RedSheep SecurityRedSheepSecurity

What's New

Latest updates, features, and improvements to RedSheep Security.

security

Security Hardening

  • Added Content-Security-Policy header across all pages
  • Implemented API rate limiting middleware (read + write buckets)
  • Sanitized all database-sourced URLs to prevent XSS via javascript: protocol
  • Added image magic-byte validation on cyber-trends publish endpoint
  • Enforced 5MB body size limit on POST endpoints
feature

Tracker Hub & Live Stats

  • New Tracker Hub page with live overview stats across all 4 trackers
  • Homepage now shows live threat stats, trending exploits (EPSS), and recent activity feed
  • Added EPSS trending exploits widget showing top 5 CVEs by exploit probability
  • Unified recent activity timeline merging CVE, ransomware, and conflict data
improvement

SEO & Feeds

  • Dynamic XML sitemap with all static pages and cyber trend posts
  • RSS 2.0 feed at /api/feed/rss with Atom self-link
  • OpenGraph and Twitter Card metadata on all pages
  • Per-page SEO metadata for all tracker and content pages
  • robots.txt with API route exclusion
improvement

UI & Navigation

  • Added Threat Intel and Projects navigation tabs
  • Sidebar layout for Ransomware Tracker, Conflict Tracker, and Threat Actor Database
  • Custom 404 page with navigation links
  • Footer updated with all tracker links, RSS feed, and sitemap
  • CVE detail pages now link to MITRE and CWE definitions
feature

Threat Actor Management

  • Standalone HTML tool for CRUD operations on threat actors
  • DELETE endpoint for threat actors API with token auth
  • Threat Actor detail pages with techniques, tools, and targeting data
fix

World Map Fix

  • Replaced hand-drawn continent SVG paths with Natural Earth TopoJSON data
  • Equirectangular projection with Ramer-Douglas-Peucker simplification (6.4KB)
  • Fixed 'oil stain' rendering artifacts on ransomware tracker map