https://cybertoolchain.io/tools/intruder New releases and features in Intruder, tracked by The Cyber Toolchain. en Mon, 14 Sep 2026 07:43:13 GMT https://feedback.intruder.io/changelog https://feedback.intruder.io/changelog Mon, 14 Sep 2026 07:43:13 GMT Intruder adds Additional Domains configuration for authenticated web app scans, enabling subdomain and cross-domain coverage.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds an 'Additional domains' field when setting up or editing authentication for a web app target, allowing trusted subdomains (e.g.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ `api.example.com`, `auth.example.com`) and external services (identity providers, CDNs, third-party APIs) to be included in authenticated scan scope. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://feedback.intruder.io/changelog https://feedback.intruder.io/changelog Sun, 13 Sep 2026 07:42:16 GMT Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://feedback.intruder.io/changelog https://feedback.intruder.io/changelog Sat, 12 Sep 2026 07:43:02 GMT Intruder: Adds an `Additional domains` field for web app authentication, allowing subdomains and external services to be included in authenticated scan scope. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://feedback.intruder.io/changelog https://feedback.intruder.io/changelog Fri, 11 Sep 2026 07:38:33 GMT Intruder authenticated web scans now support additional domains, subdomains, and cross-domain services in a single scan scope.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds an 'Additional domains' field to authenticated web app target configuration, allowing subdomains (e.g.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ `api.example.com`, `auth.example.com`) and external services (identity providers, CDNs, third-party APIs) to be included in scan scope so the crawler crosses domain boundaries during authenticated scans. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://feedback.intruder.io/changelog https://feedback.intruder.io/changelog Thu, 10 Sep 2026 07:40:36 GMT Intruder adds configurable additional domains for authenticated web app scans, covering subdomains and external identity providers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds an `Additional domains` field in the authentication setup for web app targets, allowing subdomains (e.g.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ `api.example.com`, `auth.example.com`) and external services (identity providers, CDNs, third-party APIs) to be included in authenticated scan scope. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://feedback.intruder.io/changelog https://feedback.intruder.io/changelog Wed, 09 Sep 2026 14:52:12 GMT Intruder adds Additional Domains configuration for authenticated web app scans, enabling subdomain and cross-domain coverage. • Adds an 'Additional domains' field when setting up or editing authentication for a web app target, allowing subdomains (e.g. `api.example.com`, `auth.example.com`) and external service URLs to be included in authenticated scan scope. • Supports cross-domain scan coverage for external services an application depends on, such as identity providers, CDNs, or third-party APIs, preventing blocked requests from causing missed vulnerabilities. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://feedback.intruder.io/changelog/scan-additional-domains-for-authenticated-web-application-scans https://feedback.intruder.io/changelog/scan-additional-domains-for-authenticated-web-application-scans Mon, 07 Sep 2026 09:43:40 GMT Intruder authenticated web app scans now support additional domains, including subdomains and cross-domain external services. • Adds an `Additional domains` field in authenticated web app target configuration, allowing subdomains (e.g. `api.example.com`, `auth.example.com`) and external services (identity providers, CDNs, third-party APIs) to be included in scan scope. • Enables cross-domain crawling and testing during authenticated scans so API backends and external auth providers are no longer blocked at the domain boundary. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://feedback.intruder.io/changelog https://feedback.intruder.io/changelog Wed, 26 Aug 2026 09:09:02 GMT • Adds Bitbucket Cloud as a supported source control integration for AI Pentesting, enabling direct connection and AI-powered penetration tests against Bitbucket-hosted repositories. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://feedback.intruder.io/changelog/integrate-with-bitbucket-cloud-for-ai-pentesting https://feedback.intruder.io/changelog/integrate-with-bitbucket-cloud-for-ai-pentesting Tue, 25 Aug 2026 08:41:51 GMT Intruder AI Pentesting now supports Bitbucket Cloud repositories, matching existing GitHub and GitLab coverage. • Adds Bitbucket Cloud as a supported source-control integration for AI Pentesting, alongside existing GitHub and GitLab support — connect repositories directly to run AI-powered penetration tests against Bitbucket-hosted code. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://feedback.intruder.io/changelog https://feedback.intruder.io/changelog Wed, 19 Aug 2026 00:34:55 GMT Intruder adds dark theme and a redesigned single-click navigation with pinnable Favourites. • Redesigned navigation gives single-click access to every page, with pages grouped into expandable theme sections and icon/pill indicators flagging new data or activity. • Adds pinnable Favourites shortcut bar in the sidebar for quick access to most-visited pages. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://feedback.intruder.io/changelog/dark-theme-is-here https://feedback.intruder.io/changelog/dark-theme-is-here Mon, 17 Aug 2026 08:00:00 GMT Intruder adds a dark theme toggle in Settings, with preference saved automatically across sessions. • Adds a dark/light theme toggle in Settings, with the chosen preference persisted automatically across sessions and applied consistently across dashboards, search, and widgets. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://feedback.intruder.io/changelog/reorganised-side-navigation https://feedback.intruder.io/changelog/reorganised-side-navigation Thu, 13 Aug 2026 14:36:51 GMT Intruder redesigns its side navigation with one-click access, pinnable Favourites, and activity indicators. • Adds a pinnable Favourites shortcut bar to the sidebar so users can surface their most-visited pages at the top of the nav. • Introduces icon and pill indicators on nav items to surface new data or activity at a glance. • Pages are now grouped into expandable theme sections, replacing the previous nested-tab structure. • Every page is now reachable in a single click from the side navigation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://feedback.intruder.io/changelog https://feedback.intruder.io/changelog Tue, 04 Aug 2026 11:08:38 GMT Intruder adds AI Pentesting with whitebox code-repo integration, delivering full PDF reports on demand. • New AI Pentesting capability launched from the portal (left nav → AI Pentesting → Start new pentest → AI Pentest option), delivering full PDF reports with executive summary, severity ratings, reproduction steps, and remediation guidance. • Supports whitebox testing via code repository integration, enabling coverage of access control, business logic, and auth bypass issues that require multi-step chaining. • Allows practitioners to define custom entry points, credentials, and application context to scope the AI pentest to their real environment. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://feedback.intruder.io/changelog/ai-pentesting-expert-level-web-app-pentesting-without-the-wait https://feedback.intruder.io/changelog/ai-pentesting-expert-level-web-app-pentesting-without-the-wait Tue, 28 Jul 2026 08:00:00 GMT Intruder launches AI Pentesting: on-demand web app pentests with PDF reports, whitebox code repo analysis, and logic-flaw detection. • New AI Pentesting capability delivers full web app penetration tests on demand, producing a PDF report with executive summary, severity ratings, reproduction steps, and remediation guidance. • Supports whitebox testing via code repository integration, enabling deeper analysis beyond surface-level scanning. • Detects access control, business logic, and auth bypass vulnerabilities that require multi-step chaining — issues missed by static or purely dynamic scanning. • Allows practitioners to define custom entry points, credentials, and application context to scope tests to their real environment. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://feedback.intruder.io/changelog/ai-pentesting-expert-level-web-app-pentesting-without-the-wait https://feedback.intruder.io/changelog/ai-pentesting-expert-level-web-app-pentesting-without-the-wait Tue, 28 Jul 2026 08:00:00 GMT Intruder launches AI Pentesting: on-demand web app pentests with PDF reports, whitebox code repo analysis, and logic-flaw detection. • New AI Pentesting capability delivers full web app penetration tests on demand, producing a PDF report with executive summary, severity ratings, reproduction steps, and remediation guidance. • Supports whitebox testing via code repository integration, enabling deeper analysis beyond surface-level scanning. • Detects access control, business logic, and auth bypass vulnerabilities that require multi-step chaining — issues missed by static or purely dynamic scanning. • Allows practitioners to define custom entry points, credentials, and application context to scope tests to their real environment. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://feedback.intruder.io/changelog https://feedback.intruder.io/changelog Mon, 27 Jul 2026 16:28:54 GMT Intruder extends Azure cloud scans to cover Microsoft 365 configuration risks across Entra, Exchange, SharePoint, and Teams. • Adds Microsoft 365 configuration risk scanning (Entra ID, Exchange Online, SharePoint, Teams) as part of existing Azure cloud security scans. • Surfaces M365 identity, email, and collaboration configuration risks automatically for existing Azure integration users. • Enables full M365 check coverage by updating the Azure integration's permissions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://feedback.intruder.io/changelog/microsoft-365-security-checks-for-azure-integrations https://feedback.intruder.io/changelog/microsoft-365-security-checks-for-azure-integrations Tue, 21 Jul 2026 14:55:30 GMT Intruder now surfaces Microsoft 365 configuration risks across Entra ID, Exchange Online, SharePoint, and Teams within Azure cloud scans. • Adds Microsoft 365 configuration security checks covering Entra ID, Exchange Online, SharePoint, and Teams as part of existing Azure cloud security scans. • Automatically runs a subset of M365 checks with existing Azure integrations, with full coverage unlocked by updating integration permissions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://feedback.intruder.io/changelog/push-vulnerabilities-to-linear https://feedback.intruder.io/changelog/push-vulnerabilities-to-linear Thu, 09 Jul 2026 13:00:00 GMT Intruder adds native Linear integration to push vulnerabilities directly into Linear teams, projects, and backlogs. • New Linear integration: connect your Linear workspace from Intruder settings to push vulnerabilities without leaving the platform. • Supports one-click push of any issue to a chosen Linear team and project. • Enables auto-create rules to automatically raise Linear tickets based on vulnerability severity. • Displays linked Linear tickets inline in the issue list and issue details panel. • Includes test-issue feature to validate integration configuration before going live. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://feedback.intruder.io/changelog/connect-docker-hub-for-container-image-scanning https://feedback.intruder.io/changelog/connect-docker-hub-for-container-image-scanning Thu, 02 Jul 2026 13:13:20 GMT Intruder adds Docker Hub integration for automated container image vulnerability scanning within the portal. • Connects multiple personal or organisation Docker Hub accounts via Personal Access Token (PAT) for container image scanning. • Automatically discovers repositories, including tags and last-pushed dates, with on-demand refresh support. • Enables adding a custom tag to create a scan target and trigger an immediate vulnerability scan. • Runs automatic daily rescans and instant rescans when a tag points to a new image version. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://feedback.intruder.io/changelog/regex-tag-matching-for-container-images https://feedback.intruder.io/changelog/regex-tag-matching-for-container-images Thu, 18 Jun 2026 13:00:00 GMT Intruder adds regex tag matching for container image targets, enabling accurate scoping across mixed or non-standard tagging conventions. • New regex tag-matching rule for container image targets lets you define a custom pattern to consistently resolve the correct image version. • Supports dynamic targeting: the target automatically follows the latest tag matching the regex as new image versions are pushed. • Enables accurate scoping across repositories with mixed conventions (e.g., semver, `-dev` suffixes, or custom schemes) where exact-match and semver rules fall short. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/ai-driven-vulnerability-management https://www.intruder.io/blog/ai-driven-vulnerability-management Thu, 18 Jun 2026 00:00:00 GMT Intruder introduces AI-driven vulnerability management on Enterprise plans with automated check generation. • Automatically builds detection checks for newly disclosed vulnerabilities using an AI pipeline that averages under an hour from NVD analysis to QA readiness. • Introduces 'Intruder AI-powered check' filter in the checks list to identify checks built by the new AI system. • Enables active checks that safely interact with systems to confirm real exposure, moving beyond version-based inference. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://feedback.intruder.io/changelog/attack-surface-view-for-cloud-and-pro-plans https://feedback.intruder.io/changelog/attack-surface-view-for-cloud-and-pro-plans Mon, 15 Jun 2026 13:00:00 GMT Intruder launches Attack Surface view: unified perimeter visibility with port, service, and web screenshot coverage. • New Attack Surface view consolidates every exposed port across all monitored targets into a single list, showing the service and software version behind each. • Displays screenshots of every exposed web service so practitioners can instantly distinguish forgotten admin panels from intended login pages. • Enables search and filtering by port, service, or product to identify all targets running a specific service in seconds. • Adds filtering by host status or certificate expiry to surface newly appeared services or TLS certificates approaching lapse. • Available on Cloud and Pro plans, with port coverage scaling by plan tier. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/see-whats-exposed-with-attack-surface-view https://www.intruder.io/blog/see-whats-exposed-with-attack-surface-view Tue, 09 Jun 2026 00:00:00 GMT Introduces 'Attack Surface View' for unified visibility of exposed ports, services, and versions. • Adds `Attack Surface View` in the left nav bar to display a single list of all exposed items across targets. • Provides screenshots for each exposed web service directly within the `Attack Surface View`. • Enables search and filtering by port, service, product, host status, or certificate expiry in the `Attack Surface View`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/ai-pentesting-the-depth-of-a-pentest-on-demand https://www.intruder.io/blog/ai-pentesting-the-depth-of-a-pentest-on-demand Thu, 30 Apr 2026 00:00:00 GMT Intruder launches AI pentesting agents to actively investigate scanner findings for injection, disclosure, and client-side issues. • AI agents now automatically investigate scanner-identified vulnerabilities including injection, information disclosure, and client-side attacks using active probing techniques. • New monthly credit-based pricing for AI pentesting investigations: 5 credits on Cloud, 10 on Pro, and 50 on Enterprise plans. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/the-vulnerabulletin-issue-6 https://www.intruder.io/blog/the-vulnerabulletin-issue-6 Thu, 16 Apr 2026 00:00:00 GMT Release focuses on AI vulnerability trends and container security context rather than new functional capabilities beyond the scanning feature. • Release focuses on AI vulnerability trends and container security context rather than new functional capabilities beyond the scanning feature. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/the-vulnerabulletin-issue-7 https://www.intruder.io/blog/the-vulnerabulletin-issue-7 Thu, 16 Apr 2026 00:00:00 GMT Intruder launches AI Pentesting capability and Vanta integration for live compliance data. • Adds `AI Pentesting` capability covering injection, client-side attacks and information disclosure with full receipts. • Integrates Intruder findings with `Vanta`, streaming live issues and occurrences for real-time compliance. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/the-vulnerabulletin-issue-9 https://www.intruder.io/blog/the-vulnerabulletin-issue-9 Thu, 16 Apr 2026 00:00:00 GMT Intruder introduces AI pentesting for web apps and a free plan. • Intruder introduces AI pentesting for web apps and a free plan. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/the-vulnerabulletin-issue-8 https://www.intruder.io/blog/the-vulnerabulletin-issue-8 Thu, 16 Apr 2026 00:00:00 GMT Intruder adds Attack Surface View with screenshot evidence and AI-powered checks for broader threat coverage • Adds `Attack Surface View` to show exposed internet assets including ports, services, versions, and screenshot evidence. • Adds `AI-powered checks` for vulnerability scanning, with engineers signing off on every new check. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/the-vulnerabulletin-issue-4 https://www.intruder.io/blog/the-vulnerabulletin-issue-4 Wed, 18 Feb 2026 00:00:00 GMT Cyber Hygiene Scores now incorporate exploitation likelihood; add Custom Slack/Teams notifications • Adds likelihood of exploitation to Cyber Hygiene Scores for a more realistic risk view • Adds customizable notification controls for Slack and Teams integrations Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/the-vulnerabulletin-issue-3 https://www.intruder.io/blog/the-vulnerabulletin-issue-3 Wed, 21 Jan 2026 00:00:00 GMT Intruder adds in-platform commenting, Apex domain exclusion, and JS bundle secrets detection • Adds the `Javascript bundle secrets detection` check for secrets stores in JS bundles • Enables `Exclude Apex domains in domain discovery` to omit an entire top-level domain and its subdomains from scanning results • Brings `In-platform commenting` capability allowing users to comment on issues and occurrences within Intruder Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/validate-and-remediate-faster-with-in-platform-commenting https://www.intruder.io/blog/validate-and-remediate-faster-with-in-platform-commenting Thu, 18 Dec 2025 00:00:00 GMT Intruder adds in-platform commenting and activity feeds to issues and occurrences. • Adds the ability to add comments directly to individual issues or occurrences. • Introduces a new activity feed showing discussions, changes, and actions for remediation audit trails. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/the-vulnerabulletin-issue-2 https://www.intruder.io/blog/the-vulnerabulletin-issue-2 Wed, 03 Dec 2025 00:00:00 GMT GregAI can now manage targets/tags and start scans; cvemon launched for CVE monitoring. • Adds GregAI capabilities to manage targets and tags, start scans, and snooze issues. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/the-vulnerabulletin-issue-1 https://www.intruder.io/blog/the-vulnerabulletin-issue-1 Mon, 03 Nov 2025 00:00:00 GMT Intruder adds Google Cloud CSP checks, GregAI copilot, and Jira sync • Adds Google Cloud security posture management checks • Adds GregAI, an AI security analyst copilot to workflows • Adds bidirectional Jira synchronization with status viewing and linking Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/claude-intruder-mcp https://www.intruder.io/blog/claude-intruder-mcp Thu, 15 May 2025 00:00:00 GMT Intruder adds an MCP server enabling AI agents to manage vulnerability scans and remediation via natural language • Adds an open-source Python module implementing the Model Context Protocol (MCP) for Intruder's API • Enables AI agents to programmatically add targets and run vulnerability scans through a standardized interface • Exposes existing API endpoints to AI agents via FastMCP for prioritizing issues, generating management summaries, and validating remediation Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/whats-new-product-updates-from-intruder-october-2024 https://www.intruder.io/blog/whats-new-product-updates-from-intruder-october-2024 Mon, 21 Oct 2024 00:00:00 GMT Intruder adds subdomain/related domain discovery, Cloudflare/Sentinel/Okta integrations, EPSS context, and 'balanced' scan mode. • Adds `Subdomain` and `Related Domain` discovery on the Enterprise plan • Adds Cloudflare integration to discover and protect more assets • Adds Microsoft Sentinel integration for risk detection, investigation, and remediation • Adds Okta SSO authentication support • Adds EPSS score, CVSS vector, and KEV list data to issue context Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/whats-new-product-updates-from-intruder-july-2024 https://www.intruder.io/blog/whats-new-product-updates-from-intruder-july-2024 Thu, 18 Jul 2024 00:00:00 GMT Intruder Q2 2024 adds subdomain discovery, login page scanning, AWS API identification, WAF detection, Cloudflare integration, and Microsoft Sentinel/SIEM consolidation. • Adds subdomain discovery on the Enterprise plan to find exposed subdomains. • Adds login page discovery to identify and scan web application login pages. • Adds automatic AWS API identification for targets requiring an API schema. • Adds WAF detection to identify targets blocked by a Web Application Firewall. • Adds cloud asset prompt to guide setup of cloud integrations for visibility. • Adds Cloudflare integration to expand scanning of externally facing cloud assets. • Expands Attack Surface Visibility with improved Network view for exposed ports and services. • Adds 1,000+ attack surface specific checks for issue detection on discovered assets. • Adds Microsoft Sentinel integration to consolidate data from disparate SIEM sources. • Adds Single Sign-On (SSO) via Okta for managing multiple teams and business units. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/whats-new-product-updates-from-intruder-april-2024 https://www.intruder.io/blog/whats-new-product-updates-from-intruder-april-2024 Wed, 01 May 2024 00:00:00 GMT Intruder April 2024 adds SPA scanning, org-level AWS integration, auto login/WAF detection and team scan management • Adds the ability to scan single page applications (SPA) via web app scanning. • Allows adding AWS accounts at the organization level for cloud connections. • Automatically prompts to add an API schema when an AWS target with an API is identified. • Automatically discovers login pages on targets and prompts you to add authentication. • Detects when a target is being blocked by a web application firewall (WAF). • Empowers team members to manage their own scans. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/whats-new-product-updates-from-intruder-february-2024 https://www.intruder.io/blog/whats-new-product-updates-from-intruder-february-2024 Mon, 05 Feb 2024 00:00:00 GMT Intruder February 2024 adds single-page app scanning and organization-level AWS asset sync. • Adds the ability to scan single page applications with enhanced spidering that works alongside recorded logins to access pages past SSO. • Allows adding AWS accounts at the organization level for auto-synced cloud assets rather than individual account configuration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/metrics-matter-why-weve-added-analytics-to-show-your-progress https://www.intruder.io/blog/metrics-matter-why-weve-added-analytics-to-show-your-progress Thu, 18 Jan 2024 00:00:00 GMT Intruder adds an Analytics page tracking issues, scan frequency, and attack surface changes over time via new UI widgets. • Adds a new `Analytics` tab to the web interface that tracks vulnerability remediation progress, emerging threat check performance, and attack surface changes over selectable time ranges. • Introduces `Issues` section metrics: `Open issues`, `New issues`, `Fixed issues`, and `Days to fix` (average days to remediate by severity) for trend analysis. • Introduces `Monitor Progress` section metrics: `Emerging threats` (count, severity breakdown, pass/fail), `Days between scans` (total assessments and mean interval), and `Cyber hygiene score`. • Introduces `Attack Surface` section metrics: `Most vulnerable targets` (un-remediated occurrences by target), `New services` (discovered during period), and `Scanned targets`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/what-is-nuclei-vulnerability-scanner https://www.intruder.io/blog/what-is-nuclei-vulnerability-scanner Thu, 14 Dec 2023 00:00:00 GMT Intruder integrates Nuclei scanning engine with 3,000+ checks for Cloud and Premium plans. • Adds the Nuclei open-source vulnerability scanning engine to Intruder to augment existing attack surface checks • Provides over 3,000 additional vulnerability detection checks in the initial release Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/whats-new-product-updates-from-intruder-november-2023 https://www.intruder.io/blog/whats-new-product-updates-from-intruder-november-2023 Tue, 14 Nov 2023 00:00:00 GMT Intruder adds authentication verification step, Vanta integration support, and new Analytics tab. • Adds an automatic verification step for web app authentication credentials before starting a scan • Adds support for sending vulnerability scanning evidence to the Vanta compliance platform • Launches a new Analytics tab to monitor cyber hygiene score, issue resolution times, and emerging threats Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/whats-new-product-updates-september-2023 https://www.intruder.io/blog/whats-new-product-updates-september-2023 Tue, 19 Sep 2023 00:00:00 GMT Intruder adds remediation scans for fast vulnerability verification and revamps the internal target UI. • Adds remediation scans that check specific vulnerabilities on associated targets at an average of 65% faster than a full scan Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/rapid-response-bridge-the-gap-to-find-exploits-faster https://www.intruder.io/blog/rapid-response-bridge-the-gap-to-find-exploits-faster Thu, 24 Aug 2023 00:00:00 GMT Intruder introduces 'Rapid Response', a manual screening service for critical vulnerabilities before automated checks exist. • Adds `Rapid Response` as a new manual scanning capability for Enterprise plans to identify critical weaknesses (CVSS 9.5+) before automated plugin coverage is available. • Enables automatic kick-off of Emerging Threat Scans (ETS) on all external targets upon identification of critical vulnerabilities affecting those targets. • Provides advisories with details and recommendations when Rapid Response or ETS identifies exposed servers for newly disclosed weaknesses. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/whats-new-product-updates-july-2023 https://www.intruder.io/blog/whats-new-product-updates-july-2023 Tue, 04 Jul 2023 00:00:00 GMT New Drata and Azure DevOps integrations, portal-tracked security advisories with retesting, prioritized dashboard widget, on-demand PDF/CSV exports, and region selector for s • Adds a one-click integration to send reports directly to Drata • Adds an integration to create work items in Azure DevOps from scans • Enables tracking security advisories in the portal and including them in reports (replaces email-only delivery for vanguard/premium customers) • Adds a 'Retest' button to the portal workflow for security advisories after remediation • Adds a new dashboard widget that prioritizes issues by highest severity open for the longest time • Adds one-click download of PDF or CSV reports of latest issues for all targets directly from the dashboard • Adds a region selector for scanners to reduce latency ('scan closer to home') Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/whats-new-product-updates-may-2023 https://www.intruder.io/blog/whats-new-product-updates-may-2023 Thu, 18 May 2023 00:00:00 GMT New product capabilities include API scanning, Drata/Azure DevOps integrations, tag management, RBAC, and regional scanners. • New product capabilities include API scanning, Drata/Azure DevOps integrations, tag management, RBAC, and regional scanners. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/introducing-fully-informed-api-scanning https://www.intruder.io/blog/introducing-fully-informed-api-scanning Thu, 30 Mar 2023 00:00:00 GMT Intruder adds API scanning via OpenAPI/Swagger schema upload • Adds `Application licenses` to replace `Authentication Licenses`, enabling API targets alongside authenticated apps • New capability: Upload OpenAPI/Swagger schemas to drive comprehensive endpoint inventory and vulnerability checks Breaking changes: • `Authentication Licenses` are renamed to `Application licenses` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/product-update-continuous-network-scanning https://www.intruder.io/blog/product-update-continuous-network-scanning Mon, 05 Dec 2022 00:00:00 GMT Intruder introduces continuous network scanning for Vanguard customers with visual web asset previews and configurable Slack notifications. • Enables continuous network scanning on a higher frequency for Vanguard customers by decoupling it from vulnerability scanning • Adds visual screenshots of internet-facing web services in Network View to identify exposed assets like admin panels • Adds configurable Slack integration for real-time notifications on network changes with custom type and frequency options Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder https://www.intruder.io/blog/announcing-authenticated-web-application-scanning https://www.intruder.io/blog/announcing-authenticated-web-application-scanning Thu, 17 Mar 2022 00:00:00 GMT Intruder adds authenticated web application scanning as an add-on feature to existing plans. • Adds the ability to perform authenticated web application scans by purchasing a separate Authentication License. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/intruder