Changelog

Release history and version notes

v2.0.0

Latest July 4, 2026
  • added Multi-identity access control scanner (BOLA/BFLA) -- captures two or more authenticated sessions and detects broken tenant/object isolation and cross-identity writes
  • added Browser-driven session capture for form and SSO/OAuth logins (WorkOS, Auth0, Okta)
  • added API surface discovery via OpenAPI/Swagger ingestion, GraphQL introspection, and JS-bundle endpoint mining
  • added Out-of-band collaborator support for blind SSRF, XXE, and command injection
  • added Scope engine blocking private/loopback/cloud-metadata targets by default
  • added Run manifest, structured JSON logging, and scan resume/checkpointing
  • added Redesigned HTML/PDF/JSON reports with OWASP Top 10 coverage grid and auto-generated proof-of-concept requests
  • fixed Reflected XSS false-positive on encoded reflections
  • fixed Blind command injection now requires a proportional two-probe timing confirmation
  • fixed JWT forgery checks now require a reject-invalid-token oracle before trusting a 200 response
  • security Bumped cryptography and lxml to patch two high-severity CVEs

v1.0.0

March 19, 2026
  • added Initial public release with 26 scanner modules
  • added Multi-LLM AI engine supporting Claude, GPT-4, Gemini, and Ollama
  • added Five scan profiles: quick, standard, deep, stealth, and API-only
  • added Professional report generation in HTML, PDF, and JSON formats
  • added AI-powered false positive validation
  • added Attack path analysis and mapping
  • added Smart context-aware payload generation
  • added Full OWASP Top 10 (2021) coverage
  • added Executive summary generation with business impact analysis

v0.9.0

Beta March 5, 2026
  • added Beta release with 22 scanner modules
  • added Claude and GPT-4 AI integration
  • added HTML report generation
  • fixed SQL injection scanner false positives on PostgreSQL backends
  • fixed SSL/TLS scanner timeout on slow connections

v0.5.0

Alpha February 15, 2026
  • added Alpha release with 15 core scanner modules
  • added Basic AI analysis with Claude
  • added Command-line interface
  • added JSON output format