https://cybertoolchain.io/tools/hacktron New releases and features in Hacktron, tracked by The Cyber Toolchain. en Mon, 02 Nov 2026 07:59:38 GMT https://docs.hacktron.ai/openapi.json https://docs.hacktron.ai/openapi.json Mon, 02 Nov 2026 07:59:38 GMT API surface changed: +13 endpoints⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds new pentests endpoints: `DELETE /pentests/{id}`, `PATCH /pentests/{id}`, `POST /pentests`, `POST /pentests/{id}/estimate`, `POST /pentests/{id}/login-checks`, and `POST /pentests/{id}/start`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /credits • New endpoint GET /findings/counts • Adds `GET /pr-review-settings` and `PATCH /pr-review-settings` endpoints for managing PR review settings. • New endpoint POST /archives/uploads • New endpoint POST /repos/pr-reviews • New endpoint POST /scans/{id}/stop Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#scope-your-pentest-to-exactly-the-folders-that-matter https://docs.hacktron.ai/changelog#scope-your-pentest-to-exactly-the-folders-that-matter Tue, 27 Oct 2026 00:00:00 GMT Hacktron adds folder-based scan scope, Closed finding status, Attestation Letters, and raises the PR review file limit to 500⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Scope a Whitebox pentest to specific folders by picking paths to include or exclude in a checkbox file tree inside the new Scope step of the Whitebox pentest wizard.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Mark a single finding as Closed directly from its status menu, keyboard shortcut, or command palette — the same place used to set False Positive. • Access an Attestation Letters page where Hacktron-issued letters appear with a unique shareable link and a PDF download that auditors can view without logging in. • (improved) Code Review limits are raised: pull requests with up to `500` changed files are now accepted, up from `200`, and OSS organizations now get `50` free PR reviews per month, up from the previous limit. • Organization admins can now turn off automated code review comments for the whole org from Settings. • The People page now splits into a Members tab and an Invitations tab, with revoked invitations listed with a Delete option instead of disappearing. • Tooltips and prompts at every auto-assignment opt-in point now disclose that bot PR authors take billable seats, and the excluded-authors filter note clarifies that excluded authors never consume a seat. • The trial activation modal now has an enable-all button to turn on PR reviews for every connected repository in one step. • Connecting a GitLab installation no longer requires completing every step before saving — partial setups can be saved, and the connection page shows only the actions available at your current access level. • The final Whitebox review step is rebuilt as a structured summary panel with Source, Target, Access, and Context sections, each with an Edit button and visible verification status. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#findings-get-an-identity-a-history-and-a-command-palette https://docs.hacktron.ai/changelog#findings-get-an-identity-a-history-and-a-command-palette Wed, 21 Oct 2026 00:00:00 GMT Hacktron adds stable finding IDs, an activity timeline, command palette actions, multi-ID search, and a whitebox retest wizard.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds human-readable, stable finding IDs (shown in the row, panel, full page, and URL, with click-to-copy), an `Activity` tab in the finding detail panel showing the full detection and edit history with actor and changed fields per entry (switch to a `Comments` view to see only the thread), finding-scoped actions in the command palette (change status, change severity, mark/unmark duplicate, create ticket, start remediation, copy ID, copy link, open full page) when a finding is open, and multi-ID search that lets you paste two or more finding IDs into the search box to filter to exactly those findings.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Source`, `Reopened`, and `Date range` filters to the findings list, each saved in the URL, and a CWE name tooltip on the CWE badge so the full weakness name is visible without leaving the page. • Adds a whitebox retest wizard to request a retest for a completed scan directly from the scans list or scan detail page, covering all reported findings except false positives and accepted risk, and shows retest status and results on the scan detail page once a retest is complete. • The `Methodology` section of a whitebox scan report now shows how many functions each area selected instead of an arbitrary list of five names, and `Coverage Detail` caps the unselected entry-points table at 50 rows. • Inline browser-auth audit instructions in the whitebox scan wizard's target step now appear directly on the page with live verification status, replacing the separate modal. • The `Repositories` page shows a notice when PR Review is toggled on for a repo but no active trial or subscription backs it, with a direct link to start a trial. • On-prem appliances that cannot reach GitHub.com now disable the GitHub.com integration card with a specific reason (DNS, blocked, or TLS) instead of failing at the code exchange. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#see-what-a-whitebox-scan-actually-established https://docs.hacktron.ai/changelog#see-what-a-whitebox-scan-actually-established Fri, 09 Oct 2026 00:00:00 GMT Hacktron adds Jira/Linear two-way status sync, a unified Integrations page, and richer Whitebox PDF reports with live-validation evidence.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Whitebox PDF reports now include repositories and targets in scope, testing window, severity rubric, limitations, confidentiality notice, and — where available — methodology and code-coverage detail.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Findings with recorded live-validation evidence gain a 'Live Validation' section in the PDF report showing what the attempt established, what it did not establish, any blocker, and observed output for successful exploits. • Adds two-way Jira and Linear status sync: finding status changes propagate to linked issues and supported issue status changes flow back into Hacktron, with each direction independently toggled by organization admins in integration settings; Jira updates follow the project workflow's available transitions. • Adds a unified Integrations page that lists all providers with connection details, repository counts where applicable, a Connect or Manage action, status badges for connected providers, and inline actions for connections needing attention. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#choose-github-repositories-without-leaving-hacktron https://docs.hacktron.ai/changelog#choose-github-repositories-without-leaving-hacktron Fri, 25 Sep 2026 00:00:00 GMT Hacktron gains in-app GitHub repo selection, per-repo PR-review toggles, and GitHub.com support for self-hosted appliances.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds in-app GitHub repository selection so organization admins can choose which repos to enable from the GitHub integration without leaving Hacktron, within the access granted to the GitHub App.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds per-repository PR-review toggle to keep a repository available to Hacktron while independently switching its automatic PR reviews on or off. • Expands the Repositories table to show `Repository` and `Owner` as separate columns alongside `Open Findings`, `PR Scans`, and `Last Scan`, with a platform filter scoped to only connected providers. • Adds automatic re-selection of repositories that are added back to the GitHub App installation. • Adds `@hacktronai review` reply behavior: when posted for a commit that already has a review, Hacktron replies with the completed result or reports that the review is still in progress. • Adds a contact-the-team prompt for organizations using the large-estimate approval flow when Whitebox estimates exceed 5,000 credits. • Enables self-hosted Hacktron appliances to connect a customer-owned GitHub App and review GitHub.com pull requests on their own infrastructure. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#check-your-fixes-without-repeating-the-full-assessment https://docs.hacktron.ai/changelog#check-your-fixes-without-repeating-the-full-assessment Tue, 22 Sep 2026 00:00:00 GMT Hacktron adds finding retest requests, login preview for dynamic validation, and improved People list search for Whitebox Code Review.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds 'Retest findings' workflow on completed hosted Whitebox scans: select findings, provide fix instructions, and the Hacktron pentest team records each outcome and notes; completed retests appear in the scan's retest history and PDF report.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds login instruction preview for dynamic validation in the Whitebox scan wizard: supply login instructions and test credentials, then preview the browser session before starting so Hacktron can authenticate against deployed targets during finding validation. • Adds name, email, and SCM username search to the People list, with filters by role or Code Review seat, plus sort and pagination across the full member list rather than only loaded rows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#a-rebuilt-findings-view-and-fix-prs-that-close-themselves https://docs.hacktron.ai/changelog#a-rebuilt-findings-view-and-fix-prs-that-close-themselves Fri, 18 Sep 2026 00:00:00 GMT Hacktron adds Azure DevOps remediation, Linear triage sync, appliance license controls, and a rebuilt findings view⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `exclude.authors` trust-rule support for bot pull requests on GitHub, so Dependabot, Renovate, and similar bots are now reviewed alongside GitLab and Bitbucket.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `max_scans` entitlement field to appliance licenses, capping the total number of full scans that may start over the life of the license, checked at scan start including restarts. • Supports Azure DevOps repositories for remediation automations — fix pull requests can now be opened and tracked on Azure DevOps alongside GitHub and GitLab. • Pins a GitLab Whitebox Scan to a specific tag or commit SHA instead of the tip of a branch. • Adds OWASP Top 10:2025 category to findings — settable from the overflow menu, visible in the findings table and drawer, and filterable. • Adds CWE identifier and plain-language fix recommendation to findings in the detail view, where the scan engine supplies them. • Adds a download button in the triage header to pull a scan's context documents — threat model, architecture notes, and uploaded files — without leaving the findings view. • Shows the engine-reported failure reason on the scan detail page when a scan fails. • Displays severity badges on findings in global search results. • Rebuilds the findings table and detail drawer with a unified header tray for Severity, Status, Remediate, Copy markdown, and Mark as duplicate actions, plus previous/next navigation and a full-page collapse control. • Scopes the Application filter on the PR Review dashboard to every widget, including the security score card and the low-score banner. • Consolidates Account and Settings into a single Personal settings page with sections for Profile, Security, Connected accounts, Preferences, Sessions, and Organizations. • Allows any organization member to create, rotate, and revoke their own API keys from personal settings without owner or admin involvement. • Adds license detail and expiry warnings to organization settings on appliances — showing licensee, expiry date, days remaining, seat count, and covered products — with a 30-day-out banner and scan blocking after the grace deadline. • Connects self-managed GitLab instances to appliances for merge-request scanning, enabling the Reviews link, PR Review dashboard tabs, and source control settings. • Connects GitHub Enterprise Server to appliances via a GitHub App installation instead of a personal access token. • Provides a dedicated appliance onboarding flow — Welcome, Connect your code, You're all set — pre-filled for the configured Git host. • Expands pentest PDF exports with more per-finding detail, display-order finding numbers, and syntax-highlighted code blocks. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#separate-credit-accounts-and-more-on-premises-scan-options https://docs.hacktron.ai/changelog#separate-credit-accounts-and-more-on-premises-scan-options Wed, 19 Aug 2026 00:00:00 GMT Hacktron adds separate Automation/Whitebox credit accounts, Microsoft account linking, on-prem archive uploads, air-gapped Git support, and glob author filters. • Glob patterns (`*`, `**`, `?`, `{a,b}`) now accepted in repository and organization author filters, in addition to exact names, with bounded limits on pattern length, wildcard count, and brace alternatives. • Billing now shows separate accounts for Automation credits and Whitebox Scan Credits, each with its own balance, current-period usage, purchase flow, and history; auto top-up is available for Automation credits only. • On-premises deployments can now select enabled GitHub Enterprise Server repositories or upload `.zip`, `.7z`, `.tar.gz`, and `.tgz` source archives when starting a Whitebox Scan. • Appliance operators can allow specific private Git hosts, add trusted CA certificates, and collect masked support bundles without an outbound internet connection (air-gapped support). • Deleting an automation now shows a confirmation with its name, and attempting to enable an incomplete automation identifies the missing configuration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/openapi.json https://docs.hacktron.ai/openapi.json Tue, 04 Aug 2026 11:33:28 GMT API surface changed: 1 modified • GET /repos: response schema changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#azure-devops-is-here-plus-bulk-triage-and-live-ai-runs https://docs.hacktron.ai/changelog#azure-devops-is-here-plus-bulk-triage-and-live-ai-runs Mon, 03 Aug 2026 11:46:03 GMT Hacktron adds Azure DevOps integration, bulk triage workflows, and live AI-assisted runs. • Adds Azure DevOps integration, enabling teams to connect Hacktron findings and workflows directly with Azure DevOps projects. • Introduces bulk triage, allowing practitioners to triage multiple findings simultaneously. • Supports live AI runs, enabling real-time AI-assisted analysis during assessments. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#walk-a-taint-trace-export-your-findings-and-scan-bitbucket-prs https://docs.hacktron.ai/changelog#walk-a-taint-trace-export-your-findings-and-scan-bitbucket-prs Mon, 03 Aug 2026 11:46:03 GMT Hacktron adds taint trace navigation, findings export, and Bitbucket PR scanning. • Walk a taint trace interactively to follow data flows from source to sink during code analysis. • Export your findings for reporting or downstream workflows. • Scan Bitbucket pull requests to surface vulnerabilities before code is merged. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#june-23-2026 https://docs.hacktron.ai/changelog#june-23-2026 Tue, 23 Jun 2026 00:00:00 GMT Hacktron adds Context page with app-level threat models, public PR redaction, org fail-on default, SSO login, and MCP duplicate marking. • Adds a Context page with Repositories and Applications tabs to view and manage repository and application threat models • Adds the ability to group repositories into an Application for merged threat modeling and scanning • Adds inline reading view with file tree and outline for editing threat models while preserving changes across regenerations • Redacts full titles, descriptions, proof-of-concept code, and file locations in PR review comments on public repositories • Adds an organization-level fail-on severity threshold default for PR/MR checks via settings • Adds Enterprise SSO sign-in with a dedicated SAML or OIDC login page and button • Adds the `duplicate_of` field to the `update_finding` MCP tool Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#a-new-context-page-for-your-repositories-applications-and-threat-models https://docs.hacktron.ai/changelog#a-new-context-page-for-your-repositories-applications-and-threat-models Tue, 23 Jun 2026 00:00:00 GMT Hacktron adds Context page for repos/apps/threat models, app-level threat synthesis, SSO sign-in, and MCP duplicate marking • Adds a dedicated 'Context' page with Repositories and Applications tabs to browse code knowledge sorted by threat-model update time • Gains ability to group repositories into an Application so Hacktron merges member threat models for application-level scanning and upload fold-in • Enables setting an org-level fail-on severity default for PR/MR checks in settings, overriding the previous per-repo-only limitation • Adds a dedicated SSO sign-in page and 'Single sign-on (SSO)' button on the login screen for SAML/OIDC authentication with IdP round-trip token support • Updates the `update_finding` MCP tool to accept a `duplicate_of` field for programmatically marking findings as duplicates Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#dismiss-a-finding-and-your-pr-check-clears-instantly https://docs.hacktron.ai/changelog#dismiss-a-finding-and-your-pr-check-clears-instantly Thu, 18 Jun 2026 00:00:00 GMT PR checks auto-clear on triage; duplicate finding support; stacked scan volume chart. • GitHub/GitLab PR checks flip to passing immediately when a finding is marked as false positive or accepted risk • Mark findings as duplicates of another finding in the same repository with severity inheritance for gate counts • Dashboard scan volume widget now displays a stacked bar chart with tooltip showing Code Review and Whitebox scan counts • Whitebox scans from uploaded archives take the archive's filename as the scan name Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#june-18-2026 https://docs.hacktron.ai/changelog#june-18-2026 Thu, 18 Jun 2026 00:00:00 GMT Hacktron adds automatic PR status sync on triage, duplicate finding support, and stacked scan volume charts • PR and MR checks update on triage: GitHub check or GitLab commit status flips to passing immediately when a finding is marked as false positive or accepted risk, and reverts to failing if the finding is reopened. • Close findings as duplicates: Mark a finding as a duplicate of another in the same repository; duplicated findings inherit their canonical finding’s severity for PR gate blocking decisions. • Scan volume chart: Dashboard scan volume widget switches to a stacked bar chart with tooltips showing Code Review and Whitebox scan counts per day. • Upload scans named after the archive: Whitebox scans initiated from uploaded archives now use the archive filename as the scan name. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#control-your-scans-and-account-security-like-never-before https://docs.hacktron.ai/changelog#control-your-scans-and-account-security-like-never-before Mon, 15 Jun 2026 00:00:00 GMT Hacktron v2026-06 adds MFA enforcement, MCP protocol access, and PR exclusion rules via `.hacktron/config.yaml` • New remote MCP server endpoint enables connecting external tools to Hacktron’s finding-triage toolset via the MCP protocol with OAuth or API key authentication • Admins can now enforce multi-factor authentication (MFA) requirements across their organization for account security Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#gitlab-now-works-just-like-github https://docs.hacktron.ai/changelog#gitlab-now-works-just-like-github Thu, 11 Jun 2026 00:00:00 GMT Hacktron adds native GitLab integration with automatic merge-request scanning and guided setup • Adds support for connecting a GitLab project, enabling automatic merge-request scans similar to the existing GitHub experience. • Enables GitLab connection during signup or trial with a guided setup flow consistent with GitHub onboarding. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#june-11-2026 https://docs.hacktron.ai/changelog#june-11-2026 Thu, 11 Jun 2026 00:00:00 GMT Hacktron adds GitLab integration with automatic merge-request scanning and signup support • Adds automatic merge-request scanning for GitLab projects, mirroring existing GitHub behavior with per-project toggle capability. • Enables direct GitLab connection during the account signup or trial onboarding flow. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#go-from-a-slack-alert-to-a-fix-in-one-click https://docs.hacktron.ai/changelog#go-from-a-slack-alert-to-a-fix-in-one-click Wed, 10 Jun 2026 00:00:00 GMT Hacktron adds "Fix with AI" button to Slack alerts and auto-closing findings for abandoned PRs • Adds a `Fix with AI` button in Slack alerts that deep-links into Cursor or Claude editors • Implements automatic transition of findings to `Closed` state when pull requests are abandoned without merging • Adds cost estimation notices for repositories containing languages unsupported by the scanner Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#june-10-2026 https://docs.hacktron.ai/changelog#june-10-2026 Wed, 10 Jun 2026 00:00:00 GMT Hacktron adds 'Fix with AI' Slack deep-links, auto-close findings on PR abandonment, and unsupported-language cost warnings • Adds a "Fix with AI" button in Slack alerts that deep-links directly into Cursor or Claude to open the issue and start fixing. • Allows starting a free trial without entering credit card details first; payment info is only required at subscription time. • Automatically moves findings to a "Closed" state when their associated pull or merge request is abandoned/unmerged, preserving triage status upon re-open. • Shows up-front notices in cost estimation when a repository contains primarily languages Hacktron cannot yet scan, preventing silent failures. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#scan-self-hosted-github-enterprise-server https://docs.hacktron.ai/changelog#scan-self-hosted-github-enterprise-server Sun, 07 Jun 2026 00:00:00 GMT Hacktron adds GitHub Enterprise Server support, exact tag/commit scanning, richer Jira ticketing, and improved GitLab MR feedback. • Adds `Scan self-hosted GitHub Enterprise Server` capability for white-box scans and PR reviews • Allows targeting an exact tag or commit during Whitebox scan repository selection • Enables search within large Jira projects and assignee lists when filing tickets from findings • Adds severity badges, collapsible proof-of-concept, trace diagrams, and a "Fix with AI" block to GitLab MR feedback Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#june-7-2026 https://docs.hacktron.ai/changelog#june-7-2026 Sun, 07 Jun 2026 00:00:00 GMT Hacktron adds GitHub Enterprise Server support, exact commit scanning, richer Jira ticketing, and GitLab MR feedback with severity badges. • Adds `GitHub Enterprise Server` integration for white-box scans and PR reviews • Allows targeting an exact tag or commit in Whitebox scan selection • Enables richer Jira ticketing with large project search, assignee lookup, and finding links • Adds severity badges, collapsible proof-of-concept, trace diagrams, and 'Fix with AI' block to GitLab MR feedback Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#pr-comments-that-fix-the-bug-for-you https://docs.hacktron.ai/changelog#pr-comments-that-fix-the-bug-for-you Thu, 04 Jun 2026 00:00:00 GMT Hacktron PR comments now use severity badges and 'Fix with AI' prompt to reproduce, fix, and add regression test. • Pull-request comments now display crisp severity badges instead of emoji icons • Pull-request comments include a “Fix with AI” prompt that reproduces the issue, fixes the root cause, and adds a regression test Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#share-code-review-limits-across-your-whole-org https://docs.hacktron.ai/changelog#share-code-review-limits-across-your-whole-org Wed, 03 Jun 2026 00:00:00 GMT Hacktron v2026-06-03 introduces org-pooled code review limits, on-demand `@hacktron review` PR comments, and Usage page. • `Code Review` limits are now pooled across the whole organization instead of being capped per seat • New command to request an immediate PR review by commenting `@hacktron review` on a pull request • New owner-only `Usage` page shows usage and overage for the billing period Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#findings-open-straight-into-the-taint-trace https://docs.hacktron.ai/changelog#findings-open-straight-into-the-taint-trace Mon, 01 Jun 2026 00:00:00 GMT Vulnerability views redesigned with direct taint trace access and findings history timeline • The full-page finding view now opens directly into the taint trace with smooth collapse animations. • Adds a 'Finding history' section showing a timeline of how each finding changed from one scan to the next. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#a-rebuilt-dashboard-split-by-the-work-you-do https://docs.hacktron.ai/changelog#a-rebuilt-dashboard-split-by-the-work-you-do Tue, 19 May 2026 00:00:00 GMT Hacktron introduces a rebuilt dashboard with separate tabs for Code Review, PR Review, and Whitebox Scan, plus richer Linear integration. • Adds Separate Overview, PR Review, and Whitebox Scan tabs to the dashboard for focused metrics. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#may-19-2026 https://docs.hacktron.ai/changelog#may-19-2026 Tue, 19 May 2026 00:00:00 GMT Hacktron adds dedicated dashboard tabs, taint-trace visualization, and deep Linear integration. • Adds Overview, PR Review, and Whitebox Scan tabs to the dashboard for separated metrics views. • Displays a step-by-step taint-trace timeline and interactive call graph showing source, propagation, and sink nodes for vulnerabilities. • Enhances Linear integration with default project selection, finding severity-to-priority mapping, and status mirroring. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#keep-reviewing-past-your-limit-instead-of-getting-blocked https://docs.hacktron.ai/changelog#keep-reviewing-past-your-limit-instead-of-getting-blocked Sat, 16 May 2026 00:00:00 GMT New 'spillover billing' feature for Hacktron organizations • `Organization owners can switch on spillover billing so PR reviews keep running past your included limit, billed as overage instead of stopping cold.` • This new capability introduces a mechanism where review limits no longer stop PR reviews outright; rather, they trigger overage billing. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#may-16-2026 https://docs.hacktron.ai/changelog#may-16-2026 Sat, 16 May 2026 00:00:00 GMT Hacktron adds owner-controlled spillover billing to keep PR reviews running past limits • Adds organization-level `spillover_billing` setting that allows PR reviews to continue beyond included limits and bill as overage instead of stopping Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#50-pr-reviews-a-seat-then-$1-each-instead-of-a-wall https://docs.hacktron.ai/changelog#50-pr-reviews-a-seat-then-$1-each-instead-of-a-wall Wed, 13 May 2026 00:00:00 GMT Hacktron v50 introduces per-seat PR review limits, $1 overage billing, resubscribe flow, custom trials, and Slack invites • Adds `50 PR reviews a seat, then $1 each` billing model so extra reviews bill at `$1 each` instead of stopping. • Adds `Resubscribe` button for canceled organizations to restore previous plans in one click. • Adds `Custom trial duration` allowing selectable trial lengths with usage limit prompts. • Adds `Slack invite flow` to invite teammates directly from Slack into the Hacktron organization. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#may-13-2026 https://docs.hacktron.ai/changelog#may-13-2026 Wed, 13 May 2026 00:00:00 GMT Hacktron adds per-seat PR review quotas with overage billing, one-click resubscribe, custom trials, and Slack integration. • Every developer seat now includes 50 PR reviews per billing period, with extra reviews billed at $1 each • Canceled organizations get a Resubscribe button to pick their old plan back up • Trials can run for a length you choose, with a clear prompt when you reach their limits • Invite teammates to your Hacktron organization straight from Slack Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#stop-a-scan-mid-run https://docs.hacktron.ai/changelog#stop-a-scan-mid-run Mon, 04 May 2026 00:00:00 GMT Adds ability to cancel running scans mid-run from the UI and a guided setup checklist • Adds `Cancel` action in the scan view to stop a running scan immediately • Adds a getting-started checklist to guide new teams through connecting repositories and enabling Code Review Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#may-4-2026 https://docs.hacktron.ai/changelog#may-4-2026 Mon, 04 May 2026 00:00:00 GMT May 4, 2026 release focuses on UX improvements for new users and operational control for active jobs. • Adds the ability to stop a scan mid-run directly from the scan view without waiting for completion. • Introduces a guided setup checklist in the UI to help new teams connect repositories and enable Code Review. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#a-home-for-your-code-review-findings https://docs.hacktron.ai/changelog#a-home-for-your-code-review-findings Thu, 23 Apr 2026 00:00:00 GMT Dedicated Code Review page for findings and PR comments. • Adds a dedicated `Code Review` page to view scan-scoped findings alongside PR comments that link back to the finding in Hacktron. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#drive-hacktron-from-your-own-scripts https://docs.hacktron.ai/changelog#drive-hacktron-from-your-own-scripts Mon, 20 Apr 2026 00:00:00 GMT Hacktron adds Public REST API for programmatic access to scans and findings, plus new Slack and Linear integrations • Adds public REST API to reach scans, findings, and repositories programmatically with API keys • Enables Slack link unfurling for finding and scan links showing live status, severity, and triage • Allows creating a Linear issue directly from a finding with details pre-filled Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#april-20-2026 https://docs.hacktron.ai/changelog#april-20-2026 Mon, 20 Apr 2026 00:00:00 GMT Hacktron adds public REST API for programmatic access to scans and findings • Adds public REST API with interactive docs to programmatically reach scans, findings, and repositories using API keys • Enables Slack link unfurling for finding and scan links showing live status, severity, and triage • Adds ability to create Linear issues directly from findings with pre-filled details Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#see-how-a-vulnerability-moves-through-your-code https://docs.hacktron.ai/changelog#see-how-a-vulnerability-moves-through-your-code Mon, 06 Apr 2026 00:00:00 GMT Hacktron adds visual trace diagrams, markdown findings, flexible pentest starts and context documents • Adds visual trace diagrams to the finding view and PDF reports to show how a vulnerability moves through code • Allows starting a pentest from a public repository URL or an uploaded archive with pre-commit cost estimates • Enables uploading context documents (notes about a repository) to help reviews understand codebase conventions Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#april-6-2026 https://docs.hacktron.ai/changelog#april-6-2026 Mon, 06 Apr 2026 00:00:00 GMT Hacktron adds visual trace diagrams to findings, flexible pentest sources, context docs, and Markdown support • Adds visual trace diagrams to finding views and PDF reports to show how a vulnerability moves through code • Adds start-pentest source options for public repository URLs or uploaded archives with pre-commit cost estimates • Adds `context documents` upload feature for repository notes to inform review conventions • Enables full Markdown rendering in findings descriptions, dismiss reasons, and comments plus one-click report copy Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#triage-findings-without-leaving-the-browser https://docs.hacktron.ai/changelog#triage-findings-without-leaving-the-browser Mon, 23 Mar 2026 00:00:00 GMT Adds in-app finding dismissal with reason and activity thread via new web UI • Enables triage of findings directly in the browser app with dismiss options and an activity thread Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#watch-findings-arrive-as-a-scan-runs https://docs.hacktron.ai/changelog#watch-findings-arrive-as-a-scan-runs Wed, 18 Mar 2026 00:00:00 GMT Hacktron adds live stream scan progress, pre-scan cost estimation, and downloadable PDF reports. • Adds real-time whitebox billing streaming so users can watch findings arrive as the scan runs • Adds pre-scan cost estimation for scans and pentests before execution begins • Enables direct generation of downloadable PDF reports of findings from the browser Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron https://docs.hacktron.ai/changelog#march-1-2026 https://docs.hacktron.ai/changelog#march-1-2026 Sun, 01 Mar 2026 00:00:00 GMT Hacktron introduces pentest credit purchasing for on-demand scans and public scan disclosure via read-only pages. • Adds the ability to buy pentest credits and spend them on pentests • Adds support for sharing a scan and its findings through public, read-only pages Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hacktron