Akto

No entries match these filters. Clear filters

1. announced seen Oct 22, 2026 · issue 116

   Akto is now a native LiteLLM guardrail provider with pre_call/post_call modes, default_on, and a reference architecture at github.com/akto-api-security/akto-litellm.

   • New integrationNew detectionAdds guardrail: akto as a native LiteLLM guardrail provider, configured via guardrail_name, akto_base_url (os.environ/AKTO_GUARDRAIL_API_BASE), and akto_api_key (os.environ/AKTO_API_KEY) in config.yaml.
   • Supports mode: pre_call and mode: post_call guardrail entries for Akto, covering PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. scanning on both inbound user prompts and outbound model responses independently.
   • Enables default_on: true on individual Akto guardrail entries in config.yaml to enforce PII scanning across all traffic without per-request opt-in.
   • Provides a reference architecture for a Claude Code → LiteLLM → Bedrock → Anthropic deployment with layered Akto guardrails at github.com/akto-api-security/akto-litellm.

   4 details in Everything

2. Discover Every Plugin Installed to Your AI Agents Aug 2026 · release notes

   New AI Agent plugin discovery, Copilot Studio mapping, LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. redaction, anomaly detection, and integrations for Claude/Amp/Glean/Amazon Quick

   • Surfaces all plugins installed to AI agents, including skills, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers, and bundled tools.
   • Groups SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally.-based AI agents separately under SaaS Agents in the inventory.
   • Maps Copilot Studio agents to connected tools, topics, MCP servers, and knowledge sources in an architecture view.
   • Allows defining sensitive data in plain language for automatic LLM-based redaction before requests reach the model.
   • Provides Guardrail Change Impact Analysis to preview policy edits and replay violations against drafted policies.

   +6 more show less

   • Scans settings.json and config.toml on Claude Code, Codex CLI, and Copilot CLI endpoints for misconfigurations like bypassed permissions or disabled sandboxes.
   • Adds a Skill Evaluations Tab in Guardrail Activity to review skill evaluation results and malicious skill alerts by endpoint.
   • Implements Statistical Anomaly Guardrails to detect behavior drift and tool misuse by baselining normal usage per agent.
   • Acts as the AI security server for Anthropic's Inference Hooks, providing allow/deny verdicts for claude.ai, Cowork, and Claude Code.
   • Intercepts Amp proxy traffic to apply guardrail policies through Akto for Amp-based coding agents.
   • Adds a Glean Connector to enforce guardrail policies on employee interactions with Glean's AI agents and capture full traces.

   11 details in Everything

3. Guardrails for Claude Cowork, Sync and Async Jul 2026 · release notes

   Akto adds real-time Claude Cowork intercepts, Kiro CLI hooks, and agent-scoped guardrails with ignore phrases and tooltips.

   • Ignore Phrases policy feature to exclude trusted words, phrases, or regex patterns from evaluation
   • Human-in-the-Loop Overrides for time-bound, logged guardrail event approvals
   • AI-Suggested Compliance Tags auto-tagging against SOC2SOC2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria., HIPAAHIPAAA US federal law enacted in 1996 that sets privacy and security requirements for protected health information, giving cyber tools a compliance baseline to enforce or audit against., GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification., and ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability. frameworks
   • Guardrail Policy Tooltips with contextual sample prompts in the policy configuration UI
   • CrowdStrike integration for Endpoint Shield monitoring of AI coding tools and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. configurations

   +4 more show less

   • Copilot Studio multi-environment management (dev, staging, production) in a single deployment
   • Claude Cowork Sync and Async interception capabilities for prompts and tool calls
   • Misconfiguration Policies for Claude to flag drift in model versions, MCP servers, and tool permissions
   • Agent-Based Policy Filtering to scope guardrails to specific AI agents

   9 details in Everything

4. Trace Every Prompt, Tool Call, and Response Jun 2026 · release notes

   Akto Agentic Release June 2026 adds Traces dashboard, standalone Guardrails API, and new compliance guardrail presets.

   • Introduces the Traces dashboard for LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. observability with Conversation Insights to automatically classify session topics.
   • Adds a standalone HTTP API for Guardrails allowing any AI agent to call Akto guardrails without SDKs or proxies.
   • Releases compliance guardrail presets for GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification., HIPAAHIPAAA US federal law enacted in 1996 that sets privacy and security requirements for protected health information, giving cyber tools a compliance baseline to enforce or audit against., EU AI ActEU AI ActEU regulation that classifies AI systems by risk level and imposes compliance obligations—documentation, transparency, human oversight—on developers and deployers, shaping how AI-based cyber tools are built and sold in Europe., OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against., and NIST AI that auto-configure policies upon selection.
   • Enables host and path blocking in guardrail policies to prevent agent outbound traffic to specific domains and API paths.
   • Adds Default denied topics capability to block off-limits conversations instantly or via custom definitions without building policies from scratch.

   +7 more show less

   • Allows guarding browser LLMsLLMsA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. specifically, enabling enforcement of guardrail policy on in-browser AI tools.
   • Permits scoping guardrail policies by team and user role to limit blast radius.
   • Adds a New agentic assets layout beta for browsing AI agents, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers, LLMs, skills, and endpoints.
   • Provides mapping of every guardrail activity to the regulatory frameworks each violation affects.
   • Shows the full scope of MCP and agent servers a policy touches before deployment in the Apply to All view.
   • Enables red teaming Microsoft Copilot Studio agents using configured OAuth credentials for adversarial probing.
   • Allows scanning by specific attack technique and strategy to target probes at defined threat models.

   12 details in Everything

5. Skill Governance Across Every AI Agent May 2026 · release notes

   Akto adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface./Endpoint Shield integration, OpenCode/Hermes hooks, GitOpsGitOpsA practice where Git repositories serve as the single source of truth for infrastructure and application state, with automated systems continuously reconciling live environments to match what is declared in version control. sync, Snowflake tracing, and multi-LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. Agent Guard. new

   • Endpoint Shield badge flags personal/non-corporate accounts on Asset page
   • Endpoint Shield badge flags AI agents with access to local stdio MCP servers
   • File Inspection feature allows configuring file paths from the dashboard for protected devices
   • Guardrail Remediation Guidance displays rule-specific remediation steps in guardrail activity view
   • Flagged Payload highlights exact response payload triggering a violation in guardrail activity

   +10 more show less

   • Multi-LLM Agent Guard runs scanning across multiple LLM providers and model configurations
   • Domain-Based Proxy Routing routes AI domains through proxy while chatty domains bypass it
   • OpenCode Hook intercepts prompts and tool request/response traffic
   • Hermes Agent Hook monitors workflows and enforces guardrails inline
   • MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. Deployment via Automox, Microsoft Intune, Jamf, Kandji, NinjaOne
   • GitOps Policy Sync syncs policies from repository using GitHub Workflows
   • Jobs Information in Settings tracks background jobs and connector execution errors
   • Snowflake Agent Tracing captures traces, spans, and service graphs for agent traffic
   • Copilot Studio Bot Filtering allows filtering by Bot ID under Argus Connectors
   • Custom Auth Headers added to Bring Your Own AI Agent setup under Argus Connectors

   15 details in Everything

6. Guardrails for Every AI Coding Workflows Apr 2026 · release notes

   Akto April 2026 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. registry controls, Anthropic/SentinelOne connectors, Code/Neovim hooks, and custom Okta roles

   • Adds MCP Registry Control to allowlist approved MCP servers by importing registries via CSV URL.
   • Adds MCP Registry Sync to add discovered MCP servers to registries directly from Audit Data.
   • Adds SentinelOne Connector to discover and monitor SentinelOne managed endpoints for real-time guardrails.
   • Adds Anthropic Connector to capture traffic and surface insights from Anthropic models in the Atlas dashboard.
   • Adds Host Exclusion Controls in Settings to exclude specific hosts from Traffic Analysis.

   +17 more show less

   • Adds Skills Inventory and Blocking to discover agent skills and block risky ones in bulk or per-endpoint.
   • Adds Endpoint-Level Insights to map agentic assets to users/devices and track risk scores.
   • Adds discovery support for locally hosted models on SGLang, vLLM, Docker Model Runner, and Ollama.
   • Adds Response Guardrails to validate and enforce security policies on response payloads across direct and proxied requests.
   • Adds File and URL Guardrails to validate uploaded files and external URLs (audio, video, images, documents).
   • Adds PII Count-Based Guardrails to flag when PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. counts exceed policy limits.
   • Adds Alert-Only Guardrails to configure policies that warn without blocking for phased rollouts.
   • Adds Apply Guardrails to All Servers option to apply policies across all agentic assets in a single action.
   • Adds Codex CLI Hooks to enforce guardrails on prompts, tool calls, and responses in Codex-powered workflows.
   • Adds Neovim Hooks to enforce real-time guardrails directly in Neovim for prompt and response validation.
   • Adds HTTP/HTTPS Proxy Support in Settings to deploy Akto in restricted network environments.
   • Adds Custom Roles with Okta SSO support (Admin, Developer, Threat Engineer, Threat Viewer).
   • Adds ability to run Ask Akto using GitHub Copilot as the underlying AI model.
   • Adds Tool Invocation Visibility in AI Red Teaming to view tools agents invoked during probe execution.
   • Adds Category-wise scan scoring to view scan coverage by agentic risk category and pass/fail rates.
   • Adds Extended Compliance Mapping for EU AI ActEU AI ActEU regulation that classifies AI systems by risk level and imposes compliance obligations—documentation, transparency, human oversight—on developers and deployers, shaping how AI-based cyber tools are built and sold in Europe., OWASP Agentic Top 10OWASP Agentic Top 10A ranked list of the most critical risks specific to AI agent systems, maintained by OWASP, giving cyber tool builders a shared framework for prioritizing threats in autonomous, multi-step AI workflows., NIST AI RMFNIST AI RMFA voluntary framework published by NIST that gives organizations a structured process for identifying, assessing, and managing risks introduced by AI systems, giving cyber tools a common vocabulary and governance scaffold., and Mitre ATLAS.
   • Adds Claude Agent SDK integration to enforce guardrails via native callback system.

   22 details in Everything

7. Full AI Security Posture for Endpoints in Akto Atlas Mar 2026 · release notes

   New endpoint posture dashboard, Salesforce/Okta integrations, and agentic scan enhancements in Akto Atlas

   • Agentic Asset Tabs added to the Atlas dashboard to filter agentic assets by type for inventory review
   • Agent Details Panel provides User Analysis, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Servers, and Agent Logs within Endpoint Shield
   • HTTP Transport for MCP Sync enables automatic transport detection and synchronization of MCP tools over HTTP
   • Guardrail configuration now supports defining request/response field validation paths and blocked response behavior directly in the schema
   • OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. ASI categories are viewable directly in the guardrail configuration interface

   +11 more show less

   • SSO-Only Login Restrictions enforce consistent authentication by restricting non-SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. logins for SSO-signed-up users
   • Okta Group-to-Role Mapping maps Okta groups to Akto roles (Admin, Member, Developer, Guest) for automatic RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. during SSO
   • Extended Timeout limit allows longer agentic red teaming scans for complex multi-step LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. interactions
   • Bulk Scan AI Agent Groups enables running security scans against multiple grouped agents simultaneously
   • AI-generated summaries and insights are now included in scan results for identified findings
   • Multi-Module Probing allows running scans across multiple probing modules simultaneously in a single operation
   • GitHub Sync for Probe Libraries syncs probe libraries directly from GitHub via Settings
   • Salesforce integration connects to instances to discover, monitor, and scan Salesforce API endpoints
   • Google AI ADKADKGoogle's Agent Development Kit, an open-source framework for building and orchestrating AI agents; cyber tools use it to compose multi-agent workflows with built-in tool-calling and state management. integration enables security, probing, and guardrail enforcement for Google AI agent workflows
   • Databricks is supported as an LLM provider in agent configuration
   • Akto Nodes added to n8n for integrating guardrails and ingestion into automation workflows

   16 details in Everything

8. Complete Observability Into your AI Agents Feb 2026 · release notes

   Akto Feb 2026 Agentic Release adds Vertex/TrueFoundry/Arcade integrations, CSV export, session guardrails, and Ollama Qwen support

   • Vertex AI Integration discovers and secures agents running on Google Vertex AI.
   • TrueFoundry Integration monitors and secures agents deployed on TrueFoundry's MLOps platform.
   • Arcade Integration secures Arcade AI agent tool calls with Akto guardrails.
   • QWEN Model Support (Ollama) allows using the Qwen model in Ollama for agentic scans.
   • GitHub Copilot CLI Hooks monitors prompts to GitHub Copilot CLI and enforces guardrails in real time, also supporting VS Code agent workflows.

   +20 more show less

   • Gemini CLI Hooks monitors prompts to Gemini CLI and enforces security guardrails in real time.
   • Export dashboard tables as CSV files for reporting and analysis.
   • View token estimation for each Red Teaming scan before running it to plan usage and estimate costs.
   • Set a maximum agent token limit while configuring a scan to control usage and resource consumption.
   • Guardrail Playground allows running and validating guardrail policies in the playground before deploying to production.
   • Apply session-based guardrail policies consistently across the entire agent session for persistent policy enforcement.
   • Set severity levels in guardrail policies for better prioritization of security alerts.
   • Export guardrail activity reports to a custom webhook for SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. or alerting pipeline integration.
   • Enable or disable guardrails for specific agent tools and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. methods with automatic discovery via the agent proxy.
   • View traces and spans directly in agentic workflow details for full request-level observability.
   • Discover agents using RAGRAGRetrieval-augmented generation: looking up relevant documents and adding them to the prompt before the model answers. It grounds responses in private or current data without retraining. automatically for better visibility into retrieval workflows.
   • Get a high-level summary of top Agents and MCPs through Agentic Inventory Insights.
   • Access scan results from previously deleted agents for continued auditing.
   • Select probe engine and modify hosts in the editor playground when validating agentic scans.
   • View actual probe requests sent during scans for debugging visibility.
   • Run bulk Red Teaming across multiple AI Agents and MCPs with consolidated results.
   • SkillGuard discovers agent skills installed on employee endpoints and analyzes .md files for malicious instructions.
   • Surface unauthorized MCP servers running on developer machines through Akto Atlas.
   • See PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. types in guardrail configuration reflecting data types defined on the Sensitive Data page.
   • See associated username in guardrail activity on endpoints for better traceability.

   25 details in Everything

9. Turning the Lights on for OpenClaw 💡 Jan 2026 · release notes

   Akto adds OpenClaw endpoint discovery, Guardrail policies, Claude CLI/LiteLLM/Databricks/Snowflake integrations, DevRev filtering, and Agentic Red Teaming probes.

   • Endpoint Visibility now shows employee usernames alongside endpoint IDs for discovered Agents on employee devices.
   • Define and enforce Guardrail policies to validate intent and block unsafe inputs in real time via Akto Atlas | Akto Argus.
   • Guardrail detections now report the exact violated policy and rule names for each flag.
   • Compliance-Mapped Threat Reports map threats to GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification., HIPAAHIPAAA US federal law enacted in 1996 that sets privacy and security requirements for protected health information, giving cyber tools a compliance baseline to enforce or audit against., SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria. and allow instant export of audit-ready reports.
   • Jira Data Center integration supports expanded two-way sync, severity mapping, and custom field enrichment for agentic tickets.

   +7 more show less

   • DevRev Integration fetches can be filtered by part type to restrict results to specific DevRev parts via Akto Argus.
   • New Claude CLI Integration imports Claude CLI proxy traffic to validate prompts against security policies.
   • New LiteLLM integration monitors and secures AI agents for multi-model routing and management.
   • Snowflake Integration discovers AI agents on Snowflake Cortex and automatically fetches their data.
   • Databricks Integration monitors and secures agents running on Databricks platforms.
   • Datadog Integration ingests AI agent telemetry and observability signals into Akto.
   • Hugging Face Integration protects agents and models hosted or deployed via Hugging Face.

   12 details in Everything

10. v1.54.4 Feb 3, 2025 · release notes

    Adds MS Teams webhook integration for test run results in Akto v1.54.4.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.54.4 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.54.4

    • Adds support for sending test run result webhooks to Microsoft Teams

    1 detail in Everything

11. v1.54.2 Jan 31, 2025 · release notes

    Akto v1.54.2 adds test suite support and optional skip tests to testing configuration.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.54.2 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.54.2

    • Adds test suites as a configurable feature for API testing
    • Makes skip tests optional within the testing run configuration

    2 details in Everything

12. v1.53.8 Jan 24, 2025 · release notes

    Adds eq/neq object comparison filters to Akto's query syntax

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.53.8 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.53.8

    └──▷ TRY IT
    Filter API findings to show only those where a specific object field matches or differs from a value.
    copy

    $ filter obj.field eq 'expected_value'

    • eq, neq obj comparison filters added

    1 detail in Everything

13. v1.53.7 Jan 22, 2025 · release notes

    Adds telemetry enablement to Akto.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.53.7 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.53.7

    • Enables telemetry collection for the Akto cyber tool.

    1 detail in Everything

14. v1.53.6 Jan 21, 2025 · release notes

    Akto v1.53.6 adds query params support via payload keys in configs and critical severity levels

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.53.6 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.53.6

15. v1.41.7 Jul 2, 2024 · release notes

    Adds ability to download vulnerability reports

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.41.7 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.41.7

    └──▷ HOW TO FIND IT
    Download a report of identified API vulnerabilities directly from the UI.
    📍Steps: In the Akto dashboard, navigate to the Vulnerabilities section and select Download Report.
16. v1.40.9 Jun 13, 2024 · release notes

    Adds epoch commands to the test editor and fixes UI components for auth and tags.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.40.9 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.40.9

    └──▷ HOW TO FIND IT
    Use epoch functions to control timestamp-based behavior during API test execution.
    📍open the test editor and insert an epoch command
    • epoch commands are now available in the test editor
    • Added missing configs table tab in testing UI

    2 details in Everything

17. v1.40.8 Jun 6, 2024 · release notes

    Akto v1.40.8 adds hostname collections for other traffic types and fixes refresh sync race conditions.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.40.8 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.40.8

18. v1.40.5 Jun 5, 2024 · release notes

    Adds postman collection upload subcommand for local postman collection uploads

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.40.5 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.40.5

19. v1.39.8 May 29, 2024 · release notes

    Akto v1.39.8 adds GitHub Enterprise SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. support and a new tag for detecting new API issues.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.39.8 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.39.8

    • Fixed github SSO and added support for github enterprise version
    • Added tag to detect new issues

    2 details in Everything

20. v1.39.5 May 24, 2024 · release notes

    Adds ability to invite new Akto users directly.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.39.5 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.39.5

21. v1.39.3 May 23, 2024 · release notes

    Adds automated API group creation to Akto

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.39.3 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.39.3

22. v1.38.9 May 20, 2024 · release notes

    Akto v1.38.9 adds a remediation field to findings

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.38.9 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.38.9

23. v1.38.5 May 15, 2024 · release notes

    Adds API grouping by risk score and multi-auth token management

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.38.5 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.38.5

    • Add API groups based on risk score allows organizing APIs into groups derived from their aggregate risk metrics.
    • modify multiple auth tokens enables updating or refreshing several authentication tokens in a single operation.

    2 details in Everything

24. v1.38.4 May 14, 2024 · release notes

    Akto v1.38.4 adds API for refreshing usage data and deactivating collections.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.38.4 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.38.4

    • Adds refresh usage capability to update telemetry data for tracked APIs
    • Adds deactivate collections capability to mark specific API collections as inactive

    2 details in Everything

25. v1.38.1 May 10, 2024 · release notes

    Adds GraphQL API testing support in the test editor

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.38.1 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.38.1

26. v1.38.0 May 8, 2024 · release notes

    Akto v1.38.0 adds network client proxy support for API security testing

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.38.0 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.38.0

27. v1.37.22 May 7, 2024 · release notes

    Adds Slack alerts for test run results and improves UI for Issues charts

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.37.22 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.37.22

    • Adds slack integration to send alerts when API security test runs complete
    • Improves UI for Issues charts on the homepage with updated visualizations
    • Optimizes calculation of risk score for better performance

    3 details in Everything

28. v1.37.21 May 2, 2024 · release notes

    Akto v1.37.21 adds hybrid SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. functionality

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.37.21 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.37.21

29. v1.37.19 Apr 30, 2024 · release notes

    Adds Slack alerts for user invitations and React unit test support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.37.19 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.37.19

30. v1.37.17 Apr 22, 2024 · release notes

    Akto v1.37.17 adds garbage endpoint filtering and account ID to logs

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.37.17 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.37.17

    • Adds ability to ignore garbage endpoints in API analysis
    • Adds filters to the test runs page UI
    • Includes account id in log output for better traceability

    3 details in Everything

31. v1.37.14 Apr 18, 2024 · release notes

    Akto v1.37.14 adds environment variable to block requests

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.37.14 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.37.14

32. v1.37.12 Apr 17, 2024 · release notes

    Adds variable substitution in test override URLs for API security testing

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.37.12 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.37.12

    • Supports variables in test override url while running tests

    1 detail in Everything

33. v1.37.11 Apr 16, 2024 · release notes

    Akto v1.37.11 adds a dependency graph capability.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.37.11 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.37.11

    • dependency graph feature added to visualize API relationships

    1 detail in Everything

34. v1.37.4 Apr 10, 2024 · release notes

    Adds a configuration option to allow all HTTP status codes in the automated login flow

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.37.4 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.37.4

35. v1.37.3 Apr 9, 2024 · release notes

    Akto v1.37.3 adds click actions to the sensitive data chart and a filter query param for method in Api Changes page.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.37.3 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.37.3

    • Added indexing in users, accounts and singletypeinfo docs
    • Added skipped tag on testing run page

    2 details in Everything

36. v1.36.9 Mar 23, 2024 · release notes

    Akto v1.36.9 adds bolt to all workflows, token generation for SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally., and testing module logs.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.36.9 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.36.9

    • bolt is now added to all the workflows
    • Token generation is now available for SaaS deployments
    • Logs are now added to the testing module

    3 details in Everything

37. v1.36.8 Mar 21, 2024 · release notes

    Adds SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly. support and Jira interceptors to Akto v1.36.8

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.36.8 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.36.8

38. v1.36.7 Mar 15, 2024 · release notes

    Akto v1.36.7 adds multistep test support to vulnerability reports and a new login page

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.36.7 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.36.7

    • Adds multistep field in vulnerability report payloads so that multi-step attack chains are preserved instead of flattened into single requests
    • Replaces the previous authentication screen with a redesigned Login page
    • Introduces server-side locking to prevent concurrent test runs from interfering with each other

    3 details in Everything

39. v1.36.5 Mar 13, 2024 · release notes

    Adds JIRA integration and new UX dashboard to Akto API security

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.36.5 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.36.5

    • Adds JIRA integration for syncing findings
    • Adds new UX dashboard view

    2 details in Everything

40. v1.36.4 Mar 12, 2024 · release notes

    Adds deployment type tag to collections

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.36.4 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.36.4

41. v1.35.14 Feb 28, 2024 · release notes

    Adds basic auth support in postman import and upload_file command in test editor.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.35.14 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.35.14

42. v1.35.12 Feb 22, 2024 · release notes

    Akto v1.35.12 adds Kubernetes as the recommended deployment method.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.35.12 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.35.12

    • Kubernetes is now the recommended way for deploying Akto instead of AWS mirroring
    • Akto Yaml Test templates and Akto Pii types don't require mandatory internet connection to show up

    2 details in Everything

43. v1.35.11 Feb 20, 2024 · release notes

    Adds offline test template download and select-all dropdown option

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.35.11 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.35.11

    • Enables downloading test templates without an active internet connection
    • Adds a select all option in dropdown menus for bulk actions

    2 details in Everything

44. v1.35.5 Feb 10, 2024 · release notes

    Adds fine controls for redacting API collections and data types

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.35.5 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.35.5

45. v1.35.3 Feb 9, 2024 · release notes

    Akto v1.35.3 introduces default payloads for API testing and fixes several bugs.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.35.3 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.35.3

    • Adds the ability to configure default payloads for API security testing runs

    1 detail in Everything

46. v1.35.2 Feb 7, 2024 · release notes

    Adds test roles support for API testing workflows

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.35.2 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.35.2

    • test roles introduced to manage permissions for API testing activities

    1 detail in Everything

47. v1.35.1 Feb 6, 2024 · release notes

    Akto v1.35.1 adds mass assignment detection and new onboarding flows

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.35.1 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.35.1

    └──▷ HOW TO FIND IT
    Configure the test runner to automatically flag potential mass assignment issues during API scans.
    📍Enable mass_assignment detection in your Akto configuration file.
    • Adds support for detecting Mass assignment vulnerabilities in API testing workflows
    • Introduces new onboarding flows to streamline initial setup and configuration

    2 details in Everything

48. v1.35.0 Feb 5, 2024 · release notes

    Adds dependency graph feature

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.35.0 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.35.0

    • Added dependency_graph visualization capability

    1 detail in Everything

49. v1.34.11 Feb 2, 2024 · release notes

    Akto v1.34.11 adds Swagger import and removes auth endpoint filter

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.34.11 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.34.11

    • Adds swagger import to enable importing API definitions from Swagger files

    1 detail in Everything

50. v1.34.10 Jan 24, 2024 · release notes

    Akto v1.34.10 adds JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. bypass and cookie expiry tests via the test editor

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.34.10 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.34.10

    └──▷ HOW TO FIND IT
    Run a new test case to detect JWT auth bypass via JWK header injection within the Akto service UI.
    📍Navigate to Test Editor › Add New Test › Select 'jwt authentication bypass via jwk header injection' as the test type.
    Create a test case specifically designed to check if cookie expiration logic is correctly validated during API requests.
    📍Navigate to Test Editor › Add New Test › Select cookie expiry tests from the available templates.
    • jwt authentication bypass via jwk header injection test now available in the test editor.
    • jwt authentication bypass via kid param injection test now available in the test editor.

    2 details in Everything

51. v1.34.9 Jan 22, 2024 · release notes

    Akto v1.34.9 introduces the ability to create custom collections

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.34.9 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.34.9

    └──▷ HOW TO FIND IT
    Create a new collection in the Akto interface to group specific API endpoints for focused monitoring.
    📍In the Akto UI, navigate to the Collections section and select Create Custom Collection.
52. v1.34.8 Jan 17, 2024 · release notes

    Test editor now supports storing response metrics and comparing them across nodes

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.34.8 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.34.8

    • test editor stores avg, min, max, median response times and length for requests
    • test editor allows comparison of response metrics across multiple nodes
    • test editor accepts multiplication expressions (e.g. 2 * 3) as numeric values

    3 details in Everything

53. v1.34.7 Jan 17, 2024 · release notes

    Akto v1.34.7 adds custom collections allowing endpoints from multiple sources grouped by method

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.34.7 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.34.7

    └──▷ HOW TO FIND IT
    Create a cross-collection custom collection grouped by HTTP method for focused review.
    📍In the Akto console, create a new custom collection and select endpoints from multiple existing collections, grouping them by method.
    • Users can create custom collections by adding API endpoints from multiple collections as well as grouped on methods

    1 detail in Everything

54. v1.34.6 Jan 16, 2024 · release notes

    Akto v1.34.6 adds dependency graph building from traffic data and improved test editor search

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.34.6 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.34.6

    └──▷ HOW TO FIND IT
    Navigate to the test editor and use the improved search feature to find specific tests.
    📍In the Akto UI, go to Tests › Test Editor and utilize the enhanced search bar to filter your test suite.
    • Added dependency graph capability to build a dependency graph from traffic data
    • Improved search functionality in the test editor UI

    2 details in Everything

55. v1.34.5 Jan 13, 2024 · release notes

    Adds token replace functionality to replace tokens in URLs

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.34.5 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.34.5

56. v1.34.4 Jan 12, 2024 · release notes

    Adds execute block for test request building and UI-specific token replacement tests

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.34.4 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.34.4

    └──▷ HOW TO FIND IT
    Use the execute block to dynamically construct API requests for complex testing scenarios.
    📍execute { // New features allow dynamic request building }
    Leverage UI-specific tests to inject or modify tokens directly in URLs during testing.
    📍UI specific tests: replace/insert token in URL
    • execute block now supports new features for building test requests
    • New UI specific tests allow replacing or inserting tokens within a URL

    2 details in Everything

57. v1.34.3 Jan 11, 2024 · release notes

    Adds the ability to use a wordlist defined as an array

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.34.3 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.34.3

    • Added functionality to use wordlist within an array

    1 detail in Everything

58. v1.33.2 Jan 10, 2024 · release notes

    Akto v1.33.2 adds multi-request YAML tests, regex body replacement, schema match checks, and YAML triggers

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.33.2 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.33.2

    • Adds the ability to run multiple requests in a single yaml test template

    1 detail in Everything

59. v1.33.0 Jan 9, 2024 · release notes

    Adds risk score for APIs to help prioritize which endpoints need attention

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.33.0 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.33.0

    • Adds risk score for APIs by @avneesh-akto in https://github.com/akto-api-security/akto/pull/800

    1 detail in Everything

60. v1.32.8 Jan 5, 2024 · release notes

    Akto v1.32.8 adds custom test libraries, GitHub CI/CD integration, and test run deletion

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.32.8 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.32.8

    • Adds support for custom test libraries to extend scanning capabilities
    • Adds GitHub CI/CD comments and GitHub checks for automated workflow integration
    • Adds a feature to delete test runs

    3 details in Everything

61. v1.32.6 Dec 23, 2023 · release notes

    Adds HARHARAn HTTP Archive file, a JSON-format log of all network requests and responses captured by a browser's developer tools, used by cyber tools to replay, inspect, or analyze web traffic without re-running a live session. and Postman file saving when uploading traffic

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.32.6 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.32.6

    └──▷ HOW TO FIND IT
    Export captured API traffic for import into other tools like Postman or HAR viewers
    📍In the Akto UI, upload your traffic capture file; ensure the Save HAR and Save Postman options are selected during the upload process to generate the respective files.
    • Added support to save HAR and Postman files when uploading traffic

    1 detail in Everything

62. v1.32.5 Dec 22, 2023 · release notes

    Akto v1.32.5 initiates feature metering in testing

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.32.5 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.32.5

63. v1.32.3 Dec 22, 2023 · release notes

    Adds feature gates tied to pricing plans, improving beamer UI

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.32.3 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.32.3

    • Implements feature gates in accordance with pricing plans
    • Improves beamer UI

    2 details in Everything

64. v1.32.0 Dec 16, 2023 · release notes

    Feature usage visibility extended to all users via Settings in Akto v1.32.0

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.32.0 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.32.0

    • Feature usage data is now visible to all users under the Settings section in the UI.

    1 detail in Everything

65. v1.31.15 Nov 30, 2023 · release notes

    Akto v1.31.15 introduces blacklist events support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.31.15 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.31.15

    • Added capability to blacklist specific events

    1 detail in Everything

66. v1.31.12 Nov 23, 2023 · release notes

    Adds inactive template support and custom webhook payloads

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.31.12 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.31.12

    • Supports using the inactive field from test templates
    • Allows specifying custom payloads in webhooks

    2 details in Everything

67. v1.31.11 Oct 30, 2023 · release notes

    Akto v1.31.11 adds log level control for the testing CLI and UI test error cards.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.31.11 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.31.11

    • Adds log levels to the testing CLI
    • Added test errors card in the editor
    • Added count badge in editor

    3 details in Everything

68. v1.31.7 Oct 9, 2023 · release notes

    Adds an inventory swagger step for API inventory generation in v1.31.7

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.31.7 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.31.7

69. v1.31.5 Oct 4, 2023 · release notes

    Akto v1.31.5 fetches tests from external library repo and adds LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. templates for beta users.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.31.5 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.31.5

    • Fetches tests from the tests-library repository instead of bundling them in the codebase
    • Adds LLM templates available to beta users

    2 details in Everything

70. v1.31.4 Oct 3, 2023 · release notes

    Akto v1.31.4 adds test results export in the UI and ALL flag for filtering by API collection name.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.31.4 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.31.4

    • Adds export-results feature for tests in the new UI

    1 detail in Everything

71. v1.31.0 Sep 28, 2023 · release notes

    Akto v1.31.0 adds testing-cli tool and CWECWECommon Weakness Enumeration, a catalog of recurring software and hardware weakness types. It describes classes of mistakes, such as injection, rather than individual vulnerability instances. field to test results

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.31.0 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.31.0

    • Introduces the new testing-cli command-line interface for API security testing
    • Adds the CWE field to test results and CICD filter configurations

    2 details in Everything

72. v1.30.5 Sep 26, 2023 · release notes

    Akto v1.30.5 adds GitHub login and SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly. control flag; improves performance

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.30.5 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.30.5

    └──▷ HOW TO FIND IT
    Log into the Akto UI using your GitHub account
    📍Click Login with GitHub on the Akto authentication screen
    • Adds skip_ssrf_check config key to disable the SSRF validation logic
    • Adds GitHub as an authentication provider for logging into Akto
    • Improves page load times for test run results and test run summaries

    3 details in Everything

73. v1.30.4 Sep 18, 2023 · release notes

    Akto v1.30.4 adds HTML export for test results, YAML editor enhancements, configurable traffic alerts and a new UI switch.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.30.4 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.30.4

    • Adds the ability to export test results as HTML documents via the new export option in the UI.
    • Introduces a user-configurable option to change the traffic alert time threshold.
    • Enhances the YAML test editor with autocomplete, syntax error highlighting and pre-defined snippets.
    • Provides a mechanism for users to switch to the new Akto interface.

    4 details in Everything

74. v1.30.3 Sep 12, 2023 · release notes

    Akto v1.30.3 adds Auth0 integration

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.30.3 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.30.3

75. v1.30.2 Aug 31, 2023 · release notes

    Akto v1.30.2 introduces Polaris UI integration and CDNCDNA content delivery network, servers distributed across locations that cache and serve content near readers. It can reduce loading time and traffic to the original server. sourcing for the interface.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.30.2 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.30.2

    • Polaris UI integration added as a new capability
    • CDN sourcing implemented for UI assets

    2 details in Everything

76. vv1.30.0 Aug 16, 2023 · release notes

    Akto vv1.30.0 adds multi-account support, replace_body operation in test editor, and new PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. whitelist key.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch vv1.30.0 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout vv1.30.0

    • replace_body is a new operation available in the Test editor for modifying request payloads
    • Added whitelisting by collection ID to the PII cleaner to exclude specific collections from masking

    2 details in Everything

77. v1.29.4 Jun 24, 2023 · release notes

    Akto v1.29.4 adds custom host support for tests, CSRFCSRFCross-site request forgery, an attack that makes a signed-in browser send an unwanted request to a site. The site may accept the request using the victim's existing session. tests, and cookie key modification

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.29.4 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.29.4

    • Adds custom_host functionality to allow setting a specific host when running tests
    • Introduces new CSRF detection tests for API security assessment
    • Enables modifying keys from cookies during test execution

    3 details in Everything

78. v1.29.3 Jun 6, 2023 · release notes

    Akto v1.29.3 adds four new test categories and a rate limiting feature with UI improvements for the test editor.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.29.3 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.29.3

    • Adds a configurable rate_limit feature to control API request frequency during testing

    1 detail in Everything

79. v1.29.2 Jun 1, 2023 · release notes

    Adds a test editor screen and YAML templates backend for API security testing.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.29.2 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.29.2

    • Adds test editor screen to the UI for creating and managing API tests
    • Adds yaml templates backend to support YAML-based test configuration

    2 details in Everything

80. v1.29.1 May 22, 2023 · release notes

    Akto v1.29.1 adds AktoGPT opt-in, test YAML support, CICD integration, and dashboard #tab navigation

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.29.1 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.29.1

    • steps: In the UI, add a #<tab-name> hash fragment to the dashboard URL (e.g., https://.../dashboard#/tests) to navigate directly to that tab.
    • Adds an opt-in toggle for AktoGPT in the settings to enable generative AI features.
    • Adds support for defining tests via YAML files, enabling new test yamls configuration.
    • Adds CICD integration capability to the cyber toolchain.

    4 details in Everything

81. v1.28.6 Apr 10, 2023 · release notes

    Akto v1.28.6 adds ChatGPT integration, sensitive file checks, and expanded sensitive data types.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.28.6 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.28.6

    • Adds ChatGPT integration to provide AI-assisted analysis within the Akto interface
    • Adds sensitive file check capability to detect exposure of sensitive files in API responses
    • Adds US addresses as a recognized sensitive data type for detection patterns
    • Adds Europe specific sensitive data types to expand regional coverage
    • Adds test-results step in the onboarding flow to streamline initial setup

    5 details in Everything

82. v1.28.5 Mar 18, 2023 · release notes

    Akto v1.28.5 adds gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication. and JSONP support to inventory, gRPC/GraphQL support to Burp extension, and a new onboarding flow.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.28.5 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.28.5

    └──▷ HOW TO FIND IT
    Use the Burp extension to intercept and test gRPC or GraphQL traffic directly from your browser proxy.
    📍Install the Akto Burp Extension and ensure grpc and graphql are enabled in the extension settings.
    • Added support for gRPC and JSONP in inventory
    • Added new onboarding flow for all users

    2 details in Everything

83. v1.28.2 Mar 8, 2023 · release notes

    Adds fintech PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. detection types and improves Swagger export in Akto v1.28.2

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.28.2 https://github.com/akto-api-security/akto.git
    # already have the repo? check out this version:
    $ git checkout v1.28.2

    • Added fintech PII source for enhanced sensitive data classification
    • Improved Swagger export functionality for better schema representation

    2 details in Everything