Release Note 4.16.0

Overview

This document covers the release information for the Cavisson Product Suite version 4.16.0. It provides a high-level overview of the changes introduced since the previous release. For the latest information on new features, enhancements, bug fixes, and support advisories, please refer to the relevant sections on the Cavisson website.

New and Enhanced Features

Common UI

UI Menu Redesign

Redesigned the application menu to provide a more organized and intuitive navigation experience. The new UI consolidates application features into clearly defined menu categories, making it easier for users to access and navigate across different monitoring and analysis capabilities.

Enhancements:

  • Dashboard: Provides access to dashboard-related capabilities.
  • Environments: Provides options for managing and monitoring application environments.
  • Validate: Includes Performance Testing, Functional Testing, and other validation capabilities.
  • Readiness: Includes Readiness-related assessments and capabilities.
  • Observe: Includes APM, RUM, Logs, and other observability capabilities.
  • Insights: Includes analytics, reports, and other insight-related capabilities.
  • Simplified the menu structure to provide quicker access to commonly used features.
  • Improved navigation consistency and overall usability across the application.

Quality Gates

Introduced Quality Gates to enable policy-driven quality validation for CI/CD pipelines before release or deployment.

Enhancements:

  • Added a centralized interface to configure and manage Quality Gates for pipeline validation.
  • Added support for defining pass/fail rules using configurable thresholds across multiple quality domains.
  • Added support for quality metrics from Functional Testing, Performance Testing, Code Coverage, Code Quality (Static Analysis), Security Testing, Accessibility Testing, Unit Testing, Mutation Testing, and Reliability & Resilience.
  • Added support for threshold-based, count-based, trend-based, and weighted scoring rules for quality evaluation.
  • Added support for evaluating all configured Quality Gate rules during pipeline execution using an All Rules Must Pass policy.
  • Added support for generating a consolidated Quality Gate evaluation report with PASS or FAIL status for each pipeline run.
  • Added support for automatically failing the pipeline when configured Quality Gate conditions are not satisfied.
  • Added support for integration with multiple quality analysis tools through a unified metric evaluation framework.
  • Added support for SonarQube Quality Gates, including metrics such as Bugs, Vulnerabilities, Code Coverage, Code Smells, Technical Debt, Reliability, Maintainability, Security Rating, and Duplicated Code.

SLO 

Enhanced SLO Filter

Enhanced the SLO Filter by displaying it in the left panel. Any changes made using the SLO Filter are now directly reflected in the SLO List, enabling users to view the filtered SLOs without navigating to a separate filter interface.Added a Show/Hide button to control the visibility of the left panel. 

SLO  Views

Enhanced SLO Views to allow users to save and reuse applied filter configurations. The predefined filter tags require users to provide values, and the SLO list is filtered based on the specified values. Saved filter configurations are displayed in SLO Views.Users can filter the SLO list based on the selected Group By tag. 

Report

Email Settings

Enhanced Email Settings with a predefined email body that automatically includes report details such as Dashboard Name, Applied Preset, Schedule, and Report Name when sending scheduled dashboard reports. Enhanced Email Settings with a predefined email body that automatically includes report details such as Dashboard Name, Applied Preset, Schedule, and Report Name when sending scheduled dashboard reports.

Custom Report Name

Enhanced report generation to allow users to provide a custom Report Title at runtime before generating the report. The specified Report Title is displayed in bold in the generated report instead of using the default dashboard name with a timestamp.

Available Report List

The Available Report List has been redesigned in the new UI to provide a cleaner and more streamlined view of generated reports. The report list now displays key report information in a simplified format, making it easier for users to view and manage available reports.

Monitors

Net Flow Integration with NFDB and Favourites Dashboard

Added NetFlow integration with NFDB, enabling network flow data to be collected, stored, and analyzed for improved network performance visibility. Also added support for bundling the Favourites dashboard for easier dashboard management and deployment.

Import/Export Monitor Configuration

Cavisson now supports importing and exporting monitor configurations, allowing users to easily back up, migrate, and replicate monitor configurations across different environments.

New Integrations

Jenkins Native Integration

The Jenkins Native integration lets you connect your organization’s Jenkins CI/CD server directly to Cavisson from the Integrations module, without any external configuration files or manual setup. We’ve built a guided Add/Edit dialog that captures the essentials  Name, Description, Jenkins URL, and credentials  validates them, and securely stores the connection. Because only one Jenkins Native integration can exist at a time, there’s no risk of conflicting or duplicate configurations pointing at different servers. An Enable/Disable toggle lets you pause the integration instantly during maintenance or credential rotation, without losing your saved configuration and having to re-enter everything later. Overall, this gives teams a single, reliable, always-current connection point between Cavisson and Jenkins, reducing setup friction and the chance of misconfiguration.

Artifact Keeper Native Integration

The Artifact Keeper Native integration connects Cavisson to your organization’s Artifact Keeper server, enabling native artifact management directly within the platform. We’ve implemented a straightforward Add/Edit configuration flow. Name, Description, server URL, and credentials  with the same secure storage and validation used across all Cavisson integrations. Like Jenkins Native, it’s capped at a single configuration, so there’s always exactly one authoritative Artifact Keeper connection rather than several that could drift out of sync. The Enable/Disable toggle gives administrators a quick, non-destructive way to suspend the integration when needed and re-enable it later with the configuration intact. This keeps artifact management centralized, consistent, and easy to maintain as part of your broader CI/CD workflow.

HashiCorp Vault Native

 Native integration with HashiCorp Vault enables secure management and retrieval of secrets used by Cavisson components and deployment workflows.

Integrations & Security Infrastructure

  • Cavisson Jenkins Plugin Updates: Adds support for enforcing Quality Gates (Code Coverage, SAST, DAST, SCA) and automated test failure analysis within Jenkins build pipelines.  
  • Secrets Management (Azure & HashiCorp Vault): Integrates support for both Azure Vault and HashiCorp Vault for secure secret management, allowing AI and Azure DevOps configurations to fetch keys securely without displaying plain-text credentials.  

Authentication Options

SSO  OIDC

 Added support for authentication through an OpenID Connect (OIDC) identity provider, enabling users to access the application using token-based Single Sign-On (SSO).

Local Logi

 Supports standard login using credentials stored directly in the system.

Two-Factor Authentication (2FA)

 Enhanced the 2FA experience with UI improvements and a Rescan option, providing an additional verification step after password-based login

Containerized Services – Feature & Container Management

Provides a centralized view of containerized services and their associated product features with two levels of management. Admin users can manage services at the container level, including start/stop operations, while normal users can enable/disable individual features. The system automatically starts or stops containers based on whether they are required by any enabled feature, optimizing resource utilization and simplifying service management. 

Performance and Functional

 Auto Correlation & Auto Parameterization

A new Auto Correlation & Auto Parameterization option has been added to the test case UI. It analyzes the network logs captured during recording to automatically identify dynamic values and generate the required search/JSON/XML parameters for correlation. It also detects request fields that can be parameterized (such as name, email, address, etc.) and automatically links them with datasets or auto-generated test data.

Goal-Based Scenario (Single Node)

The new Goal-Based Scenario allows users to define their test objective in terms of Mean Users, Hit Rate, or URL/Page/Transaction throughput. NetStorm automatically determines the required session rate to achieve the specified goal. It starts with a discovery phase, gradually tunes the load, and once the target is consistently achieved, continues the test for the configured duration.

Automatic Test Suite Creation Using Code Mapping or Tags

For applications integrated with Cavisson APM, test cases can be mapped to the source code. Based on a Merge Request/Pull Request or Commit ID, the system analyzes the code changes and automatically creates a relevant test suite. Test suites can also be generated using code mappings or tags.

Reimagined RunLogic for Visual Performance Test Scripting

RunLogic has been completely re-engineered into a modern visual scripting engine that enables users to create realistic performance test scenarios using a drag-and-drop flow builder. It supports conditions, loops, break, continue, return, weighted branching, nested transaction groups, and control logic at flow, page, and step levels. Users can also add transactions directly within the builder and choose between Basic and Advanced modes for parameter-driven or custom expressions with NS-variable support. A centralized condition panel simplifies the management of expressions and NS-variable references. 

Git Status Visibility

A new Git Status column has been added to the test view, allowing users to quickly identify the status of each test, such as Modified, Updated, or New.

Security & Vulnerability Management

  • Dashboard Support for SAST (Static Application Security Testing): Integrates static code analysis directly into the dashboard with embedded reporting views and pipeline-initiated SAST scan results.  
  • Cavisson Code Analyzer (VSCode Extension): Provides real-time static code and security scanning within VSCode, enabling developers to identify bugs, code smells, and security vulnerabilities directly in their local editor.  
  • Dashboard Support for DAST (Dynamic Application Security Testing): Enables automated, dynamic vulnerability testing for Kubernetes environments, delivering centralized risk visibility and severity reports.  
  • Dashboard Support for SCA (Software Composition Analysis): Integrates continuous security scanning to generate SBOMs and flag third-party open-source vulnerabilities across services.  

Accessibility Testing

  • Accessibility Analyzer (VSCode Extension): Runs continuous, real-time linter checks inside VSCode to catch up to 50% of UI accessibility issues (such as color contrast, missing alt text, and heading structure) during development.  
  • Azure DevOps (ADO) Pipeline Plugin: Automatically audits code during build and test runs in ADO pipelines to enforce digital compliance with zero false positives. 

AI-Driven Test Analysis & Automation

  • “Analyze Failure” Interactive AI Assistant: Launches an interactive, agentic chat interface upon test failure to provide root-cause analysis, guide developers through code fixes, and assist in opening Pull Requests.  
  • CI/CD Pipeline Failure Analysis: Runs autonomous agents in command-line mode during CI/CD execution to diagnose test failures, highlight affected files, and present suggested code fixes.  
  • User-Prompt Support for Test Case Generation: Allows users to include custom prompts for all types of AI based test case generation to give the AI engine better context.  

Security & Vulnerability Management

  • Dashboard Support for SAST (Static Application Security Testing): Integrates static code analysis directly into the dashboard with embedded reporting views and pipeline-initiated SAST scan results.  
  • Cavisson Code Analyzer (VSCode Extension): Provides real-time static code and security scanning within VSCode, enabling developers to identify bugs, code smells, and security vulnerabilities directly in their local editor.  
  • Dashboard Support for DAST (Dynamic Application Security Testing): Enables automated, dynamic vulnerability testing for Kubernetes environments, delivering centralized risk visibility and severity reports.  
  • Dashboard Support for SCA (Software Composition Analysis): Integrates continuous security scanning to generate SBOMs and flag third-party open-source vulnerabilities across services.  

Accessibility Testing

  • Accessibility Analyzer (VSCode Extension): Runs continuous, real-time linter checks inside VSCode to catch up to 50% of UI accessibility issues (such as color contrast, missing alt text, and heading structure) during development.  
  • Azure DevOps (ADO) Pipeline Plugin: Automatically audits code during build and test runs in ADO pipelines to enforce digital compliance with zero false positives. 

NetDiagnostics 

Spring Framework Migration and Vulnerability Fixes

Migrated the platform from Spring 2.4.9 to 3.5.14, moving the stack onto a currently supported baseline. The upgrade also remediates known security vulnerabilities reported against the earlier dependency set.

OpenTelemetry Trace and Span Format on DDR Screens

Enhanced all DDR screens to read and render trace and span data in OpenTelemetry format, providing the same drill-down and correlation experience for OpenTelemetry-sourced transactions as native NetDiagnostics traces.

OpenTelemetry Support in Application Agents

Added OpenTelemetry protocol support to the Java, Node.js, .NET, and Python agents, enabling them to emit traces and logs in OpenTelemetry format.

OpenTelemetry Protocol and Ingestion in NF DB

Added OpenTelemetry protocol support to NF DB for direct ingestion of OpenTelemetry traces and logs, allowing telemetry from NetDiagnostics agents and third-party OpenTelemetry sources to be stored and queried in a single data store.

Application Metadata Capture in Node.js Agent

Enhanced the Node.js Agent to collect application metadata, including the Node.js runtime version, installed npm packages and versions, environment variables, and other runtime attributes.

Cloud Provider Support Across Application Agents

Extended application agents to support major cloud providers, including Azure, AWS, and GCP, providing consistent deployment and monitoring across hosting platforms.

SQL Query Sanitization and Sensitive Data Masking in .NET Agent

Added SQL query sanitization to the .NET Agent to mask sensitive data in captured SQL statements while preserving query structure for performance analysis.

ND–NF Integration for Direct Log Forwarding

Enabled Java and Node.js agents to send application logs directly to the NF server, removing the intermediate collection hop and making logs available for search and correlation sooner.

gRPC Library Monitoring

Added gRPC monitoring support to the Java, Node.js, and Python agents, enabling tracing of gRPC client and server calls along with performance metrics as part of the end-to-end transaction flow.

Inbound and Method Failure Havoc in Node.js Agent

Enhanced Node.js Agent Havoc with inbound request failure and method-level failure injection for resilience testing at both entry-point and individual method levels.

New Havoc Support and Enhancements in Application Havoc

Added thread leak and CPU burst Havoc to the Python and .NET agents. Enhanced existing delay Havoc with tumble-up and tumble-down profiles for gradually increasing or decreasing injected latency.

New Library Support

Extended instrumentation coverage to additional frameworks and libraries, including Uvicorn for Python, enabling applications built on these libraries to be monitored without additional configuration.

Cloud Cost

Cloud Cost Management

Added Cloud Cost support to visualize cloud spending and provide recommended actions to help users reduce monthly cloud costs. Users can review the recommendations and trigger the corresponding actions directly to optimize cloud spend.

Test Data Management (TDM)

TDM – Synthetic Data Generation

A redesigned Test Data Management module for configuring and generating synthetic test data with saved dataset configurations, data previews, and runtime execution logs. Supports multiple data generators and multi-DB/cross-DB data generation while maintaining relationships across databases. Enables seamless data conversion between CSV/SQL/Schema files and databases.

TDM – Data Subsetting

A redesigned Test Data Management module for creating production-like subsets of data with saved dataset configurations and data previews. Supports multi-DB and cross-DB subsetting while preserving relationships and dependencies across databases. Provides a flexible and reusable approach for generating smaller datasets for testing and development.

TDM – Data Clone / Virtualization

A new capability to clone or virtualize production database data for testing and development environments. It supports subsetting and anonymization of production data or creation of synthetic data snapshots before cloning. Copy-on-Write virtualization provides developers with production-grade datasets while reducing storage and data-copy overhead.

Agentic AI Features

Code-to-API Test Case Generation

Enhanced API test case generation with code intelligence to provide deeper understanding of application behavior and API workflows. The system analyzes source code using AST-based code analysis and passes the extracted code structure and context to AI. This enables generation of more comprehensive API test cases covering different code branches, logic paths, and edge cases beyond Swagger-based API definitions.

Agentic AutoRCA

Enhanced the existing AIOps Root Cause Analysis capability from a deterministic, rule-based approach to an agentic AI-driven architecture. Multiple AI agents collaboratively analyze anomalies, alerts, metrics, and behavioral patterns to investigate potential causes. The system identifies the most prominent root cause and provides actionable recommendations for resolving or mitigating the issue.

Common Enhancements

Cavisson Jenkins Plugin

A new Cavisson Jenkins Plugin has been introduced to simplify CI/CD automation. It supports:

  • Running test cases and test suites
  • Test failure analysis
  • Code coverage execution and analysis
  • AI-assisted test case generation using LLMs
  • Security testing, including SAST, DAST, and SCA scans
  • Applying Quality Gates to Code Coverage, SAST, DAST, and SCA results
  • Analyzing failed test cases and generating Root Cause Analysis (RCA) along with automated code-fix suggestions
  • Quality Gates: Quality Gates currently support Code Coverage, SAST, DAST, and SCA. Accessibility Testing and Mutation Testing are not currently part of Quality Gates.

CI/CD Pipeline Integration

Cavisson now provides built-in CI/CD pipeline integration powered by Jenkins. Users can trigger and monitor pipeline executions directly from the Cavisson platform and seamlessly access pipeline artifacts such as execution logs, generated test cases, and reports.

Enhanced Accessibility Test Reporting

Improved Accessibility Testing reporting through Azure DevOps Pipeline, providing enhanced visibility into accessibility test results and making it easier to review and track accessibility issues. 

Artifact Keeper Integration

Cavisson is now integrated with Artifact Keeper, enabling developers to upload and manage artifacts generated during CI/CD pipeline execution directly within the Cavisson platform.

Kubernetes Deployment

Cavisson can now be deployed seamlessly in Kubernetes environments using Helm charts, making installation and lifecycle management simpler and more efficient.

Angular Migration from 9 to 17

Migrated the application from Angular 9 to Angular 17, improving framework compatibility, performance, security, and support for modern web capabilities.

JDK Support up to 25

Enhanced the platform Supports JDK versions from 8 up to 25.