Product Update (August 2026)

01 / You can follow an attack path from entry point to affected asset

The Mobilization phase has a new Attack Path tab. It draws the route from entry point, through choke points, to the assets at risk, on one diagram.

Figure 1: The attack path screen (line thickness indicates impact magnitude)

A choke point is a spot where sealing one thing cuts several routes at once. Remediation tasks are ranked that way, so the order of work follows how much exposure each fix removes, not how many findings it closes. Selecting a row takes you straight to that task.

02 / We moved MCP to a hosted server and made it easier to use

Any MCP-capable AI tool can query PentaTrail and act on it. Ask what to fix first, and the risk bands, the hosts they sit on, and who owns them come back as one answer. Adding a domain to monitoring, archiving one, excluding an asset, closing a remediation task can be asked for the same way.

Table 1: What changed about using MCP

Approved tools can be revoked at any time from Settings in the admin console (admin.pentatrail.co).

All 17 tools are documented with a worked example on the MCP server page.

03 / Seven defects fixed

Table 2: What was going wrong

These updates are already available in your dashboard.