https://cybertoolchain.io/tools/apiiro New releases and features in Apiiro, tracked by The Cyber Toolchain. en Sun, 28 Jun 2026 00:00:00 GMT https://updates.apiiro.com/en/container-security-artifacts-leveled-up https://updates.apiiro.com/en/container-security-artifacts-leveled-up Sun, 28 Jun 2026 00:00:00 GMT New preview features for container security include dedicated risks dashboards, revived inventory filters, and automatic ownership mapping. • Adds dedicated container risks & dashboards with a funnel and filters for artifact version, scan origin, vulnerability identifier, and package manager • Revamps the Artifacts inventory to allow filtering by specific version and instantly viewing mapped repositories, applications, and teams • Enables automatic ownership linking of artifacts to their repository's application and team Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/new-secret-types-detected-_-expect-new-findings-in-existing-code-i7Gv0fsC https://updates.apiiro.com/en/new-secret-types-detected-_-expect-new-findings-in-existing-code-i7Gv0fsC Mon, 22 Jun 2026 00:00:00 GMT Apiiro expands secrets detection to include Azure SAS, GCP service accounts, PuTTY keys and more. • Detects newly supported secret types including Azure Storage SAS tokens, GCP service account credentials, PuTTY private keys, Twilio Account SIDs, and Samsara API tokens. • Improves detection for Slack incoming webhooks, high-entropy KEY=value pairs, and passwords in IaC template defaults. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/preview-code-snippets-directly-in-risk-pane https://updates.apiiro.com/en/preview-code-snippets-directly-in-risk-pane Tue, 16 Jun 2026 00:00:00 GMT New inline code preview capability in the risk pane for SAST, API security, pipeline misconfiguration, pipeline dependency, and IaC risks. • Adds inline code preview in the risk pane via the eye icon for Path or Introduced through fields • Enables global configuration of code snippet preview under Settings > Global Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/monitor-your-repositories-from-application-inventory https://updates.apiiro.com/en/monitor-your-repositories-from-application-inventory Sun, 14 Jun 2026 00:00:00 GMT Apiiro vMonitor repos: New UI allows toggling monitor status per repo/project in Application Inventory with bulk actions and pre-filtered views. • Adds 'View repos' and 'View projects' CTAs on the Application page that jump to the inventory, pre-filtered to repositories not monitored • Adds a monitoring toggle and row-level status indicators (Active, Archived, Inactive) for individual repositories in the Inventory table • Adds bulk select/deselect capability for repository monitoring controls in the Inventory table • Expands 'Connectors + Applications' permission scope to include access to Monitor All functionality, previously locked to Global admins Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/simplified-permissions-management-for-roles-_-now-in-ga https://updates.apiiro.com/en/simplified-permissions-management-for-roles-_-now-in-ga Sun, 10 May 2026 00:00:00 GMT Apiiro GA adds category-level role permissions with auto-updating sub-permissions and default read access. • Adds `category-level control` to roles for Risk, Inventory Management, User Management, Reports, and Governance, removing manual sub-permission configuration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/jira-scoped-token-support-WKCns3va https://updates.apiiro.com/en/jira-scoped-token-support-WKCns3va Sun, 19 Apr 2026 00:00:00 GMT Apiiro adds support for Jira API tokens scoped to specific permissions • Adds `JIRA_API_TOKEN` support with Jira scope restrictions for least-privilege integration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/bi_directional-jira-enhancements-_-now-in-ga https://updates.apiiro.com/en/bi_directional-jira-enhancements-_-now-in-ga Mon, 02 Mar 2026 00:00:00 GMT Apiiro GA release adds automatic risk updates, custom closed statuses, Data Center support, and manual unlinking to its bi-directional Jira integration. • Adds automatic risk updates in Jira by allowing users to choose between adding a comment or fully updating the ticket description when risk attributes change • Adds ability to define custom closed status on risk resolution by configuring preferred Jira statuses for resolved, accepted, or ignored risks with built-in fallbacks • Adds Jira Data Center (On-Prem) support for the bi-directional Jira integration for versions v9.12 or later • Adds manual unlinking of Jira tickets from Apiiro risks Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/introducing-oss-package-health https://updates.apiiro.com/en/introducing-oss-package-health Tue, 24 Feb 2026 00:00:00 GMT Apiiro introduces OSS Package Health SCA risk category with OpenSSF Scorecard and release recency analysis • Adds `OSS Package Health` as a new SCA risk category to triage dependencies based on operational health signals. • Enriches package insights with OpenSSF Scorecard metrics, release recency labels (`Outdated`, `Stale`, `Mature`), and popularity signals (GitHub stars, weekly downloads). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/%E2%84%B9-introducing-the-informational-risk-level https://updates.apiiro.com/en/%E2%84%B9-introducing-the-informational-risk-level Sun, 01 Feb 2026 00:00:00 GMT Apiiro adds an 'Informational' risk level, excluding related risks from default score calculations. • New `Informational` risk level allows classifying risks that do not require immediate action • Risks can be classified as `Informational` via dedicated policies, manual update, or API Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/org-level-api-inventory-is-now-ga-know-your-api-attack-surface-Q6ze6NEc https://updates.apiiro.com/en/org-level-api-inventory-is-now-ga-know-your-api-attack-surface-Q6ze6NEc Mon, 26 Jan 2026 00:00:00 GMT Apiiro org-level API Inventory is GA: central view of APIs linked to runtime endpoints with filtering by method, language, app, repo, insights, or team. • Introduces the Org level API Inventory feature for a centralized view of all detected APIs across the organization. • Enables mapping the real API attack surface by linking detected APIs to runtime endpoints from integrations like Akamai API Security or Salt Security. • Allows filtering and drilling down the inventory by HTTP method, language, app, repo, insights, or team for focused triage. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/on_demand-differential-scanning-via-api-is-now-available-Jrnv12lp https://updates.apiiro.com/en/on_demand-differential-scanning-via-api-is-now-available-Jrnv12lp Mon, 26 Jan 2026 00:00:00 GMT Apiiro introduces on-demand differential scanning via API to evaluate code differences between commits or branches in CI/CD workflows. • Adds the ability to trigger on-demand diff scans via the Apiiro API, specifying targets by SHA, branch, or tag • Enables inclusion of third-party security findings in diff scans through the Apiiro Upload Findings API • Provides a dedicated Diff Scan Experience for tracking manual release risk assessments and scan results Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/new-experience-for-sca-security-risks-oss-vulnerabilities-KRRduQUj https://updates.apiiro.com/en/new-experience-for-sca-security-risks-oss-vulnerabilities-KRRduQUj Wed, 24 Dec 2025 00:00:00 GMT Apiiro introduces unified SCA deduplication, CVE pane with LLM triage hints, and CVSS v4 support. • Adds automatic deduplication of vulnerability identifiers across multiple SCA vendors, consolidating them into a single view • Adds CVSS v4 support alongside existing CVSS v2 and v3 for severity scoring Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/manage-compliance-risk-with-apiiros-oss-licenses-experience https://updates.apiiro.com/en/manage-compliance-risk-with-apiiros-oss-licenses-experience Sun, 14 Dec 2025 00:00:00 GMT New default OSS license policies and detailed license inventory views. • Adds ability to view complete license details including type, terms of use, and OSI/FSF approval for each dependency. • Adds detection for edge cases such as missing, unknown, or multi-license packages within the license inventory. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/now-in-ga-stop-pr-scans-instantly-ZLvM74EM https://updates.apiiro.com/en/now-in-ga-stop-pr-scans-instantly-ZLvM74EM Wed, 10 Dec 2025 00:00:00 GMT Apiiro GA introduces Killswitch to instantly stop PR scans across GitHub, GitLab, and Azure DevOps • Adds 'Global Stop' killswitch to end validation for all active PRs in one click • Adds 'Selective Stop' killswitch to unblock specific PRs via multi-select • Extends killswitch cross-platform support to GitHub, GitLab, and Azure DevOps Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/know-your-oss-attack-surface-the-org_level-dependencies-inventory-is-now-in-ga https://updates.apiiro.com/en/know-your-oss-attack-surface-the-org_level-dependencies-inventory-is-now-in-ga Thu, 04 Dec 2025 00:00:00 GMT Org-level dependencies Inventory is now GA with filtering by vulnerabilities, licenses, apps, repos, and teams. • Adds Org-level dependencies Inventory for a centralized view of all detected dependencies across repositories • Adds filtering capabilities to drill down dependencies by vulnerabilities, licenses, applications, repositories, or teams Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/now-in-ga-a-new-network-broker-is-now-available https://updates.apiiro.com/en/now-in-ga-a-new-network-broker-is-now-available Wed, 03 Dec 2025 00:00:00 GMT Apiiro GA Network Broker introduces Connector experience, multi-agent deployment, wildcard support, and high availability. • Introduces the `Connector` experience for streamlined, self-service setup of the Network Broker • Adds support for multiple Broker Agents to manage several network environments simultaneously • Enables high availability and scalability by allowing deployment of multiple active instances • Adds wildcard host support (`*.<domain>`) to register a host and all its subdomains in one step • Allows side-by-side deployment with the legacy Broker for gradual transition Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/connector-health-at-a-glance https://updates.apiiro.com/en/connector-health-at-a-glance Wed, 26 Nov 2025 00:00:00 GMT Track connector health directly from the Apiiro Dashboard with a new Connection status panel. • Adds a Connection status panel to the top left of the Dashboard showing connector health states: Partially functional or Non-functional. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/now-in-ga-enhance-your-sla-policies-with-apiiros-new-granular-control-uxSi5HpX https://updates.apiiro.com/en/now-in-ga-enhance-your-sla-policies-with-apiiros-new-granular-control-uxSi5HpX Wed, 05 Nov 2025 00:00:00 GMT Apiiro introduces granular SLA policies allowing specific per-team or per-application settings that override global defaults. • Adds the ability to create Specific SLA policies that automatically override Global SLA policies for a team or application • Enables setting specific SLA policies for each severity level via Granular Control • Allows targeting SLAs to specific assets using an explicit asset list or Application tags • Introduces an SLA Dashboard to track compliance levels by risk severity Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/now-ga-enhanced-pull-request-scans-for-developers-SSvKAtbg https://updates.apiiro.com/en/now-ga-enhanced-pull-request-scans-for-developers-SSvKAtbg Sun, 02 Nov 2025 00:00:00 GMT Apiiro GA enhanced PR scan UX with collapsible risk views and standardized finding formats • Adds collapsible risk views to pull request scans for a distraction-free review experience • Standardizes risk titles and templates across SCA, SAST, Secrets, and API findings in PR scans Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/new-supply-chain-attack-worm-malware-in-npm-packages-ZNWi8f12 https://updates.apiiro.com/en/new-supply-chain-attack-worm-malware-in-npm-packages-ZNWi8f12 Wed, 17 Sep 2025 00:00:00 GMT New npm supply chain worm detection insights and remediation tools • Adds 'Malicious package' insight filter in SCA > Risks for detecting compromised dependencies. • Updates Risk Graph Explorer to support tracing dependency trees for affected services or repos. • Provides Malicious Code Ruleset for securing CI/CD stages against malicious payloads. • Introduces PRevent app to block malicious commits from being added to repositories. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/manual-findings-entry-is-here-jJ836xKb https://updates.apiiro.com/en/manual-findings-entry-is-here-jJ836xKb Tue, 02 Sep 2025 00:00:00 GMT Apiiro adds manual findings entry via web UI form and CSV bulk upload for non-automated assessments. • Adds a new UI section to create, view, and manage manual findings directly in the Apiiro platform • Enables bulk uploading of manual findings using a CSV template alongside single-finding entry via a simple form Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/connect-your-bug-bounty-programs-to-apiiro-kF8Lw85M https://updates.apiiro.com/en/connect-your-bug-bounty-programs-to-apiiro-kF8Lw85M Thu, 07 Aug 2025 00:00:00 GMT Adds native integrations for HackerOne and Bugcrowd bug bounty programs to centralize findings • Integrates bug bounty findings from HackerOne into Apiiro • Integrates bug bounty findings from Bugcrowd into Apiiro Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/enhanced-inventory-dashboard-for-better-oversight-treOeoc1 https://updates.apiiro.com/en/enhanced-inventory-dashboard-for-better-oversight-treOeoc1 Mon, 14 Jul 2025 00:00:00 GMT Enhanced inventory dashboard adds overview tiles for repositories, APIs, and OSS packages with trend analysis and anomaly-highlighting treemap. • Adds "Inventory at a Glance" overview tiles for Repositories, APIs, OSS Packages, Technologies with growth trends. • Adds an interactive treemap to the Inventory Dashboard that breaks down technologies by type (e.g., GenAI, Logging) and highlights anomalies. • Enables tracking of trends in sensitive APIs, inactive contributors, and data exposure within the Inventory Dashboard. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/take-charge-with-custom-sast-risk-policies https://updates.apiiro.com/en/take-charge-with-custom-sast-risk-policies Sun, 13 Jul 2025 00:00:00 GMT Apiiro adds Custom SAST Risk Policies in Explorer to filter findings, assign risk levels, and flag toxic combos • Adds ability to create and manage custom SAST risk policies directly in the Apiiro Explorer UI. • Introduces filtering capabilities to exclude non-security findings (bugs, performance issues) from SAST results. • Enables assignment of risk levels based on finding likelihood or OWASP Top 10 classification. • Adds detection logic to highlight 'toxic combos' where SAST findings are in applicative code, API-related, and internet-exposed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/govern-your-code-enforce-branch-protection-with-apiiro-rl4X2yDt https://updates.apiiro.com/en/govern-your-code-enforce-branch-protection-with-apiiro-rl4X2yDt Wed, 09 Jul 2025 00:00:00 GMT Apiiro now monitors minimum code reviewers and GitHub's 'Require Approval of the Most Recent Reviewable Push' branch protection setting via Apiiro Explorer. • Adds monitoring for minimum required code reviewers per branch to generate risk alerts when policies are violated • Adds detection of the GitHub "Require Approval of the Most Recent Reviewable Push" rule status in Apiiro Explorer Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/now-in-ga-enhanced-vulnerability-detection-insights-for-unmanaged-packages-with-apiiros-sca-i1gJtrbj https://updates.apiiro.com/en/now-in-ga-enhanced-vulnerability-detection-insights-for-unmanaged-packages-with-apiiros-sca-i1gJtrbj Tue, 08 Jul 2025 00:00:00 GMT GA: enhanced vulnerability detection & insights for unmanaged packages in Apiiro's SCA • Adds support for scanning unmanaged package artifacts (.jar, .dll, .war, .ear) via Apiiro's SCA. • Adds the `packageOrigin` property to the Explorer view for locating bundled packages across your organization. • Expands supported dependency formats to include `deps.json` and `pnpm` in the support matrix. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/supercharge-your-risk-detection-with-explorer-policies-natFwyxs https://updates.apiiro.com/en/supercharge-your-risk-detection-with-explorer-policies-natFwyxs Tue, 08 Jul 2025 00:00:00 GMT Adds Explorer Policies in Risk Graph Explorer for custom risk detection, classification, and automated mitigation workflows. • Adds `Explorer Policies` created via the `Risk Graph Explorer` to identify and classify complex risk scenarios • Allows assigning clear risk levels, categories, and dynamic descriptions through new policy conditions • Enables triggering automated workflows and threat mitigation actions based on Explorer Policies Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/fortify-your-code-malicious-package-detection-fvoCSo1o https://updates.apiiro.com/en/fortify-your-code-malicious-package-detection-fvoCSo1o Thu, 05 Jun 2025 00:00:00 GMT Apiiro adds malicious open-source package detection with automated PR blocking • Adds detection of malicious open-source packages with detailed malware information in Apiiro’s SCA solution • Enables automatic safeguard workflows to block malicious packages in pull requests Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/introducing-the-custom-reports-workspace-iRilyXnO https://updates.apiiro.com/en/introducing-the-custom-reports-workspace-iRilyXnO Mon, 07 Apr 2025 00:00:00 GMT Apiiro vIntroducing adds the Custom Reports workspace with query builder, multi-filter selection, and saved personal collections • Adds `Custom Reports Workspace` providing an intuitive query builder for tailored report creation • Adds ability to save pre-filtered reports into personal collections for organization and quick access • Adds multi-filter selection capability across reports in the Custom Reports Workspace Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/effortless-managed-semgrep-configuration-now-in-your-settings https://updates.apiiro.com/en/effortless-managed-semgrep-configuration-now-in-your-settings Mon, 03 Mar 2025 00:00:00 GMT New Settings UI for Managed Semgrep configuration (scan toggle, ruleset customization) without API calls • Adds `Managed Semgrep` settings page in the app UI enabling on/off toggle and ruleset customization via intuitive interface • Removes requirement for manual API calls to configure Managed Semgrep scanner settings Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/introducing-native-software-supply-chain-security-jlE89l0W https://updates.apiiro.com/en/introducing-native-software-supply-chain-security-jlE89l0W Mon, 03 Mar 2025 00:00:00 GMT Apiiro GA adds native Software Supply Chain Security with new dashboard and risk detection for CI/CD pipelines and SCM repos • Adds `Supply Chain Security Dashboard` and `Supply Chain Security Risks` pages to view supply chain coverage and risks in the context of application risk landscape. • Enables detection of risks in GitHub & GitLab, including weak branch protection rules and permissions. • Detects pipeline misconfigurations and dependency vulnerabilities within CI/CD pipelines and SCM repositories. • Adds workflow triggers for SSCS risks, abnormal commit activity, and pipeline config file changes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/introducing-asset_based-risk-scores-track-compare-and-prioritize-risk-A5Xd4Gmr https://updates.apiiro.com/en/introducing-asset_based-risk-scores-track-compare-and-prioritize-risk-A5Xd4Gmr Tue, 25 Feb 2025 00:00:00 GMT Apiiro introduces Asset-based Risk Scores with numeric scores, percentile ranks, and configurable severity weighting. • Adds Asset-based Risk Scores that provide a daily numeric risk score for assets. • Enables cross-asset comparison using a daily calculated percentile rank. • Introduces `risk score settings` to configure adjustable weighting factors per severity level. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/enhanced-application-creation-form-dwNeOblI https://updates.apiiro.com/en/enhanced-application-creation-form-dwNeOblI Mon, 27 Jan 2025 00:00:00 GMT Apiiro GA's enhanced application creation form with tag-based asset allocation • General availability of the new application creation form UI for smoother setup Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/prioritize-oss-risks-with-the-used-in-code-insight https://updates.apiiro.com/en/prioritize-oss-risks-with-the-used-in-code-insight Mon, 20 Jan 2025 00:00:00 GMT GA release of 'Used in code' insight to filter dormant vs. active SCA risks via UI • Adds the 'Used in code' filter on the SCA Risks Page to distinguish actively imported dependencies from dormant ones. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/new-reports-daily-trend-monitoring-O7diT9pk https://updates.apiiro.com/en/new-reports-daily-trend-monitoring-O7diT9pk Tue, 07 Jan 2025 00:00:00 GMT Apiiro adds SAST, API Security, and SSCS reports with daily open risk trend tiles for remediation tracking. • Adds `SAST Report` to track SAST risks and their remediation progress • Adds `API Security Report` to gain insights into API risks and monitor remediation efforts • Adds `SSCS Report` to track supply chain risks and their mitigation trends Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/enhanced-generative-ai-discovery https://updates.apiiro.com/en/enhanced-generative-ai-discovery Mon, 06 Jan 2025 00:00:00 GMT Adds Inventory > Technologies view for GenAI models/datasets and Risk Graph Explorer for sensitive data tracing • Adds `Inventory > Technologies` page to identify Generative AI models and datasets • Adds `Risk Graph Explorer` to trace sensitive data usage within code modules leveraging GenAI Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/introducing-teams-align-with-your-organizational-structure-cFwdUJ6C https://updates.apiiro.com/en/introducing-teams-align-with-your-organizational-structure-cFwdUJ6C Mon, 23 Dec 2024 00:00:00 GMT Apiiro introduces Teams feature with hierarchical structure support, tag-based asset allocation, and per-team dashboard filtering. • Adds `Teams` as a new organizational unit supporting unlimited hierarchical layers for aligning with company structure • Enables automated asset allocation using GitHub/GitLab topics or custom-created tags within Teams • Allows filtering data per team in dashboards and coverage views to report on risk remediation trends by teams Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/unlock-insights-with-the-new-apiiro-licensing-report https://updates.apiiro.com/en/unlock-insights-with-the-new-apiiro-licensing-report Wed, 30 Oct 2024 00:00:00 GMT New Apiiro Licensing Report adds Active Developer Monitoring, Developer Activity Trends, and Detailed Developer Insights • Adds a new Licensing Report for monitoring active developer counts against license limits • Adds Developer Activity Trends analysis over the last 180 days to understand engagement patterns • Adds access to a complete list of active developers with their last activity date and commit count Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/improved-granularity-for-risk-status-and-risk-level-management-olnCTXLp https://updates.apiiro.com/en/improved-granularity-for-risk-status-and-risk-level-management-olnCTXLp Tue, 15 Oct 2024 00:00:00 GMT Apiiro v2 decouples Risk Status from Risk Level with new management via the Risk pane and All-Risks tables. • Adds independent management of `Risk Status` and `Risk Level` via the Risk pane and All-Risks tables • Retains `Risk Level` when dismissing a risk (accept/ignore) • Tracks all changes in the `Risk Timeline` and `Audit log` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/managed-semgrep-GA https://updates.apiiro.com/en/managed-semgrep-GA Sun, 08 Sep 2024 00:00:00 GMT Apiiro introduces GA for Managed Semgrep to orchestrate SAST across applications with deep context enrichment. • Adds the ability to centrally execute and configure Semgrep analysis for all applications within a single pane of glass. • Enables automatic enrichment of Semgrep findings with Apiiro's deep application context, including code ownership, business impact, and internet exposure. • Supports running Semgrep scans in pull requests via the Apiiro platform's workflow integration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/aspm-secure-code-training-XPAqqYz0 https://updates.apiiro.com/en/aspm-secure-code-training-XPAqqYz0 Mon, 19 Aug 2024 00:00:00 GMT Apiiro adds Secure Code Warrior integration for just-in-time secure code training within AppSec workflows. • Adds `Secure Code Warrior` link option to Apiiro workflows for embedding risk-specific secure code training mapped by CWE and programming language. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/elevate-your-security-management-with-custom-tagging https://updates.apiiro.com/en/elevate-your-security-management-with-custom-tagging Thu, 15 Aug 2024 00:00:00 GMT Apiiro adds custom tagging for applications and repositories with UI/API support and tag-based filtering • Adds Repository Tags that accept imported tags from GitHub topics, GitLab topics, and GitLab CI/CD variables. • Adds Application Tags within the app profile and during application creation. • Enables Flexible Tag Management through the UI with continued API support. • Enhances Filtering to use tags on dashboards, risk tables, and coverage tables. • Allows Tag-Based Explorer Query and Policy Creation using app-repo tags. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/explore-the-new-connectors-page-lovb5cgb https://updates.apiiro.com/en/explore-the-new-connectors-page-lovb5cgb Wed, 31 Jul 2024 00:00:00 GMT Apiiro introduces a revamped Connectors Page UI for managing and previewing integrations. • Adds a new 'Connectors Page' in the UI to browse integrations by category, check connector health status, and view upcoming integration previews. • Enables users to request new integrations directly from the Connectors Page interface. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/new-sast-experience https://updates.apiiro.com/en/new-sast-experience Mon, 15 Jul 2024 00:00:00 GMT Apiiro adds new SAST dashboard/risk page and a REST API to export findings, moving API code risks out of the API security table. • Adds a new `SAST` dashboard and `risks` page in the sidebar for better visibility, prioritization, and remediation guidance of source code findings • Adds filtering by compliance standard on the SAST risk views to support audit assurance workflows • Introduces a new REST API endpoint to export SAST findings for broader extensibility • Moves risks in APIs detected in code to the new SAST experience instead of listing them in the API security table Breaking changes: • The `component` field now contains the `code file` where the finding was identified, instead of the previous value • SAST risks related to APIs will no longer be listed in the API security table Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/unlock-vulnerability-insights-with-the-new-cve-report https://updates.apiiro.com/en/unlock-vulnerability-insights-with-the-new-cve-report Mon, 15 Jul 2024 00:00:00 GMT Apiiro adds a new CVE report with remediation trends, reachability insights, and risk charts. • Introduces the CVE report to track vulnerability remediation trends including open vs resolved risks by criticality and Mean Time to Remediate (MTTR) • Adds deep insights on vulnerabilities leveraging unique reachability insights for crucial applications and packages • Provides a vulnerability risk chart identifying top vulnerabilities by EPSS, CVSS, and risk mass metrics • Enhances filtering capabilities to drill down into specific CVEs using exploitability and reachability insights Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/visualize-risk-exposure https://updates.apiiro.com/en/visualize-risk-exposure Mon, 03 Jun 2024 00:00:00 GMT Apiiro adds visual exposure path tracking for SCA, Secrets, SAST and API risks across SDLC. • Adds visual exposure path tracing for SCA, Secrets, SAST and API risks to map risk from code to runtime • Enables visualization of risk exposure using insights from K8s, cloud and API security tools Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/youre-in-control-with-risk_level-overrides-and-custom-slas-toFQIrxa https://updates.apiiro.com/en/youre-in-control-with-risk_level-overrides-and-custom-slas-toFQIrxa Wed, 15 May 2024 00:00:00 GMT Adds custom SLA policies, risk-level overrides, MTTR dashboard tiles, and risk comments. • Enforces remediation timelines with new custom SLA policies that administrators can define and filter by due date • Allows adjustment of a specific issue's risk level via risk-level overrides to align with organizational needs • Displays new MTTR and Risks by Age tiles on the dashboard for benchmarking against SLAs • Enables adding comments to risks for team triage and tracking changes in the audit log Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/connect-your-on_premise-resources-to-apiiro-xomRqPZh https://updates.apiiro.com/en/connect-your-on_premise-resources-to-apiiro-xomRqPZh Thu, 02 May 2024 00:00:00 GMT Apiiro introduces a new 'Network Broker' to connect on-premise resources for enhanced attack surface visibility • Adds the `Network Broker` capability to securely connect on-premise resources to Apiiro SaaS. • Enables comprehensive visibility and coverage across the entire attack surface, including internal-only network resources. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/secrets-detection-enhancements https://updates.apiiro.com/en/secrets-detection-enhancements Wed, 20 Mar 2024 00:00:00 GMT Apiiro adds JWT parsing, XML/JSON tuning, and 20+ new secret detectors. • Adds a new parser for JWT (JSON Web Tokens) with insights into payload sensitivity, expiration status, and hashing algorithm • Fines tunes parsing algorithms for XML and JSON files to detect previously overlooked secrets • Releases 20+ new secrets detectors including Atlassian access token, Adobe client ID, PagerDuty API key, Travis CI access token, and Flickr API Key Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro https://updates.apiiro.com/en/new-epss-and-exploitability-insights-ewU4vf9F https://updates.apiiro.com/en/new-epss-and-exploitability-insights-ewU4vf9F Sun, 17 Mar 2024 00:00:00 GMT Apiiro enriches open source vulnerability findings with exploitability context to improve prioritization. • Apiiro enriches open source vulnerability findings with exploitability context to improve prioritization. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/apiiro