https://cybertoolchain.io/tools/dreadnode New releases and features in Dreadnode, tracked by The Cyber Toolchain. en Thu, 29 Oct 2026 07:55:05 GMT https://docs.dreadnode.io/release-notes https://docs.dreadnode.io/release-notes Thu, 29 Oct 2026 07:55:05 GMT Dreadnode: Access enriched findings parquet exports with reviewed severity and status, audit trail, ASR, compliance tags, adversarial-ML metrics, and project rollups. • Pin sessions in Chat or Agents › Sessions from the menu in the Chat sidebar so pinned sessions appear at the top of the list. • Retry dropped hosted inference streams automatically up to 3 times with exponential backoff (1 s, 2 s, 4 s) on unstable network paths. • Improves the network-ops capability with a full toolchain now installed on local Docker sandboxes — `nmap`, `smbclient`, `hashcat`, `john`, `impacket`, `certipy-ad`, `bloodyAD`, and `NetExec` — and structured findings (hosts, users, credentials, shares, and weaknesses) viewable in Agent Output after network-ops enumeration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-10-22 https://docs.dreadnode.io/release-notes/2026-10-22 Thu, 22 Oct 2026 00:00:00 GMT Dreadnode adds white-box AI red-teaming attacks, three new jailbreak algorithms, two classifier-evasion attacks, and a deterministic `tool_call_attack_landed` scorer.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `tool_call_attack_landed` scorer for agentic red teaming — measures whether an agent emitted a specific attacker-intended tool call (name and arguments), providing a deterministic, judge-free attack success rate signal.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `metabreak`, `jhaystack`, and `hauntattack` jailbreak attack algorithms to the `airt` SDK — covering chat-template control-token manipulation, long-context attention dilution, and shadow-reasoning framing respectively. • Adds `greedypixel` (greedy per-coordinate descent) and `rayopt` (hard-label boundary search) classifier-evasion attacks to the `airt` SDK, targeting image classifiers via the evasion harness. • Adds white-box attack support (GCG family, embedding, generator, and activation methods) to the `ai-red-teaming` capability; supply a local open-weight model as the surrogate to run them. • Enterprise installs now include a third-party notices file downloadable from Account Settings or at `https://<domain>/third-party-notices`, air-gap compatible and version-matched. • Redesigned navigation is now the default for all users on SaaS and Enterprise. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-10-22 https://docs.dreadnode.io/release-notes/2026-10-22 Thu, 22 Oct 2026 00:00:00 GMT Dreadnode adds white-box AI red-teaming attacks, three new jailbreak algorithms, two classifier-evasion attacks, and a deterministic `tool_call_attack_landed` scorer.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `tool_call_attack_landed` scorer for agentic red teaming — measures whether an agent emitted a specific attacker-intended tool call (name and arguments), providing a deterministic, judge-free attack success rate signal.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `metabreak`, `jhaystack`, and `hauntattack` jailbreak attack algorithms to the `airt` SDK — covering chat-template control-token manipulation, long-context attention dilution, and shadow-reasoning framing respectively. • Adds `greedypixel` (greedy per-coordinate descent) and `rayopt` (hard-label boundary search) classifier-evasion attacks to the `airt` SDK, targeting image classifiers via the evasion harness. • Adds white-box attack support (GCG family, embedding, generator, and activation methods) to the `ai-red-teaming` capability; supply a local open-weight model as the surrogate to run them. • Enterprise installs now include a third-party notices file downloadable from Account Settings or at `https://<domain>/third-party-notices`, air-gap compatible and version-matched. • Redesigned navigation is now the default for all users on SaaS and Enterprise. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-10-15 https://docs.dreadnode.io/release-notes/2026-10-15 Thu, 15 Oct 2026 00:00:00 GMT Dreadnode adds SLIP jailbreak attack, enriched findings parquet with audit/compliance columns, and session pinning in Chat and Agents.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `SLIP` self-jailbreaking attack tool to AI red-teaming, enabling tree-search-based prompt jailbreaks against a target model with configurable depth, branching, and judge models.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enriches the findings parquet export with new columns for audit trail, ASR, compliance tags, adversarial-ML metrics, and project-level rollups, and reflects the latest operator-reviewed severity and status. • Adds session pinning in Chat and Agents: pin sessions from the `...` menu in the Chat sidebar or `Agents › Sessions`; pinned sessions appear at the top of the list and are visible only to you. • Retries hosted inference SDK streams dropped mid-connection up to 3 times with exponential backoff (1s, 2s, 4s) to reduce failures on unstable network paths. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-10-15 https://docs.dreadnode.io/release-notes/2026-10-15 Thu, 15 Oct 2026 00:00:00 GMT Dreadnode adds SLIP jailbreak attack, enriched findings parquet with audit/compliance columns, and session pinning in Chat and Agents.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `SLIP` self-jailbreaking attack tool to AI red-teaming, enabling tree-search-based prompt jailbreaks against a target model with configurable depth, branching, and judge models.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enriches the findings parquet export with new columns for audit trail, ASR, compliance tags, adversarial-ML metrics, and project-level rollups, and reflects the latest operator-reviewed severity and status. • Adds session pinning in Chat and Agents: pin sessions from the `...` menu in the Chat sidebar or `Agents › Sessions`; pinned sessions appear at the top of the list and are visible only to you. • Retries hosted inference SDK streams dropped mid-connection up to 3 times with exponential backoff (1s, 2s, 4s) to reduce failures on unstable network paths. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes https://docs.dreadnode.io/release-notes Tue, 13 Oct 2026 13:46:48 GMT Dreadnode: Adds `ApiClient.list_project_memories` filtering by session ID so agents can trace which memories a session created, updated, or closed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-10-08 https://docs.dreadnode.io/release-notes/2026-10-08 Thu, 08 Oct 2026 00:00:00 GMT Dreadnode adds file/folder uploads in Web Chat, structured binary-analysis output, and a `severity_policy` parameter for AI red-teaming.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `severity_policy` parameter to `generate_attack` so you can define custom risk taxonomies — thresholds, matrices, and aliases — that the agent applies when classifying findings.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `?tool_call=<id>` linkable URL parameter and a 'View in transcript' button in the Media tab to jump directly to the tool call that logged an artifact. • Adds `dependencies.path` field in `capability.yaml` so capabilities can declare additional tool directories for agents running in E2B sandboxes. • Supports filtering project memories by session ID via the API, SDK tool, and `ApiClient.list_project_memories`. • Adds file, folder, and pasted-image uploads directly in Web Chat; uploads land in the runtime workspace so the agent can reference them immediately. • Adds a Memories tab to Sessions showing every memory the session created, updated, closed, or reopened, with links to full memory detail. • Binary-analysis capability now emits structured findings and assets — recovered keys, vulnerability root causes, malicious capabilities, extracted payloads, and embedded endpoints — trackable through the review-and-submit workflow. • Adds a Share action to Chat session menus so a private session can be made visible to the workspace team without leaving Chat. • Eval sample detail page now lists worker sessions the agent started for that attempt, with links to each session in Agent Sessions. • Web Chat capabilities picker now shows the installed version of each capability and offers an inline update when a newer version is available. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-10-01 https://docs.dreadnode.io/release-notes/2026-10-01 Thu, 01 Oct 2026 00:00:00 GMT Dreadnode adds pre-launch sandbox config, bulk finding triage, and SDK Assessment.record_attack_result() for custom-target attacks.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds Assessment.record_attack_result() SDK method so custom-target attacks (multistep tool attacks, indirect injection flows) can emit traces and materialize findings in the platform.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds bulk triage on the Agent Output page — select multiple findings and set their triage status in a single action, with per-row results and a confirmation toast. • Adds pre-launch sandbox configuration panel in the web chat session view: teams can choose capabilities, compute, secrets, and idle timeout before a sandbox starts, then inspect its runtime status, installed capabilities, health issues, and logs in a panel beside the chat. • Adds dataset attribution metadata to SDK push: datasets now carry license, tags, language, task categories, and source provenance, populating the license badge, tag filters, and Source section in the platform. • Adds bulk close and reopen for project memories: select multiple memories on the Memories page and close or reopen them via the bulk-action bar. • Adds safe clickable links in agent content: links in agent messages, tool results, memories, and item notes open a confirmation dialog showing the actual destination before navigating. • Adds organization owner management from the org detail page: owners can be added and removed directly, with a confirmation prompt when adding an unrecognized email. • Adds a no-model-deployments informational notice on self-hosted installs with no model deployments, shown on the home page and in model-dependent CLI guides. • Publishes AIRT dataset library documentation covering 497 curated, license-cleared datasets across 7 media types with OWASP LLM and Agentic coverage mapping. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-09-24 https://docs.dreadnode.io/release-notes/2026-09-24 Thu, 24 Sep 2026 00:00:00 GMT Dreadnode adds inline tool-call approvals, eight new agentic probe families, a browsable Tool catalog, and TUI runtime log switching.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `generate_attack` support for agentic-probes 2026 attacks in the `ai-red-teaming` agent, including transforms for argument injection, deserialization payloads, RAG poisoning, and covert channels, plus matching evidence-gated scorers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds eight new agentic red-teaming probe families to the SDK: evidence-gated scorers and transforms covering tool-misuse RCE, advanced exfiltration, MINJA memory poisoning, MCP line-jumping, RAG optimization attacks, and indirect prompt injection via the new `IterInject` attack loop. • Adds a new provisionable multiagent sandbox target `agentic-probes-sandbox` for 2026 agentic-probe evaluation families. • Press `F5` then `Tab` in the TUI console to switch between local process logs and the connected runtime's server logs, with retained history up to 2,000 entries, level filtering, copy, and save. • Adds a browsable Tool catalog in Agent Policies with searchable metadata, copyable IDs, schema fingerprints, and collapsible input schemas for every visible tool and its revision history. • Held tool calls now appear inline in the conversation transcript with full arguments, the policy reason, and Approve / Reject buttons, replacing the previous generic input card. • Adds a new workbench at `/beta` with a new information architecture across project shell, Hub catalogs (Capabilities, Environments, Datasets, Models), Agent Outputs, and Sessions. • Capability tools, hooks, and workers can now use standard package-relative imports instead of relying on flat module names. • The capability detail page now shows a workflow graph of how the capability's steps connect. • Adds an unread badge on the sidebar account button showing how many release notes have not been seen yet, clearing automatically when Release Notes is opened in Account Settings. • Adds `--max-steps N` with `--print` for explicit autonomy budgets; unattended workflows (`dn --auto`, `/auto`, `/background`, `--print`, guard sessions, and web chat Auto/Background) now default to 100 steps. • SDK 2.0.47 adds runtime capability health inspection for agents, and model selection for local workflow runs. • Transcript headers now show tool policy state (active, disabled, failed, awaiting approval, or not recorded) for both live and past sessions. • Associated workflow runs now appear inline on the Workflows page with status, duration, and run ID. • Agent cold-start is 93% faster — median agent construction drops from ~5 s to ~0.3 s by deferring heavy imports (pandas, numpy, pyarrow, Optuna) until actually used. • E2B sandbox pre-warming bakes server, LiteLLM, agent graph, and first-turn imports into the E2B runtime snapshot, eliminating the largest filesystem-load costs at startup. • Trace storage uploads now run in a background pool so the first chat turn no longer waits on credential fetching or object uploads before issuing the first model request. • SDK scope validation now runs reads concurrently with exponential backoff and an 8-second shared deadline, reducing validation latency. • The workflow run page has a new header, node panel, transcript view, and graph direction controls. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-09-17 https://docs.dreadnode.io/release-notes/2026-09-17 Thu, 17 Sep 2026 00:00:00 GMT Dreadnode Workflows enter open beta with CLI/SDK/UI pipelines, Slack integration, and a built-in agent runtime health tool.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a `runtime_info` built-in tool agents can call to inspect which capabilities are loaded, enabled, and healthy — including failed loads and component health — without exposing raw config or credentials.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces Workflows in open beta: define, run, and inspect multi-step agent pipelines from the CLI, SDK, and a new Workflows section in the UI, with project-scoped catalog, stable graphs, inline CLI guide, and model selection at run time. • Adds Slack integration: org owners connect a workspace via Settings → Integrations, then @mention an agent to stream a full session in-thread with stop support and a direct link back to the session in Agents → Sessions. • Adds a memory creation panel and form on the Memories page so memories can be created directly from the UI. • Adds organization avatars: owners can set an avatar in Settings by choosing one of five color presets, uploading a PNG, JPEG, or SVG, or falling back to the org name initial. Breaking changes: • The SDK now requires `websockets` 15.0.1 or later; environments running `websockets` 14.x will fail at `fastmcp` initialization. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-09-10 https://docs.dreadnode.io/release-notes/2026-09-10 Thu, 10 Sep 2026 00:00:00 GMT Dreadnode adds traditional ML attack targets, light TUI theme, /reload and /transcript chat commands, and bulk workspace membership across all orgs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Set `DREADNODE_TUI_THEME=light` to switch the TUI from its default dark palette to a light theme.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `/reload` slash command in chat sessions to reload the current agent without leaving the session. • Adds `/transcript` command in the TUI to toggle between compact and full agent transcript views. • Adds `provision` as an accepted alias for `create` in `dreadnode env`, and bare public task names (e.g. `ml-extraction-fraud-tabular`) now resolve without requiring an org prefix. • Three traditional ML attack targets — `fraud tabular`, `MNIST image`, and `IMDB text` — are now available across all organizations, covering extraction, membership inference, evasion, and inversion attack types, provisionable by name via the SDK or TUI. • Adds a Release Notes section in Account Settings listing the ten most recent changelog entries with links to full docs, on both SaaS and self-hosted installs. • Capability detail view and install picker now display which credentials a capability requires before installation. • Adds a direct link to the system status page in the Support tab of Account Settings on SaaS deployments. • Bulk workspace member addition now lets you select and add multiple members to a workspace at once from the workspace settings page. • Session responses now include attribution for who shared a session with the workspace and when, covering all share paths including bulk promotion and creation-time visibility. • AIRT assessments and findings now display the workspace member who ran each assessment. • Each session in the chat session list now displays a message count. • Runtime cold start reduced by more than 60%, dropping time-to-ready from 18.8 s to 6.6 s. Breaking changes: • The `workspace_mount` runtime option is now a no-op; `/home/user/workspace` is ordinary sandbox-local storage. Object-storage access must go through the SDK. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-09-10 https://docs.dreadnode.io/release-notes/2026-09-10 Thu, 10 Sep 2026 00:00:00 GMT Dreadnode adds traditional ML attack targets, light TUI theme, /reload and /transcript chat commands, and bulk workspace membership across all orgs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Set `DREADNODE_TUI_THEME=light` to switch the TUI from its default dark palette to a light theme.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `/reload` slash command in chat sessions to reload the current agent without leaving the session. • Adds `/transcript` command in the TUI to toggle between compact and full agent transcript views. • Adds `provision` as an accepted alias for `create` in `dreadnode env`, and bare public task names (e.g. `ml-extraction-fraud-tabular`) now resolve without requiring an org prefix. • Three traditional ML attack targets — `fraud tabular`, `MNIST image`, and `IMDB text` — are now available across all organizations, covering extraction, membership inference, evasion, and inversion attack types, provisionable by name via the SDK or TUI. • Adds a Release Notes section in Account Settings listing the ten most recent changelog entries with links to full docs, on both SaaS and self-hosted installs. • Capability detail view and install picker now display which credentials a capability requires before installation. • Adds a direct link to the system status page in the Support tab of Account Settings on SaaS deployments. • Bulk workspace member addition now lets you select and add multiple members to a workspace at once from the workspace settings page. • Session responses now include attribution for who shared a session with the workspace and when, covering all share paths including bulk promotion and creation-time visibility. • AIRT assessments and findings now display the workspace member who ran each assessment. • Each session in the chat session list now displays a message count. • Runtime cold start reduced by more than 60%, dropping time-to-ready from 18.8 s to 6.6 s. Breaking changes: • The `workspace_mount` runtime option is now a no-op; `/home/user/workspace` is ordinary sandbox-local storage. Object-storage access must go through the SDK. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-09-03 https://docs.dreadnode.io/release-notes/2026-09-03 Thu, 03 Sep 2026 00:00:00 GMT Dreadnode adds offline SDK/CLI bundles, a Global Tool Registry API, multi-agent red-teaming tasks, and Cloudflare Workers OAST support for air-gapped deployments.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `GET /api/v1/tools` and `GET /api/v1/tools/{tool_id}` endpoints to query the new Global Tool Registry, giving published capability Python tools and command wrappers stable, organization-scoped identities with immutable revision history.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `caBundle` config key for self-hosted deployments to inject a custom CA bundle into the Node frontend, completing CA trust support across all workloads (API, LiteLLM, and frontend). • Surfaces full cold-start timing breakdown (total, platform overhead, provider provisioning, boot, installs, slowest step) via `dn runtime start` and `GET /runtimes/{id}`. • Serves the SDK and CLI as self-contained offline bundles from self-hosted deployments, enabling install without reaching PyPI or any external host. • Serves documentation at `/docs` inside every deployment for air-gapped and on-prem operators. • Adds organization-owner-configurable lifetime credit cap per non-owner member, visible to capped members under Settings → Billing. • Adds bulk share-with-workspace action for multiple agent sessions via the floating action bar. • Adds Cloudflare Workers support via `wrangler` to the web-security capability for deploying programmable OAST endpoints, enabling blind XSS payload hosting, callback logging, and SSRF chain redirection. • Adds signup IP allow-list mode letting admins restrict new account creation to explicitly approved IPv4/IPv6 CIDR ranges with deny rules taking precedence. • Adds 12 multi-agent AI red-teaming tasks covering access-control bypass, indirect injection, memory poisoning, MCP poisoning, reasoning hijack, supply-chain, data exfiltration, DevOps RCE, and sector-specific meshes to the task catalog under the `airt-generative-ai` set. • Adds an indirect prompt injection web task where agents must detect injections hidden via HTML comments, hidden CSS, off-screen ARIA, white-on-white text, and Unicode tags across a public web page. • Adds an agentic CI/CD secret-exfiltration multiagent task simulating hidden instructions in untrusted repo content that cause a CI assistant to leak its deploy secret. • Adds a multi-step tool attack sandbox task featuring an over-permissioned agent with file, database, email, and HTTP tools where success requires chaining a sensitive data source to an external exfiltration sink. • Adds two honeytoken tools to the `ai-red-teaming` capability: mint canary tokens (exfil or RCE variants) and check whether a target agent leaked them across an output boundary. • Adds algorithmic multi-step tool-attack search to the AI red-teaming agent for finding replay-stable read-then-exfiltrate causal paths across HTTP agent tool call chains. • Adds a turnkey OWASP-ASI agentic attack suite runner, argument-aware tool-evidence scoring, and a honeytoken harness for black-box exfil and RCE detection to the SDK. • Adds environment-agnostic attack-success detection to the `airt` SDK using canary exfiltration, OAST beacons, dataflow taint, LLM judge scoring, and optional customer-defined success policies to produce confidence-rated verdicts. • Adds SDK transforms and scorers covering search-query and trusted-domain image exfiltration channels plus dedicated browser-attack scorers for visual injection, ClickFix execution, navigation hijacking, and domain-validation bypass. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-09-03 https://docs.dreadnode.io/release-notes/2026-09-03 Thu, 03 Sep 2026 00:00:00 GMT Dreadnode adds offline SDK/CLI bundles, a Global Tool Registry API, multi-agent red-teaming tasks, and Cloudflare Workers OAST support for air-gapped deployments.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `GET /api/v1/tools` and `GET /api/v1/tools/{tool_id}` endpoints to query the new Global Tool Registry, giving published capability Python tools and command wrappers stable, organization-scoped identities with immutable revision history.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `caBundle` config key for self-hosted deployments to inject a custom CA bundle into the Node frontend, completing CA trust support across all workloads (API, LiteLLM, and frontend). • Surfaces full cold-start timing breakdown (total, platform overhead, provider provisioning, boot, installs, slowest step) via `dn runtime start` and `GET /runtimes/{id}`. • Serves the SDK and CLI as self-contained offline bundles from self-hosted deployments, enabling install without reaching PyPI or any external host. • Serves documentation at `/docs` inside every deployment for air-gapped and on-prem operators. • Adds organization-owner-configurable lifetime credit cap per non-owner member, visible to capped members under Settings → Billing. • Adds bulk share-with-workspace action for multiple agent sessions via the floating action bar. • Adds Cloudflare Workers support via `wrangler` to the web-security capability for deploying programmable OAST endpoints, enabling blind XSS payload hosting, callback logging, and SSRF chain redirection. • Adds signup IP allow-list mode letting admins restrict new account creation to explicitly approved IPv4/IPv6 CIDR ranges with deny rules taking precedence. • Adds 12 multi-agent AI red-teaming tasks covering access-control bypass, indirect injection, memory poisoning, MCP poisoning, reasoning hijack, supply-chain, data exfiltration, DevOps RCE, and sector-specific meshes to the task catalog under the `airt-generative-ai` set. • Adds an indirect prompt injection web task where agents must detect injections hidden via HTML comments, hidden CSS, off-screen ARIA, white-on-white text, and Unicode tags across a public web page. • Adds an agentic CI/CD secret-exfiltration multiagent task simulating hidden instructions in untrusted repo content that cause a CI assistant to leak its deploy secret. • Adds a multi-step tool attack sandbox task featuring an over-permissioned agent with file, database, email, and HTTP tools where success requires chaining a sensitive data source to an external exfiltration sink. • Adds two honeytoken tools to the `ai-red-teaming` capability: mint canary tokens (exfil or RCE variants) and check whether a target agent leaked them across an output boundary. • Adds algorithmic multi-step tool-attack search to the AI red-teaming agent for finding replay-stable read-then-exfiltrate causal paths across HTTP agent tool call chains. • Adds a turnkey OWASP-ASI agentic attack suite runner, argument-aware tool-evidence scoring, and a honeytoken harness for black-box exfil and RCE detection to the SDK. • Adds environment-agnostic attack-success detection to the `airt` SDK using canary exfiltration, OAST beacons, dataflow taint, LLM judge scoring, and optional customer-defined success policies to produce confidence-rated verdicts. • Adds SDK transforms and scorers covering search-query and trusted-domain image exfiltration channels plus dedicated browser-attack scorers for visual injection, ClickFix execution, navigation hijacking, and domain-validation bypass. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-08-27 https://docs.dreadnode.io/release-notes/2026-08-27 Thu, 27 Aug 2026 00:00:00 GMT Dreadnode opens Web Chat to all users, adds air-gap deployment, HTTP desync detection, IP rotation, geo-DNS, and LSB steganography in web-security.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `replicated.isAirgap=true` Helm CLI setting to prevent the Replicated SDK pod from attempting outbound connections to `replicated.app` in air-gapped installs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `--mine` flag to `dn runtime ls` to filter runtimes to only those you own; also marks runtimes you do not own in the default listing. • Adds `/status` slash command to the TUI, displaying current session, model, user, org, workspace, and project at a glance. • Adds IP rotation tool to the web-security capability, deploying Cloudflare Worker proxies on demand for round-robin egress through rotating IPs during engagements. • Adds HTTP desync and request-smuggling detection to the web-security capability, covering 11 smuggling families with fingerprinting, payload construction, cache-poisoning detection, and victim-response classification. • Adds geo-distributed DNS resolution to the web-security capability, resolving target hostnames through open resolvers in multiple countries (via Shodan or Censys) to detect geo-fenced infrastructure, GSLB routing, and region-locked DNS responses. • Adds LSB steganography support for PNG images to the web-security capability, enabling payload-smuggling tests and upload pipeline inspection via the built-in Python tool. • Adds air-gap deployment mode that vendors all front-end resources locally, hides the analytics notebook, serves model pricing from a bundled catalog, and pre-bakes capability dependencies into the runtime image so sandbox boot requires no network access. • Adds support to self-hosted Helm charts for non-root container execution and custom CA bundle mounts for outbound TLS trust in private-CA environments. • Adds bulk archive and unarchive for agent sessions from the Sessions tab, with context-aware actions for active, archived, or mixed selections. • Surfaces failed capability preflight checks (e.g. missing `dnsx`, `katana`) as explicit warnings in the agent system prompt and operator logs instead of silently proceeding. • Expands `postMessage` handler detection in the web-security capability's DOM analysis to cover `window.onmessage`, `MessagePort`/`MessageChannel`, and monitoring-shim wrappers, plus additional origin-validation bypass patterns including unescaped-dot and missing-anchor regex bugs. • Adds guard invocation highlighting in session transcripts, showing policy decisions inline within the conversation view. • Adds pagination and full-text search by title, model, agent, and label to the chat session list, removing the previous 100-session cap. • Adds six new documentation pages covering Web Chat: overview, quickstart, sessions, runtimes, agents and models, and slash commands. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-08-27 https://docs.dreadnode.io/release-notes/2026-08-27 Thu, 27 Aug 2026 00:00:00 GMT Dreadnode opens Web Chat to all users, adds air-gap deployment, HTTP desync detection, IP rotation, geo-DNS, and LSB steganography in web-security.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `replicated.isAirgap=true` Helm CLI setting to prevent the Replicated SDK pod from attempting outbound connections to `replicated.app` in air-gapped installs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `--mine` flag to `dn runtime ls` to filter runtimes to only those you own; also marks runtimes you do not own in the default listing. • Adds `/status` slash command to the TUI, displaying current session, model, user, org, workspace, and project at a glance. • Adds IP rotation tool to the web-security capability, deploying Cloudflare Worker proxies on demand for round-robin egress through rotating IPs during engagements. • Adds HTTP desync and request-smuggling detection to the web-security capability, covering 11 smuggling families with fingerprinting, payload construction, cache-poisoning detection, and victim-response classification. • Adds geo-distributed DNS resolution to the web-security capability, resolving target hostnames through open resolvers in multiple countries (via Shodan or Censys) to detect geo-fenced infrastructure, GSLB routing, and region-locked DNS responses. • Adds LSB steganography support for PNG images to the web-security capability, enabling payload-smuggling tests and upload pipeline inspection via the built-in Python tool. • Adds air-gap deployment mode that vendors all front-end resources locally, hides the analytics notebook, serves model pricing from a bundled catalog, and pre-bakes capability dependencies into the runtime image so sandbox boot requires no network access. • Adds support to self-hosted Helm charts for non-root container execution and custom CA bundle mounts for outbound TLS trust in private-CA environments. • Adds bulk archive and unarchive for agent sessions from the Sessions tab, with context-aware actions for active, archived, or mixed selections. • Surfaces failed capability preflight checks (e.g. missing `dnsx`, `katana`) as explicit warnings in the agent system prompt and operator logs instead of silently proceeding. • Expands `postMessage` handler detection in the web-security capability's DOM analysis to cover `window.onmessage`, `MessagePort`/`MessageChannel`, and monitoring-shim wrappers, plus additional origin-validation bypass patterns including unescaped-dot and missing-anchor regex bugs. • Adds guard invocation highlighting in session transcripts, showing policy decisions inline within the conversation view. • Adds pagination and full-text search by title, model, agent, and label to the chat session list, removing the previous 100-session cap. • Adds six new documentation pages covering Web Chat: overview, quickstart, sessions, runtimes, agents and models, and slash commands. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-08-20 https://docs.dreadnode.io/release-notes/2026-08-20 Thu, 20 Aug 2026 00:00:00 GMT Dreadnode adds Kubernetes Gateway API routing, a Caido TypeScript SDK skill, new web-security attacks, bulk session freeze, and media previews. • Adds `WEBHOOK_SITE_API_KEY` environment variable to the web-security callback tool, enabling a paid webhook.site account to bypass rate limits while preserving anonymous and interactsh fallback. • Supports Kubernetes Gateway API (`HTTPRoute`) routing for on-prem deployments, enabling installations on Istio, Envoy Gateway, and Cilium stacks instead of relying on Ingress. • Adds a `caido-mode` skill in the web-security capability, exposing the full Caido TypeScript SDK — including Match & Replace rules, replay sessions, HTTPQL history search, findings management, and curl-through-Caido testing — from within an agent. • Adds three new web-security attack skills: SQL-injection-to-RCE escalation, MathJax/KaTeX macro injection, and an ORB/XS-Leak browser side-channel via service-worker fetch proxy. • Enables bulk freeze of multiple agent sessions from the Agent Sessions tab, with a confirmation dialog before sessions are affected. • Embeds image, audio, and video previews directly in the output panel alongside existing field data. • Adds ATIF dataset and replay downloads in the Worlds UI: download the full ATIF dataset from Worlds → Jobs, or export the normalized replay payload as JSON from the Trajectories page. • Adds typed `DELETE-{count}` challenge confirmation for bulk and single-row session deletes, guarding against accidental permanent deletion. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-08-13 https://docs.dreadnode.io/release-notes/2026-08-13 Wed, 19 Aug 2026 00:24:20 GMT Dreadnode adds a versioned item type registry, ScopeGuard in remote/headless sessions, Caido MCP server, and a response-queue-poisoning skill. • Adds a versioned item type registry backing structured agent output: platform admins can define, publish, and manage structured output contracts (findings, assets, and custom types) via `Operations → Objects`, with capabilities binding to approved registry versions and all item writes validated against the canonical schema. • Adds `ScopeGuard` policy support in remote and headless sessions via the SDK (experimental); the session UI renders tool-call policy decisions when ScopeGuard metadata is present — opt-in, with no workspace setting or picker entry yet. • Adds the full Caido MCP server (66 tools, 6 resources) as a second MCP server in the web-security capability, alongside the existing Python wrapper, both targeting the same Caido instance. • Adds a `response-queue-poisoning` skill to the web-security capability, covering CRLF-powered desync attacks including response queue poisoning and request tunnelling via HTTP header injection. • Adds a spinner (or plain status line in non-interactive output) to `dn evaluation create` while the evaluation is being submitted. • Adds bulk session delete: multiple agent sessions can now be selected and deleted together, with deleted sessions disappearing from the list immediately without a page refresh. • Adds a new sandbox isolation reference page covering Firecracker compute isolation, application authentication, public sandbox routing, outbound internet access, credential scope, and shared responsibility. • Adds a `--include-public` flag documentation clarification for Hub browse pages (`Datasets`, `Models`, `Capabilities`, `Environments`), distinguishing CLI `--include-public` behavior from the Public scope tab. • Redesigns the capabilities UI with improved navigation, richer detail views for agents, skills, and MCP servers, and a new file browser for capability contents. • Makes the model slug visible by default in session metadata so the exact model used is identifiable without extra clicks. • Reader-role orgs are now visibly marked and disabled in the `New Workspace` dialog to prevent 403 errors on form submission. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-07-30 https://docs.dreadnode.io/release-notes/2026-07-30 Tue, 04 Aug 2026 10:52:24 GMT Dreadnode adds agent memory UI, five data-integration connectors, air-gapped hub sync commands, AST-based JS/TS analysis, and in-place finding triage. • Adds `dn capability sync` and `dn task sync` CLI commands to pull hub content from SaaS (or another on-prem) into a local directory and push it to a self-hosted instance, enabling air-gapped on-prem loading. • Adds `/report-bug` command (or `r` in console) to the TUI, assembling a privacy-reviewed diagnostic bundle and submitting it without losing logs after a crash. • Adds the `llm-wiki` capability (compiles source material into linked wiki pages) and `analysis-ledger` capability (maintains a resumable code-analysis frontier with evidence-bearing claims). • Adds five data-integration connectors — Atlassian, Azure DevOps, GitHub, GitLab, and Linear — as platform capabilities. • Adds AST-based JS/TS static analysis via `ast-grep` in the web-security runtime, removing the need for semgrep, CodeQL, or a jxscout license. • Adds an 'Inactive' filter to Agent Sessions to isolate sessions idle past 15 minutes but not yet archived. • New Memories page under Agents lets operators view, inspect, and manage project memory entries, including version history and diffs. • Enables finding triage (status and notes) directly from a finding's detail panel in Agent Output. • Session monitoring redesigned: adds a 'Last Msg' relative-activity column, highlights sessions active in the last 15 minutes, and adds forward/backward transcript pagination with tailing mode. • Stat cards for 'Needs review' and 'Critical + High' on the Agent Outputs page are now clickable filter toggles; the items grid gains a sortable 'Updated' column. • Sessions group-by control (None / Workflow / Capability / Agent / Source) is now available to all orgs, with workflow runs collapsed by default. • Models and Datasets Hub browse pages add a table view alongside cards, with a unified toolbar offering separate sort and filter controls across all four Hub browse pages. • New workspace dialog includes an organization picker to create a workspace in any org without switching context. • Agent Output items from failed `report_item` POSTs are automatically recovered from span backups when a session is frozen. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-07-23 https://docs.dreadnode.io/release-notes/2026-07-23 Tue, 04 Aug 2026 10:52:24 GMT Dreadnode adds 20+ traditional-ML attacks, `dn airt run-classifier` CLI, multi-agent ATLAS campaigns, and eval agent selection to its red teaming platform. • New `dn airt run-classifier` CLI command runs classic-ML attacks — evasion, extraction, membership inference, and model inversion — directly against a predict endpoint without SDK code. • New `dn evaluation create --agent <name>` flag specifies which agent runs in an evaluation; eval output reports which agent actually ran. • New `--project-memory-preload-limit` flag sets the number of memories preloaded at session start (range: 1–200), replacing a hardcoded default of 20. • Adds four traditional-ML attack families (evasion, extraction, membership inference, model inversion) to AIRT, covering 20+ named attacks — including equation-solving, Jacobian, copycat, knockoff, PWWS, BAE, TextBugger, threshold, and label-only — across tabular, image, and text modalities, with per-finding metrics, adversarial trajectory traces, and MITRE ATLAS/SAIF/NIST compliance mappings. • Adds model inversion attacks that reconstruct class-representative inputs via black-box queries to surface privacy risks, completing the fourth traditional-ML attack category in AIRT. • Adds the ATLAS multi-agent attack framework for running adaptive campaigns against deployed multi-agent environments across three attack surfaces, with executed tool calls captured per-trial and surfaced in findings across the UI, API, and SDK. • Agent Output now functions as a severity-first triage workspace — searches, sorts, and filters an engagement's findings; each finding can be exported to CSV, deep-linked, or copied into a report. • New executive/CISO summary panel on the assessment view shows attack-surface posture, query cost to compromise, risk score, and a plain-English headline for stakeholder reporting. • Richer privacy-attack metrics in findings: extraction findings include KL divergence and accuracy retention; membership inference includes attack accuracy, precision, and recall; model inversion includes reconstruction quality. • New dedicated media gallery collects all images and other media logged by a session's tools in one place for reviewers. • New web-security initial-recon skill provides structured reconnaissance for domain, wildcard, ASN, IP-list, and CIDR entry points using the ProjectDiscovery toolchain. • Evaluation runtime now records the health of all runtime components (broken tools, skills, policies) at run time, so degraded capabilities are visible after the fact. • Five self-contained AIRT demo notebooks cover model evasion, extraction, membership inference, jailbreaks, and multi-agent attacks — runnable via `dn login` with no provider keys required. • New AI Red Teaming Learning Guide adds eight documentation pages covering all four traditional-ML attack categories and generative AI attacks, with runnable SDK, TUI, and CLI examples. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-07-23 https://docs.dreadnode.io/release-notes/2026-07-23 Tue, 04 Aug 2026 10:52:24 GMT Dreadnode adds 20+ traditional-ML attacks, `dn airt run-classifier` CLI, multi-agent ATLAS campaigns, and eval agent selection to its red teaming platform. • New `dn airt run-classifier` CLI command runs classic-ML attacks — evasion, extraction, membership inference, and model inversion — directly against a predict endpoint without SDK code. • New `dn evaluation create --agent <name>` flag specifies which agent runs in an evaluation; eval output reports which agent actually ran. • New `--project-memory-preload-limit` flag sets the number of memories preloaded at session start (range: 1–200), replacing a hardcoded default of 20. • Adds four traditional-ML attack families (evasion, extraction, membership inference, model inversion) to AIRT, covering 20+ named attacks — including equation-solving, Jacobian, copycat, knockoff, PWWS, BAE, TextBugger, threshold, and label-only — across tabular, image, and text modalities, with per-finding metrics, adversarial trajectory traces, and MITRE ATLAS/SAIF/NIST compliance mappings. • Adds model inversion attacks that reconstruct class-representative inputs via black-box queries to surface privacy risks, completing the fourth traditional-ML attack category in AIRT. • Adds the ATLAS multi-agent attack framework for running adaptive campaigns against deployed multi-agent environments across three attack surfaces, with executed tool calls captured per-trial and surfaced in findings across the UI, API, and SDK. • Agent Output now functions as a severity-first triage workspace — searches, sorts, and filters an engagement's findings; each finding can be exported to CSV, deep-linked, or copied into a report. • New executive/CISO summary panel on the assessment view shows attack-surface posture, query cost to compromise, risk score, and a plain-English headline for stakeholder reporting. • Richer privacy-attack metrics in findings: extraction findings include KL divergence and accuracy retention; membership inference includes attack accuracy, precision, and recall; model inversion includes reconstruction quality. • New dedicated media gallery collects all images and other media logged by a session's tools in one place for reviewers. • New web-security initial-recon skill provides structured reconnaissance for domain, wildcard, ASN, IP-list, and CIDR entry points using the ProjectDiscovery toolchain. • Evaluation runtime now records the health of all runtime components (broken tools, skills, policies) at run time, so degraded capabilities are visible after the fact. • Five self-contained AIRT demo notebooks cover model evasion, extraction, membership inference, jailbreaks, and multi-agent attacks — runnable via `dn login` with no provider keys required. • New AI Red Teaming Learning Guide adds eight documentation pages covering all four traditional-ML attack categories and generative AI attacks, with runnable SDK, TUI, and CLI examples. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-07-30 https://docs.dreadnode.io/release-notes/2026-07-30 Tue, 04 Aug 2026 10:52:24 GMT Dreadnode adds agent memory UI, five data-integration connectors, air-gapped hub sync commands, AST-based JS/TS analysis, and in-place finding triage. • Adds `dn capability sync` and `dn task sync` CLI commands to pull hub content from SaaS (or another on-prem) into a local directory and push it to a self-hosted instance, enabling air-gapped on-prem loading. • Adds `/report-bug` command (or `r` in console) to the TUI, assembling a privacy-reviewed diagnostic bundle and submitting it without losing logs after a crash. • Adds the `llm-wiki` capability (compiles source material into linked wiki pages) and `analysis-ledger` capability (maintains a resumable code-analysis frontier with evidence-bearing claims). • Adds five data-integration connectors — Atlassian, Azure DevOps, GitHub, GitLab, and Linear — as platform capabilities. • Adds AST-based JS/TS static analysis via `ast-grep` in the web-security runtime, removing the need for semgrep, CodeQL, or a jxscout license. • Adds an 'Inactive' filter to Agent Sessions to isolate sessions idle past 15 minutes but not yet archived. • New Memories page under Agents lets operators view, inspect, and manage project memory entries, including version history and diffs. • Enables finding triage (status and notes) directly from a finding's detail panel in Agent Output. • Session monitoring redesigned: adds a 'Last Msg' relative-activity column, highlights sessions active in the last 15 minutes, and adds forward/backward transcript pagination with tailing mode. • Stat cards for 'Needs review' and 'Critical + High' on the Agent Outputs page are now clickable filter toggles; the items grid gains a sortable 'Updated' column. • Sessions group-by control (None / Workflow / Capability / Agent / Source) is now available to all orgs, with workflow runs collapsed by default. • Models and Datasets Hub browse pages add a table view alongside cards, with a unified toolbar offering separate sort and filter controls across all four Hub browse pages. • New workspace dialog includes an organization picker to create a workspace in any org without switching context. • Agent Output items from failed `report_item` POSTs are automatically recovered from span backups when a session is frozen. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-05-07 https://docs.dreadnode.io/release-notes/2026-05-07 Thu, 23 Jul 2026 15:49:54 GMT Dreadnode AIRT Report Builder goes GA with templates, DOCX export, new AI red-teaming skills, and a major CLI overhaul. • AIRT Report Builder is now generally available for all users, with saved templates (load/save/rename/delete), custom branding (logo, company name, title, confidentiality footer), DOCX export, and a live structural preview panel. • New trace-analysis advisor skill surfaces attack-effectiveness analysis, transform recommendations, and vulnerability pattern identification from historical run data directly inside the agent. • New GuardSessionPolicy gates every agent tool call through an LLM judge before execution, with a built-in safety rubric and optional custom rules. • GuardSessionPolicy supports five transcript strategies (`rubric_only`, `intent_only`, `intent_plus_calls`, `full`, and more) to control how much context is sent to the judge. • New export endpoint converts session transcripts to ATIF v1.7 or OpenAI Chat Completions format; new `dn session` CLI command group and a session UI download menu enable browsing, inspecting, and exporting sessions. • New `dn capability uninstall` command added; session archive, freeze, and delete lifecycle actions available in the TUI; session picker rewritten with richer status columns and inline lifecycle controls. • New `dn inference-model` (alias `dn llm`), `dn secret list`, and `dn environment wait` CLI commands added; `dn env` renamed to `dn environment` (alias retained); destructive-action `--yes`/`-y` confirmation standardized across all commands. • New `dn update` command lets users update the Dreadnode CLI directly from the terminal. • Platform admins can configure which models appear as featured in the catalog via a new admin UI, including manual entry of preview or unreleased model IDs, without code changes or redeployments. • TUI now renders report tool calls inline with full markdown content and a clickable 'View in web' deep-link opening the platform Reports tab for the active session. • Agent session views and TUI footer now show tool call count and estimated USD cost alongside message count and token usage. • The `ask_user` tool now supports structured multi-question bundles, explicit cancel flows (raising `UserCancelled`), and an interactive TUI widget with tab navigation, multi-select, and Esc-to-cancel. • Datasets, environments, models, and capabilities now have dedicated shareable URLs; training job selections are reflected in the URL via `?job=<id>`. • Exported ATIF trajectories now include an `extra.dreadnode` block with origin and `{id, key}` pairs for organization, workspace, and project to support downstream data lineage tracing. • Persistent TUI welcome panel now shows profile, runtime, and capability context; a new getting-started skill routes new users to the right capability or task automatically. • Notification badges for pending org invitations now appear in the nav bar and Account Settings on login or page refresh. Breaking changes: • The 'Export PDF Report' button on the AIRT overview page has been removed; the Reports tab now handles PDF and all other export formats. • The default GuardSessionPolicy transcript strategy is now `intent_plus_calls` (previously unspecified/different), which changes what context is sent to the LLM judge for existing GuardSessionPolicy configurations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-07-16 https://docs.dreadnode.io/release-notes/2026-07-16 Thu, 23 Jul 2026 15:49:54 GMT Dreadnode adds ATLAS multi-agent attack framework, 170 multimodal red-team transforms, LiteLLM on-prem inference, E2B sandbox, and a full slash-command/@ palette in web chat. • Adds ATLAS multi-agent attack framework (`dreadnode.airt.atlas`) running campaigns across eight attack modes using a MDP+Hedge router, with tool calls captured per-trial and surfaced in findings across the UI, API, and SDK. • Ships 130+ image, audio, and video perturbations for red teaming vision/audio/video models, covering ImageNet-C corruptions, AugLy augmentations, SpecAugment, FigStep, and DolphinAttack techniques. • Exposes 131 multimodal transforms in the AI red-teaming TUI (up from 26), including 57 image, 52 audio, and 22 video transforms. • Adds slash-command palette in the web chat composer — type `/` for a fuzzy-filtered overlay with built-in actions (`/new`, `/clear`, `/rewind`, `/model`, `/agent`, and more) plus dynamically-discovered skills. • Adds `@`-mention agent picker in the web chat composer, navigable by keyboard or mouse, inserting agents as inline mentions. • Adds `/background <task>` (or `/bg`) launcher to spin up a headless session without leaving the current conversation. • Introduces new tool renderers in chat (glob, grep, read, query, web search), an improved session header, capability picker, and read-only session notices. • Renames 'Structured Output' to 'Agent Output' throughout the UI, nav, and route (`/agents/agent-outputs/`); now available in beta for all orgs including on-prem/enterprise. • Bundles LiteLLM as a Helm subchart for on-prem/enterprise installs, enabling `dn/*` models, TUI/chat inference, and the Admin Model Deployments surface. • Adds E2B as a first-class on-prem sandbox provider configurable via KOTS toggle. • Adds `--max-steps` / `max_steps:` budget parameter to `dn evaluation create` and `evaluation.yaml` for reproducible cost control. • Adds AgentMail email inbox integration for web-security agents — list/create inboxes and list, get, send, or reply to messages. • Adds Azure AI Foundry multimodal target support for probing text+image and text+audio deployments via the SDK and TUI. • Adds `dreadnode[nova-sonic]` install extra for Nova Sonic S2S dependencies. • Automated internal-network and Active Directory engagements now run end-to-end through a pipeline of specialized agents covering discovery, exploitation, credential harvesting, reporting, lateral movement, and coercion. • Blind vulnerability testing (e.g., blind SSRF) now works without external tooling, with automatic provider fallback. • Provisions rockyou.txt, SecLists 10k-most-common.txt, and OneRuleToRuleThemAll.rule at install time for out-of-the-box hashcat and john_the_ripper support. • Displays native `reasoning_content` / Anthropic thinking blocks in session transcript viewer and includes them in ATIF trajectory exports. • TUI agent picker (`Ctrl+A`) now shows the locally installed version of each capability. • Session sharing now shows a popover with plain-language visibility state (Private / Shared with workspace) and a copyable deeplink. • Assessment findings automatically carry target and judge model metadata inferred from configs, eliminating manual annotation. Breaking changes: • The 'Structured Output' nav item and route are renamed to 'Agent Output' at `/agents/agent-outputs/`; any bookmarks or integrations referencing the old route or label will break. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-06-25 https://docs.dreadnode.io/release-notes/2026-06-25 Thu, 23 Jul 2026 15:49:54 GMT Dreadnode adds web chat for project runtimes, persistent web-security agent memory, and a refreshed analytics UX. • Adds empty states, a stats summary strip, loading skeletons, inline error banners, schema column insertion, and example query chips to the analytics query and notebook pages. • Enables the web-security agent to persist reconnaissance findings, gadgets, leads, defense bypasses, and discoveries across sessions using structured project memory. • Allows revealed images in tool results and logged outputs to be re-hidden, freeing the decoded blob from memory. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-05-28 https://docs.dreadnode.io/release-notes/2026-05-28 Thu, 23 Jul 2026 15:49:54 GMT Dreadnode adds Android APK static analysis, Jira/GitHub issue-tracker connectors, artifact logging, and admin model controls for web-security agents. • Adds `android-apk-research` capability bundle: a 10-tool MCP server with four skills for static semantic vulnerability research on Android APKs. • Adds Jira Cloud MCP connector for web-security agents to export validated findings directly as remediation tickets. • Adds GitHub MCP connector for web-security agents to file findings as GitHub issues and post follow-up comments from within the agent workflow. • Adds four artifact logging tools (`log_image_output`, `log_audio_output`, `log_video_output`, `log_file_artifact`) for attaching media and file artifacts to a web-security agent run. • Adds `waymore` to the web-security capability runtime, enabling historical URL and response retrieval from Wayback Machine, CommonCrawl, OTX, URLScan, and VirusTotal. • Adds a built-in IDOR/BOLA rubric for the SDK's default LLM judge scorer with graduated pentest-aligned cross-boundary access criteria, composable via `task.yaml` and SDK configs. • Adds a live activity feed on the home page showing recent projects, sessions, evaluations, training jobs, and other workspace activity. • Enables organization administrators to grant each member access to a specific set of AI models, enforced across the web app, API, and CLI. • Adds an 'Ask an agent' tab to every in-product CLI guide across all surfaces (capability, task/environment, dataset, model, evaluation, optimization, world manifest, trajectory, training). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-06-04 https://docs.dreadnode.io/release-notes/2026-06-04 Thu, 23 Jul 2026 15:49:54 GMT Dreadnode adds cross-platform binary analysis, Android APK research, AEM/Sling web testing, and bulk evaluation log downloads. • New `binary-analysis` capability supports PE, ELF, and Mach-O formats with an expanded Ghidra MCP server and a consolidated 8-phase analysis skill. • New `android-apk-research` capability ships a 10-tool MCP server and four skills for static semantic vulnerability research on Android APKs. • Automated web-security testing now covers Adobe Experience Manager and Apache Sling, surfacing selector-abuse, dispatcher-bypass, and XSS weaknesses. • Bulk evaluation log download lets you export all sample logs from an evaluation as a single ZIP bundle. • Dashboard workspace toggle lets users filter activity between personal workspace and full organization view. • Org owners and admins can download receipts for individual credit purchases from the billing settings page. • MCP server headers now support `optional: true` so unset env vars omit the header entirely, enabling OAuth as the default without a wrapper capability. • Server-side transcript search enables finding matches across all messages in a long session without paging through the entire transcript. • Task verification method (script, flag, judge, or compound) is now visible in the environment task detail and evaluation sample detail views. Breaking changes: • The `windows-reversing` capability bundle is replaced by `binary-analysis`; any configuration referencing `windows-reversing` must be updated to use `binary-analysis`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-07-02 https://docs.dreadnode.io/release-notes/2026-07-02 Thu, 23 Jul 2026 15:49:54 GMT Dreadnode adds Claude Code engine, Task Sets, per-role environment model selection, eval sample search, and two new offensive security skills. • Adds pluggable agent execution engines with Claude Code as the first built-in option, running Claude's agentic loop as a governed, session-backed agent with full trace viewer support. • Introduces Task Sets — named, versioned collections of tasks runnable as a single evaluation target via the API, `dn task-set` CLI commands, or the Environments UI. • Enables user-controlled task-environment models: choose which model each environment role uses via `--env-model role=id` (CLI), `model_overrides` in `evaluation.yaml`, or the API, independently of solver and judge models. • Adds free-text search across all samples in an evaluation, with match highlighting, per-sample match counts, and a 'Matches only' filter. • Adds a blind SQL injection extraction skill supporting boolean/timing-based oracle identification, WAF bypass patterns, and automated char-by-char extraction. • Extends the blind-SSRF-chains skill to detect available cloud CLIs and provision attacker infrastructure (S3 buckets, redirect servers) for SSRF proof-of-concept evidence. • Shows task-set provenance (org/name and skipped members with reasons) on the evaluation detail page when an eval was run from a task set. • Adds a model, tokens, tool calls, and cost summary to stderr in `dn --print` headless mode after each run. • Displays sub-agent LLM costs as a separate 'subagents $X.XX' segment in the TUI footer. • Running `dn --resume` (or `-r`) with no argument now opens the session picker instead of erroring. Breaking changes: • The `--session <name>` flag is now required for concurrent web-security agents; omitting it will cause agents to clobber each other's browser state. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-05-21 https://docs.dreadnode.io/release-notes/2026-05-21 Thu, 23 Jul 2026 15:49:54 GMT Dreadnode adds compound eval verification, agentic outcome judging, 6 new web pentesting skills, and expanded AIRT goal categories. • New `script_and_judge` and `flag_and_judge` verification methods chain a mechanical check (script or flag) with an LLM judge to close reward-hacking gaps in eval tasks — no custom rubric required. • New `outcome_judge` verification method lets eval tasks use an agentic LLM to inspect agent trajectories and emit pass/fail verdicts, exposed via the new `dn outcome-judge run` CLI subcommand. • New opt-in `intent_plus_outputs_summary` guard strategy replaces raw tool outputs with LLM-generated summaries in judge prompts, reducing prompt-injection surface while preserving tool-call context. • Six new web app pentesting skills added: ESI injection, gRPC-Web pentest, H2C/WebSocket smuggling, HTTP connection contamination, timing-attack recon, and XSLT injection. • Adds `waymore` to the web-security capability runtime for historical URL and response retrieval from Wayback Machine, CommonCrawl, OTX, URLScan, and VirusTotal. • Free-text search in evaluation trajectories with inline match highlighting, auto-expansion of collapsed tool calls, and query state synced to the URL. • Expanded AIRT goal categories from 9 to all 15, now including `reasoning_exploitation`, `supply_chain`, and `resource_exhaustion`. • Org admins can now control which AI models each member is allowed to use from the org members admin page. • Simplified AIRT workspace layout uses a cleaner `~/.dreadnode/airt/[org]/[workspace]/` path structure, replacing the previous env-var-based path system. Breaking changes: • The AIRT workspace path structure has changed to `~/.dreadnode/airt/[org]/[workspace]/`, replacing the previous env-var-based path system — existing setups relying on the old env-var paths will need to be updated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-07-09 https://docs.dreadnode.io/release-notes/2026-07-09 Thu, 23 Jul 2026 15:49:54 GMT Dreadnode adds end-to-end multimodal AI red teaming, custom HTTP targets, Task Sets, and a SecurityContext MCP server. • New multimodal AI red teaming: probe LLMs with text, image, audio, and video inputs; apply per-modality transforms; score with the new `multimodal_judge` scorer; view full message parts inline in findings, traces, and parquet exports (schema v3 with base64 media columns). • Cross-product `prompt_matrix` mode runs N prompts × M media items = N×M trials for systematic multimodal attack coverage. • Nova Sonic speech-to-speech target support added to the TUI capability picker and `build_target` SDK factory. • New `custom_http` target mode and build_target(TargetSpec) factory let TAP, PAIR, and other attacks hit any endpoint (Azure, Vertex, SageMaker, Bedrock, OpenAI-compatible) with declarative auth strategies (API key, Bearer, AWS SigV4, Azure AD, GCP). • Per-modality response scores in findings and Assessment Findings tables, with the highest-scoring modality emphasized. • Structured findings and assets: agents can emit typed vulnerabilities, endpoints, and other items viewable in a new Structured Output page with per-type tables, detail panels, and provenance history. • Web-security agents now produce `WebVulnerability` and `WebEndpoint` items visible in the Items UI for triage, filtering, and cross-session tracking. • Task Sets (V1): group multiple tasks into a named, versioned set and run evaluations against the whole set via API, CLI (`dn task-set`), or the Environments UI. • Session groups and workflow hierarchies organize multi-session agent runs into collapsible workflow groups; the SDK exposes a new client.workflow() API. • SecurityContext MCP server for web-security agents: mines commit history and CVE disclosures to generate hunting briefs and ranked vulnerability leads via three tools — `get_security_context`, `create_security_context`, `get_vulnerability_leads`. • Three new web-security skills added: `git-integration-exploitation`, `http-query-method` (RFC 10008 parser differentials), and `dom-vulnerability-detection` (postMessage IP normalization bypass). • Model reasoning (Anthropic thinking blocks, `reasoning_content`) now appears as a typed first-class field in session transcripts and ATIF trajectory exports. • Web chat gains interactive ↔ autonomous mode toggle with optional step cap, 'Rewind to here' control, and a full action menu (copy ID/link, export trajectory, archive/freeze/delete) from the session list. • Web chat transcript surfaces `ask_user` prompts inline, renders live tool media during streaming, and exposes a reasoning-effort selector in the composer. • Chat UI promoted to main sidebar navigation (no longer a beta route). • New `dreadnode[nova-sonic]` SDK extra installs all required AWS dependencies for Nova Sonic speech-to-speech targets. • Bundle README surfaced in frontend, TUI (`d` key), and CLI (`--readme` / `-R` flags on `dn capability info` and `dn task info`). • Hub scope tabs (Mine · {org} · Public) with live count pills added to Dataset, Model, Capability, and Environment browse pages. • New `auth-setup-guide` skill for AIRT walks through authenticating target, attacker, and judge models across Azure, AWS Bedrock, GCP Vertex, and custom HTTP endpoints. • Chat sandbox keepalive: a periodic ping extends the runtime's expiry every 30 seconds while actively working, preventing mid-session auto-pause. Breaking changes: • The `items` key in capability manifests is replaced by a unified `produces` key that configures built-in item types, custom types, and disablement — existing manifests using `items` will need to be updated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-05-14 https://docs.dreadnode.io/release-notes/2026-05-14 Thu, 23 Jul 2026 15:49:54 GMT Dreadnode adds free-text search in evaluation trajectories, session rewind, cross-org share links, and sandbox dependency auto-install. • Adds free-text search in hosted evaluation trajectories — matches are highlighted inline and tool calls auto-expand when their content matches the search term. • Adds session rewind via `/rewind` or double-Esc in the TUI, rolling back a conversation to any prior user message while preserving full session history. • Enables cross-org capability share links so Capability Hub links automatically redirect recipients to the correct page regardless of their org slug. • Sandbox runtimes now auto-install Python packages and system dependencies declared in capability manifests at load time. • AIRT CLI now auto-discovers attacks, transforms, and scorers at runtime (61 attacks, 547 transforms, 141 scorers) with accurate capability counts in the hub. • ATIF trajectory exports now include an `extra.dreadnode` block carrying org, workspace, project, and optional evaluation/item IDs for source traceability. • Adds a copy-to-clipboard button next to the task name in the environment detail drawer for quick use in CLI commands or evaluation setup. • Settings sidebar now groups options as Personal (Secrets, Chat Models) vs Organization for clearer separation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-06-11 https://docs.dreadnode.io/release-notes/2026-06-11 Thu, 23 Jul 2026 15:49:54 GMT Dreadnode adds media playback in session views, ASM capability, HTTP/2 WAF bypass, GraphQL pentesting, and a sandbox runtime hierarchy. • Adds inline display of agent-captured images, audio, and video in session transcripts and trace details, with an explicit 'Show media' click to prevent auto-decoding of hostile artifacts. • New attack surface management capability combining BBOT scanning, Shodan enrichment, Neo4j graph analysis, screenshot triage, and a multi-agent ASM pipeline. • New h2-waf-bypass skill covering 6 HTTP/2 WAF bypass classes: delayed DATA frame timing, body size truncation, Extended CONNECT, ForwardAuth body stripping, path normalization, and JSON content-type gaps. • New graphql-pentest skill covering endpoint discovery, introspection mining, resource abuse (CWE-400, CWE-674), content-type CSRF, and capability matrix testing. • New standalone vuln-assessment-methodology capability providing a reusable severity matrix, disprove-first rules, and reporting standards any security capability can load. • New --judge-model flag on `dn evaluation create` lets you override the task-level judge model at eval creation time without modifying task.yaml. • ProcessJudge now supports opt-in prefix caching to reduce LLM costs on long judge sessions; GuardSessionPolicy enables it by default. • Automated Cloud Assessments now run authorized AWS exploitation checks to validate real-world impact of exposed AWS credentials or instance-metadata findings. • Dashboard workspace toggle lets analysts filter activity between personal workspace and full organization view. • Pinned smoke solution image: `dn task validate --smoke` now runs in a container mirroring the production agent runtime. • `dn task validate --smoke` now covers judge-backed verification methods (script_and_judge and flag_and_judge tasks). • Default agent timeout for evaluations doubled from 30 minutes to 1 hour. • Expired email verification links can now be resent in a single click from the recovery page. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-06-18 https://docs.dreadnode.io/release-notes/2026-06-18 Thu, 23 Jul 2026 15:49:54 GMT Dreadnode adds ProjectMemory, inline media in transcripts, new DoS/path-traversal/EXIF skills, and a unified LiteLLM admin proxy. • Adds ProjectMemory tools so agents can persist and retrieve durable project-scoped memory across runs. • Screenshots and media logged via dn.log_output() inside tools now render inline in the session transcript next to the producing tool call. • New unified LiteLLM admin proxy lets admins manage model deployments and credentials directly from the platform; platform models are now always org-allowlist-scoped. • Adds Ctrl+K shortcut in the TUI to open the full model browser. • New app-layer-dos skill covers ReDoS, decompression bombs, server delay exploitation, and cross-protocol amplification for application-layer DoS testing. • New archive-path-traversal skill covers Zip Slip, symlink attacks, polyglot MIME bypass, and Unicode path confusion via archivealchemist tooling. • New exiftool capability adds exif_read, exif_write, exif_strip, and exif_copy methods for EXIF metadata manipulation in web-security agents. • AIRT Findings list now defaults to newest-first order, auto-refreshes every 20 seconds with a notification pill, and shows a structured Human Review table, Metadata tile with Finding/Assessment IDs, copy button on reasoning, and UUID-prefix search. • Web-security agent now emits a STATUS update (including an Unexplored field) after every action for improved scan-coverage visibility. • Web-security vulnerability reports now include a trace ID linking each finding back to the confidence assessment that approved it. • The web-security credence tool now accepts an optional CVSS score, echoes it as [cvss:N.N] in output, and flags mismatches such as low confidence paired with a high CVSS score. • ASR by Category card on the Assessments page now renders a bar chart in Charts mode. • Home page activity feed now shows an actor chip per event; agent sessions list shows who or what started each session. • Evaluations list now surfaces who or what ran each sample alongside the capability reference. • New -e / --env flag on dn task validate --smoke lets you inject environment variables into the challenge service at smoke-test time without editing docker-compose.yaml. • Adds a Release Notes page at docs.dreadnode.io/release-notes with tier chips, month navigation, per-entry permalinks, and an RSS feed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-06-25 https://docs.dreadnode.io/release-notes/2026-06-25 Thu, 25 Jun 2026 00:00:00 GMT Dreadnode adds web chat interface, structured project memory for agent findings, and media hiding controls. • Adds a full web chat interface for querying analytics of project runtimes • Enables the web-security agent to persist reconnaissance findings, gadgets, leads, defense bypasses, and discoveries across sessions via structured project memory • Allows users to hide revealed images in tool results and free decoded blobs from memory Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-06-18 https://docs.dreadnode.io/release-notes/2026-06-18 Thu, 18 Jun 2026 00:00:00 GMT Dreadnode v2026-06-18 adds ProjectMemory persistence, DoS/path-traversal skills, EXIF tools, and inline media rendering • Adds `ProjectMemory` tools for persisting and retrieving durable project-scoped memory across runs • Renders screenshots and media logged via dn.log_output() inline in the session transcript next to the tool call • Provides a unified LiteLLM admin proxy and model browser with org-allowlist scoping and Ctrl+K TUI access Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-06-11 https://docs.dreadnode.io/release-notes/2026-06-11 Thu, 11 Jun 2026 00:00:00 GMT Dreadnode v2026-06-11 adds media views, ASM and pentest skills, vuln-assessment methodology, and evaluation flags. • New Session and Trace Views now display agent-captured images, audio, and video directly in the transcript (requires 'Show media' click). • New attack surface management capability combining BBOT, Shodan, Neo4j graph analysis, screenshot triage, and multi-agent ASM pipeline. • New `h2-waf-bypass` skill in web-security covering 6 bypass classes including delayed DATA frame timing and Extended CONNECT. • New `graphql-pentest` skill covering endpoint discovery, introspection mining, resource abuse (CWE-400, CWE-674), content-type CSRF, and capability matrix testing. • New standalone `vuln-assessment-methodology` capability providing reusable severity matrix and disprove-first rules. • New `--judge-model` flag on `dn evaluation create` to override the task-level judge model without modifying `task.yaml`. • Automated Cloud Assessments now measure the impact of exposed AWS credentials with authorized exploitation checks. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-06-04 https://docs.dreadnode.io/release-notes/2026-06-04 Thu, 04 Jun 2026 00:00:00 GMT Dreadnode adds cross-platform PE/ELF/Mach-O binary analysis, MCP header omission support, and bulk evaluation log download. • Binary-analysis capability replaces windows-reversing with cross-platform PE/ELF/Mach-O support • Conditional MCP header omission allows headers to be marked optional: true so unset env vars omit the header entirely • Bulk evaluation log download enables downloading all sample logs from an evaluation as a single ZIP bundle Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-05-28 https://docs.dreadnode.io/release-notes/2026-05-28 Thu, 28 May 2026 00:00:00 GMT New android-apk-research capability bundle, Jira and GitHub MCP connectors, artifact logging tools, and IDOR/BOLA judge rubric for Dreadnode. • `android-apk-research` capability bundle ships with a 10-tool MCP server and four skills for static semantic vulnerability research on Android APKs • New Jira MCP connector lets web-security agents export validated findings directly to Jira Cloud as remediation tickets • New GitHub MCP connector lets web-security agents file findings as GitHub issues and add follow-up comments without leaving the agent workflow • Four new path-based logging tools for web-security agents: `log_image_output`, `log_audio_output`, `log_video_output`, and `log_file_artifact` to attach screenshots, audio, video, and file artifacts directly to a run • New built-in IDOR/BOLA rubric available for the SDK’s default LLM judge scorer with graduated pentest-aligned cross-boundary access criteria • Home page now shows a live activity feed with recent projects, sessions, evaluations, training jobs, and other workspace activity • Organization administrators can grant each member access to a specific set of AI models, enforced across the web app, API, and CLI Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-05-21 https://docs.dreadnode.io/release-notes/2026-05-21 Thu, 21 May 2026 00:00:00 GMT New compound eval verification strategies (script_and_judge, flag_and_judge) and an agentic outcome judge for Dreadnode • `script_and_judge` and `flag_and_judge` are new eval task verification methods that chain mechanical checks with an LLM outcome judge to close reward-hacking gaps. • New `dn outcome-judge run` CLI subcommand exposes the agentic `outcome_judge` verification method for inspecting agent trajectories and emitting pass/fail verdicts. • New opt-in policy introduces the `intent_plus_outputs_summary` guard strategy, replacing raw tool outputs with LLM-generated summaries in judge prompts to reduce prompt-injection surface. • Six new web-security capability skills are now available as knowledge distillations: ESI injection, gRPC-Web pentest, H2C/WebSocket smuggling, HTTP connection contamination, timing-attack recon, and XSLT injection. • `waymore` is added to the web-security capability runtime for historical URL and response retrieval from Wayback Machine, CommonCrawl, OTX, URLScan, and VirusTotal. • Organization admins can now control which AI models each member is allowed to use via a new setting on the org members admin page. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-05-14 https://docs.dreadnode.io/release-notes/2026-05-14 Thu, 14 May 2026 00:00:00 GMT Free-text search, session rewind, cross-org shares, and auto-installing sandbox deps in Dreadnode. • Adds free-text search in hosted evaluation trajectories with inline match highlighting and auto-expanding tool calls. • Adds `/rewind` subcommand and double-Esc keybinding to roll back a conversation session history via the TUI. • Enables cross-org capability share links that automatically redirect recipients to the correct page regardless of their org slug. • Enables sandbox runtimes to auto-install Python packages and system dependencies declared in capability manifests at load time. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode https://docs.dreadnode.io/release-notes/2026-05-07 https://docs.dreadnode.io/release-notes/2026-05-07 Thu, 07 May 2026 00:00:00 GMT Dreadnode GA: Report templates, DOCX export, GuardSessionPolicy with LLM tool gating, dn CLI overhaul • AIRT Report Builder graduates to general availability with saved templates (load/save/rename/delete), custom branding support (logo, company name, title, confidentiality footer), and DOCX export • GuardSessionPolicy gates every agent tool call through an LLM judge before execution using a built-in safety rubric and optional custom rules • GuardSessionPolicy supports five transcript strategies (rubric_only, intent_only, intent_plus_calls, full) to control judge context • New dn session CLI command group and export endpoint convert session transcripts to ATIF v1.7 or OpenAI Chat Completions format • Added dn capability uninstall command, dn inference-model (alias dn llm), dn secret list, dn environment wait, and dn update commands • Platform admins can configure featured catalog models via a new admin UI setting without code changes Breaking changes: • dn env is renamed to dn environment (alias retained) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dreadnode