Changelog
What shipped, and what is next.
Every detector and engine change is recorded here, including what is currently in progress on the way to general availability.
- 0.9Early access
Path analysis, generally usable
- Static path analysis for TypeScript, JavaScript and Python.
- 46 detectors covering input surfaces, sensitive actions, controls and model boundaries.
- Path tracing across assignments, helper functions and files.
- Model calls treated as a trust boundary that raises severity.
- Analysis for single files or whole repositories, plus pipeline analysis with severity thresholds.
- Fix guidance, OWASP LLM Top 10 and CWE mapping on every finding.
- JSON and written report export.
- NextIn progress
On the way to general availability
- Pull-request comments showing new and closed paths for a diff.
- SARIF export for code scanning.
- Shared report history and organisation-wide trends.
- Custom detector packs for internal frameworks.
- Java and Go support.