Version 1.7 (October 2026)
New features
- Redesigned dashboard: a one-screen overview that leads with what needs your attention — a 30-day risk trend, what's new since your last scan, a "Fix first" list, and cards you can rearrange by dragging them.
- Repository workspace: each CyfroCode repository now has its own workspace that maps its branch history, shows every open branch's path to main, and lists pull requests with their checks.
- Branch and pull request scans: start a scan on a branch, pull request, or commit, and see how each finding's status differs from one branch to another.
- Scan automation rules: choose when scans run on their own — on new commits, on pull requests, or on a nightly schedule — for a repository or a whole account group.
- Scan comparison: see what a scan found compared with the scan before it.
- Excel export for code findings: download findings as a spreadsheet from the findings table or a repository page.
Improvements
- Refreshed portal design: a cleaner sidebar with the CyfroSec logo and consistent icons, and pages that use the full width of your screen.
- Faster dashboard and topology: both load faster and stay quick when you come back to them.
- Reports: filter by row type and vulnerability status, see every place an issue was found, and see why a finding isn't counted — for example, a kernel that is installed but not running.
- Scans: filter the scans list by how each scan was started.
- Consistent numbers: every figure on the dashboard is counted the same way everywhere and links to the list behind it.
- Notifications: a redesigned inbox, where each notification takes you straight to the item it's about.
- Your data and model training: data from paid plans is used to improve models only if you separately opt in.
Fixes
- The dashboard no longer times out on accounts with many hosts and findings.
- Spreadsheet exports always write scanned text as plain text, so it can never run as a formula.
- Add-ons you have bought are kept when you change plans.
- The topology minimap displays again, and the online agent count matches the agents that are actually connected.
- When a fingerprinting scan fails, the dashboard names it instead of showing "nothing to triage".
- Clearer messages when a code scan fails.
- The agent setup form's Name and Location fields now line up.
Version 1.6 (October 2026)
New features
- CyfroPentest (preview): the foundation for AI-assisted penetration testing — passive, evidence-based reasoning over your scan results, available when enabled for your organization.
- AI Insights: generate executive summaries and security reasoning for scan results to prioritize risk remediation.
- Compliance Overview: track security posture with a new compliance dashboard featuring category breakdowns and control scoring.
- Privacy Manager: manage data subject access requests (DSAR) and privacy exports directly from the settings menu.
- Support Workspace: communicate with the security team through an integrated support ticket and conversation system.
Improvements
- Code Security: visualize complex vulnerability chains with an interactive Logic Map and evidence-backed reasoning.
- AI Assistant: enhanced reliability with improved model retry logic and a detailed process timeline for complex tasks.
- Organization Settings: updated subscription management and plan entitlement controls for better tenant oversight.
Fixes
- Signup now requires explicit agreement to the Platform Terms and Acceptable Use Policy, and links to the current legal pages.
Version 1.5 (August 2026)
New features
- Public Documentation: access a new searchable public documentation portal for platform guides and security compliance.
- Documentation Editor: manage and publish documentation pages directly from the admin panel with version history and draft support.
Improvements
- Compliance Overview: enhanced visibility into compliance scores and framework breakdowns on the dashboard.
- Agent Management: improved configuration and task tracking within the agent details view.
- Repository Connection: streamlined the process for connecting Bitbucket repositories for scanning.
Fixes
- Corrected data scope issues for support and endpoint configurations.
Version 1.4 (August 2026)
New features
- Encryption Management: added a new administrative workbench to monitor encryption status and manage security evidence.
Improvements
- Data Encryption: enhanced platform security by encrypting sensitive customer data at rest across billing, identity, and code security modules.
Version 1.3 (August 2026)
New features
- Website cookie consent: the public website now has a cookie consent banner with per-category controls. Analytics load only after you opt in, and you can change your choice anytime from the footer.
- Bitbucket Cloud: connect Bitbucket repositories for scanning and AI-assisted fixes, alongside GitHub.
- Guided remediation: when an automatic fix can't be generated safely, you now get clear step-by-step remediation guidance instead of a dead end.
- Re-run a fix: regenerate a patch attempt while keeping the history of previous drafts.
Improvements
- Announcement scheduling: announcement and maintenance banners now support one-time or recurring windows, with pause, resume, and quick-extend controls, plus a delivery history of every publish.
- Website footer: now shows the company registration details and quick links to the Privacy Policy, Terms of Service, and Contact.
- Clearer AI assistant status, with visible "Thinking…" and "Working…" indicators while it processes.
- Generated fixes are now restricted to approved files only, for safer automated patching.
Fixes
- Announcement banners now reliably disappear once their scheduled maintenance window ends.
Version 1.2 (July 2026)
New features
- Announcements & maintenance pages: admins can publish a site-wide announcement banner or a full maintenance page, with a draft-then-publish workflow.
- Business-logic analysis: detects logic-level vulnerabilities in Python and TypeScript, beyond traditional scanning.
- Smarter finding prioritization: more granular coverage reporting and clearer ranking so the findings that matter most surface first.
Improvements
- Redesigned patch review — edit any line inline, an embedded review timeline, and a clearer diff view with a legend.
- New metrics command center and refined filters in the code-security workbench.
- Friendlier messages when a fix produces no changes, or when an AI usage limit is reached.
- Recover a disconnected agent's identity without a full re-registration.
Fixes
- Resolved a cross-origin error that could cause contact and demo forms on the website to fail.
Version 1.1 (June 2026)
New features
- Security reports & quality gates: versioned analysis reports with automatic pass/fail release-readiness checks.
- AI Insights deep links: insight findings link straight to detailed reports, with automatic CVE cross-linking.
- Software bill of materials (SBOM): list and summarize dependency components, filterable by ecosystem, license, and type.
- Logic Map & code graph: automatic mapping of application routes, data flows, and architecture across frameworks.
- Scoped report exports: choose curated, raw, or all-inclusive data when exporting.
- CyfroCompliance drill-down: move from frameworks to individual controls and findings with supporting evidence.
- Inactive-user lifecycle: restore or anonymize disabled users and resend invitations.
Improvements
- Refreshed add-ons marketplace with a new hero, category filtering, and cleaner cards.
- Clearer notifications — customer-facing labels, richer context such as the agent or scan name, and a restyled alert experience. AI notifications are now "CyfroAI Insights".
- Richer dashboard previews for code security and compliance.
- Disabled scans can no longer be run by mistake, with clearer status indicators.
- Subscription management with grouped feature matrices and plan status.
Fixes
- Corrected the dependency-count wording on the SBOM tab.
- Completed scans no longer show stale progress details.
Version 1.0 (May 2026)
New features
- Plans & feature entitlements: granular control over which capabilities (AI modes, scanners, billing visibility, compliance) each plan includes.
- Scan targeting: run scans against specific branches or commits.
- Notification center & broadcasts: in-app notifications with admin broadcast messaging.
- SIEM ingestion & search: a dedicated module for log ingestion and search.
- Guided signup: a multi-step onboarding wizard for your profile, organization, and team.
- Sales & demo intake: website contact and demo booking with automatic email confirmations.
Improvements
- Refreshed admin console with a new component library, sidebar, and command palette.
- Usage limits grouped into clear, categorized views.
- AI cost shown as a usage percentage rather than raw figures.
- Password-first signup with a direct password-setup step.
- Data-preserving agent deletion, so historical data stays intact.
- New platform-health monitoring and dashboards.