The 2025.08.R1 release of Bunkai continues our mission to provide seamless, scalable, and security-first assessment tooling for OT/ICS/IoT environments. This update brings a new network scan with proxy, SIM card lifecycle integration, and protocol-level test coverage — all while laying foundational work for future plugin extensibility.
These increase our coverage of different test plans, like the Cyber Resilience Act (CRA), ETSI EN 303 645, or Radio Equipment Directive (RED EN 18031-1/- 2/-3)
🌐 Expanded Communication Matrix & Proxy Flow Testing
- Server Name (SNI) Support: The communication matrix now supports server_name fields with validation (RFC1035, 255 characters) and persistence across services. These can also be seen in the reports and throughout the UI
- New proxy scan and plugins: We’ve introduced and new network scan type that allows you to forward selected traffic into a proxy. The protocol-level plugins, unleash the power of this scan type:
- PTLSVC – Proxy TLS Validate Certs: detect if any TLS clients in the DUT are validating certificates (or accept self-signed certificates)
- PTCTP – Proxy Clear-text Protocols: checks for the use of clear-text protocols.
- PCTTI – Proxy Capture Controlled TLS Traffic interception: this plugin provides insights into the encrypted streams, including PCAP and a matching SSLKEYLOGFILE to be able to decrypt the traffic and continue your analysis.
📡 SIM and Add-on enhancements
In this release we continue our journey with our Global IoT SIM cards and subscription add-ons- Introducing the SIM card starter pack: your first two SIM cards are free – you only cover the shipping. We streamlined the ordering process to make it as simple as possible.
- SIM card management enhancements including schema support for usage stats (total data, spent data, sms, etc.) and lifecycle states.
- Order & Add-on Flexibility: support for multiple delivery providers and quantity-based add-ons, enabling scalable connectivity provisioning.
📈 Enhanced Reporting, Security, and UX
- Front-End Usability: Persistent test scope state, improved modals, and multi-tab flows streamline day-to-day testing activities. We have added refresh buttons to multiple screens to be able to reload the data without losing filters.
- CCIP- Detect insecure cipher suites in ClientHello: this new plugin provides a detailed analysis of all the TLS ClientHello packets. It creates profiles based on their configuration and provides actionable insights by highlighting
🔎 Explore What’s New
Bunkai 2025.08.R1 is now live for our closed beta users. If you’re already a customer, explore the new capabilities in your dashboard, or get in touch with our team to see how these updates can improve your assessment workflows.