https://cybertoolchain.io/tools/aurascape New releases and features in Aurascape, tracked by The Cyber Toolchain. en Mon, 05 Oct 2026 20:38:48 GMT https://aurascape.ai/resources/blog/september-2026-product-update/ https://aurascape.ai/resources/blog/september-2026-product-update/ Mon, 05 Oct 2026 20:38:48 GMT Aurascape September 2026 adds sensitive data masking, granular per-model policy, MCP conversation detail, and classification management APIs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New APIs automate management of data patterns, data categories, and data combination lists for data classification configurations, and can retrieve the supporting objects those configurations reference.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds sensitive data masking as a mode of the `redact` action in Protection policy, replacing sensitive values in prompts before they reach the LLM and restoring real values in the response the user reads. • Adds administrator SSO activity to Audit Logs, recording successful and failed login attempts with timestamp, status, and source IP address. • Conversation records for coding sessions now separate `system prompt`, `user prompt`, and `endpoint details` into individual fields, with expanded response content for Model Context Protocol (MCP) interactions. • Zero-Bypass MCP Gateway traffic now surfaces `process name` details, letting analysts attribute an interaction to the specific local application or agent behind it. • On-demand reports now include a `Unique User Counts by Application` metric and a `Top Protection Policy Hits` bar chart alongside the existing application breakdown. • Deepens model-level access policy controls with more granular per-model enforcement for Claude, the Anthropic API, ChatGPT, the OpenAI API, Google Vertex AI API, and Amazon Bedrock, supporting coach (warning or confirmation) and block actions. • Adds more options for administrators to customize the frequency of real-time coaching notifications when users repeatedly trigger the same Protection policy, to reduce alert fatigue. • Administrators can unmask sensitive values in the `Conversations` view (subject to user role permissions) during investigations without those values having been sent to the model. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aurascape https://aurascape.ai/resources/blog/coding-assistant-guardrails-live-session/ https://aurascape.ai/resources/blog/coding-assistant-guardrails-live-session/ Fri, 04 Sep 2026 15:00:00 GMT Aurascape launches Coding Assistant Guardrails to govern live AI coding sessions — blocking secrets, destructive commands, and prompt injection in flight. • Introduces Coding Assistant Guardrails, a new solution that inspects and enforces policy on live AI coding-assistant sessions — covering Claude Code, GitHub Copilot, and Cursor — before any artifact exists to scan. • Decodes coding-assistant streaming protocols (Server-Sent Events, WebSockets, Protobuf, gRPC, and MCP) inline without buffering, preserving native streaming speed for developers while enabling content inspection. • Detects and blocks or redacts secrets and credentials pasted into prompts in flight, before the model receives them, with the event captured as auditable evidence. • Intercepts destructive shell commands and unauthorized git pushes at the wire level, in the tool call the model streams back, before the client executes them — with configurable block or confirmation-checkpoint policy. • Detects prompt injection hidden in READMEs, documentation, and MCP outputs, neutralizing hijacked instructions before the agent acts on them. • Flags typosquatted packages and spoofed links recommended by a model, surfacing supply-chain attempts as visible, reportable events. • Provides continuous discovery of IDE plugins, extensions, and MCP servers as they appear, with new or uncataloged apps receiving signatures on a 48-hour SLA — removing the need for hand-maintained allowlists. • Exposes MCP tool calls down to their parameters for visibility and policy enforcement. • Delivers auditable conversation logs — capturing prompts, responses, connections, and tool calls behind each policy flag — under role-based access control for security investigations. • Offers customizable coaching templates that surface in-browser, in-IDE, or in-terminal explanations and safer paths when a policy action fires. • Enables natural-language queries over AI usage, risk, and policy data through Auri. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aurascape https://aurascape.ai/resources/blog/coding-assistant-guardrails-live-session/ https://aurascape.ai/resources/blog/coding-assistant-guardrails-live-session/ Fri, 04 Sep 2026 15:00:00 GMT Aurascape launches Coding Assistant Guardrails to govern live AI coding sessions — blocking secrets, destructive commands, and prompt injection in flight.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces Coding Assistant Guardrails, a new solution that inspects and enforces policy on live AI coding-assistant sessions — covering Claude Code, GitHub Copilot, and Cursor — before any artifact exists to scan.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Decodes coding-assistant streaming protocols (Server-Sent Events, WebSockets, Protobuf, gRPC, and MCP) inline without buffering, preserving native streaming speed for developers while enabling content inspection. • Detects and blocks or redacts secrets and credentials pasted into prompts in flight, before the model receives them, with the event captured as auditable evidence. • Intercepts destructive shell commands and unauthorized git pushes at the wire level, in the tool call the model streams back, before the client executes them — with configurable block or confirmation-checkpoint policy. • Detects prompt injection hidden in READMEs, documentation, and MCP outputs, neutralizing hijacked instructions before the agent acts on them. • Flags typosquatted packages and spoofed links recommended by a model, surfacing supply-chain attempts as visible, reportable events. • Provides continuous discovery of IDE plugins, extensions, and MCP servers as they appear, with new or uncataloged apps receiving signatures on a 48-hour SLA — removing the need for hand-maintained allowlists. • Exposes MCP tool calls down to their parameters for visibility and policy enforcement. • Delivers auditable conversation logs — capturing prompts, responses, connections, and tool calls behind each policy flag — under role-based access control for security investigations. • Offers customizable coaching templates that surface in-browser, in-IDE, or in-terminal explanations and safer paths when a policy action fires. • Enables natural-language queries over AI usage, risk, and policy data through Auri. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aurascape https://aurascape.ai/resources/data-sheet/zero-bypass-mcp-gateway-data-sheet/ https://aurascape.ai/resources/data-sheet/zero-bypass-mcp-gateway-data-sheet/ Thu, 20 Aug 2026 18:09:00 GMT Aurascape Zero-Bypass MCP Gateway pairs an MCP Gateway with an AI Proxy to block tool calls that skip policy enforcement • Introduces the Zero-Bypass MCP Gateway, which governs MCP tool access and marks every approved call so the AI Proxy can block any tool invocation that bypassed the Gateway before the model acts. • Adds automatic MCP server and tool discovery with automatic enrollment, eliminating manual registration of AI agent tool surfaces. • Supports tool-level sanctioning bound to users and groups, enabling fine-grained access control over which agents can call which MCP tools. • Provides policy actions ranging from coaching to hold-for-approval to blocking for MCP tool calls. • Implements OAuth 2.1 authorization with tokens scoped per user per server for MCP connections. • Generates audit-ready records of every observed MCP conversation for compliance and investigation. • Detects and maps coverage against the OWASP MCP Top 10, including tool-poisoning attacks and credential-chaining scenarios across multiple systems. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aurascape