Intruder

No entries match these filters. Clear filters

1. What we've shipped lately: September 2026 Sep 21, 2026 · release notes

   Intruder adds cross-domain scanning, unlimited AI pentest retests, Bitbucket/Azure repo support, Azure DevOps scoping, and hygiene score trends

   • Adds the ability to include up to three cross-domains alongside your primary application target for a single authenticated scan that follows flows across domain boundaries.
   • Enables unlimited retests of selected AI pentest findings via the portal without requiring a full scan run, with results captured in a dedicated retest report.
   • Adds support for connecting Bitbucket and Azure Repos as source code repositories for AI Pentesting, alongside existing GitHub and GitLab support.
   • Adds Azure DevOps work item scoping by target and tag to auto-create work items only for issues matching specific asset scope and severity rules.
   • Enables auto-validation of SQL injectionSQL injectionAn attack that makes an application treat untrusted input as part of a database command. It can expose or modify data by changing what the query does. findings using AI agents during the scan to suppress confirmed false positives before they appear in results.

   +1 more show less

   • Displays Cyber Hygiene Score trends over time with a configurable range from four weeks up to one year.

   6 details in Everything

2. changelog Sep 14, 2026 · issue 074

   Intruder adds Additional Domains configuration for authenticated web app scans, enabling subdomain and cross-domain coverage.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ HOW TO FIND IT
   Include an API subdomain and an external identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. in an authenticated scan so the crawler can follow full application flows without hitting domain boundaries.
   📍In the Intruder console, open your web app target and go to Authentication settings. Locate the Additional domains field and add entries such as api.example.com and auth.example.com, then save and re-run the scan.
   • Adds an Additional domains field when setting up or editing authentication for a web app target, allowing trusted subdomains (e.g.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ api.example.com, auth.example.com) and external services (identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems., CDNs, third-party APIs) to be included in authenticated scan scope.

   1 detail in Everything

3. changelog Sep 13, 2026 · issue 073
   └──▷ HOW TO FIND IT
   Ensure API backends and auth providers are crawled and tested during an authenticated scan of a multi-subdomain app.
   📍In the Intruder console, open a web app target › Authentication settings › locate the Additional domains field › add subdomains such as api.example.com and auth.example.com › save and re-run the scan.
4. changelog Sep 12, 2026 · issue 072

   Intruder: Adds an Additional domains field for web app authentication, allowing subdomains and external services to be included in authenticated scan scope.

   └──▷ HOW TO FIND IT
   When your app at app.example.com calls api.example.com or an external identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems., add those domains so the authenticated crawler is not blocked at domain boundaries.
   📍In the target's authentication settings, open the Additional domains field and add the required domains, e.g.: api.example.com, auth.example.com, idp.thirdparty.com
5. changelog Sep 11, 2026 · issue 071

   Intruder authenticated web scans now support additional domains, subdomains, and cross-domain services in a single scan scope.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ HOW TO FIND IT
   When an app at app.example.com relies on api.example.com and an external identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems., add those domains so authenticated scans fully crawl and test all application flows.
   📍In the Intruder console, open the target for your web app, go to Authentication settings, locate the Additional domains field, and add entries such as api.example.com, auth.example.com, and any external identity provider or CDN URLs your application depends on.
6. changelog Sep 10, 2026 · issue 070

   Intruder adds configurable additional domains for authenticated web app scans, covering subdomains and external identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems..⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ HOW TO FIND IT
   When your web app calls across subdomains (e.g. a front-end on app.example.com hitting an API on api.example.com), add those domains so authenticated scans traverse the full application flow instead of stopping at the primary domain boundary.
   📍In the target's authentication settings, locate the Additional domains field and add each subdomain or external URL (e.g. api.example.com, auth.example.com, or your identity provider's domain) to include them in the authenticated scan scope.
7. changelog Sep 9, 2026 · issue 069

   Intruder adds Additional Domains configuration for authenticated web app scans, enabling subdomain and cross-domain coverage.

   └──▷ HOW TO FIND IT
   Ensure an authenticated scan of app.example.com also crawls and tests api.example.com and an external identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems., so API backends and auth flows aren't skipped.
   📍In the Intruder console, open your web app target › Authentication settings › locate the Additional domains field › add api.example.com and your identity provider URL › save and re-run the scan.
   • Adds an Additional domains field when setting up or editing authentication for a web app target, allowing subdomains (e.g. api.example.com, auth.example.com) and external service URLs to be included in authenticated scan scope.
   • Supports cross-domain scan coverage for external services an application depends on, such as identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems., CDNs, or third-party APIs, preventing blocked requests from causing missed vulnerabilities.

   2 details in Everything

8. Scan additional domains for authenticated web application scans (2026-09-07) Sep 7, 2026 · issue 067

   Intruder authenticated web app scans now support additional domains, including subdomains and cross-domain external services.

   ⤢
   └──▷ HOW TO FIND IT
   When your app at app.example.com calls an API at api.example.com and authenticates via an external IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems., add those domains so the scanner can follow the full application flow.
   📍In the Intruder console, open your web app target › Authentication settings › locate the Additional domains field › add entries such as api.example.com and auth.example.com › save and re-run the authenticated scan.
   • Adds an Additional domains field in authenticated web app target configuration, allowing subdomains (e.g. api.example.com, auth.example.com) and external services (identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems., CDNs, third-party APIs) to be included in scan scope.
   • Enables cross-domain crawling and testing during authenticated scans so API backends and external auth providers are no longer blocked at the domain boundary.
   • Adds an Additional domains field in authenticated web app target configuration, allowing subdomains (e.g. api.example.com, auth.example.com) and external services (identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems., CDNs, third-party APIs) to be included in scan scope.

   1 more in Everything

9. changelog Aug 26, 2026 · issue 057
   • Adds Bitbucket Cloud as a supported source control integration for AI Pentesting, enabling direct connection and AI-powered penetration tests against Bitbucket-hosted repositories.
10. Integrate with Bitbucket Cloud for AI Pentesting (2026-08-25) Aug 25, 2026 · issue 056

    Intruder AI Pentesting now supports Bitbucket Cloud repositories, matching existing GitHub and GitLab coverage.

    ⤢
    └──▷ HOW TO FIND IT
    Enable Bitbucket Cloud so your Bitbucket-hosted repositories appear as targets for AI Pentest scans.
    📍In the Intruder console, go to Integrations, find Bitbucket Cloud, and enable the integration to connect your repositories.
11. changelog Aug 19, 2026 · issue 050

    Intruder adds dark theme and a redesigned single-click navigation with pinnable Favourites.

    • Redesigned navigation gives single-click access to every page, with pages grouped into expandable theme sections and icon/pill indicators flagging new data or activity.
    • Adds pinnable Favourites shortcut bar in the sidebar for quick access to most-visited pages.

    2 details in Everything

12. What we've shipped lately: August 2026 Aug 18, 2026 · release notes

    Intruder adds Docker Hub integration, regex tag matching, M365 scanning, Vanta sync, Linear tickets, and GregAI capabilities

    • Adds Docker Hub integration to automatically scan container images from synced repositories.
    • Supports regex in container image tag matching to dynamically include or exclude specific tags during scans.
    • Extends cloud security scanning to cover Microsoft 365 configuration risks across Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments., Exchange Online, SharePoint, and Teams.
    • Enables real-time syncing of vulnerability issues and occurrences from Intruder into Vanta for compliance evidence.
    • Adds Linear integration to create remediation tickets directly from vulnerabilities with automatic criteria setup.

    +3 more show less

    • Expands web app authenticated scans to cover multiple subdomains in a single target configuration.
    • Enhances GregAI to update scheduled scan targets via natural language queries.
    • Enhances GregAI to provide timeline history of key events for specific assets upon request.

    8 details in Everything

13. Dark theme is here! (2026-08-17) Aug 17, 2026 · issue 048

    Intruder adds a dark theme toggle in Settings, with preference saved automatically across sessions.

    ⤢
14. Reorganised side navigation (2026-08-13) Aug 13, 2026 · issue 045

    Intruder redesigns its side navigation with one-click access, pinnable Favourites, and activity indicators.

    ⤢
    • Adds a pinnable Favourites shortcut bar to the sidebar so users can surface their most-visited pages at the top of the nav.
    • Introduces icon and pill indicators on nav items to surface new data or activity at a glance.
    • Pages are now grouped into expandable theme sections, replacing the previous nested-tab structure.
    • Every page is now reachable in a single click from the side navigation.

    4 details in Everything

15. changelog Aug 4, 2026 · issue 035

    Intruder adds AI Pentesting with whitebox code-repo integration, delivering full PDF reports on demand.

    └──▷ HOW TO FIND IT
    Kick off an on-demand AI pentest ahead of an audit or security questionnaire without waiting weeks for a traditional engagement.
    📍In the portal, go to AI Pentesting in the left nav → click Start new pentest → select the AI Pentest option, then connect your code repository and define entry points, credentials, and application context to scope the test.
    • New AI Pentesting capability launched from the portal (left nav → AI Pentesting → Start new pentest → AI Pentest option), delivering full PDF reports with executive summary, severity ratings, reproduction steps, and remediation guidance.
    • Supports whitebox testing via code repository integration, enabling coverage of access control, business logic, and auth bypass issues that require multi-step chaining.
    • Allows practitioners to define custom entry points, credentials, and application context to scope the AI pentest to their real environment.

    3 details in Everything

16. AI Pentesting - expert-level web app pentesting without the wait (2026-07-28) Jul 28, 2026 · issue 028

    Intruder launches AI Pentesting: on-demand web app pentests with PDF reports, whitebox code repo analysis, and logic-flaw detection.

    ⤢
    └──▷ HOW TO FIND IT
    Start an AI-driven pentest against your web app directly from the Intruder portal.
    📍In the portal, go to AI Pentesting in the left nav, click Start new pentest, then choose the AI Pentest option.
    • New AI Pentesting capability delivers full web app penetration tests on demand, producing a PDF report with executive summary, severity ratings, reproduction steps, and remediation guidance.
    • Supports whitebox testing via code repository integration, enabling deeper analysis beyond surface-level scanning.
    • Detects access control, business logic, and auth bypass vulnerabilities that require multi-step chaining — issues missed by static or purely dynamic scanning.
    • Allows practitioners to define custom entry points, credentials, and application context to scope tests to their real environment.

    4 details in Everything

17. AI Pentesting - expert-level web app pentesting without the wait (2026-07-28) Jul 28, 2026 · issue 005

    Intruder launches AI Pentesting: on-demand web app pentests with PDF reports, whitebox code repo analysis, and logic-flaw detection.

    ⤢
    └──▷ HOW TO FIND IT
    Start an AI-driven pentest against your web app directly from the Intruder portal.
    📍In the portal, go to AI Pentesting in the left nav, click Start new pentest, then choose the AI Pentest option.
    • New AI Pentesting capability delivers full web app penetration tests on demand, producing a PDF report with executive summary, severity ratings, reproduction steps, and remediation guidance.
    • Supports whitebox testing via code repository integration, enabling deeper analysis beyond surface-level scanning.
    • Detects access control, business logic, and auth bypass vulnerabilities that require multi-step chaining — issues missed by static or purely dynamic scanning.
    • Allows practitioners to define custom entry points, credentials, and application context to scope tests to their real environment.

    4 details in Everything

18. changelog Jul 27, 2026 · issue 027

    Intruder extends Azure cloud scans to cover Microsoft 365 configuration risks across Entra, Exchange, SharePoint, and Teams.

    └──▷ HOW TO FIND IT
    Unlock full Microsoft 365 configuration checks — beyond the automatic subset — by updating your Azure integration's permissions in Intruder.
    📍In the Intruder console, go to your Azure integration settings and update the integration's permissions following the steps outlined in the integration guide to enable the full set of M365 checks.
    • Adds Microsoft 365 configuration risk scanning (Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments., Exchange Online, SharePoint, Teams) as part of existing Azure cloud security scans.
    • Surfaces M365 identity, email, and collaboration configuration risks automatically for existing Azure integration users.
    • Enables full M365 check coverage by updating the Azure integration's permissions.

    3 details in Everything

19. docs update Jul 27, 2026 · docs issue 004

    Intruder extends Azure cloud scans to cover Microsoft 365 configuration risks across Entra, Exchange, SharePoint, and Teams.

    └──▷ HOW TO FIND IT
    Unlock full Microsoft 365 configuration checks — beyond the automatic subset — by updating your Azure integration's permissions in Intruder.
    📍In the Intruder console, go to your Azure integration settings and update the integration's permissions following the steps outlined in the integration guide to enable the full set of M365 checks.
    • Adds Microsoft 365 configuration risk scanning (Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments., Exchange Online, SharePoint, Teams) as part of existing Azure cloud security scans.
    • Surfaces M365 identity, email, and collaboration configuration risks automatically for existing Azure integration users.
    • Enables full M365 check coverage by updating the Azure integration's permissions.

    3 details in Everything

20. Microsoft 365 security checks for Azure integrations (2026-07-21) Jul 21, 2026 · issue 021

    Intruder now surfaces Microsoft 365 configuration risks across Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments., Exchange Online, SharePoint, and Teams within Azure cloud scans.

    └──▷ HOW TO FIND IT
    Unlock full M365 security coverage by updating your existing Azure integration's permissions in the Intruder console.
    📍In the console, go to your Azure integration settings and update the integration's permissions following the steps outlined in the M365 setup guide to enable the full set of Microsoft 365 checks.
    • Adds Microsoft 365 configuration security checks covering Entra ID, Exchange Online, SharePoint, and Teams as part of existing Azure cloud security scans.
    • Automatically runs a subset of M365 checks with existing Azure integrations, with full coverage unlocked by updating integration permissions.

    2 details in Everything

21. Push vulnerabilities to Linear (2026-07-09) Jul 9, 2026 · issue 014

    Intruder adds native Linear integration to push vulnerabilities directly into Linear teams, projects, and backlogs.

    ⤢
    └──▷ HOW TO FIND IT
    Connect Linear and configure auto-create rules so critical and high findings flow into your backlog automatically.
    📍In the Intruder console, go to Integrations → Linear, connect your workspace, then set auto-create rules by severity (e.g. Critical and High) and select the target Linear team and project.
    • New Linear integration: connect your Linear workspace from Intruder settings to push vulnerabilities without leaving the platform.
    • Supports one-click push of any issue to a chosen Linear team and project.
    • Enables auto-create rules to automatically raise Linear tickets based on vulnerability severity.
    • Displays linked Linear tickets inline in the issue list and issue details panel.
    • Includes test-issue feature to validate integration configuration before going live.

    5 details in Everything

22. Connect Docker Hub for container image scanning (2026-07-02) Jul 2, 2026 · issue 014

    Intruder adds Docker Hub integration for automated container image vulnerability scanning within the portal.

    ⤢
    └──▷ HOW TO FIND IT
    Connect a Docker Hub account to bring container images into Intruder's vulnerability monitoring alongside existing cloud targets.
    📍In the Intruder portal, go to Discovery → Container Images → click Add registry (top right) → select Docker Hub → enter your Personal Access Token (PAT) to authenticate and begin repository discovery.
    • Connects multiple personal or organisation Docker Hub accounts via Personal Access Token (PATPATA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it.) for container image scanning.
    • Automatically discovers repositories, including tags and last-pushed dates, with on-demand refresh support.
    • Enables adding a custom tag to create a scan target and trigger an immediate vulnerability scan.
    • Runs automatic daily rescans and instant rescans when a tag points to a new image version.

    4 details in Everything

23. Regex tag matching for container images (2026-06-18) Jun 18, 2026 · issue 014

    Intruder adds regex tag matching for container image targets, enabling accurate scoping across mixed or non-standard tagging conventions.

    ⤢
    └──▷ HOW TO FIND IT
    Target only production-tagged images across repos that mix semver and custom suffixes, without manually updating the tag each release.
    📍In the console, go to your container image target › Tag rule › select Regex, then enter your pattern (e.g. ^v\d+\.\d+\.\d+$) and save.
    • New regex tag-matching rule for container image targets lets you define a custom pattern to consistently resolve the correct image version.
    • Supports dynamic targeting: the target automatically follows the latest tag matching the regex as new image versions are pushed.
    • Enables accurate scoping across repositories with mixed conventions (e.g., semver, -dev suffixes, or custom schemes) where exact-match and semver rules fall short.

    3 details in Everything

24. AI-driven vulnerability management: broader, faster coverage against new threats Jun 18, 2026 · release notes

    Intruder introduces AI-driven vulnerability management on Enterprise plans with automated check generation.

    • Automatically builds detection checks for newly disclosed vulnerabilities using an AI pipeline that averages under an hour from NVDNVDThe National Vulnerability Database, maintained by NIST, is the U.S. government repository of CVE records enriched with CVSS scores and metadata; cyber tools query it to drive vulnerability prioritization. analysis to QA readiness.
    • Introduces Intruder AI-powered check filter in the checks list to identify checks built by the new AI system.
    • Enables active checks that safely interact with systems to confirm real exposure, moving beyond version-based inference.

    3 details in Everything

25. Attack Surface view for Cloud and Pro plans (2026-06-15) Jun 15, 2026 · issue 014

    Intruder launches Attack Surface view: unified perimeter visibility with port, service, and web screenshot coverage.

    ⤢
    └──▷ HOW TO FIND IT
    Spot every host exposing a database port (e.g. 5432) across your entire perimeter before an auditor or attacker does.
    📍In the Intruder portal, go to Attack Surface (left nav) › filter by Port: 5432 to see every target with PostgreSQL exposed.
    Identify certificates expiring soon across all targets to prevent unexpected lapses in production services.
    📍In the Intruder portal, go to Attack Surface (left nav) › filter by Certificate Expiry to surface certs about to lapse.
    • New Attack Surface view consolidates every exposed port across all monitored targets into a single list, showing the service and software version behind each.
    • Displays screenshots of every exposed web service so practitioners can instantly distinguish forgotten admin panels from intended login pages.
    • Enables search and filtering by port, service, or product to identify all targets running a specific service in seconds.
    • Adds filtering by host status or certificate expiry to surface newly appeared services or TLS certificates approaching lapse.
    • Available on Cloud and Pro plans, with port coverage scaling by plan tier.

    5 details in Everything

26. See what's exposed with Attack Surface view Jun 9, 2026 · release notes

    Introduces Attack Surface View for unified visibility of exposed ports, services, and versions.

    • Adds Attack Surface View in the left nav bar to display a single list of all exposed items across targets.
    • Provides screenshots for each exposed web service directly within the Attack Surface View.
    • Enables search and filtering by port, service, product, host status, or certificate expiry in the Attack Surface View.

    3 details in Everything

27. AI pentesting: the depth of a pentest, on-demand Apr 30, 2026 · release notes

    Intruder launches AI pentesting agents to actively investigate scanner findings for injection, disclosure, and client-side issues.

    • AI agents now automatically investigate scanner-identified vulnerabilities including injection, information disclosure, and client-side attacks using active probing techniques.
    • New monthly credit-based pricing for AI pentesting investigations: 5 credits on Cloud, 10 on Pro, and 50 on Enterprise plans.

    2 details in Everything

28. The Vulnerabulletin Issue #6 Apr 16, 2026 · release notes

    Release focuses on AI vulnerability trends and container security context rather than new functional capabilities beyond the scanning feature.

29. The Vulnerabulletin Issue #7 Apr 16, 2026 · release notes

    Intruder launches AI Pentesting capability and Vanta integration for live compliance data.

    • Adds AI Pentesting capability covering injection, client-side attacks and information disclosure with full receipts.
    • Integrates Intruder findings with Vanta, streaming live issues and occurrences for real-time compliance.

    2 details in Everything

30. The Vulnerabulletin Issue #9 Apr 16, 2026 · release notes

    Intruder introduces AI pentesting for web apps and a free plan.

31. The Vulnerabulletin Issue #8 Apr 16, 2026 · release notes

    Intruder adds Attack Surface View with screenshot evidence and AI-powered checks for broader threat coverage

    • Adds Attack Surface View to show exposed internet assets including ports, services, versions, and screenshot evidence.
    • Adds AI-powered checks for vulnerability scanning, with engineers signing off on every new check.

    2 details in Everything

32. The Vulnerabulletin Issue #4 Feb 18, 2026 · release notes

    Cyber Hygiene Scores now incorporate exploitation likelihood; add Custom Slack/Teams notifications

    • Adds likelihood of exploitation to Cyber Hygiene Scores for a more realistic risk view
    • Adds customizable notification controls for Slack and Teams integrations

    2 details in Everything

33. The Vulnerabulletin Issue #3 Jan 21, 2026 · release notes

    Intruder adds in-platform commenting, Apex domain exclusion, and JS bundle secrets detection

    • Adds the Javascript bundle secrets detection check for secrets stores in JS bundles
    • Enables Exclude Apex domains in domain discovery to omit an entire top-level domain and its subdomains from scanning results
    • Brings In-platform commenting capability allowing users to comment on issues and occurrences within Intruder

    3 details in Everything

34. Validate and Remediate Faster With In-Platform Commenting Dec 18, 2025 · release notes

    Intruder adds in-platform commenting and activity feeds to issues and occurrences.

    └──▷ HOW TO FIND IT
    To view existing comments or add your own to an occurrence via the UI.
    📍Click on any occurrence and scroll down to the bottom
    • Adds the ability to add comments directly to individual issues or occurrences.
    • Introduces a new activity feed showing discussions, changes, and actions for remediation audit trails.

    2 details in Everything

35. The Vulnerabulletin Issue #2 Dec 3, 2025 · release notes

    GregAI can now manage targets/tags and start scans; cvemon launched for CVE monitoring.

36. The Vulnerabulletin Issue #1 Nov 3, 2025 · release notes

    Intruder adds Google Cloud CSPCSPContent Security Policy: a browser security mechanism, standardized by the W3C, that lets a web server declare which sources of scripts, styles, and other resources a page may load, blocking injection attacks. checks, GregAI copilot, and Jira sync

    • Adds Google Cloud security posture managementCloud security posture managementCloud security posture management, checking cloud resources for risky settings and policy violations. It helps teams find exposed services, overly broad permissions and other configuration gaps. checks
    • Adds GregAI, an AI security analyst copilot to workflows
    • Adds bidirectional Jira synchronization with status viewing and linking

    3 details in Everything

37. Say It, Secure It: Streamline Exposure Management with Claude + Intruder's MCP Server May 15, 2025 · release notes

    Intruder adds an MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server enabling AI agents to manage vulnerability scans and remediation via natural language

    • Adds an open-source Python module implementing the Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. (MCP) for Intruder's API
    • Enables AI agents to programmatically add targets and run vulnerability scans through a standardized interface
    • Exposes existing API endpoints to AI agents via FastMCP for prioritizing issues, generating management summaries, and validating remediation

    3 details in Everything

38. What's new? Product updates from Intruder October 2024 Oct 21, 2024 · release notes

    Intruder adds subdomain/related domain discovery, Cloudflare/Sentinel/Okta integrations, EPSSEPSSExploit Prediction Scoring System, an estimate of the probability that a published vulnerability will be exploited in the next 30 days. It helps prioritize investigation and patching. context, and balanced scan mode.

    • Adds Subdomain and Related Domain discovery on the Enterprise plan
    • Adds Cloudflare integration to discover and protect more assets
    • Adds Microsoft Sentinel integration for risk detection, investigation, and remediation
    • Adds Okta SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. authentication support
    • Adds EPSS score, CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. vector, and KEVKEVCISA's Known Exploited Vulnerabilities catalog, a list of vulnerabilities with evidence of exploitation in real attacks. It helps teams prioritize fixes for problems attackers already use. list data to issue context

    5 details in Everything

39. What's new? Product updates from Intruder July 2024 Jul 18, 2024 · release notes

    Intruder Q2 2024 adds subdomain discovery, login page scanning, AWS API identification, WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. detection, Cloudflare integration, and Microsoft Sentinel/SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. consolidation.

    • Adds subdomain discovery on the Enterprise plan to find exposed subdomains.
    • Adds login page discovery to identify and scan web application login pages.
    • Adds automatic AWS API identification for targets requiring an API schema.
    • Adds WAF detection to identify targets blocked by a Web Application Firewall.
    • Adds cloud asset prompt to guide setup of cloud integrations for visibility.

    +5 more show less

    • Adds Cloudflare integration to expand scanning of externally facing cloud assets.
    • Expands Attack Surface Visibility with improved Network view for exposed ports and services.
    • Adds 1,000+ attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. specific checks for issue detection on discovered assets.
    • Adds Microsoft Sentinel integration to consolidate data from disparate SIEM sources.
    • Adds Single Sign-On (SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management.) via Okta for managing multiple teams and business units.

    10 details in Everything

40. What's new? Product updates from Intruder April 2024 May 1, 2024 · release notes

    Intruder April 2024 adds SPA scanning, org-level AWS integration, auto login/WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. detection and team scan management

    • Adds the ability to scan single page applications (SPA) via web app scanning.
    • Allows adding AWS accounts at the organization level for cloud connections.
    • Automatically prompts to add an API schema when an AWS target with an API is identified.
    • Automatically discovers login pages on targets and prompts you to add authentication.
    • Detects when a target is being blocked by a web application firewall (WAF).

    +1 more show less

    • Empowers team members to manage their own scans.

    6 details in Everything

41. What's new? Product updates from Intruder February 2024 Feb 5, 2024 · release notes

    Intruder February 2024 adds single-page app scanning and organization-level AWS asset sync.

    • Adds the ability to scan single page applications with enhanced spidering that works alongside recorded logins to access pages past SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management..
    • Allows adding AWS accounts at the organization level for auto-synced cloud assets rather than individual account configuration.

    2 details in Everything

42. Metrics matter: why we've added analytics to show your progress Jan 18, 2024 · release notes

    Intruder adds an Analytics page tracking issues, scan frequency, and attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. changes over time via new UI widgets.

    • Adds a new Analytics tab to the web interface that tracks vulnerability remediation progress, emerging threat check performance, and attack surface changes over selectable time ranges.
    • Introduces Issues section metrics: Open issues, New issues, Fixed issues, and Days to fix (average days to remediate by severity) for trend analysis.
    • Introduces Monitor Progress section metrics: Emerging threats (count, severity breakdown, pass/fail), Days between scans (total assessments and mean interval), and Cyber hygiene score.
    • Introduces Attack Surface section metrics: Most vulnerable targets (un-remediated occurrences by target), New services (discovered during period), and Scanned targets.

    4 details in Everything

43. Introducing Nuclei: the scanner that packs a punch Dec 14, 2023 · release notes

    Intruder integrates Nuclei scanning engine with 3,000+ checks for Cloud and Premium plans.

    • Adds the Nuclei open-source vulnerability scanning engine to Intruder to augment existing attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. checks
    • Provides over 3,000 additional vulnerability detection checks in the initial release

    2 details in Everything

44. What's new? Product updates from Intruder November 2023 Nov 14, 2023 · release notes

    Intruder adds authentication verification step, Vanta integration support, and new Analytics tab.

    • Adds an automatic verification step for web app authentication credentials before starting a scan
    • Adds support for sending vulnerability scanning evidence to the Vanta compliance platform
    • Launches a new Analytics tab to monitor cyber hygiene score, issue resolution times, and emerging threats

    3 details in Everything

45. What's new? Product updates from Intruder September 2023 Sep 19, 2023 · release notes

    Intruder adds remediation scans for fast vulnerability verification and revamps the internal target UI.

    • Adds remediation scans that check specific vulnerabilities on associated targets at an average of 65% faster than a full scan

    1 detail in Everything

46. Rapid Response: Bridge the gap and find vulnerabilities faster Aug 24, 2023 · release notes

    Intruder introduces Rapid Response, a manual screening service for critical vulnerabilities before automated checks exist.

    • Adds Rapid Response as a new manual scanning capability for Enterprise plans to identify critical weaknesses (CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. 9.5+) before automated plugin coverage is available.
    • Enables automatic kick-off of Emerging Threat Scans (ETS) on all external targets upon identification of critical vulnerabilities affecting those targets.
    • Provides advisories with details and recommendations when Rapid Response or ETS identifies exposed servers for newly disclosed weaknesses.

    3 details in Everything

47. What's new? Product updates from Intruder July 2023 Jul 4, 2023 · release notes

    New Drata and Azure DevOps integrations, portal-tracked security advisories with retesting, prioritized dashboard widget, on-demand PDF/CSV exports, and region selector for s

    • Adds a one-click integration to send reports directly to Drata
    • Adds an integration to create work items in Azure DevOps from scans
    • Enables tracking security advisories in the portal and including them in reports (replaces email-only delivery for vanguard/premium customers)
    • Adds a Retest button to the portal workflow for security advisories after remediation
    • Adds a new dashboard widget that prioritizes issues by highest severity open for the longest time

    +2 more show less

    • Adds one-click download of PDF or CSV reports of latest issues for all targets directly from the dashboard
    • Adds a region selector for scanners to reduce latency ('scan closer to home')

    7 details in Everything

48. What's new? Product updates from Intruder May 2023 May 18, 2023 · release notes

    New product capabilities include API scanning, Drata/Azure DevOps integrations, tag management, RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists., and regional scanners.

49. Introducing fully informed API scanning Mar 30, 2023 · release notes

    Intruder adds API scanning via OpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth./Swagger schema upload

    • Adds Application licenses to replace Authentication Licenses, enabling API targets alongside authenticated apps
    • New capability: Upload OpenAPI/Swagger schemas to drive comprehensive endpoint inventory and vulnerability checks

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Authentication Licenses are renamed to Application licenses
50. Product Update: Continuous Network Scanning Dec 5, 2022 · release notes

    Intruder introduces continuous network scanning for Vanguard customers with visual web asset previews and configurable Slack notifications.

    • Enables continuous network scanning on a higher frequency for Vanguard customers by decoupling it from vulnerability scanning
    • Adds visual screenshots of internet-facing web services in Network View to identify exposed assets like admin panels
    • Adds configurable Slack integration for real-time notifications on network changes with custom type and frequency options

    3 details in Everything

51. Announcing Authenticated Scanning: Enhance Your Web Application Security With More In-depth Checks Mar 17, 2022 · release notes

    Intruder adds authenticated web application scanning as an add-on feature to existing plans.

    • Adds the ability to perform authenticated web application scans by purchasing a separate Authentication License.

    1 detail in Everything