PAGES
Subscribe Get it delivered — five to ten releases we picked each morning from the tools you run, with every release in the issue on the web. Compare plans →

The Cyber Toolchain — issue 011, July 10, 2026

THE CYBER TOOLCHAIN NO. 011
Tail
THE DAILY RELEASE FIREHOSE
PUBLISHED JULY 10, 2026 · EVERY DAY
EDITIONS tail grep head ls diff uniq

The daily firehose — everything the toolchain shipped today, already filtered.

We read every release from the 1309 tools on our watchlist at the source — GitHub and GitLab release notes, vendor release pages and changelogs, project blogs and feeds, vendor press releases, and the source code behind the tag. Bug-fix-only releases and non-product newsroom noise are dropped; what's left is summarized down to the new capability, how to try it, and any screenshots or videos the release itself published. Every entry links to the sources it was built from.

VIEW
ISSUE VIEW scroll
ISSUE WIDTH reading width
Do you prefer scroll?
ADDITIONAL FILTERS 
$ tct list   # 12 tools matched
Offensive Security
◆  Reconnaissance & OSINT

ProjectDiscovery httpx-toolkit

Sources Release notes → v1.10.0 Notes

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

httpx v1.10.0 adds duplicate custom request headers, IP-aware deduplication, and automatic HTTP_PROXY env var support.

└──▷ GET THIS VERSION 
$ git clone --branch v1.10.0 https://github.com/projectdiscovery/httpx.git
# already have the repo? check out this version:
$ git checkout v1.10.0
└──▷ TRY IT
Inject multiple instances of the same header (e.g., to test WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. bypass or header-smuggling behavior) in a single httpx probe.
$ httpx -u https://target.example.com -H 'X-Forwarded-For: 127.0.0.1' -H 'X-Forwarded-For: 10.0.0.1' -sc -title
Route all httpx traffic through a proxy without adding the -proxy flag — useful in CI pipelines where the proxy is already set in the environment.
$ HTTP_PROXY=http://proxy.corp.example.com:8080 httpx -l targets.txt -sc -title -td
  • Supports sending duplicate custom request headers in a single request (e.g., multiple X-Forwarded-For values).
  • Adds IP-aware deduplication to filter results that resolve to the same IP across different hostnames.
  • Automatically honors HTTP_PROXY/HTTPS_PROXY environment variables when -proxy flag is not explicitly set.

3 details in Everything

Was this useful?
Application Security
◆  Secrets Detection & Management

Truffle Security trufflehog

Sources Release notes →Source code → v3.95.9 Notes Code

trufflehog discovers, classifies, and validates leaked credentials

TruffleHog v3.95.9 adds 7 new secret detectors and archived-repo exclusion for GitHub org scans.

└──▷ GET THIS VERSION 
$ git clone --branch v3.95.9 https://github.com/trufflesecurity/trufflehog.git
# already have the repo? check out this version:
$ git checkout v3.95.9
└──▷ TRY IT
Scan a GitHub org while skipping archived repos to reduce noise and scan time in large orgs.
$ trufflehog github --org=<your-org> --results=verified --exclude-archived
  • New OpenRouterOpenRouterA unified API gateway that routes requests to dozens of LLM providers under one endpoint, letting cyber tools swap or compare models without rewriting provider-specific integration code. detector identifies sk-or-v1- API keys and validates them against the OpenRouter API.
  • New New Relic Insights Insert Key detector matches NRII- prefixed keys with live verification via the Events API.
  • New Duffel Token detector for the Duffel travel API.
  • New Shippo detector for Shippo shipping API keys.
  • New IPinfo detector, now included in the default detector set.
+3 more show less
  • New improved Lob detector, now included in the default detector set.
  • New HashiCorp Vault batch token detector.
  • Adds --exclude-archived flag to skip archived repositories when scanning a GitHub org.

8 details in Everything

Was this useful?
Cloud & Container Security
◆  CNAPP

Rapid7 InsightCloudSec

Sources Blog / feed → changelog · Jul 9, 2026 Blog

Rapid7 InsightCloudSec is a cloud-native security platform that continuously monitors, detects, and automatically remediates misconfigurations and compliance risks across multi-cloud environments.

InsightCloudSec 26.7.7 adds new insights for Auto Scaling Groups, EBSEBSAmazon's block-storage service for EC2 instances, providing persistent network-attached volumes that survive instance restarts and can be snapshotted, giving cyber tools durable, scalable disk without managing physical drives. Volumes, and Security Groups, plus CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. Red Hat OpenShift Benchmark v1.9.0.

  • Adds new Insights covering Auto Scaling Groups, EBS Volumes, and Security Groups for expanded cloud misconfiguration detection.
  • Supports CIS Red Hat OpenShift Container Platform Benchmark v1.9.0 for container platform compliance assessments.

2 details in Everything

Was this useful?
Detection & Response
◆  Detection Engineering

SigmaHQ Sigma Rules

Sources Release notes → r2026-07-01 Notes

Main Sigma Rule Repository

20 new Sigma detection rules added, including TanStack supply-chain attack coverage, CVE-2026-41089, and NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent. hash leak via Curl.

└──▷ GET THIS VERSION 
$ git clone --branch r2026-07-01 https://github.com/SigmaHQ/sigma.git
# already have the repo? check out this version:
$ git checkout r2026-07-01
  • New rule: Detects APT malware signatures via antivirus telemetry.
  • New rule: Detects remote access tool signatures via antivirus telemetry.
  • New rule: Detects AppLocker 'application would have been blocked' audit events.
  • New rule: Detects Authencesn crypto module load via Modprobe as a copy-fail indicator.
  • New rule: Detects file uploads to file-sharing websites via Curl.
+19 more show less
  • New rule: Detects failed event log clearing via WMIWMIWindows Management Instrumentation, Microsoft's built-in framework for querying and controlling Windows system state. Cyber tools use it for remote execution, inventory, and event subscriptions without dropping files to disk. NTEventLogFile ClearEventLog.
  • New rule: Detects LSASS crash via Netlogon stack buffer overflow (CVE-2026-41089).
  • New rule: Detects Linux AF_ALG socket creation as a kernel crypto API exploit indicator.
  • New rule: Detects NTLM hash leakage via Curl NTLM authentication.
  • New rule: Detects new agent skills installation attempts via Node.EXE.
  • New rule: Detects process execution from shared memory directories.
  • New rule: Detects the RedTail cryptominer by its characteristic User-Agent string.
  • New rule: Detects registry enumeration via WMI StdRegProv.
  • New rule: Detects signed DLLs loaded with missing PE version metadata.
  • New rule: Detects TanStack supply-chain attack DNS indicators.
  • New rule: Detects TanStack supply-chain attack execution indicators on Linux.
  • New rule: Detects TanStack supply-chain attack execution indicators on Windows.
  • New rule: Detects TanStack supply-chain attack file creation indicators on Linux.
  • New rule: Detects TanStack supply-chain attack file creation indicators on Windows.
  • New rule: Detects Windows Defender being disabled via SystemSettingsAdminFlows.EXE.
  • Expanded ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead. coverage across dozens of existing rules by adding the *64a.exe OriginalFileName variant.
  • Broadened file-sharing domain lists across all download/transfer detection rules for improved exfiltration coverage.
  • Updated PowerShell WinAPI rule to include local shellcode injection patterns.
  • Updated WMI StdRegProv registry manipulation rule scoped to write methods only, reducing noise.

24 details in Everything

Was this useful?
Identity, Access & Data Protection
◆  Identity & Access Management

SPIFFE spire

Sources Release notes → v1.15.2 Notes

The SPIFFE Runtime Environment

SPIRE v1.15.2 adds SPIFFESPIFFEAn open standard, maintained by the CNCF, for assigning cryptographic identities to workloads in dynamic infrastructure so services can authenticate each other without passwords or static credentials. Broker, PQCPQCCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. curve support, per-caller rate limiting, and TLS-secured Prometheus metrics.

└──▷ GET THIS VERSION 
$ git clone --branch v1.15.2 https://github.com/spiffe/spire.git
# already have the repo? check out this version:
$ git checkout v1.15.2
  • Adds configurable JTI claim inclusion in JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store.-SVIDs at the entry level.
  • Introduces experimental per-caller rate limiting for the agent Workload API and Envoy SDS.
  • Adds TLS support for the Prometheus metrics endpoint using a SPIRE SVID, with an optional SPIFFE ID allowlist.
  • Adds optional verification of client certificate IPs in the x509pop node attestor.
  • Introduces the SPIFFE Broker endpoint and API.
+10 more show less
  • Adds disable_group_name_selectors option for the Windows workload attestor.
  • Adds log_selectors configuration item for the agent.
  • Supports two additional post-quantum cryptographypost-quantum cryptographyCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. (PQC) curves.
  • Adds tag-based key discovery support in the aws_kms Key Manager plugin.
  • Introduces a Logger service for spire-agent.
  • Adds configurable batch size for pruning attested nodes.
  • Deprecation warnings now use dedicated log markers for easier detection.
  • Post-quantumPost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. cryptography policy is now applied to the bundle endpoint and Prometheus server.
  • Attested nodes are now fetched in bulk, reducing database load in large deployments.
  • Optimizes MySQL list entries query to reduce database CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. usage under load.

15 details in Everything

Was this useful?
Build
◆  AI Coding Agents

Claude Code

Sources Release notes →Source code → v2.1.206 Notes Code

Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.

Claude Code v2.1.206 adds smarter /cd suggestions, /doctor CLAUDE.md trimming, broader push-remote support, and faster background agent upgrades.

└──▷ GET THIS VERSION 
$ git clone --branch v2.1.206 https://github.com/anthropics/claude-code.git
# already have the repo? check out this version:
$ git checkout v2.1.206
└──▷ TRY IT
Identify and trim bloated CLAUDE.md files before committing them — useful when onboarding a repo where the memory file has grown to repeat what the codebase already shows.
$ /doctor
Push and open a PR from a repo whose push remote is set to something other than origin (e.g. a fork workflow with remote.pushDefault=upstream) without manually allowing the remote first.
$ /commit-push-pr
  • Adds directory path tab-completion to /cd, matching the existing /add-dir behavior.
  • New /doctor check analyzes checked-in CLAUDE.md files and proposes trimming content Claude can already derive from the codebase.
  • Extends /commit-push-pr to auto-allow git push to the repo's configured remote.pushDefault (or the sole remote when only one exists), not just origin.
  • Enables /login to authenticate against Anthropic-operated public gateway endpoints.
  • EnterWorktree now prompts for confirmation before entering a git worktree that lives outside the project's .claude/worktrees/ directory.
+3 more show less
  • Background agents now upgrade to the latest Claude Code version immediately after an update, eliminating slow upgrade delays when you attach to a stale session.
  • Agents view status column now uses the full terminal width instead of truncating at 64 characters.
  • Adds Ctrl+X in the agents view to permanently remove a completed session; deleted background jobs now stay deleted across renders.

8 details in Everything

Was this useful?

OpenAI Codex CLI

Sources Release notes →Source code → rust-v0.144.0 Notes Code

Lightweight coding agent that runs in your terminal

Codex CLI v0.144.0 adds a writes approval mode, default MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. auth elicitation, Ultra concurrency warnings, and richer usage-limit credit details.

└──▷ GET THIS VERSION 
$ git clone --branch rust-v0.144.0 https://github.com/openai/codex.git
# already have the repo? check out this version:
$ git checkout rust-v0.144.0
└──▷ TRY IT
Run Codex in writes-approval mode to let it read files freely while pausing for confirmation only before any write action — useful for exploratory refactoring sessions where you want speed on reads but control on writes.
$ codex --approval-mode writes
  • Adds writes app-approval mode that permits declared read-only actions automatically while prompting only for write operations.
  • Enables MCP tool interactive authentication by default — no experimental opt-in required.
  • Adds runtime Codex authentication support for app-server hosts, with redirect to a hosted page on successful login.
  • Usage-limit reset credits now display their type and expiration date and let users choose which credit to redeem.
  • Warns when selecting Ultra reasoning model with high multi-agent concurrency that usage could increase rapidly.

5 details in Everything

Was this useful?

OpenHands

Sources Release notes → 1.11.0 3 releases · 2026-07-09 Notes LatestStable

OpenHands: AI-Driven Development

OpenHands 1.11.0 adds Agent Profiles, a Budgets dashboard, expanded usage monitoring, and email provider visibility.

└──▷ GET THIS VERSION 
$ git clone --branch 1.11.0 https://github.com/OpenHands/OpenHands.git
# already have the repo? check out this version:
$ git checkout 1.11.0
└──▷ HOW TO FIND IT
Verify your email provider is active before relying on agent notifications — check the surfaced SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure./Resend status in admin settings.
📍In the console, go to Settings › Email and confirm the SMTP or Resend provider status is shown as enabled.
Monitor team spend against budget limits to catch runaway agent usage before it exceeds allocation.
📍In the console, go to Dashboards › Budgets to view configured budget thresholds and current consumption, or go to Dashboards › Usage for expanded utilization metrics.
Apply a reusable agent configuration across enterprise projects to enforce consistent model and tool settings.
📍In the console (enterprise/SaaS), go to Settings › Agent Profiles, create or select a profile, and assign it to one or more projects.
  • Adds Agent Profiles on the cloud/SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. backend, enabling enterprise teams to define and manage reusable agent configurations.
  • Introduces a Budgets dashboard and expands the Usage Dashboard with new spend and consumption metrics.
  • New budgets and usage monitoring UI surfaces cost and utilization data directly in the product.
  • Surfaces email provider status (SMTP/Resend enabled) in the UI so admins can verify notification configuration at a glance.
  • Passes repository metadata to observability traces, enriching telemetry with source context for agent runs.

5 details in Everything

2 more releases in this issue · 2026-07-09
cloud-1.45.0 Notes Stable

OpenHands 1.45 adds Agent Profiles, a Budgets dashboard, expanded Usage dashboard, and email delivery status surfacing.

└──▷ GET THIS VERSION 
$ git clone --branch cloud-1.45.0 https://github.com/OpenHands/OpenHands.git
# already have the repo? check out this version:
$ git checkout cloud-1.45.0
  • New Agent Profiles support on the cloud/SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. backend lets enterprises define and manage reusable agent configurations.
  • New Budgets dashboard enables teams to set and monitor spending limits across agent usage.
  • Expanded Usage Dashboard provides broader visibility into agent activity and resource consumption.
  • Surfaces email-enabled status for SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure./Resend configurations so admins can confirm delivery is active.

4 details in Everything

cloud-1.44.0 Notes Stable

OpenHands 1.44.0 adds repository metadata to observability traces for richer pipeline monitoring.

└──▷ GET THIS VERSION 
$ git clone --branch cloud-1.44.0 https://github.com/OpenHands/OpenHands.git
# already have the repo? check out this version:
$ git checkout cloud-1.44.0
  • Includes repository metadata (e.g., repo name, branch, commit) in observability traces, enabling richer filtering and attribution in tracing backends.

1 detail in Everything

Was this useful?

OpenCode

Sources Release notes →Source code → v1.17.18 2 releases · 2026-07-09 Notes Code LatestStable

The open source coding agent.

Adds a model-specific system prompt for Meta Muse Spark to improve coding agent responses.

└──▷ GET THIS VERSION 
$ git clone --branch v1.17.18 https://github.com/anomalyco/opencode.git
# already have the repo? check out this version:
$ git checkout v1.17.18
1 more release in this issue · 2026-07-09
v1.17.17 Notes Code Stable

OpenCode v1.17.17 adds a v2 free-model selector, dismissible tabs intro popup, and refreshed sub-agent task and revert-dock UI.

└──▷ GET THIS VERSION 
$ git clone --branch v1.17.17 https://github.com/anomalyco/opencode.git
# already have the repo? check out this version:
$ git checkout v1.17.17
  • Adds a v2 free-model selector with faster access to more providers in the desktop app.
  • Introduces a dismissible tabs intro popup and a refreshed help entry point in the desktop UI.
  • Updates sub-agent task rows to match the v2 session design, with distinct icon states for running, completed, and resting tasks.
  • Restyled revert dock in v2 sessions for clearer restore actions, using v2 design tokens and a new outline-reset icon.

4 details in Everything

Was this useful?

Crush

Sources Release notes →Source code → v0.84.0 Notes Code

Glamourous agentic coding for all

Crush v0.84.0 adds session-affinity headers for provider-side prompt caching.

└──▷ GET THIS VERSION 
$ git clone --branch v0.84.0 https://github.com/charmbracelet/crush.git
# already have the repo? check out this version:
$ git checkout v0.84.0
  • Sends x-session-affinity and x-session-id headers with every request, enabling supporting providers to pin sessions to a replica and maximize prompt cache hits.

1 detail in Everything

Was this useful?

Windsurf

Sources Release page → updated · Jul 10, 2026 Notes

Windsurf is an AI-powered code editor that helps developers write, edit, and navigate code faster using intelligent autocomplete and agentic AI assistance.

Devin Desktop snapshot-20260710 adds sandbox exclusion controls, reviewable diffs, ACU usage visibility, and a plugin system for extending Devin Local.

└──▷ USE IT
Exclude a specific high-risk command from the sandbox so it runs in your real environment — useful when a tool must access hardware or network resources that the sandbox proxy blocks.
yaml 
# In team or user settings config:
sandbox:
  excluded:
    - command: "nmap"
      policy: ask
Check your current ACU consumption mid-session without leaving the chat interface.
$ /usage
Suppress Devin attribution in commit messages for repositories where automated-author footers violate commit policy.
yaml 
# In the Devin Local config file:
attribution: false
  • Adds New session in space option to the session kebab menu for quicker task-scoped session creation.
  • Enables auto-reconnect for Devin Cloud sessions when network connectivity is restored.
  • Supports copying images from chat via the context menu.
  • New users now default to agent mode out of the box.
  • Edits produced in autonomous mode now generate reviewable diffs for human review.
+21 more show less
  • ACU usage is now surfaced via the /usage command.
  • Adds sandbox.excluded allow/ask/deny config (user and team settings) to run specific commands outside the sandbox; excluded commands also skip the sandbox proxy environment.
  • Skill permissions: frontmatter now applies to auto-approvals, giving teams finer-grained control over automated actions.
  • Enforces enterprise login policies in the CLI.
  • Adds a devin plugin system for extending Devin Local (preview, opt-in for enterprises).
  • Enables subagents to call MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tools directly.
  • Allows teams to enforce terminal allow/deny lists through CLI permission scopes.
  • Adds .devinignore support alongside .windsurfignore and .codeiumignore for file exclusion control.
  • Adds an attribution option to the Devin Local config file to suppress Devin mentions in commit messages.
  • Subagents can now be configured with a default model.
  • MCP registry cache is now warmed during startup so MCP servers are ready sooner.
  • Devin ACU usage is now displayed in the client.
  • When prompted for an MCP tool permission in Devin Local, two additional server-level options are offered: approve all tools on the server for the current session, or permanently.
  • Always Allow permission grants in Devin Local now persist across sessions.
  • Adds a list display option for the agent inbox in Agent Command Center.
  • Introduces Devin for Terminal: a CLI agent written in Rust supporting multi-model access (Opus 4.7, GPT-5.5, SWE-1.6) with seamless handoff to Devin Cloud.
  • Adds Devin Local agent in Windsurf, reported up to 30% more token-efficient than the existing Cascade agent.
  • Adds support for server-driven extension deny lists.
  • Introduces Devin Cloud agent directly inside Windsurf with one-click task delegation to a cloud VM, including test results and change review without leaving the editor.
  • Introduces Agent Command Center with a Kanban-style view of all local and cloud agent sessions organized by status.
  • Adds Spaces to group agent sessions, PRs, files, and context into task-level workspaces.

26 details in Everything

Was this useful?

Kiro

Sources Release page → Hooks on Agent Writes, Lazy MCP Auth, and Multi-Window Sync 2 releases · seen 2026-07-10 Notes LatestStable

Kiro is an AI-powered IDE by AWS that uses "specs" to help developers plan, design, and build software features with agentic assistance.

Kiro adds hooks on agent file writes, lazy MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials., and multi-window settings sync in v1.0.116.

  • New hooks trigger on agent-driven file writes, enabling automation to react to AI-generated file changes.
  • Lazy MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. authentication automatically handles OAuth sign-in for MCP servers that require it, removing manual auth steps.
  • Multi-window settings sync keeps configuration consistent across multiple open Kiro windows.

3 details in Everything

1 more release in this issue · seen 2026-07-10
Expanded MCP OAuth Support Notes Stable

Kiro MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. now supports pre-registered apps with client secrets, custom redirect URIs, and DCR bypass.

└──▷ USE IT
Connect Kiro to a remote MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server like Figma that requires a pre-registered OAuth app with a client secret and a specific callback URL.
json 
{
  "mcpServers": {
    "figma": {
      "url": "https://mcp.figma.com/sse",
      "oauth": {
        "clientId": "<your-client-id>",
        "clientSecret": "<your-client-secret>",
        "redirectUri": "http://localhost:7778/oauth/callback"
      }
    }
  }
}
  • Supports clientSecret in MCP OAuth config for servers that require a client secret (e.g., Figma).
  • Enables skipping Dynamic Client Registration when a custom clientId is provided, authenticating as your own pre-registered app.
  • Accepts full URLs with custom paths in the redirectUri field (e.g., http://localhost:7778/oauth/callback) to match exact registered callback URLs.
  • Adds full ASCII mode coverage for terminals without Unicode support.

4 details in Everything

Was this useful?
// END OF TRANSMISSION

The Cyber Toolchain · curated daily · July 10, 2026
Releases & features from the open-source and commercial cyber tools that practitioners actually run.

▷ Subscribe
cyber-toolchain / feedback

Feedback on

compare.md

    Free the public facts, no sign-in Any paid plan all other sections Researcher & Business pricing history and category rank

    my-toolchain — 0 tools

      Betas, release candidates and previews. Turn it off to see final releases only. It also applies to changes you ask for over MCP when you're signed in.
      browse all tools → score card for your toolchain →
      cyber-toolchain / feedback

      Send us feedback