posting in this topic).
Thank you!

OLLI_S

I have good news for all users requesting this feature:
It is implemented in the UAT (User Acceptance Test) platform of the Corporate UI.
Here are two status entries available:

Patch (an Update is available and VulnDetect can automatically patch it)
Update (an Update is available that must be updated manually)

Here an example: