What’s Changed with This Release:

What’s New:

  • Added agentic AI orchestration framework. 
  • Added several types of Agent Ensembles
  • Implemented several additional analyses and tools to support agentic analysis
  • Added support for large project uploads and cross-file investigations
  • Added integration with GitHub and GitLab
  • Added LLM provider integration
  • Added notification sinks framework

What’s Updated:

  • Refactored the analysis orchestration engine
  • Completely redesigned UI/UX in be more intuitive
  • Improved the speed and accuracy of several pre-existing analyses
  • Improved user registration system

What’s New:

  • Added agentic AI orchestration framework.  Agents can perform analyses, use tools, detect vulnerabilities, etc.
  • Added several types of Agent Ensembles, which determine how sub-agents collaborate on tasks like planning and execution. Added ensembles include the Analysis Agent, Chat Agent, Task Orchestrator, Triage Agent, Symbolic Execution, etc
  • Implemented several additional analyses and tools to support agentic analysis, including read_file, search_file_content, tree, ghidra_decompile_function, ghidra_list_functions, ghidra_get_callers, ghidra_get_callees, etc.
  • Added support for large project uploads and cross-file investigations (e.g., supporting >1000 files in a single project under analysis).
  • Added integration with GitHub and GitLab, including the ability to clone/analyze repositories and create version control event triggers that automatically start analyses (e.g., in response to a new commit, new pull/merge request, etc.).
  • Added LLM provider integration supporting both Ollama and OpenAI models/APIs.
  • Added notification sinks framework, supporting automated Email, Slack, and/or POST request notifications whenever a vulnerability is discovered.

What’s Updated:

  • Refactored the analysis orchestration engine, which now starts analyses significantly faster and is capable of supporting more concurrent analyses.
  • Completely redesigned UI/UX in be more intuitive. The new UI/UX supports improved analysis and vulnerability management, multi-user collaboration, DevSecOps integration, search functionality, notification management, user account security, etc.
  • Improved the speed and accuracy of several pre-existing analyses, including symbolic execution, CVE detection, CWE detection, embedded keys detection, etc.
  • Improved user registration system, including user invites, ability to change usernames, ability to change passwords, ability to toggle multi-factor authentication, etc.