https://cybertoolchain.io/tools/wallarm New releases and features in Wallarm, tracked by The Cyber Toolchain. en Tue, 13 Oct 2026 22:20:27 GMT https://changelog.wallarm.com/introducing-a-new-api-discovery-dashboard-4qBxv2 https://changelog.wallarm.com/introducing-a-new-api-discovery-dashboard-4qBxv2 Tue, 13 Oct 2026 22:20:27 GMT Wallarm adds a Discovered Inventory dashboard giving at-a-glance visibility into shadow APIs, zombie APIs, MCP servers, and attack traffic hot spots.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds the `Dashboards → Discovered inventory` dashboard surfacing internet-exposed APIs, unauthenticated endpoints, shadow and zombie APIs, and open security issues in a single view.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Surfaces endpoints with the highest proportion of attack traffic so teams can prioritize remediation by actual threat signal. • Adds visibility into exposed MCP servers, including their tools, resources, authentication status, and any sensitive data detected. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/introducing-the-new-incidents-interface-7LM5i https://changelog.wallarm.com/introducing-the-new-incidents-interface-7LM5i Tue, 29 Sep 2026 19:00:00 GMT Wallarm launches a dedicated Incidents page that surfaces confirmed attacks with drill-down to the exact exploiting request.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a new Incidents page in the dashboard showing only confirmed incidents — attacks that hit a real vulnerability and received a response proving it worked.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Provides a time-series chart of requests with incidents alongside top source IPs, endpoints, hosts, attack types and subtypes, and a breakdown of application response codes over the past month. • Groups incidents by attack type, HTTP method, domain, path, and payload parameter, with drill-down through each level to individual requests. • Marks the specific payload within a request that triggered the incident, distinguishing it from other payloads in the same request that did not hit a vulnerability. • Adds a Security Issues column on every incident row showing the severity and open/closed state of each linked issue without requiring a click-through. • Encodes active filters and time range in the page URL, enabling bookmarking and sharing a specific incident view via link. • Adds an export capability for the incidents in the current filtered view, for use in incident response or reporting. • Adds direct links into the new Incidents page from the Threat Prevention dashboard and from Security Issues. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/introducing-the-new-waf-rules-interface-1KO9fa https://changelog.wallarm.com/introducing-the-new-waf-rules-interface-1KO9fa Wed, 16 Sep 2026 15:30:00 GMT Wallarm's WAF rules interface gains a unified panel, inline request-path visibility, address-bar filters, and in-list rule management.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a unified WAF rules panel listing every rule type in one view, with each filtered view having its own bookmarkable URL.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Shows the full request-targeting path inline on each rule row (e.g. `HEADER › AUTHORIZATION › JWT › jwt_header › BASE64 › JSON › alg`) without opening individual rules. • Adds application and scope filters — distinguishing `Default` (Wallarm-managed, read-only) rules from team-created rules — persisted in the address bar across reloads. • Enables enabling/disabling, duplicating, and deleting rules directly from the list view, with endpoint, application, and last-updated metadata visible per row. • Adds a step-by-step rule builder that constrains each step to valid options (e.g. Cookie → JWT → Base64 → JSON → sub). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/see-how-an-attacker-would-reach-your-critical-aws-assets-3dAuhq https://changelog.wallarm.com/see-how-an-attacker-would-reach-your-critical-aws-assets-3dAuhq Thu, 30 Jul 2026 19:00:00 GMT Wallarm adds Attack Paths to Infrastructure Discovery, mapping how attackers could reach critical AWS assets via IAM and network relationships. • New Attack Paths feature in Infrastructure Discovery visualizes end-to-end attacker routes through AWS estates, built from configuration and IAM relationships rather than CVE findings. • Paths are ranked by severity and displayed as a map showing entry points, pivot nodes, choke points, and crown jewels with plain-English explanations. • Crown jewels are user-defined: pin and unpin assets from the console to reprioritize path scoring around your own high-value targets. • Identity-aware path analysis follows IAM chains including role chaining, pass-role, policy attachment, self-escalation, and effective-admin through AWS managed policies. • Choke point identification surfaces nodes through which the most attack paths run, highlighting where a single remediation has the greatest blast-radius reduction. • Security Hub, Inspector, and GuardDuty findings can raise path priority but are not required — paths are surfaced even when no finding exists along the chain. • Attack Paths is included in the existing Infrastructure Discovery license with no additional SKU or add-on charge. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/introducing-the-new-attacks-interface-4zzyog https://changelog.wallarm.com/introducing-the-new-attacks-interface-4zzyog Thu, 02 Jul 2026 23:09:59 GMT Wallarm launches a redesigned Attacks interface with interactive dashboards, customizable views, and drill-down request inspection. • New interactive Attacks dashboard lets analysts navigate attack trends, spot anomalies, and apply filters directly from charts, tables, and statistics. • Customizable Views enable saving preferred columns, filters, time ranges, and groupings as dedicated dashboards scoped to specific attack types, applications, hosts, or incidents. • Attack Investigation Flow surfaces request-level details — source IP, host, URI, payload, parameters, classifications, headers, and full raw request — from a single drill-down. • Interactive Request Grouping lets analysts cluster attacking requests by attack type, source IP, host, path, or any custom combination to surface hard-to-spot patterns. • Customizable Export tailors attack data exports by filter, column selection, time range, and grouping for incident response, compliance, or offline analysis. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/introducing-the-wallarm-ai-control-platform-oFsqc https://changelog.wallarm.com/introducing-the-wallarm-ai-control-platform-oFsqc Thu, 04 Jun 2026 13:30:00 GMT Wallarm launches AI Control Platform with Infrastructure Discovery for AWS estates and AI Hypervisor for runtime LLM monitoring. • Adds `Infrastructure Discovery` to continuously inventory AWS assets (EC2, VPC, EKS, Lambda, API Gateway, IAM, Bedrock) across accounts and regions via IAM role assumption • Adds live relationship graph with blast-radius traversal and attack-path analysis for discovered infrastructure assets • Adds field-level drift detection between scans with CloudTrail creator attribution on every asset • Adds `AI Hypervisor`, a Kubernetes DaemonSet using a mutating admission webhook to instrument AI workloads at runtime without code changes • Adds real-time sensitive data detection (credit cards, SSNs, passport numbers, API keys, JWT tokens) in LLM calls via the AI Hypervisor • Adds session kill switch by user subject or W3C trace ID, enforced at the kernel, for untrusted LLM sessions • Adds agent behavior certificates to pin and enforce permissions for each agent • Generates continuous compliance reports (AI inventory, coverage heatmap, session logs, PII egress records) aligned with EU AI Act requirements Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/introducing-mcp-protection-4axhja https://changelog.wallarm.com/introducing-mcp-protection-4axhja Tue, 12 May 2026 21:20:00 GMT Wallarm adds MCP Protection to discover, monitor, and control externally exposed Model Context Protocol servers. • Adds `MCP Protection` feature to Wallarm Advanced API Security for discovering exposed MCP servers, tools, and resources • Enables correlation of MCP and user sessions for full activity visibility • Allows enforcement of granular access and schema-based controls for MCP tool usage Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/know-exactly-how-every-api-endpoint-is-authenticated-4BMdHi https://changelog.wallarm.com/know-exactly-how-every-api-endpoint-is-authenticated-4BMdHi Tue, 05 May 2026 12:44:10 GMT API Discovery now classifies per-endpoint auth status and adds a filter for unauthenticated endpoints • Adds consistent, partial, and missing authentication classifications for every API endpoint based on rolling 7-day production traffic analysis • Adds an 'unauthenticated endpoints' filter to the inventory view to quickly list exposed APIs Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/aws-vpc-traffic-mirroring-support-is-here-2kXNW8 https://changelog.wallarm.com/aws-vpc-traffic-mirroring-support-is-here-2kXNW8 Wed, 08 Apr 2026 17:00:00 GMT Wallarm adds AWS VPC Traffic Mirroring support for zero-latency API visibility and attack detection • Adds `Geneve`-encapsulated traffic support to the TCP traffic analysis engine for AWS VPC Traffic Mirroring • Adds `VXLAN` encapsulation support to mirror traffic from AWS Elastic Network Interfaces (ENIs) • Enables mirroring of out-of-band traffic to Wallarm Nodes for API Discovery, Session analysis, and Attack detection without adding latency Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/aasm-updates----broader-visibility-faster-validation-clearer-reporting-2Xy9qM https://changelog.wallarm.com/aasm-updates----broader-visibility-faster-validation-clearer-reporting-2Xy9qM Thu, 26 Mar 2026 15:00:00 GMT Wallarm AASM adds IP/CIDR scanning, single-host rescans, and PDF Security Report Card export • Scan single IPs, subnets, and CIDR ranges in addition to domains via the `AASM Configuration` screen • Export a `Security Report Card` as a PDF containing your top 10 critical findings from the `Share Report widget` • Rescan a single asset directly from the per-asset view to validate remediation Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/activity-log----complete-visibility-into-every-action-in-wallarm-7yQMM https://changelog.wallarm.com/activity-log----complete-visibility-into-every-action-in-wallarm-7yQMM Mon, 23 Mar 2026 13:00:00 GMT Redesigned Activity Log provides complete visibility into every action in Wallarm • Adds the redesigned Activity Log under Settings to track configuration changes, access updates, and system activity with clear attribution. • Enables compliance-ready logging for audit requirements across regulated industries. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/api-security-testing-keeps-getting-better-FAeXe https://changelog.wallarm.com/api-security-testing-keeps-getting-better-FAeXe Mon, 16 Feb 2026 16:30:00 GMT Wallarm adds RAML input support, JUnit output, full request/response logs, and mTLS testing for Schema-Based Testing. • Adds RAML file upload as an input source for Schema-Based Testing with automatic conversion to OpenAPI • Adds JUnit format export for test results to enable CI/CD integration • Adds export of complete request and response logs for troubleshooting and reporting • Adds support for testing APIs that require mTLS authentication Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/less-noise.-more-signal.-ErQqY https://changelog.wallarm.com/less-noise.-more-signal.-ErQqY Thu, 12 Feb 2026 17:50:00 GMT Wallarm adds Generally Available False Positive Rules to automatically suppress security issues based on defined conditions. • Enables suppression of findings for specific parameters, endpoints, hosts, or vulnerability types • Applies rules across API Attack Surface Management, Threat Replay Testing, Passive Detection, and Schema-Based Testing Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/faster-smarter-api-session-setup-now-with-recommendations-3ORriw https://changelog.wallarm.com/faster-smarter-api-session-setup-now-with-recommendations-3ORriw Wed, 04 Feb 2026 14:30:00 GMT Wallarm adds LLM-powered recommendations for API session parameters based on discovery data • Adds automatic parameter suggestions when configuring API sessions, leveraging existing API Discovery data to reduce setup time. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/meet-your-new-favorite-api-security-dashboards-3XVMju https://changelog.wallarm.com/meet-your-new-favorite-api-security-dashboards-3XVMju Thu, 22 Jan 2026 18:00:00 GMT Wallarm introduces customizable API security dashboards with live traffic and attack telemetry views. • Adds customizable API security dashboards that combine API traffic, attack activity, and user behavior into single views • Provides pre-configured 'Security Metrics' dashboard as an out-of-the-box starting point • Adds the ability to save custom dashboard views for recurring investigative questions • Enables exporting dashboard charts to PDF for leadership briefings Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/improved-detection-and-blocking-in-security-edge-with-ja4-fingerprints-22HHAk https://changelog.wallarm.com/improved-detection-and-blocking-in-security-edge-with-ja4-fingerprints-22HHAk Mon, 12 Jan 2026 15:00:00 GMT Security Edge adds JA4 TLS client fingerprinting for bot identification and rate limiting • Enables `JA4` TLS fingerprinting in Security Edge to identify bots and automated tools via handshake characteristics. • Adds threat detection for known malicious tools (Burp Suite, sqlmap, scrapers) using JA4 fingerprints. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/dynamic-grouping-of-security-issues-3xLVRe https://changelog.wallarm.com/dynamic-grouping-of-security-issues-3xLVRe Tue, 09 Dec 2025 19:00:00 GMT Wallarm introduces a default grouped view for security issues to reduce noise during triage • Adds automatic grouping of similar security issues into single entries by title, type, risk level, and discovered-by fields. • Adds toggle control to switch between the new grouped view and the legacy atomic view. • Enables expansion of issue groups to view individual items, affected resources, and statuses in one place. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/new-security-edge-features-1WYYuI https://changelog.wallarm.com/new-security-edge-features-1WYYuI Mon, 01 Dec 2025 16:00:00 GMT Wallarm Security Edge adds custom block pages, ACLs for IP-based access control, and content caching rules. • Adds the ability to configure custom block pages returned alongside the 403 response for blocked malicious activity • Adds support for creating and managing Access Control Lists (ACLs) to define which IP addresses can access specific hosts and locations of APIs • Adds support for content caching rules defining how Inline nodes store and reuse responses from specific hosts and locations Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/improved-control-over-api-attack-surface-scans-46WxH2 https://changelog.wallarm.com/improved-control-over-api-attack-surface-scans-46WxH2 Tue, 18 Nov 2025 20:00:00 GMT Wallarm AASM now allows configuring rate limits per tenant, domain, or IP via the Configure section to control scan intensity. • Wallarm AASM now allows configuring rate limits per tenant, domain, or IP via the Configure section to control scan intensity. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/schema-based-testing-improvements-2dZx3q https://changelog.wallarm.com/schema-based-testing-improvements-2dZx3q Thu, 13 Nov 2025 15:00:00 GMT Wallarm adds runtime-only schema tests, OWASP API2 checks, UI severity thresholds, and status filtering. • Adds OWASP API2 (Broken Authentication) checks in OpenAPI-based scans to uncover missing auth enforcement, weak token validation, JWT tampering, and exposed credentials in query strings • Enables running tests without a predefined Test Policy by providing all parameters directly at runtime via CLI • Adds the “Generate test run command” wizard to prepare Docker commands for test runs • Allows defining success criteria per test run in the UI to specify which severity levels mark a test as failed • Adds status tracking and filtering options for test results Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/expanded-security-edge-observability-inline-node-logs-now-in-the-telemetry-portal-JZzzi https://changelog.wallarm.com/expanded-security-edge-observability-inline-node-logs-now-in-the-telemetry-portal-JZzzi Wed, 15 Oct 2025 16:00:00 GMT Inline node logs are now viewable and filterable in the Security Edge Telemetry Portal. • Adds a new `Telemetry Portal → Wallarm → Inline Node Logs` dashboard for viewing access and error logs • Adds filtering via facets (`region`, `host`, `request_method`, `nginx_status`, `upstream_status`, `remote_addr`, `upstream_addr`, `request_uri`, `req_id`) with wildcard and regex support Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/security-issues.-one-page-to-rule-them-all.-0zcEU https://changelog.wallarm.com/security-issues.-one-page-to-rule-them-all.-0zcEU Mon, 13 Oct 2025 17:00:00 GMT Wallarm introduces a unified 'Security Issues' page to consolidate and track vulnerabilities from all platform modules. • Adds the `Security Issues` page as the centralized interface for storing and tracking vulnerabilities detected by any Wallarm module • Deprecates the previous `Vulnerabilities` section in the `Events` page Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/deploy-wallarm-with-azure-apim-apigee-and-akamai-110880 https://changelog.wallarm.com/deploy-wallarm-with-azure-apim-apigee-and-akamai-110880 Thu, 25 Sep 2025 18:00:00 GMT Adds new Azure APIM connector and expands Apigee/Akamai connectors to parse API responses • Adds a new Azure APIM connector for synchronous and asynchronous API traffic analysis • Updates the Apigee connector to parse and analyze API responses in addition to requests • Updates the Akamai connector to parse and analyze API responses in addition to requests Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/faster-easier-custom-response-options-for-attacks-1ZaxBC https://changelog.wallarm.com/faster-easier-custom-response-options-for-attacks-1ZaxBC Tue, 23 Sep 2025 20:30:00 GMT Mitigation controls available on node 6.5.x+ streamline custom attack response configuration via a new UI. • Mitigation controls available on node 6.5.x+ streamline custom attack response configuration via a new UI. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/granular-control-to-stop-attacks-without-disrupting-legitimate-users-13fxVm https://changelog.wallarm.com/granular-control-to-stop-attacks-without-disrupting-legitimate-users-13fxVm Thu, 18 Sep 2025 15:00:00 GMT Wallarm adds API session-based blocking to Mitigation Controls to terminate compromised sessions in real time. • Adds `Block Compromised Sessions` option to Mitigation Controls for terminating malicious API sessions Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/shift-left-find-api-vulnerabilities-faster-3t6Epi https://changelog.wallarm.com/shift-left-find-api-vulnerabilities-faster-3t6Epi Thu, 04 Sep 2025 17:00:00 GMT Wallarm adds generally available Schema-Based Testing with Docker agent for CI/CD API DAST • Introduces `Schema-Based Testing` as a generally available capability within the Wallarm Security Testing suite. • Adds support for running tests via a lightweight Docker-based agent for isolated execution. • Enables sync of test results to the Wallarm Console for tracking and prioritization. • Allows users to define a configurable risk-level threshold to automatically fail test runs. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/improved-detection-of-account-takeover-ato-attacks-3DjEZy https://changelog.wallarm.com/improved-detection-of-account-takeover-ato-attacks-3DjEZy Wed, 27 Aug 2025 16:00:00 GMT Wallarm adds IP Rotation and Session Rotation ML detectors for Account Takeover (ATO) prevention • Adds `IP Rotation` machine learning detector to identify ATO attacks where attackers use a pool of IPs within a single stable session. • Adds `Session Rotation` machine learning detector to identify ATO attacks where attackers rotate session IDs while using a single IP address. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/new-protection-mechanisms-for-owasp-api4-2023---unrestricted-resource-consumption-2lPHws https://changelog.wallarm.com/new-protection-mechanisms-for-owasp-api4-2023---unrestricted-resource-consumption-2lPHws Thu, 21 Aug 2025 15:00:00 GMT Wallarm adds Node-side request size limits and cloud-based adaptive detection for OWASP API4:2023 Unrestricted Resource Consumption • Adds `Maximum Total Request Size` and `Maximum Size per Parameter` configuration options to the File Upload Restriction Policy for real-time node-side mitigation of oversized requests. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/automated-security-issue-rechecking-in-aasm-1xQEkU https://changelog.wallarm.com/automated-security-issue-rechecking-in-aasm-1xQEkU Thu, 24 Jul 2025 20:30:00 GMT AASM automates Security Issue status updates (close/reopen) after scans based on findings changes. • AASM now automatically closes or reopens discovered Security Issues after each scan when changes are detected in the findings Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/find-important-sessions-details-faster-3jU3Vm https://changelog.wallarm.com/find-important-sessions-details-faster-3jU3Vm Wed, 04 Jun 2025 17:05:00 GMT Wallarm improves API session UX with filters, sorting, and collapsible sections for faster investigation. • Adds exclusion filters to filter API sessions with both included and excluded criteria • Adds support for sortable columns in the UI, enabling sorting by date and number of requests • Adds separated sections with icons and highlights to Session Details for improved data visibility • Adds collapsable sections to hide less frequently used data in Session Details • Adds intelligent linking to navigate quickly between session details • Adds direct view of detected attacks and attack details within the API sessions interface Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/more-control-and-accuracy-in-scan-scope-configuration-in-api-attack-surface-management-1wkaQ https://changelog.wallarm.com/more-control-and-accuracy-in-scan-scope-configuration-in-api-attack-surface-management-1wkaQ Thu, 22 May 2025 21:30:00 GMT AASM adds bulk domain import, per-domain auto-rescan toggles, global scheduling options, scanning profiles, and modular scan control. • Adds Bulk Import of Root Domains to quickly onboard multiple assets at once • Adds ability to add additional hosts for expanded scope definition • Enables turning on/off the auto-rescan scheduler per domain in AASM • Adds global scan schedule management with weekly, bi-weekly, or monthly options • Introduces Scanning Profiles (pre-defined or custom) to match risk posture • Allows enabling or disabling specific scanning modules as part of scheduled scans Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/wallarm-now-natively-supports-ibm-datapower-api-gateway-0nVEA https://changelog.wallarm.com/wallarm-now-natively-supports-ibm-datapower-api-gateway-0nVEA Thu, 22 May 2025 14:35:00 GMT Wallarm adds native IBM DataPower API Gateway integration to forward traffic with minimal setup • Adds a native integration with IBM DataPower API Gateway for forwarding API traffic directly to Wallarm nodes • Enables simplified deployment by removing the need for traffic mirroring or custom forwarding logic Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/exciting-update-aasm-reports-download-3fg9IA https://changelog.wallarm.com/exciting-update-aasm-reports-download-3fg9IA Wed, 05 Mar 2025 20:00:00 GMT Wallarm AASM adds downloadable reports in DOCX, CSV, and JSON formats with filtering options. • Adds DOCX report export for API Attack Surface Management with risk-level filtering • Adds CSV report export grouped by Hosts, Ports, or APIs • Adds JSON report export for machine-readable integration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/big-improvements-to-api-attack-surface-management-48Sr16 https://changelog.wallarm.com/big-improvements-to-api-attack-surface-management-48Sr16 Thu, 20 Feb 2025 14:00:00 GMT Wallarm AASM GA brings AI CVE classification, expanded detection scope, CSV/JSON export, and new risk charts. • General Availability of the API Vulnerability Scanner within Wallarm AASM • Expanded vulnerability detection covering approximately 2,500 widespread vulnerabilities and outdated software versions across web servers, frameworks, libraries, CMS platforms, plugins, programming languages, network services, and API gateways • Vulnerability Intelligence Enrichment providing public exploit availability, in-the-wild exploitation status, ransomware campaign usage, and EPSS ranking for detected issues • AI-powered CVE classification using OpenAI LLMs to automatically categorize detected vulnerabilities • Historical Risk Analysis chart tracking monthly vulnerability trends by risk level • Resolution Risk Analysis chart visualizing the speed of issue resolution over time • CSV and JSON export capabilities for detailed security reports in the UI • Upgrade from a 3-level to a 5-level risk model for prioritization • Multi-select filters on AASM and Security Issues pages Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/improved-sso-provisioning-2y5tEA https://changelog.wallarm.com/improved-sso-provisioning-2y5tEA Mon, 10 Feb 2025 13:46:50 GMT Wallarm adds improved SSO provisioning to manage users and roles from SSO providers. • Adds the ability to align SSO provider groups with Wallarm roles for automatic user access assignment. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/full-fledged-graphql-parser-2Kzyko https://changelog.wallarm.com/full-fledged-graphql-parser-2Kzyko Thu, 06 Feb 2025 17:00:00 GMT Wallarm adds a full-fledged GraphQL parser to node v5.3.0+ for precise attack detection and granular rule application • Includes a new internal GraphQL parser in Wallarm node version 5.3.0+ • Enables extraction of GraphQL request parameter values for use as Session Context Parameters • Allows application of granular protection rules to specific GraphQL request components (arguments, directives, variables) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/enhanced-rule-creation-workflow-for-improved-usability-2h2ZKE https://changelog.wallarm.com/enhanced-rule-creation-workflow-for-improved-usability-2h2ZKE Mon, 03 Feb 2025 17:30:00 GMT Wallarm introduces a structured two-step rule creation workflow with new categorized groups for mitigation, detection, and API settings. • Adds a two-step rule creation workflow in the UI to simplify configuration of security rules. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/sensitive-business-flow-identification-user-attribution-0fp8A https://changelog.wallarm.com/sensitive-business-flow-identification-user-attribution-0fp8A Thu, 23 Jan 2025 18:00:00 GMT Wallarm adds Sensitive Business Flows tagging and Advanced User Attribution in API Sessions • Adds automatic identification and tagging of critical endpoints for authentication, billing, and account management in API Discovery & API Sessions. • Enables customizable manual tagging of Sensitive Business Flows to meet unique business requirements. • Introduces User & Role-Based Filtering to attribute sessions to specific users and roles in API Sessions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/introducing-native-node-for-streamlined-connector-deployment-4wyQbm https://changelog.wallarm.com/introducing-native-node-for-streamlined-connector-deployment-4wyQbm Tue, 29 Oct 2024 14:00:00 GMT Wallarm introduces Native Node, a new connector deployment option independent of NGINX. • Adds the `Native Node` deployment option for Wallarm connectors that operates independently of NGINX • Supports securing APIs through Kong API Gateway and Envoy via the Native Node • Releases deployment artifacts for Native Node including an all-in-one installer, Docker image, and Helm chart Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/product-announcement-security-edge-service-2pYxcA https://changelog.wallarm.com/product-announcement-security-edge-service-2pYxcA Wed, 16 Oct 2024 15:20:00 GMT Wallarm introduces a new managed Security Edge service offering hosted filtering nodes with low-latency deployment and full operational visibility. • Hosted, managed infrastructure for API edge filtering • Geographically distributed nodes for minimal latency • Full access to logs, events, and real-time traffic metrics Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/product-announcement-sensitive-data-detection-enhancements-4FCD6g https://changelog.wallarm.com/product-announcement-sensitive-data-detection-enhancements-4FCD6g Thu, 10 Oct 2024 14:30:00 GMT Wallarm adds 40+ out-of-the-box sensitive data detections and context-word customization for the API Discovery module • Adds 40+ out-of-the-box detections for sensitive data (credentials, financial, personal, technical) in the API Discovery module • Enables custom sensitive data detection using context words without regex Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/improvements-to-api-attack-surface-management-MTpyo https://changelog.wallarm.com/improvements-to-api-attack-surface-management-MTpyo Fri, 20 Sep 2024 12:32:12 GMT Wallarm AASM adds API Details View, WAAP Score Report download, and expanded gateway/WAAP detection • Adds `API Details View` to Wallarm's API Attack Surface Management interface for deep inspection of individual hostnames • Enables download of a `WAAP Score Evaluation report` containing attack detection types and false-positive rates • Expands `API Gateway Detection` support to 15 specific vendors (including Apigee, Mulesoft, Kong, WSO2) • Adds `Detection of WAAP solutions for each open port` to identify coverage gaps on non-standard ports Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/effortlessly-manage-security-controls-via-terraform-provider-224EDK https://changelog.wallarm.com/effortlessly-manage-security-controls-via-terraform-provider-224EDK Mon, 02 Sep 2024 10:23:39 GMT New Terraform provider resources for Wallarm triggers and Credential Stuffing detection rules. • Adds support for managing `wallarm_trigger` resources in the Terraform provider • Adds support for managing `wallarm_credential_stuffing_rule` resources in the Terraform provider Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/introducing-node-5.0-eN4vm https://changelog.wallarm.com/introducing-node-5.0-eN4vm Thu, 22 Aug 2024 13:59:52 GMT Wallarm Node 5.0 shifts to Go with new diagnostic script path and consolidated logging. • Wallarm Node re-engineered from Ruby to Go for improved performance and scalability • Postanalytics CPU usage reduced from 0.5 to 0.1 cores • Logs consolidated into single file `wcli-out.log` • Diagnostic script moved to `/opt/wallarm/collect-info.sh` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/a-fresh-look-at-malicious-bot-activity-6MJa0 https://changelog.wallarm.com/a-fresh-look-at-malicious-bot-activity-6MJa0 Thu, 11 Jul 2024 06:41:07 GMT Wallarm adds timeline diagram, Top Attackers/Targets widgets and bot-type search to API Abuse dashboards • Adds a new timeline diagram to the API Abuse dashboard for visualizing bot activity spikes Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/malicious-javascript-injection-via-supply-chain-attack-polyfill.io-2j1UxW https://changelog.wallarm.com/malicious-javascript-injection-via-supply-chain-attack-polyfill.io-2j1UxW Tue, 09 Jul 2024 17:30:00 GMT Wallarm adds detection for malicious JavaScript injection via polyfill.io supply chain attack. • Detects static imports of JavaScript code from the polyfill.io domain and other malicious domains involved in this campaign: kuurza[.]com, googie-anaiytics[.]com, bootcss[.]com, macoms[.]lanewcrbpc[.]com, polyfill[.]io, bootcdn[.]net, staticfile[.]net, unionadjs[.]com, xhsbpza[.]com Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/wallarm-node-4.10.7-1M6rss https://changelog.wallarm.com/wallarm-node-4.10.7-1M6rss Tue, 09 Jul 2024 06:35:49 GMT Wallarm Node 4.10.7 removes manual NGINX config requirement for API Specification Enforcement. • Removes the requirement for manual NGINX configuration when using API Specification Enforcement • Optimizes OpenAPI data type detection in the API Discovery module Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/enhanced-api-abuse-security-profiles-3kxnQQ https://changelog.wallarm.com/enhanced-api-abuse-security-profiles-3kxnQQ Tue, 28 May 2024 12:44:58 GMT Wallarm updates API abuse management with granular bot sensitivity controls and domain-scoped behavioral analysis capabilities. • Wallarm updates API abuse management with granular bot sensitivity controls and domain-scoped behavioral analysis capabilities. Breaking changes: • The 'Tolerance' parameter is replaced by 'Sensitivity levels', requiring configuration updates in existing profiles. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/wallarm-node-4.10.6-2OJLby https://changelog.wallarm.com/wallarm-node-4.10.6-2OJLby Wed, 22 May 2024 09:20:06 GMT Wallarm Node 4.10.6 adds NGINX v1.26.0 support, regex testing for user-defined detectors, and OpenAPI data type improvements. • Added support for NGINX v1.26.0 • Adds ability to test regular expressions intended for user-defined attack detectors • Enhanced OpenAPI data type detection by the API Discovery module Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm https://changelog.wallarm.com/protect-your-apis-with-specification-enforcement-nF2fK https://changelog.wallarm.com/protect-your-apis-with-specification-enforcement-nF2fK Tue, 21 May 2024 14:00:00 GMT Adds API specification enforcement via uploaded OpenAPI specs to block non-compliant requests • Enables upload and enforcement of OpenAPI specifications to detect and block violations such as unknown parameters, missing required fields, invalid data types, incorrect endpoints, and wrong authentication methods. • Requires Wallarm node version 4.10.4 or above and an Advanced API Security subscription. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wallarm