https://cybertoolchain.io/tools/bright-security New releases and features in Bright Security, tracked by The Cyber Toolchain. en Tue, 22 Sep 2026 00:00:00 GMT https://docs.brightsec.com/changelog/release-of-september-22-2026 https://docs.brightsec.com/changelog/release-of-september-22-2026 Tue, 22 Sep 2026 00:00:00 GMT Bright adds fuzzing mode to STAR Harness, three new security tests, 2,000+ entry point scanning, and a new Optimizer dashboard.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Deprecates the `entrypointsStatuses` property in the Scan Configuration API; use the `entryPointFilter` property instead, which accepts `securityStatus` and `connectivityStatus` arrays for more flexible entry point selection.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `entryPointFilter` to the Scan Configuration API, supporting fields `securityStatus` (e.g. `'new'`) and `connectivityStatus` (e.g. `'ok'`) to replace `entrypointsStatuses`. • Adds a new Email Spoofing security test that checks a domain's public DNS records for missing or weak DMARC, SPF, DKIM, and BIMI configuration. • Adds a new Source Map Exposure security test that detects publicly accessible JavaScript source maps (`.js.map`) exposing original source code and internal application structure. • Adds a new MCP Tool Inventory Disclosure security test that detects when an LLM-powered entry point can be made to reveal the list of MCP tools available to it. • Adds a Fuzzing Mode to STAR Harness that hunts robustness and memory-safety bugs (crashes, hangs, type confusion, unhandled exceptions, unbounded allocation, algorithmic complexity) in code past input validation, without requiring a scan, authentication, or Repeater. • Introduces the Bright Optimizer, a new experience surfacing scan improvement opportunities — manually triggered scans, low health scores, and long-running scans — configurable via Organization Settings -> General Details -> Optimizer Settings. • Adds four new Task Overview widgets to Organization and Project dashboards: Task Results, Task Triggers, Task Actors, and Task Durations, with support for project, task type, and date-range filters. • Workflows can now scan applications with more than 2,000 Entry Points by automatically dividing discovered entry points into sequential batches of up to 2,000 within a single Workflow Run. • Adds new built-in Scan templates: `Web Application`, Web Application (without database), API Scan (without database), OWASP Top 10 for Web Apps (2025), and `LLM & GenAI Applications`. • Replaces the raw JSON block in the Advanced Authentication Editor with a step-based editor supporting per-step view, edit, add, copy, delete, reorder, JSON validation, and sensitive value masking. • Renames built-in templates `Light Scan` to `CI/CD Light Scan` and `Passive Scan` to Passive Scan (production safe) to better describe their intended use. • Improved Workflow Run details now show execution progress as executed-out-of-total nodes, a node status breakdown, a warning indicator for problematic nodes, a `View Scans` action filtered by Workflow Run, and configurable table columns. • Extends the ID Enumeration security test to cover list endpoints that return a JSON array at the root, detecting broken object-level authorization previously missed. • Extends the Full Path Disclosure security test to recognize hosted CI/CD build roots including Azure DevOps, GitHub Actions, and Travis. • Upgrades the CVE filter in Issues tables to a dropdown populated with CVEs detected in the current project, replacing manual text entry. Breaking changes: • The GitHub Marketplace Actions and npm packages under the `Neuralegion` GitHub organization will move to `BrightSec` on October 20; workflows or integrations that reference `Neuralegion` directly will need to be updated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bright-security https://docs.brightsec.com/changelog/release-of-august-25-2026 https://docs.brightsec.com/changelog/release-of-august-25-2026 Tue, 25 Aug 2026 00:00:00 GMT Bright adds orchestrated Workflows, OWASP Top 10 dashboard widget, and connectivity-status-based scan filtering • Adds `entryPointFilter` to the Scan Configuration API, replacing `entrypointsStatuses`, supporting filtering by both `securityStatus` and `connectivityStatus` (e.g. `'ok'`, `'unauthorized'`, `'problem'`, `'unreachable'`) for precise scan scoping. • Introduces Bright Workflows: a visual orchestration layer that chains a trigger, Discovery, and Scan into a reusable, schedulable pipeline that automatically identifies new and changed entry points since the last baseline and passes only those to the Scan. • Adds an OWASP Top 10:2025 Risk Overview widget to both Organization and Project dashboards, aggregating open issues across selected projects mapped to OWASP categories. • Adds Connectivity Status filtering to Scan by Status, defaulting to entry points with `OK` status; optionally includes `Unauthorized`, `Problem`, or `Unreachable` endpoints alongside the existing Entry Point Status filter. • Expands CORS Misconfiguration detection to cover origin reflection with credentials, the highest-severity CORS bypass scenario. • Broadens EXIF Metadata detection to cover API responses that return site-root image paths without a leading slash. • Improves Secret Tokens detection accuracy for Bing Maps and LinkedIn keys with tighter patterns that exclude bundled content and unrelated marketing data. • Improves CSS Injection out-of-band confirmation by maintaining browser context during callback verification. Breaking changes: • The `entrypointsStatuses` property in the Scan Configuration API is scheduled for deprecation on 22 September 2026; migrate integrations to `entryPointFilter` (with `securityStatus` and `connectivityStatus` sub-fields) before that date. • Removes the `X-XSS-Protection` misconfiguration check from Header Security tests; scanners that previously relied on this finding will no longer receive it. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bright-security https://docs.brightsec.com/changelog/release-of-august-11-2026 https://docs.brightsec.com/changelog/release-of-august-11-2026 Tue, 11 Aug 2026 00:00:00 GMT Bright Security adds EXIF metadata leakage detection, repeater infrastructure widget, per-project authentication management, and project classification. • New 'EXIF Metadata Leakage' security test uploads canary images with GPS coordinates, device identifiers, timestamps, and comment fields to file upload endpoints, then checks served copies across upload responses, redirects, API responses, rendered HTML, and linked image URLs; reports Medium severity findings under CWE-1230. Covers JPEG and PNG formats and supports multipart and JSON-encoded uploads. • New Repeater Insights widget on the Organization Dashboard shows connected, active, idle, disconnected, and disabled repeaters alongside running, queued, and scheduled Scan and Discovery tasks across selected projects. • New Authentications tab on the Project page lets teams view, create, and edit project-scoped authentications — with automatic assignment to the current project on creation — without leaving the project context. • New project classification attributes (Environment, Business Criticality, Exposure) available for filtering on the Projects page and Organization Dashboard to prioritize security efforts. • Host-based project search now available in the Projects table and the project selector in the Organization Dashboard. • Entry Points table now displays the skip reason when an entry point is omitted due to a missing Content-Type header, with additional tooltip guidance and the ability to sort by skip reason. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bright-security https://docs.brightsec.com/changelog/release-of-june-2-2026 https://docs.brightsec.com/changelog/release-of-june-2-2026 Tue, 02 Jun 2026 00:00:00 GMT New GitHub AgentHQ agent integration, flexible Jira field mapping, and automatic scan pause on connectivity loss • Introduces Bright Security as an agent in GitHub AgentHQ to run dynamic scans directly within GitHub sessions • Adds automatic mapping support for mandatory custom fields (e.g., Story Points, Priority) during Jira integration setup • Enables automatic pausing of scans and discoveries for up to seven days when infrastructure or connectivity issues are detected Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bright-security https://docs.brightsec.com/changelog/release-of-may-5-2026 https://docs.brightsec.com/changelog/release-of-may-5-2026 Tue, 05 May 2026 00:00:00 GMT Adds MCP server detection, runtime repeater indicators, task duration limits, and Anthropic/OpenAI-compatible STAR inference. • The crawler now detects MCP servers, extracting tools, resources, and prompts as separate entrypoints visible in a new `MCP server name` column with filter support • Adds runtime indicators to the Repeater selector and settings page showing queued, running, and scheduled execution counts • Allows filtering and searching repeaters by connectivity and workload in the Repeater selector and settings page • Shows the number of projects connected to each repeater in the Repeater settings page alongside new filtering and searching options • Supports using Anthropic inference for STAR agents • Supports any OpenAI-compatible endpoint (such as Azure or self-hosted inference) for STAR • Improves STAR agents' ability to understand connectivity between affected code and entry points in Go applications Breaking changes: • The `GET /api/v1/scans/:scanId/issues` endpoint is limited to a maximum of 100 issues per request on July 7, 2026; migration to the paginated `GET /api/v2/scans/:scanId/issues` endpoint is required for full dataset retrieval. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bright-security https://docs.brightsec.com/changelog/release-of-april-7-2026 https://docs.brightsec.com/changelog/release-of-april-7-2026 Tue, 07 Apr 2026 00:00:00 GMT Bright Security adds Organization Dashboard, API access to widget data, and BitBucket integration • Adds the Organization Dashboard for a unified view across all projects with widgets for security grade, aging issues, and remediation trends • Enables API keys with `projects:read` scope to retrieve Project and Organization dashboard widget data programmatically • Adds Atlassian BitBucket code repositories and BitBucket Pipelines CI/CD service support in STAR Breaking changes: • MongoDB (NoSQL) Injection test is deprecated and removed from the platform • Unconfirmed issues will no longer be generated as of May 5th Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bright-security https://docs.brightsec.com/changelog/release-of-march-10-2026 https://docs.brightsec.com/changelog/release-of-march-10-2026 Tue, 10 Mar 2026 00:00:00 GMT Bright Security adds a Scans tab to the Project page for in-context scan management • Adds a `Scans` tab directly within the Project page for viewing and managing scan activity Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bright-security