Vault 1.3 Update | PDF Reports, Reusable Elements Support and more!

Also available in :

by

Victor Nihoul

-

May 20, 2023

-

🇬🇧 English

Another great and exciting update of our security tool; I'm happy to introduce you to Flusk Vault 1.3!

In a Nutshell


Our latest update includes the ability to generate and export Security Reports and Certificates directly from your dashboard in a PDF format. This addition ensures you have easily accessible and tangible records of your data security status at your fingertips.

Moreover, Flusk Vault now boasts a robust mechanism to detect vulnerabilities within reusable elements. From now on, there are no parts of your app that Flusk Vault cannot check anymore!

As always, we have also enriched Flusk Vault with a myriad of new features, designed to accelerate your operations and simplify your experience.

PDF Exports and Security Certificates

You've asked, and we've listened. We've finally added automatic PDF exports to our service.

Exporting PDF from the dashboard.

What does that mean for you? Well, you can now quickly grab a Security Report of your app - that's a neat document showing you all about your app's security, the versions it covers, and the security points that were checked.

But wait, there's more! We're also offering a Security Certificate. That's an official paper from us at Flusk, saying your app is secure and ready to go.

This is a fantastic way to show your customers and investors that your app is safe and sound. Plus, it's super easy to do. This is all about giving you the tools you need to build trust and keep your app in tip-top shape.

Here's the official documentation about how to generate a Security Report?

Support for Reusable Elements

Guess what? We can now discover vulnerabilities within reusable elements. This means we can catch security issues (like wonky workflow actions) even within these reusable parts of your app. So you can kick back and relax, knowing your app is super secure.

Automatically Rename Fields in Bubble

We all know that setting up Privacy Rules can be a tough gig – it takes ages and it's super easy to mess up.

But guess what? We've got a cool new feature that's gonna help you spot those tricky sensitive fields fast when you're setting up your Privacy Rules or building your app.

Here's the magic: you can sync up Flusk Vault with your Bubble Editor, and we'll add a "🔴" emoji right in front of every sensitive field in your editor. So you'll know exactly what to watch out for!

Just a heads-up, you need to have collaborator access enabled to switch this feature on.

Sound good? Then don't wait! Switch on this feature right now in the "Tools & Schedule" tab on your Flusk Vault dashboard.

Bubble Editor Demo

Bulk Sensitivity Review

Alright, let's be honest, reviewing the sensitivity of pages and fields within the Flusk vault app was a bit of a pain, wasn't it? We totally get it, and hey, we never meant for it to be so tricky.

But here's the great part - we've been listening to your feedback and we've just given our review system a total makeover. Now, you can review your database fields and pages all in one go with our new bulk review feature.

So, what used to take you a few grueling minutes, now only takes a few easy-peasy seconds! How awesome is that? We can't wait for you to try it out!

The new sensitivity rating method

Minor changes

Improved Collaborator Issue

We've tweaked things so that we won't flag a collaborator issue when the email they're using is from the same domain as your app's set domain. This should help cut down on those pesky false-positives.

And guess what? We've done the same for emails that match the domain of the app owner, too.

We're hoping this will make your life a little easier by reducing the number of issues you need to check out and ignore. Because, let's face it, who needs extra work, right?

New Vulnerability Covered

We've found and added a new potential security issue to our tool: Google Maps API keys.

Just a heads-up, the Google Maps API key you're using on Bubble is public. So, to make sure it only works within your domain, you need to set up the right HTTP referrer restrictions.

Don't worry, we've got you covered. Our tool now fetch your API key and checks if those HTTP referrer restrictions are in place.

Here's the documentation about the new Google Maps Token issue.

I'll see you very soon for Flusk Vault 1.4 with always-exciting features such as our security widget and our plugin cashback system!

In the meantime, you're welcome to participate in our feature board!

User