Axonius Release Notes 8.0.18

Release Date: March 8th 2026

These Release Notes contain new features and enhancements added in version 8.0.18.

Axonius Platform New Features and Enhancements

Assets Pages

The following features were added to all assets pages:

Select Specific Relationships for Charts on Asset Profile Dashboards

When building a chart in an Asset Profile dashboard, specific relationships can be selected to further refine the assets represented, improving performance, clarity, and relevance. Relationships are available on all chart types. For example: Instead of “Devices → Users” with all relationship mappings, users can explicitly select “Device: Owned By → User: Username” Upon upgrade, existing charts built on “All Relationships” continue to function as before.

Workflows

Workflow Local Variables with Variable Nodes

The capability to use local variables in workflows has been added, enabling users to define and use variables scoped to specific nodes, blocks, or loops. Local variables allow workflows to process and store data per asset or iteration. They can be referenced in Dynamic Value Statements using {{var\_name}} syntax. The system resolves variables from the innermost scope outward, preventing unintended data aggregation across workflow iterations. Local variables support primitive types (string, integer, float, boolean, date) and structured types (array, object) for complex data handling.

System Settings

The following updates were made to various System settings:

Importing Internal CIDRs List from API Endpoints

When adding internal CIDRs to Axonius, users can now scale to maintain, add, or delete Internal CIDRs from the system using the following API endpoints:

  • GET /api/v2/internal_cidrs - Retrieve the current list of configured internal CIDRs.
  • PATCH /api/v2/internal_cidrs - Add and/or remove CIDRs in a single request (supports bulk operations).
  • DELETE /api/v2/internal_cidrs - Remove all configured CIDRs at once.

Managing CIDRs via API endpoints allows for bulk operations (uploading 1000+ CIDRs in one import) without manually inserting data into the Axonius User Interface.

New Adapters

  • Google Threat Intelligence Vulnerability Intelligence - Google Threat Intelligence Vulnerability Intelligence is a security intelligence service that provides vulnerability data, exploitation context, and threat insights to support risk assessment and remediation workflows.
  • Raritan CommandCenter Secure Gateway - Raritan CommandCenter Secure Gateway is a centralized management platform that provides secure access, monitoring, and control of data center infrastructure devices and connected assets. (Fetches: Devices)

Updated Adapters

  • Bloodhound - Added an advanced configuration option to filter only enabled users.

  • Cisco - Added an option to fetch each switch in the switch stack as a separate device.

  • CrowdStrike Falcon - Added an option to select which Policy Types to fetch.

  • Docebo

    • This adapter now supports authenticating with username and password.
    • Changed OAuth2 grant type from client credentials to password-based authentication.
  • Fortinet FortiAnalyzer - This adapter now supports authenticating with FortiCloud Authentication.

  • Fortinet FortiGate

    • Added an "Is Hosted On Cloud" client configuration option in the adapter's connection parameters.
    • New users can no longer use this adapter for FortiManager and should use the new FortiManager adapter.
  • Lakeside SysTrack - This adapter now supports authenticating with API Key.

  • Microsoft Azure - The adapter now fetches detailed information about Kubernetes pods running in Azure Kubernetes Service (AKS) clusters. This data is automatically collected during adapter fetch operations and is parsed as Containers.

  • Microsoft Intune - Added an option to select specific extra fields to fetch.

  • OneTrust - Added a custom parsing option for environment-specific custom fields.

  • Palo Alto Networks Prisma Cloud - Added a new advanced configuration option "Fetch installed software package information" to fetch and parse installed software.

  • SentinelOne - Added the option to fetch Application Settings from API v2.1 endpoints.

  • ServiceNow - Added the ability to use / inside the based_on_field field when applying reverse_reference in a JSON custom schema to support nested list handling.

  • Snyk - The "Enrich organization name" advanced configuration was removed from this adapter

  • Tenable Nessus - Added an option to classify Attack Surface Discovery assets as Domains & URLs instead of Devices, allowing organizations to better organize and manage their external attack surface.

  • Tenable Vulnerability Management - This adapter now parses findings from AWS ELBs as Load Balancers instead of Devices, providing better asset classification and visibility for AWS load balancing infrastructure discovered through Tenable scans.

  • Tenable.sc (SecurityCenter) - Added an option to parse SSL certificate information from Tenable Security Center Plugin ID 10863 and create Certificate assets in Axonius.

  • Wiz

    • An asset recategorization was applied to this adapter, and now it parses the following Wiz asset as the following Axonius assets:
      • REGISTERED_DOMAIN, PRIVATE_ENDPOINT → URLs
      • SERVICE_CONFIGURATION → Configuration
      • MESSAGING_SERVICE → ApplicationServices
      • ENCRYPTION_KEY → Secret
      • CDN, PRIVATE_LINK → NetworkServices

New Enforcement Actions

  • BeyondTrust Remote Support - Delete Jump Client - Deletes an existing Jump Client resource in BeyondTrust Remote Support.
  • BeyondTrust Remote Support - Update Jump Client - Updates an existing Jump Client resource in BeyondTrust Remote Support with specified properties.
  • PANW Cortex XDR - Scan Endpoints - Triggers a scan on Palo Alto Networks Cortex XDR endpoints.

Updated Enforcement Actions