Release Summary This update introduces charts for our new IR Program and Penetration Testing modules, as well as more reliable handling when Central Command links are tapped from within emails on your mobile device. High-level Release Notes - IR Program • Central Command Mobile now supports the new IR Program module with dashboard charts showing your IR Readiness scores, notifications to keep you informed, and access to your incident response plan and security team! - Penetration Testing • Central Command Mobile now supports the new Penetration Testing module! There are new dashboard charts showing your unified penetration testing score, project objective success, and a breakdown of findings by severity, along with new notifications to keep you informed. - Platform • Central Command links in emails will now open in Central Command Mobile more reliably, rather than redirecting you to the web platform. • Bug fixes, performance improvements, infrastructure updates, and code to support future features and functionality.

Release Summary This update introduces support for new notifications, enhanced filters for escalations, and updates to how deactivated users are handled. High-level Release Notes - EscalationIQ -- EscalationIQ now supports the following new filters when viewing escalations • Whether an escalation is abandoned • Additional options for when an escalation was created • Timeframe for when an escalation was closed • The star rating assigned to an escalation • Which feedback tag was assigned to an escalation • Whether the escalation was related to a threat hunt -- A new notification is now available when multiple escalations are assigned to you - TPRM -- New notifications are now available for the following actions • When a submitted assessment request is marked as an incomplete request • When Fortified’s assessment report is ready or has been updated • When a comment has been added to an assessment CAP item - Risk Assessment -- New notifications are now available for the following actions • When multiple document request items have been assigned to you • When your Fortified Assessor has accepted a document request item - Platform -- For increased security, when a user is deactivated, their mobile session is now invalidated more quickly -- Increased the supported maximum number of characters for the username field on the login screen to accommodate more lengthy usernames -- Bug fixes, performance improvements, infrastructure updates, and code to support future features and functionality

Release Summary This update brings enhancements to the EscalationIQ dashboard widgets as well as other UI improvements and infrastructure updates. High-level Release Notes - EscalationIQ • Added or updated the following widgets to the EscalationIQ section on the dashboard: • Average Escalation Rating • Open Escalations • Abandoned Escalations • Updated to the latest generation of EscalationIQ APIs - Platform • Bug fixes, performance improvements, infrastructure updates, and code to support future features and functionality

Release Summary This update brings enhancements to the EscalationIQ detail screen, attachment previews, and the closing feedback process. High-level Release Notes EscalationIQ • Added support for code syntax formatting, making code snippets much easier to read • Added the ability to preview attachments from within an escalation • Updated the design of the “Escalation Relationship Notes” for related escalations, making them collapsible to reduce the amount of screen real estate they take up when you’re not reading them • Updated the “swipe to delete a comment” functionality to be more reliable and a better experience • Updated the design of the comments tab for a better user experience • Resolved an issue where acknowledging an escalation would cause the entire escalation to reload • Resolved an issue where the “True Positive” escalation feedback tag was displaying the wrong description Platform • Bug fixes, performance improvements, infrastructure updates, and code to support future features and functionality.

This update brings enhancements to the EscalationIQ detail screens and closing feedback process. • EscalationIQ - Updated the EscalationIQ detail screen for better readability and alignment with the web platform - Updated the closing feedback process to align required fields with the web platform - Resolved an issue where when adding a comment or adding closing notes/feedback, the text input field would be hidden behind the keyboard on iOS • Platform - Bug fixes, performance improvements, infrastructure updates, and code to support future features and functionality.

This update brings support for the new EscalationIQ module and UI updates for a better user experience. EscalationIQ • Added support for the new EscalationIQ module, which brings significantly enhanced escalation information, including new summary, threat intelligence, remediation actions, resilience recommendation, and timeline elements Platform • Improved the UI on the login screen to make more of the fields visible when the keyboard is active • Updated some of the buttons to our new rounded design language • Bug fixes, performance improvements, infrastructure updates, and code to support future features and functionality.

This version of the app brings updates to improve the UI experience and notifications. Platform • Added a push notification to notify you when there’s a new message waiting for you in a live chat session • Improved the transition animation between screens • Updated the “New App Update Available” notification that is displayed inside the app • Updated the escalations filter UI for better usability • Updated notifications for tenants that belong to an organization inside Central Command • Bug fixes, performance improvements, infrastructure updates, and code to support future features and functionality.

• Escalations • Resolved an issue where the in-app escalation notification banner wasn’t displaying properly. • Resolved an issue where the escalations list might not auto-update when a new escalation came in if you were already on the escalations tab. • Platform • Added the ability to easily mark all notifications as read. • This feature has been requested by clients and internal associates, and while it is a simple feature it makes the user experience much more enjoyable. • Updated the notifications count to only reflect unread notifications. • Bug fixes, performance improvements, infrastructure updates, and code to support future features and functionality.

This version of the app brings updates to the escalations and SIEM dashboard widgets, as well as support for some backend infrastructure changes for escalations. • Dashboard • Updated the wording on the “Escalations” widget to make it clearer as to what information this widget is conveying. • Updated the SIEM widget to reflect data from escalations themselves as opposed to alarm data and updated the UI to be clearer and align with other widgets. • Platform • Adding support for some backend infrastructure changes related to escalations. • Temporarily hiding the newsfeed while we troubleshoot some API issues with how articles are included in the newsfeed. • Bug fixes, performance improvements, infrastructure updates, and code to support future features and functionality.

This version of the app brings updates to the VTM dashboard widget as well as updates to the default sorting for escalations.   • VTM • Updated the VTM widget comparison functionality to better account for when there is no previous scan information. • Escalations • Updated the default sorting of escalations to be descending by time created as opposed to by severity than by time created. This will make escalations easier to find and digest.

This version of the app brings updates to the VTM dashboard widget as well as other bug fixes, UI updates, and performance improvements. VTM Updated the VTM section of the dashboard to use the new Vulnerabilities by Severity chart that includes the comparison by severity to the previous scan Miscellaneous Items - Updated how we request permission to send notifications to comply with changes required by Apple - Bug fixes, performance improvements, infrastructure updates, and code to support future features and functionality

This version of the app brings updates to notifications, the dashboard, live chat, and other bug fixes, UI updates and performance improvements. Notifications - Redesigned the way notifications for new escalations are displayed when you have the app open to make them more prominent and easier to take action on - Added a new notification in the app for when you have an active live chat session and receive a new message in the chat - Added a new notification icon animation to discretely inform you that a new notification has been received while you are using the app Escalations - Updated the default filtering criteria to include escalations in both "Open" and "In Progress" statuses - Updated the active filters section to show the "Clear" button at all times to make it easier to clear any applied filters Dashboard - Added a section for those clients with XDR services Miscellaneous Items - Resolved a bug where in certain cases not all escalation details were displayed in the mobile app, even though they were displayed in the web platform and in email notifications - Bug fixes, performance improvements, infrastructure updates and code to support future features and functionality

This version of the app brings updates to notifications, improvements for organizations with multiple tenants, the ability to request incident response assistance or open a support request, and many other bug fixes, UI updates and performance improvements. Notifications - Added additional notification filters for Risk Assessment, Risk Register and Report notifications - Added the ability to preview and download PDF reports from report notifications - Updated the notification screen to better accommodate notification filtering for users with multiple tenants within an organization - Updated the notification screens and icons to increase the detail and align the icons with each service - Added the ability to notify users inside the app when there are optional or mandatory updates to the Central Command mobile app Incident Response - Added the ability to request Incident Response assistance from within the app Organization Functionality - Added the ability for users with multiple tenants within an organization to start a live chat session from the organization level - Added the ability for users with multiple tenants within an organization to view information for services configured at the organization level Support - Added the ability for users to create support requests from within the app Miscellaneous Items - Added the ability to acknowledge the terms of use from the mobile app without having to log in to the application on the web first - Updated the login page to include a link to Fortified’s terms of use and privacy policy - Resolved an issue where a user could submit escalation feedback without actually providing feedback - Resolved an issue where FaceID would intermittently not work on Apple devices - Improved the UI in multiple areas to increase usability and readability - Bug fixes, performance improvements, infrastructure updates and code to support future features and functionality

- Added Privacy Policy Link in the App.