What's new in ProtoScan

Gateways no longer display a stale WAN/ISP IP after the public address changes.

• FIXGateways and routers no longer show an old WAN/ISP IP after the public lease changes — the superseded address is retired automatically so only the current WAN IP is displayed.

Topology accuracy overhaul: devices now map to the correct switch and port, wireless clients are no longer drawn as wired, stale links from recabling age out on their own, and gateways sit at the top of the tree with their real ports.

• IMPDevices now map to the correct switch and port through evidence-ranked edge arbitration, so the topology reflects how the network is actually cabled.
• FIXWireless clients are no longer shown as wired connections.
• FIXStale links left over from recabling now age out automatically instead of lingering on the map.
• IMPGateways and routers sit at the top of the topology tree and display their real ports and connected-device details instead of virtual interfaces.

Fix subnet dropdown not refreshing in alert rule modal on subsequent opens.

• FIXThe subnet dropdown in the alert-rule modal now refreshes correctly each time the modal is reopened.

Alerting polish and reliability improvements across the alert-rule workflow.

• IMPRefined the alert-rule creation flow and subnet selection.
• FIXResolved several edge cases in modal state handling.

Hardening pass on authentication and account security.

• NEWTwo-factor authentication (TOTP) with authenticator-app enrolment via QR code.
• IMPImproved user management — roles, disabling accounts, and forced password changes.
• SECAdditional rate-limiting and session hardening.

Deeper vendor integrations and infrastructure tracking.

• NEWFirst-class vendor configuration for UniFi, Cisco Meraki and Palo Alto (PAN-OS).
• NEWManagement view for domains, SSL certificates and license keys with WHOIS/TLS expiry checks.
• IMPEncrypted-at-rest storage extended to all vendor API keys.

Topology, inventory and the in-browser console.

• NEWInteractive topology with LLDP/CDP/ARP correlation and an STP/RSTP overlay.
• NEWIn-browser SSH/Telnet web terminal launched from any device's detail view.
• IMPLive front-panel port maps for switches via SNMP.
• IMPCSV export across inventory, ports and findings.

Vulnerability scanning and smart alerting.

• NEWContinuous vulnerability scanning with CVE matching from the National Vulnerability Database.
• NEWConfig audits and default-credential checks, scored by severity.
• NEWSmart alerting over Email, Slack and Discord with automatic resolution.

The self-hosted foundation.

• NEWAutonomous subnet discovery with scheduled, per-subnet scans.
• NEWDevice fingerprinting over SNMP — make, model, serial, OS and open ports.
• NEWEncrypted credential vault and bcrypt-hashed, role-based logins.
• NEWOne-line installer with checksum verification and a systemd service.