Skip to content
ExfilPath

Changelog

What shipped, and what is next.

Every detector and engine change is recorded here, along with what is coming next.

  1. October 2026

    Platform

    New website, Free plan and a public example report

    • The Free plan is free forever and includes the full browser analyzer.
    • Developer, Team and Business plans are published and coming soon.
    • The analyzer page now shows a complete example report, generated by the engine.
    • Documentation reorganized, with a preview of the command-line runner and its flags.
    • Redesigned website.

  2. August 2026

    Engine

    Accounts and stricter control matching

    • Sign-in and sign-up for the analyzer, with Google or email.
    • Barrier controls such as approval gates and sandboxes now close a route only when they handle the value being tracked. An allowlist elsewhere in the same function no longer marks a live route as closed.
    • The analysis engine loads on demand, so the marketing site stays light.

  3. July 2026

    Engine

    Path analysis 0.1.0

    • Static path analysis for TypeScript, JavaScript and Python.
    • 46 detectors covering input surfaces, sensitive actions, controls and model boundaries.
    • Path tracing across assignments, helper functions and files.
    • Model calls treated as a trust boundary that raises severity.
    • Analysis for single files or whole repositories, with content-based language detection.
    • Fix guidance, OWASP LLM Top 10 and CWE mapping on every finding.
    • JSON and written report export.