The Cyber Toolchain — issue 030, July 30, 2026

Codacy is an automated code quality and security analysis platform that reviews pull requests, enforces coding standards, and tracks technical debt across repositories.

Codacy now respects ShellCheck configuration files in your repository.

1 detail in Everything

Portkey is an AI gateway and observability platform that helps developers manage, monitor, and optimize LLM API calls with routing, caching, and reliability features.

Portkey adds vault-backed secret references, weekly/endpoint-scoped rate limits, two new guardrail integrations, and broader provider coverage.

{
  "guardrails": [
    {
      "type": "zscaler",
      "hooks": ["beforeRequestHook", "afterRequestHook"],
      "policyId": "<your-zscaler-policy-id>",
      "timeout": 10000
    }
  ]
}

1 detail in Everything

Veracode is a cloud-based application security platform that helps developers identify and remediate vulnerabilities in their code through static, dynamic, and software composition analysis.

Veracode integrations gain platform-driven GitHub install/uninstall, scheduled scans, new API pagination, and broader language autopackaging support.

# In veracode.yml
debug: true

19 details in Everything

Infisical is the open-source platform for secrets, certificates, and privileged access management.

Infisical v0.162.15 adds SCEPSCEPSimple Certificate Enrollment Protocol, an IETF-standardized protocol for automating X.509 certificate issuance and renewal over HTTP, letting cyber tools request PKI certificates from a CA without manual intervention. support for Microsoft Intune, NKP Helm chart, PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. connection testing, and improved machine identity template visibility.

$ git clone --branch v0.162.15 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:
$ git checkout v0.162.15

4 details in Everything

GitGuardian Detection Engine scans code repositories and developer environments to automatically detect secrets, credentials, and sensitive data exposures in real time.

GitGuardian Detection Engine 2.168 adds 4 new detectors, 2 new validity checkers, and extends HTML/Markdown scanning to 5 token types.

9 details in Everything

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management.

Security Onion 3.2.0 adds agentic AI (Gemma-backed Investigator/Engineer), Sigma playbooks, ES|QLES|QLElasticsearch Query Language, maintained by Elastic, a pipe-based query language for filtering, transforming, and aggregating data stored in Elasticsearch, giving cyber tools a concise syntax for log and event analysis. defaults, data stream lifecycle management, and UEK8 kernel support.

$ git clone --branch 3.2.0-20260729 https://github.com/Security-Onion-Solutions/securityonion.git
# already have the repo? check out this version:
$ git checkout 3.2.0-20260729

9 details in Everything

Fastly is a cloud edge platform that accelerates, secures, and delivers websites, apps, and APIs by caching content closer to users globally.

Next-Gen WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. Apache module now logs failed-open requests for better visibility into bypass events.

1 detail in Everything

Sysdig Secure is a cloud-native security platform that detects threats, manages vulnerabilities, ensures compliance, and responds to incidents across containers, Kubernetes, and cloud environments.

Sysdig CLI Scanner v1.28.0 adds NixOS and Arch Linux package detection plus dnf/microdnf support.

3 details in Everything

Manage devices and everything they touch. See how security, IT, and compliance get easier when unified around devices with Iru.

Iru adds Elgato Stream Deck as a new Auto App integration in the catalog.

Trend Vision One is a unified cybersecurity platform that integrates extended detection and response (XDR) across endpoints, networks, email, and cloud environments.

Container Security inventory gains resource-level drill-down, 24-hour trend indicators, and direct log links.

3 details in Everything

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

DefectDojo 3.1.302 adds login rate limiting to API token auth and expands scanner protocol support.

$ git clone --branch 3.1.302 https://github.com/DefectDojo/django-DefectDojo.git
# already have the repo? check out this version:
$ git checkout 3.1.302

4 details in Everything

runZero is a continuous asset intelligence platform that discovers, inventories, and monitors all connected devices and software across networks in real-time.

runZero 5.0 adds Jira issue-owner sync, Git Smart Protocol scanning, Purdue-level search terms, and multi-sensor Tanium support.

8 details in Everything

Immuta is a data security platform that automates access control, privacy policy enforcement, and compliance monitoring across cloud data environments.

DigiCert CertCentral is a centralized platform for managing SSL/TLS certificates, automating issuance, renewal, and deployment across organizational infrastructure.

CertCentral automated delegation approval expands to EV TLS, EV Code Signing, Verified Mark, and PKIo products globally and in Europe.

4 details in Everything

Nudge Security discovers and secures all SaaS apps used across an organization, helping IT teams manage shadow IT and enforce security policies through automated nudges.

Nudge Security AI conversation monitoring now detects sensitive data entered into Amazon Quick Suite chats.

1 detail in Everything

The easiest, most secure way to use WireGuard and 2FA.

New alpha API lets you programmatically create, list, and delete API-only tailnets in your organization.

Mondoo is a security platform that continuously scans and assesses infrastructure, cloud environments, and software supply chains for vulnerabilities and misconfigurations.

Mondoo launches a hosted MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server, enabling Claude Desktop, Claude Code, and VS Code to query spaces, findings, and policies in plain language.

2 details in Everything

Windsurf is an AI-powered code editor that combines an intelligent coding assistant with agentic capabilities to help developers write, edit, and debug code faster.

Windsurf v3.6.21 adds browser preview for remote ACP agents, Cascade Migration Wizard, Plan mode for Devin Local, and editable command approvals.

# In your Devin Local config file:
attribution: false

26 details in Everything

Cursor is an AI-powered code editor that helps developers write, edit, and debug code faster using integrated large language model assistance.

Cursor launches native iPad app with split-screen reviews, Apple Pencil markup, Inbox, and Bitbucket/Azure DevOps support.

⤢

8 details in Everything

The open source coding agent.

OpenCode v1.18.10 adds automatic Modal model discovery and desktop UX improvements.

$ git clone --branch v1.18.10 https://github.com/anomalyco/opencode.git
# already have the repo? check out this version:
$ git checkout v1.18.10

4 details in Everything

Lightweight coding agent that runs in your terminal

Codex CLI adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. 2026 protocol support, cloud-managed sandbox profiles, persisted thread sections, and model-owned token budget defaults.

$ git clone --branch rust-v0.147.0-alpha.2 https://github.com/openai/codex.git
# already have the repo? check out this version:
$ git checkout rust-v0.147.0-alpha.2

16 details in Everything

OpenHands: AI-Driven Development

OpenHands v1.7.0 adds persistent agent memory, always-visible LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. selector, and secret overwriting from the edit form.

$ git clone --branch v1.7.0 https://github.com/OpenHands/OpenHands.git
# already have the repo? check out this version:
$ git checkout v1.7.0

3 details in Everything

AI agent toolkit: unified LLM API, agent loop, TUI, coding agent CLI

Pi v0.83.0 adds credential export commands, headless OpenRouterOpenRouterA unified API gateway that routes requests to dozens of LLM providers under one endpoint, letting cyber tools swap or compare models without rewriting provider-specific integration code. login, and Claude Opus 5 via GitHub Copilot.

$ git clone --branch v0.83.0 https://github.com/earendil-works/pi.git
# already have the repo? check out this version:
$ git checkout v0.83.0

$ pi auth print-bearer-token | xargs -I{} curl -H "Authorization: Bearer {}" https://api.example.com/endpoint

$ export API_KEY=$(pi auth print-api-key)

5 details in Everything

an open source, extensible AI agent that goes beyond code suggestions - install, execute, edit, and test with any LLM

Goose v1.45.0 adds tab completion for model switching, air-gapped docs support, disabling built-in skills, and Gemini/Opus5 model support.

$ git clone --branch v1.45.0 https://github.com/aaif-goose/goose.git
# already have the repo? check out this version:
$ git checkout v1.45.0

$ GOOSE_DOCS_ROOT=/mnt/internal/goose-docs goose session

$ goose server --enable-scheduler

5 details in Everything

Autonomous coding agent as an SDK, IDE extension, or CLI assistant.

Cline CLI v3.0.47 adds free-model support, persistent settings, and agentic compaction as the new default.

$ git clone --branch cli-v3.0.47 https://github.com/cline/cline.git
# already have the repo? check out this version:
$ git checkout cli-v3.0.47

3 details in Everything

SRE Agent - CNCF Sandbox Project

HolmesGPT 0.38.0 adds remote tool call approval workflows and cuts prompt token usage by 50–60%.

$ git clone --branch 0.38.0 https://github.com/HolmesGPT/holmesgpt.git
# already have the repo? check out this version:
$ git checkout 0.38.0

3 details in Everything

Framework for orchestrating role-playing, autonomous AI agents. By fostering collaborative intelligence, CrewAI empowers agents to work together seamlessly, tackling complex tasks.

CrewAI 1.15.9 surfaces tool failures explicitly, emits FlowFailedEvent on flow errors, and adds progressive disclosure for skills.

$ git clone --branch 1.15.9 https://github.com/crewAIInc/crewAI.git
# already have the repo? check out this version:
$ git checkout 1.15.9

3 details in Everything

A full-stack AI Red Teaming platform securing AI ecosystems via OpenClaw Security Scan, Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

AI-Infra-Guard v4.5.1 adds multi-turn jailbreak attacks, 6 new OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. agent-scan skills, and 4 new MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. security detection rules.

$ git clone --branch v4.5.1 https://github.com/Tencent/AI-Infra-Guard.git
# already have the repo? check out this version:
$ git checkout v4.5.1

4 details in Everything

AgentMesh shifts to freemium with tiered API access, including a free signed-in API trial and paid tiers bundling Kirin endpoint licenses.

5 details in Everything