https://cybertoolchain.io/tools/sysreptor New releases and features in SysReptor, tracked by The Cyber Toolchain. en Wed, 23 Sep 2026 08:33:38 GMT https://github.com/Syslifters/sysreptor/releases/tag/2026.82 https://github.com/Syslifters/sysreptor/releases/tag/2026.82 Wed, 23 Sep 2026 08:33:38 GMT SysReptor 2026.82 adds AI agent skills, AGENTS.md project instructions, and an Audit Trail for sensitive actions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `AGENTS.md` support in projects so per-project AI agent instructions can be defined alongside report content.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds skills support to the AI agent for extended, composable automation capabilities. • Adds an Audit Trail for sensitive actions to track privileged operations across the platform. • Supports importing multiple files at once. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2026.75 https://github.com/Syslifters/sysreptor/releases/tag/2026.75 Wed, 16 Sep 2026 08:16:32 GMT SysReptor 2026.75 adds a JSON field type, AI agent on by default, Jira pagination, and retest status color indicators.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `json` field type for report fields, enabling structured data entry in findings and templates.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Plugin `jira`: follows API pagination to list all available projects, removing the previous cap on visible Jira projects. • Enables the AI agent by default in settings, so new deployments get AI-assisted reporting without manual activation. • Adds color indicators for all retest statuses in the UI, making pass/fail/pending retest outcomes visually distinct at a glance. • Runs post-update tasks automatically after updating SysReptor via `update.sh`, replacing any manual post-upgrade steps. • Supports image uploads in shared Excalidraw notes, allowing diagrams to include raster images in collaborative sessions. • Adds a built-in design for the OffSec OSAI certification report. • Ranks project search results to prioritize name and tag matches over content matches. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2026.68 https://github.com/Syslifters/sysreptor/releases/tag/2026.68 Wed, 19 Aug 2026 15:41:20 GMT SysReptor 2026.68 adds encrypted note file downloads, AI agent Q&A, default note structures, and retest status color customization. • Supports downloading note files via an encrypted channel to prevent proxies from inspecting downloads. • AI agent can now ask the user questions during agent interactions. • Adds default note structures to HTB, OffSec, and demo designs. • Allows customizing retest status colors in the UI. • Rotates session cookie after shared note password authentication. • Renders markdown preview content in iframes. • Improves template translation selection logic in the `scanimport` plugin. Breaking changes: • The deprecated Excalidraw plugin has been removed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2026.61 https://github.com/Syslifters/sysreptor/releases/tag/2026.61 Wed, 29 Jul 2026 12:45:54 GMT SysReptor 2026.61 adds Prowler/ScoutSuite import, stdin AES key support, and granular API token permissions. • Adds Prowler and ScoutSuite importers to the `scanimport` plugin for ingesting cloud security scan results. • Allows creating API tokens with or without superuser permissions for finer-grained access control. • Adds automatic user lockout after multiple failed MFA login attempts. • Enables `backup`/`restorebackup` commands to read AES encryption keys from stdin for safer secret handling. • Validates initial status transitions at report/finding creation time. • Restricts mention and assignee notifications to project members only. • Generates random Postgres and Redis passwords automatically during installation via `install.sh`. • Switches Django cache backend to Redis. • Hardens PDF rendering pipeline. Breaking changes: • PDF compression is removed and the `COMPRESS_PDFS` setting no longer exists; any configuration referencing `COMPRESS_PDFS` will need to be cleaned up. • Plugin loading is reworked so that the source code directory is now read-only in the Docker image; plugins or workflows that write to that directory will break. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2026.58 https://github.com/Syslifters/sysreptor/releases/tag/2026.58 Tue, 21 Jul 2026 14:11:46 GMT SysReptor 2026.58 adds plugin management UI, SSO identity API token auth, and AI agent delete confirmation. • Enables enabling/disabling plugins directly from the settings web UI. • Supports SSO identity API for API token authentication. • AI agent now prompts for confirmation before reverting changes (delete). Breaking changes: • Forgot password functionality via email is disabled when ALLOWED_HOSTS is unset. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2026.55 https://github.com/Syslifters/sysreptor/releases/tag/2026.55 Wed, 15 Jul 2026 08:13:18 GMT SysReptor 2026.55 adds AI agent support for notes, release signing with cosign, and richer project filtering. • Signs releases and Docker images with cosign for supply-chain verification. • Adds name-based filters for project, design, and template list views. • Passes finding status to PDF rendering data, enabling status-aware report output. • Adds copy and download buttons for PDF passwords in the UI. • Allows copying global designs to private designs directly from the UI. • AI agent gains a virtual filesystem for project data access. • AI agent gains tool calls for searching project content. • Extends AI agent support to notes. • Shows AI agent-made changes with the ability to revert them. • Enables basic spellcheck for additional languages in the editor. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2026.50 https://github.com/Syslifters/sysreptor/releases/tag/2026.50 Wed, 17 Jun 2026 08:26:53 GMT SysReptor 2026.50 moves LLM config to the web UI, adds multi-model selection, and extends auto-delete to finished projects. • Moves LLM configuration (`AI_AGENT_MODELS`) from environment variables to the web UI for live management without restarts. • Supports multiple LLM models with in-UI model selection per session. • Extends `AUTOMATICALLY_DELETE_PROJECTS_AFTER` to cover both finished and archived projects (previously archives only). • Enables per-project customization of the auto-delete date. Breaking changes: • The configuration key `AUTOMATICALLY_DELETE_ARCHIVED_PROJECTS_AFTER` is renamed to `AUTOMATICALLY_DELETE_PROJECTS_AFTER`; existing setups using the old key will stop applying auto-deletion on upgrade. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2026.50 https://github.com/Syslifters/sysreptor/releases/tag/2026.50 Wed, 17 Jun 2026 08:26:53 GMT SysReptor 2026.50 moves LLM config to the web UI, adds multi-model support, and extends auto-delete to finished projects. • Moves LLM configuration (`AI_AGENT_MODELS`) from environment variables into the web UI for easier management. • Supports multiple LLM models with per-session model selection directly in the UI. • Extends auto-delete policy (`AUTOMATICALLY_DELETE_PROJECTS_AFTER`) to cover both finished and archived projects, not just archived ones. • Enables customizing the deletion date on a per-project basis. • Shows note title in the browser window title for easier tab navigation. Breaking changes: • The `AUTOMATICALLY_DELETE_ARCHIVED_PROJECTS_AFTER` configuration key is renamed to `AUTOMATICALLY_DELETE_PROJECTS_AFTER` • LLM configuration `AI_AGENT_MODELS` is moved from environment variables to the web UI Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2026.42 https://github.com/Syslifters/sysreptor/releases/tag/2026.42 Wed, 03 Jun 2026 08:10:48 GMT SysReptor 2026.42 adds bulk finding creation, multi-select sidebar actions, and AI prompt copy support. • Displays all comments across a report when no specific finding or section is selected, giving a global comment overview. • Adds superuser privilege information when creating API tokens, improving visibility into token scope. • Supports multi-select and bulk actions in the report sidebar for faster report management. • Enables bulk creation of findings directly from templates. • Highlights inactive users in project member selection to reduce assignment mistakes. • Adds a copy button for AI prompts and responses for easier reuse. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2026.36 https://github.com/Syslifters/sysreptor/releases/tag/2026.36 Wed, 20 May 2026 08:26:40 GMT SysReptor 2026.36 adds project content search, S3 backup support, a file cleanup command, and markdown/image editor enhancements. • Adds full-text search across project contents in the list view. • New `cleanupfiles` command deletes unreferenced files from both storage and database. • Extends the `backup` command to save backups directly to S3. • Image editor now supports viewing the original image in the preview dialog. • Markdown editor supports HTML attributes for code blocks. • Markdown editor adds a copy button for code blocks in preview. • Improves backup performance. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2026.29 https://github.com/Syslifters/sysreptor/releases/tag/2026.29 Wed, 06 May 2026 08:24:41 GMT SysReptor 2026.29 adds configurable SSO user identifiers, email-verified enforcement, and markdown autolink highlighting. • Adds configurable user identifier claim for OIDC SSO, letting admins control which claim maps to the SysReptor user identity. • New `require_email_verified` setting for OIDC config enforces that only users with a verified email can authenticate via SSO. • Migrates Entra ID and Google SSO settings to the unified `OIDC_AUTHLIB_OAUTH_CLIENTS` configuration key. • Adds warnings when project user fields reference non-members, surfacing misconfigured assignments during report editing. • Markdown editor now syntax-highlights autolinks for improved readability. Breaking changes: • Entra ID and Google SSO settings are migrated to `OIDC_AUTHLIB_OAUTH_CLIENTS`; existing configurations using the old provider-specific settings will break and must be updated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2026.27 https://github.com/Syslifters/sysreptor/releases/tag/2026.27 Wed, 22 Apr 2026 08:27:45 GMT SysReptor 2026.27 adds an image pixelation tool and improves the markdown editor with task list toggles and frontmatter highlighting. • Adds a pixelation tool to the image editor for redacting sensitive content in screenshots. • Supports toggling task list checkboxes directly in the markdown preview. • Adds frontmatter syntax highlighting in the markdown editor. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2026.25 https://github.com/Syslifters/sysreptor/releases/tag/2026.25 Wed, 15 Apr 2026 08:46:22 GMT SysReptor 2026.25 adds bulk actions in list views, CVSS-based finding highlights, and AI field-label context. • Highlights findings by CVSS score when the severity field is empty, giving instant visual risk triage. • Shows database version on the license info page for easier environment auditing. • Supports multi-select and bulk actions in list views for faster mass operations. • Supports bulk moving of items in the notes tree. • Adds a 'today' button to the date picker in the UI. • Adds autocomplete hints to input fields across the UI. • AI agent now includes field labels in its context for more accurate assistance. • Adds a built-in design template for HTB COAE certification reports. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2026.21 https://github.com/Syslifters/sysreptor/releases/tag/2026.21 Tue, 24 Mar 2026 13:40:55 GMT SysReptor 2026.21 adds a Postgres upgrade script, auto-update support, and faster PDF download initiation. • Adds `upgrade_postgres.sh` script to upgrade the SysReptor database. • Enables auto-update configuration directly in `install.sh`. • Allows starting a PDF download while the preview is still loading. • Automatically scrolls to the current note in the tree view when navigating or after searching. • Switches PDF viewer to pdf.js legacy mode for broader compatibility. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2026.18 https://github.com/Syslifters/sysreptor/releases/tag/2026.18 Wed, 18 Mar 2026 08:35:53 GMT SysReptor 2026.18 adds an in-editor image editor and expands the AI agent with write_todos and subagent support. • Adds an image editor directly inside the Markdown editor for inline image manipulation during report writing. • Expands the AI agent with a `write_todos` tool for task tracking within the agent workflow. • Introduces AI subagents, enabling the AI agent to delegate to specialized sub-processes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2026.12 https://github.com/Syslifters/sysreptor/releases/tag/2026.12 Wed, 25 Feb 2026 10:48:51 GMT SysReptor 2026.12 adds Jira export, ZAP scan import, per-section PDF rendering, and configurable report filenames. • Adds configurable filenames for generated PDF reports. • New `jira` plugin: export findings directly to Jira issues. • New `rendersections` plugin: render individual report sections to PDF without generating a full report. • New `scanimport` plugin: import OWASP ZAP scan results as findings. • Adds built-in design for HTB CWPE certification reports. • Enables virtual scrolling in the notes tree for improved performance with large note collections. • Disables the browsable API by default to reduce attack surface. Breaking changes: • The browsable API is now disabled by default; any workflow or tooling that relied on browser-based API exploration will stop working unless it is explicitly re-enabled. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2026.4 https://github.com/Syslifters/sysreptor/releases/tag/2026.4 Fri, 23 Jan 2026 21:38:18 GMT SysReptor 2026.4 adds sharing of personal notes. • Enables sharing of personal notes with other users. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2026.1 https://github.com/Syslifters/sysreptor/releases/tag/2026.1 Wed, 21 Jan 2026 09:42:26 GMT SysReptor 2026.1 adds LaTeX math in Markdown, Mistral AI support, higher-res PDF charts, and images in Excalidraw notes. • Supports LaTeX math expressions in the Markdown editor for rendering equations in reports. • Adds Mistral AI as a provider option for the AI agent. • Increases resolution of charts and Mermaid diagrams exported to PDF. • Supports embedding images in Excalidraw notes. • Allows deleting users who are currently members of a project. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2025.108 https://github.com/Syslifters/sysreptor/releases/tag/2025.108 Wed, 17 Dec 2025 08:35:26 GMT SysReptor 2025.108 adds field duplication in editors and custom notification support via Django admin. • Duplicate existing fields directly in the report/finding field editor, speeding up repetitive field setup. • Create custom notifications through the Django admin interface. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2025.102 https://github.com/Syslifters/sysreptor/releases/tag/2025.102 Thu, 04 Dec 2025 14:09:43 GMT SysReptor 2025.102 adds an AI agent chat for report writing and configurable status transition rules. • New AI agent chat assists pentesters with report writing directly inside the platform. • Supports configuring allowed status transitions to enforce custom report workflow rules. • Markdown editor gains a toolbar button for inserting inline code. • Comments now save on Enter, with Shift+Enter inserting newlines for easier note-taking. • The `customizetheme` plugin supports customizing the header logo height. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2025.96 https://github.com/Syslifters/sysreptor/releases/tag/2025.96 Wed, 19 Nov 2025 09:27:37 GMT SysReptor 2025.96 adds QR code generation in PDF reports and header logo customization via plugin. • Supports QR code generation during PDF rendering for embedding links or metadata directly in report output. • Plugin `customizetheme`: Enables customization of the header logo. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2025.94 https://github.com/Syslifters/sysreptor/releases/tag/2025.94 Wed, 12 Nov 2025 09:53:28 GMT SysReptor 2025.94 adds commenting on shared notes/links and copy buttons for restoring archived projects. • Adds ability to comment on shared notes and shared links. • Adds copy buttons for restoring archived projects. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2025.90 https://github.com/Syslifters/sysreptor/releases/tag/2025.90 Wed, 22 Oct 2025 10:57:16 GMT SysReptor 2025.90 adds retest status indicators, searchable finding references, and accessible PDF/UA generation. • Adds retest status indicator to the finding list for at-a-glance retest tracking. • Supports generating accessible PDF/UA files via the `GENERATE_ACCESSIBLE_PDFS` config option. • Markdown editor: finding reference insertion is now searchable, speeding up cross-referencing. • Markdown editor: sticky header in nested fields keeps context visible while editing deep structures. • Improves warning location reporting during PDF rendering for easier design debugging. • Improves finding grouping in design preview data for more accurate design previews. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2025.83 https://github.com/Syslifters/sysreptor/releases/tag/2025.83 Fri, 26 Sep 2025 16:56:28 GMT SysReptor 2025.83 suggests previously used tags across filters, projects, designs, and templates. • Suggests previously used tags in filters, projects, designs, and templates for faster tagging. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2025.80 https://github.com/Syslifters/sysreptor/releases/tag/2025.80 Wed, 24 Sep 2025 09:24:35 GMT SysReptor 2025.80 adds native Excalidraw notes, username auto-complete in comments, custom PostgreSQL schema support, and more. • Adds native Excalidraw diagramming directly into SysReptor core, replacing the need for the separate `excalidraw` plugin. • Supports importing notes into the design default note structure. • Enables custom PostgreSQL schema configuration via the `DATABASE_SCHEMA` environment variable. • Adds username auto-complete when writing comments. • Introduces case-sensitive TODO marker parsing. • Updates the HTB CBBH design to the new HTB CWES design. Breaking changes: • The `excalidraw` plugin is deprecated; installations relying on the `excalidraw` plugin should migrate to the new built-in Excalidraw notes in SysReptor core. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2025.74 https://github.com/Syslifters/sysreptor/releases/tag/2025.74 Thu, 11 Sep 2025 05:20:40 GMT SysReptor 2025.74 adds a scan import plugin and tightens user account security requirements. • New `scanimport` plugin enables importing scan results from various security tools directly into reports. • Requires an email address when creating new users. • Requires a different password when users change their password. • Switches CSP `script-src` to use a nonce instead of a hash, improving content security policy flexibility. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2025.69 https://github.com/Syslifters/sysreptor/releases/tag/2025.69 Wed, 13 Aug 2025 10:14:15 GMT SysReptor 2025.69 adds Markdown report export via new plugin and collapsible plugin menu. • New `markdownexport` plugin exports reports as Markdown documents packaged in ZIP format. • Allows collapsing the plugin menu in the UI for a cleaner workspace. • Adds logging of backup started and finished times for auditability. Breaking changes: • The Bitnami Redis Docker image is replaced with the official Redis image; deployments relying on the Bitnami image will need to update their container configuration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2025.64 https://github.com/Syslifters/sysreptor/releases/tag/2025.64 Wed, 30 Jul 2025 11:08:55 GMT SysReptor 2025.64 adds Excalidraw diagramming, custom finding statuses, PDF outline view, and richer markdown editing. • New `excalidraw` plugin integrates Excalidraw diagramming directly into SysReptor. • Supports customizing finding and section statuses via configuration. • Limits publicly accessible settings exposed in API responses. • Adds option to skip restoring files when running the `restorebackup` command. • PDF viewer now includes a PDF outline (table of contents) view. • Markdown editor converts pasted HTML (e.g. Excel tables, Word content) to markdown automatically. • Markdown editor adds a blockquote button to the toolbar. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2025.56 https://github.com/Syslifters/sysreptor/releases/tag/2025.56 Tue, 17 Jun 2025 12:41:01 GMT SysReptor 2025.56 adds bulk note management, CWE hierarchy in PDFs, and incremental markdown parsing. • Adds incremental parsing in the markdown editor for faster, more responsive editing. • New user setting to disable local login, enabling enforcement of external authentication. • Provides parent CWEs in PDF rendering, giving fuller vulnerability classification context in reports. • Enables copying of individual notes within projects. • Supports bulk delete and bulk export of notes for faster note management at scale. • Adds multi-select in the notes tree UI for operating on multiple notes at once. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2025.50 https://github.com/Syslifters/sysreptor/releases/tag/2025.50 Wed, 28 May 2025 10:25:49 GMT SysReptor 2025.50 adds sync scroll in the markdown editor, arrow-key PDF navigation, and several UI improvements. • Adds synchronized scrolling between the markdown editor and its preview pane. • Enables arrow-key navigation in the PDF viewer. • Adds a button to expand collapsed sidebar menus. • Adds a shortcut indicator to the save comments action. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2025.43 https://github.com/Syslifters/sysreptor/releases/tag/2025.43 Wed, 07 May 2025 07:25:48 GMT SysReptor 2025.43 adds project update notifications, a reworked PDF viewer, and expanded spellcheck language support. • Adds in-app notifications for project updates, keeping team members informed of changes in real time. • Reworked and updated PDF viewer for improved report review within the UI. • Enables spellchecking for all supported languages, no longer restricted to `PREFERRED_LANGUAGES`. • Keeps the assignee field visible on small screens instead of hiding it. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2025.37 https://github.com/Syslifters/sysreptor/releases/tag/2025.37 Thu, 17 Apr 2025 07:55:58 GMT SysReptor 2025.37 adds email support and forgot-password self-service for local users. • Enables outbound email sending for SysReptor instances (configurable via setup). • Adds forgot-password functionality for local user accounts. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2025.29 https://github.com/Syslifters/sysreptor/releases/tag/2025.29 Wed, 26 Mar 2025 12:32:04 GMT SysReptor 2025.29 adds findings grouping and a plugin development guide. • Enables grouping of findings within reports for better organization. • New plugin development guide in documentation to support custom extensions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2025.25 https://github.com/Syslifters/sysreptor/releases/tag/2025.25 Wed, 19 Mar 2025 11:51:46 GMT SysReptor 2025.25 adds webhook-on-update events, API comment ranges, SSO username support, and member search in projects. • Plugin `renderfindings`: supports rendering finished/published projects. • Plugin `webhooks`: triggers webhook events on resource updates (in addition to creation). • New sync indicator in the UI shows synchronization status. • Refined publish project page in the UI. • API now accepts `text_range` when creating comments, enabling precise in-document comment anchoring. • Allows searching for member usernames in the project list. • Toggle comment shortcut now available in the HTML/CSS editor. • SSO: `preferred_username` accepted as a user identifier alongside `email`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2025.20 https://github.com/Syslifters/sysreptor/releases/tag/2025.20 Wed, 05 Mar 2025 08:03:54 GMT SysReptor 2025.20 adds a createapitoken command, configurable number field limits, in-UI settings editing, and per-finding PDF rendering. • New `createapitoken` CLI command for programmatic API token creation. • Restrict system users from accessing projects, templates, and designs. • Configure minimum and maximum values for number fields in report templates. • View and edit application settings directly in the web UI. • View and edit plugin settings directly in the web UI. • Plugin `renderfindings` gains an option to render findings as separate PDFs. • Improved note tree sorting via drag-and-drop in the UI. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2025.12 https://github.com/Syslifters/sysreptor/releases/tag/2025.12 Mon, 27 Jan 2025 11:50:27 GMT SysReptor 2025.12 adds find-and-replace in markdown, improved sharing, and per-user profile colors. • Adds find-and-replace functionality across markdown fields in reports and notes. • Enables searching within findings and sections. • Supports configuring individual user profile colors. • Adds option to disable archiving for specific project members. • Renders markdown preview in a web worker for improved editor responsiveness. • OIDC: uses `preferred_username` as `login_hint` during re-authentication. • Accepts username from environment variable in the `createorupdateuser` command. • Improves project design selection by ordering choices by usage count. • Shows tooltips on list action buttons when permissions are missing. • No longer automatically logs users in via OIDC (or other SSO) immediately after logout. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2025.4 https://github.com/Syslifters/sysreptor/releases/tag/2025.4 Tue, 14 Jan 2025 08:38:26 GMT SysReptor 2025.4 adds a single-finding PDF renderer, HTB CAPE design, and random password generation for fields. • New `renderfindings` plugin renders a single finding to PDF without generating a full report. • New built-in design for HTB CAPE certification reporting. • Adds a button to generate random passwords directly in password fields. • New `manage.py` command to reset the project number counter via the `projectnumber` plugin. • Warns about relative URLs in PDFs during the rendering phase to catch broken asset links early. • Shared notes now default to markdown preview mode for read-only shares and autofocus the root note. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2024.96 https://github.com/Syslifters/sysreptor/releases/tag/2024.96 Wed, 04 Dec 2024 14:54:16 GMT SysReptor 2024.96 adds webhook and auto-numbering plugins, background task scheduling, and richer comment UX. • New plugin: trigger webhooks on specific project/reporting events. • New plugin: automatically assign sequential project numbers. • Supports running periodic tasks in the background. • Adds user-level option to force a password change on next login. • Enables marking previously resolved comments as open again. • New keyboard shortcut Ctrl+Alt+M to create comments from the UI. • New keyboard shortcut Ctrl+Enter to save comment text from the UI. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2024.91 https://github.com/Syslifters/sysreptor/releases/tag/2024.91 Wed, 20 Nov 2024 14:20:23 GMT SysReptor 2024.91 ships an experimental plugin system with CyberChef, GraphQL Voyager, and Hash Identifier plugins, plus PDF rendering controls. • Introduces an experimental plugin system for extending SysReptor functionality. • Adds bundled plugins: CyberChef (data encoding/decoding), GraphQL Voyager (schema visualization), and Hash Identifier. • Enables cancellation of in-progress PDF rendering requests. • Enforces a PDF rendering timeout (default: 5 minutes) on self-hosted installations. • Displays PDF render timing information in the UI. • Always strips metadata from generated PDFs. • Adds a button to download the preview PDF directly. Breaking changes: • Static file compression is disabled. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2024.79 https://github.com/Syslifters/sysreptor/releases/tag/2024.79 Tue, 15 Oct 2024 12:12:22 GMT SysReptor 2024.79 adds granular file storage settings, CSP trusted types, and markdown editor enhancements. • Adds more granular file storage settings for finer control over where and how files are stored. • Adds trusted types configuration to Content Security Policy for stronger XSS mitigations. • New markdown editor toolbar button to reference findings directly from the editor. • Markdown editor now shows a markdown snippet in image preview dialogs for quick copy-paste embedding. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2024.74 https://github.com/Syslifters/sysreptor/releases/tag/2024.74 Tue, 24 Sep 2024 07:43:11 GMT SysReptor 2024.74 adds public note sharing and a new Project Admin permission role. • Enables public sharing of notes, allowing practitioners to share findings or notes externally without full report access. • Adds a new Project Admin permission level for finer-grained access control within projects. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2024.63 https://github.com/Syslifters/sysreptor/releases/tag/2024.63 Wed, 07 Aug 2024 12:39:56 GMT SysReptor 2024.63 adds note search in the frontend UI. • Enables searching notes directly in the frontend interface. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2024.60 https://github.com/Syslifters/sysreptor/releases/tag/2024.60 Wed, 31 Jul 2024 07:42:21 GMT SysReptor 2024.60 adds a setting to disable WebSockets and force HTTP for collaborative editing. • New setting to disable WebSockets and always use HTTP for collaborative editing, improving compatibility in restricted network environments. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2024.57 https://github.com/Syslifters/sysreptor/releases/tag/2024.57 Wed, 10 Jul 2024 13:14:18 GMT SysReptor 2024.57 adds combobox value suggestions and image preview navigation in markdown editors. • Suggests values used in other findings for combobox fields • Allows navigating through images in the enlarged markdown image preview dialog Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2024.55 https://github.com/Syslifters/sysreptor/releases/tag/2024.55 Thu, 04 Jul 2024 10:56:49 GMT SysReptor 2024.55 adds finding duplication, PDF compression, backup management, and collaborative editing improvements • `markdown_text` fields on findings and sections now accept comments • Web interface gains 'Create Backup' button for manual backups • Web interface displays backup history for existing backups • `API token` objects store `last_usage_date` tracking field • Findings can now be duplicated from the web interface • PDFs generated by SysReptor are compressed to reduce file sizes • Collaborative editing uses Redis as the channels layer instead of PostgreSQL Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2024.49 https://github.com/Syslifters/sysreptor/releases/tag/2024.49 Tue, 18 Jun 2024 07:26:46 GMT New templates API creation flow enables immediate image uploads and new cookie Secure flag. • Sets `Secure` flag for cookies when setting `SECURE_SSL_REDIRECT=on` • Immediately create new templates in API to allow image uploads on first editing Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2024.43 https://github.com/Syslifters/sysreptor/releases/tag/2024.43 Mon, 27 May 2024 07:09:19 GMT Adds sorting lists in SysReptor UI, collaborative diff history, API text diffs, and revert button • `sort` query parameters for projects, templates, designs, and users list endpoints to control column and direction. • Collaborative editing support in project history diff views. • Revert changes button added to the markdown editor within project history diff views. • `update_text` API events now transmit the text `diff` object rather than replacing the entire field value. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2024.40 https://github.com/Syslifters/sysreptor/releases/tag/2024.40 Wed, 15 May 2024 12:09:19 GMT Adds collaborative editing for project findings and sections with HTTP fallback. • `ALLOWED_HOSTS` setting for request host and origin validation Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2024.28 https://github.com/Syslifters/sysreptor/releases/tag/2024.28 Wed, 10 Apr 2024 07:52:21 GMT Adds collaborative editing with live cursor/selection visibility in notes; persists 'Encrypt PDF' setting via local storage. • Add `form-action` directive to Content Security Policy • Remember "Encrypt PDF" setting in browser's local storage Breaking changes: • Removed `unsafe-inline` from the `script-src` directive in the Content Security Policy, which may block inline scripts or styles that rely on it. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor https://github.com/Syslifters/sysreptor/releases/tag/2024.19 https://github.com/Syslifters/sysreptor/releases/tag/2024.19 Tue, 05 Mar 2024 11:13:53 GMT SysReptor v2024.19 adds PDF render timeout config, finding template duplication, and markdown editor file metadata • Add `pdf.worker.timeout` configuration key to set the PDF rendering timeout for reports when using a separate worker. • New duplicate-finding-template action allows cloning existing findings without manual re-entry. • Added filename visibility in markdown editor for uploaded files. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sysreptor