Skip to main content

CybeDefend v1.1.3

Cybe Analysis runs six times faster, a new organization-wide findings API, and a round of fixes across notifications, container scans, and AutoFix.

🚀 New Features

I. Organization-wide findings API

New endpoint GET /organization/{organizationId}/findings lists security findings across an entire organization in a single call, instead of querying project by project. Built for GRC and SIEM exports, so your findings can feed your existing compliance and monitoring pipelines.

Note that a restrictive rate limit of 10 requests per minute is in place on this endpoint.

✨ Improvements

Cybe Analysis is now 6x faster at analysing vulnerabilities, cutting the time between a scan finishing and an audited, prioritised result.

Cybe Analysis is also more stable on large codebases, which now go through without degradation. This work lays the groundwork for the new parsing engine coming next: endpoints will be identifiable directly in the graph, and you will be able to see which execution paths a given vulnerability actually reaches.

🛠️ Bug Fixes

  • Fixed notification preferences in /profile that were ignored for zero-day and scan-complete emails, which kept being sent after being turned off.

  • Fixed a rare infinite loading state on the dashboard when a user had many tabs open in parallel.

  • Fixed false positives in VibeDefend's Action Guard, which was blocking some harmless actions.

  • Fixed GitHub project renames not being propagated to CybeDefend; a renamed repository now stays in sync.

  • Fixed container scans failing on ARM images.

  • Fixed SCA AutoFix that did not run on some projects.

  • Fixed code parsing that failed to trigger when a scan was queued immediately before it.