March 19th, 2026

CybeDefend V0.9

Security-First AI, Real-Time Remediation & Reachability Analysis

Version 0.9 marks a major milestone in the evolution of CybeDefend, transforming the platform into an omnipresent development companion. This release introduces our new official IDE extensions, a revolutionary way to manage SCA vulnerability relevance via Exploitable Path, and a complete overhaul of our Command Line Interface (CLI) for enterprise-grade DevSecOps integration.


🚀 Major Features

I. New IDE Extensions (VS Code & JetBrains)

Security is moving out of the dashboard and directly into your workspace. CybeDefend extensions bring the power of scanning and AI to VS Code and the JetBrains suite (IntelliJ, WebStorm, PyCharm, etc.).

  • Multimodal Scanning: Run SAST, SCA, IaC, Secrets, and CI/CD audits in a single click.

  • Native Visualization: Severity gutter icons, diagnostic underlines, and a dedicated results panel.

  • CybeAgent (AI-Powered Fix): Don’t just detect—repair. The AI agent analyzes context (CWE, data flow) and proposes a precise patch you can apply instantly.

  • Integrated DeepFix: Automatically update vulnerable dependencies across 10 ecosystems without leaving your editor.

II. Exploitable Path (Reachability Analysis)

Cut through the noise. Exploitable Path determines if an SCA vulnerability is actually exploitable by analyzing whether your code effectively calls the vulnerable function or package.

  • Reachability Detection: Identifies if a dependency is Used, Unused, or Potentially Used.

  • Priority Adjustment: Automatically boosts the severity of used packages and lowers unused ones to "Very Low."

  • Auto-Ignore: Automatically hide vulnerabilities that cannot be exploited because the code is never called.

  • Import Tracking: See exactly which line and file a high-risk dependency is imported in.

III. New CLI v2.x & Enterprise Authentication

A total redesign of our command-line tool to meet the strictest security requirements.

  • OAuth & PAT: Moving away from static API keys in favor of Personal Access Tokens (PAT) and OAuth (PKCE) flows with secure storage (chmod 0600).

  • Persistent Login: No need to pass credentials with every command thanks to seamless token management.

  • Enterprise Support: SSO & SAML authentication integration for smooth organization-wide deployment.

  • Advanced Reporting: Generate multi-format reports (JSON, HTML, PDF, Markdown) and automatically aggregate all scan types.


✨ Product Improvements

IV. Unified "Cybe" Pricing & Quota Management

To simplify resource management, we are unifying Security Champion, Autofix, and Analysis quotas into a single metric: the Cybe Quota.

  • Developer Plan: The quota has been increased to 100 Cybes (a 25 Cybe boost).

  • Granular Control: You can now manage and assign quota limits per user or for Cybe analysis directly from the new "Usage & Entitlements" page.

V. License Risk Management (SCA)

The SCA scanner now identifies legal risks related to your dependency licenses (Copyleft, non-compliant licenses, etc.) in addition to traditional security flaws.

VI. Scaleway Registry Support

We are expanding our Cloud coverage with native support for Scaleway container registries, enabling seamless vulnerability scanning for your Docker images.


🛠️ Stability & Fixes

  • SARIF Stability: Improved integrity of SARIF exports for better compatibility with GitHub Advanced Security.

  • SCA Performance: Optimized analysis of complex dependency graphs for large Maven and NPM projects.