ok, you will be able to ask AI about everything in our portal soon.

WE DON’T RECOMMEND ANY CLOUD AI

DEPLOY YOUR OWN OLLAMA

Agentic tools will be released as well🔥
You will be able to ask any question about findings differences/historical wrt values/even ask AI to filter findings for you

🤖release_v26.02.2

You are absolutely right! The LLM support is finally here — and now available to everyone.

There are no limits: connect any model you prefer. That said, we still strongly recommend self-hosted AI for maximum security and control.

What’s new:
• Full LLM support
• New AI permission controls
• Expanded logging
• Additional UI improvements

Totally safe to the portal itself btw🙂

☺️release_v26.03.1

- Add scanner types for findings
- Global dashboard rework
- Extend logging for user related actions
- Add display of products and assets for selected findings
- Add export action by default to all tables

Hey guys
We got 5 messages about Trivy and it means that we should comment it somehow 🙂
Everyone who uses our Trivy image is safe, because it’s 0.69.2, not 0.69.4

https://socket.dev/blog/trivy-under-attack-again-github-actions-compromise

🔥release_v26.03.2

- Setting: Unique assets portal-wide
- Setting: Сomment about absence of findings in quality gate
- UX: Pipelines fields in asset list and audit list
- Feature: Merge assets tags when merging assets

So, finally you can track scans from assets tab
Fewer clicks, more visibility

For anyone interested in easy ssl pinning implementation:

Architecture and basics:
https://medium.com/@ddddddeniis/dynamic-ssl-pinning-server-architecture-signed-key-registry-and-full-deployment-e7405528d9d2

Implementation (step by step):
https://medium.com/@ddddddeniis/dynamic-ssl-pinning-on-android-integrating-the-sdk-and-walking-through-the-implementation-20334233416c

DevSecOps article ⏭️ course

You can continue as guest after pressing the login button

It seems like we’ve discovered a great tool to generate educational materials. There’s even a question before the course itself to avoid showing the very basics

Many of you asked us about AI scanners, and there was no good one to run in CI.

So, we made it :)

Whether you want to spend tokens or run tiny models on CPU, it will do the job :)
https://github.com/whitespots/Whitespots-AI-SAST/tree/main

Attention: Finally we’ve removed rabbitmq from our k8s chart for portal.
Next version will come with this major change.

That’s gonna be REALLY cool

• No more SCA scanning. Just use feeds (opensource/vulners/..)
• If you are concerned about a specific library - just select it and we will show you where it’s used

This is just 10-20% functionality from what we prepare

Meanwhile, some tiny features are going to be released soon as well