Q1 2026

Q2 2026

Q3 2026

Q4 2026

Quarterly Roadmap

Add a scanner capable of detecting hardcoded secrets not only in the current codebase but also across the full commit history. It identifies API keys, tokens, and credentials through entropy analysis and signature patterns to prevent accidental exposure and improve overall security hygiene.

Planned

High Priority

Secret Detection Scanner

Florentin Ledy

Introduce a Policy Management system in CybeDefend, allowing organizations to define and enforce custom security policies across their projects. This feature will provide granular control over security requirements, enabling proactive risk management.Key capabilities:<ul><li>Custom Security Policies – Define organization-specific security rules, compliance standards, and best practices.</li><li>Security Guards &amp; Custom Build Breaks – Enforce security thresholds with automated break-build mechanisms in CI/CD pipelines based on policy violations.</li><li>Risk-Based Project Classification – Assign risk levels to projects (e.g., high-risk, critical) and apply stricter security controls accordingly.</li><li>Predefined Policy Templates – Provide out-of-the-box security policies based on industry standards and best practices, adapting to the criticality of applications.</li><li>Real-time Alerts &amp; Notifications – Send alerts when security policies are violated, ensuring quick response to risks.</li></ul>

Completed

Policy Management

Integrate CybeDefend with Jira to streamline vulnerability management by automatically creating and tracking security issues within development workflows.This feature will enable:<ul><li>Automatic ticket creation for detected vulnerabilities, assigning them to the right teams.</li><li>Real-time sync between CybeDefend and Jira to keep security issues up to date.</li><li>Customizable severity mapping to align with project priorities.</li><li>Direct links to remediation guidance for faster resolution.</li></ul>

Jira Integration

Integrate DeepFix into the SCA module to provide advanced automated remediation for transitive dependencies. It analyzes vulnerability reports, identifies which parent packages to update, estimates potential break changes, and evaluates the impact of proposed updates beyond patch, minor, or major versions. DeepFix works directly in the IDE, UI, and CI/CD pipelines (GitHub, GitLab), delivering safe, context-aware dependency fixes with actionable impact insights.

Low Priority

DeepFix Transitive SCA Autofix

Introduce CybeDefend IntelliJ IDEA Plugin V2, delivering a fully redesigned developer experience and bringing remediation workflows directly into JetBrains IDEs. This new version integrates Cybe Agent to help developers remediate vulnerabilities faster using Cybe Autofix and DeepFix, while enabling seamless collaboration through direct vulnerability metadata management inside the IDE.<h3>Key capabilities</h3><ul><li>Cybe Agent Integration - Add native Cybe Agent support inside IntelliJ IDEA to orchestrate remediation actions directly from the IDE environment, enabling secure and contextual vulnerability fixing workflows.</li><li>Cybe Autofix in IDE - Enable one-click remediation of detected code vulnerabilities without leaving IntelliJ IDEA, allowing developers to apply secure fixes directly within their coding workflow.</li><li>DeepFix for SCA in IDE - Allow developers to remediate Software Composition Analysis (SCA) vulnerabilities directly from IntelliJ IDEA, including dependency upgrade recommendations and automated fixes.</li><li>Complete UX/UI Redesign - Deliver a fully redesigned plugin interface aligned with JetBrains UX guidelines, improving navigation, vulnerability visualization, and daily usability.</li><li>Vulnerability Status Management - Update vulnerability lifecycle status directly from the plugin (e.g., open, in progress, resolved) to maintain synchronization with the CybeDefend platform.</li><li>Priority Management in IDE - Edit vulnerability priority directly inside IntelliJ IDEA to align remediation effort with real risk exposure and development planning.</li><li>Inline Collaboration Comments - Add and update vulnerability comments directly from the IDE to improve traceability, developer collaboration, and security review workflows.</li></ul>

In Progress

IntelliJ IDEA Plugin V2 (Cybe Agent & In-IDE Autofix)

Introduce CybeDefend VS Code Extension V2, delivering a fully redesigned developer experience and bringing remediation workflows directly into the IDE. This new version adds Cybe Agent support to help developers fix vulnerabilities faster with Cybe Autofix and DeepFix, while improving collaboration through direct vulnerability metadata updates.Key capabilities:<ul><li>Cybe Agent Integration – Add native support for Cybe Agent inside VS Code to orchestrate remediation actions directly from the IDE.</li><li>Cybe Autofix in IDE – Enable one-click remediation of code vulnerabilities without leaving the development workflow.</li><li>DeepFix for SCA in IDE – Allow developers to fix Software Composition Analysis (SCA) vulnerabilities directly in VS Code.</li><li>Complete UX/UI Redesign – Deliver a fully revamped extension design for better clarity, navigation, and day-to-day usability.</li><li>Vulnerability Status Management – Update vulnerability status directly from the extension (e.g., open, in progress, resolved).</li><li>Priority Management in IDE – Edit vulnerability priority from VS Code to align remediation effort with risk.</li><li>Inline Collaboration Comments – Add and update vulnerability comments from the extension to improve traceability and team coordination.</li></ul>

VS Code Extension V2 (Cybe Agent & In-IDE Autofix)

Introduce Personal Access Tokens (PAT) in CybeDefend and remove legacy API keys to improve credential security and access governance. This feature will enforce least-privilege access, stronger lifecycle management, and full audit visibility.Key capabilities:<ul><li>PAT-based Authentication – Replace static API keys with user-bound personal access tokens.</li><li>Immediate API Key Deprecation – Remove API key support when PAT is released, with no backward compatibility.</li><li>Token Expiration &amp; Rotation – Enforce expiration policies and support secure token rotation.</li><li>Usage Tracking &amp; Audit Logs – Record token creation, usage, and revocation events for monitoring and compliance.</li></ul>

Personal Access Tokens (PAT)

Introduce Enterprise SSO in CybeDefend, enabling organizations to authenticate users through their corporate identity providers. This feature will improve security, simplify onboarding, and enforce centralized access governance across teams.Key capabilities:<ul><li>SAML &amp; OIDC Support – Enable secure single sign-on using enterprise-standard protocols.</li><li>Google Workspace, Microsoft Entra ID, and Okta Integrations – Provide ready-to-use connectors for fast setup.</li><li>Domain-based Access Control – Restrict authentication to approved corporate domains.</li><li>SSO Audit Logs – Track login events, failures, and identity-provider activity for compliance and incident response.</li></ul>

Enterprise Authentication (SSO)

Add a scanner that identifies outdated or end-of-life software components in the codebase and dependencies. It tracks version history, security advisories, and lifecycle data to alert teams about components that require updates or replacement to reduce security and maintenance risks.

Outdated and End-of-Life Software Detection

Add a component that generates and analyzes SBOMs while identifying license types and associated legal or operational risks. It helps ensure compliance by detecting incompatible licenses, tracking transitive dependencies, and providing clear insights into open source obligations across the entire software stack.

Open Source License Risk and SBOM Management

Enhance CybeDefend’s security analysis by correlating results from SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) to improve vulnerability detection accuracy and prioritization.Key capabilities:<ul><li>Cross-analysis of static and dynamic findings to identify vulnerabilities that exist in both code and runtime, reducing false positives.</li><li>Automated exploit validation to confirm whether detected vulnerabilities can be actively exploited.</li><li>Smarter prioritization by highlighting vulnerabilities that are both present in the codebase and exploitable in a running environment.</li></ul>

Medium Priority

SAST + DAST Correlation Engine

ntroduce the ability to generate NIS2 compliance and security posture reports for individual projects. This feature ensures alignment with the EU NIS2 Directive by evaluating the organization’s adherence to essential cybersecurity measures such as risk management, incident handling, supply chain security, and vulnerability management.The system will automatically correlate detected vulnerabilities, control gaps, and remediation activities with the relevant NIS2 Articles and Annex II security requirements, enabling continuous compliance monitoring.Users will be able to:<ul><li>Generate project-level or organization-wide NIS2 compliance reports to assess conformity with regulatory obligations.</li><li>Identify missing technical and organizational measures required by NIS2, with prioritized recommendations for remediation.</li><li>Export reports in various formats (PDF, JSON, HTML) for auditors, compliance officers, or regulatory submissions.</li></ul>

NIS2 Security Report Generation per Project

CybeDefend introduces Business Logic Security Analysis (BLSA), an advanced AI-powered security technology designed to detect flaws related to your application's business logic. Unlike traditional tools (SAST, IaC, SCA), BLSA understands the functional context of your software architecture and identifies vulnerabilities that rule-based approaches cannot detect — such as payment bypasses, privilege escalation, or exploitable workflow transitions.The system is based on:<ul><li>Specialized AI agents, each analyzing different parts of the code in parallel to build a coherent mental model.</li><li>Split prompting, which intelligently segments large monorepos or microservices for exhaustive analysis.</li><li>Smart correlation of findings to produce a unified, contextualized, and actionable report.</li></ul>BLSA helps to:<ul><li>Reduce the need for costly manual audits.</li><li>Enhance DevSecOps pipelines by combining technical and business logic analysis.</li><li>Achieve deeper security coverage early in the development lifecycle.</li></ul>This feature will be initially available through an early access program for selected users.

ALPHA - Business Logic Security Analysis (BLSA)

Introduce Dynamic Application Security Testing (DAST) to CybeDefend, enabling runtime vulnerability detection in web applications and APIs. Unlike SAST, which analyzes source code, DAST will test running applications to identify real-world security issues.Key capabilities:<ul><li>Automated security scanning for web applications and APIs to detect SQL injection, XSS, authentication flaws, misconfigurations, and more.</li><li>Black-box testing approach that simulates real-world attacks without requiring access to source code.</li><li>Continuous security validation in CI/CD pipelines to detect vulnerabilities before production deployment.</li></ul>

DAST Analysis

This feature establishes a centralized control plane for supervising all AI-driven operations, ensuring that every action performed by agents (e.g., <code>call_tool</code>, <code>run_command</code>, <code>api_request</code>, <code>file_write</code>) is intercepted, analyzed, and governed according to strict security policies.The platform integrates real-time risk evaluation mechanisms capable of detecting threats such as prompt injection, data exfiltration attempts, and unauthorized access. It enforces Policy-as-Code authorization logic, allowing organizations to define granular control rules for AI actions and data access boundaries.Comprehensive security observability is ensured through detailed logging, alerting, and full audit trails, enabling forensic analysis, incident response, and compliance verification.Users will be able to:<ul><li>Intercept and control all AI agent operations through a secure orchestration layer.</li><li>Evaluate the security risk of each agent action with context-aware detection for prompt manipulation and data misuse.</li><li>Define and enforce authorization policies dynamically using a Policy-as-Code model.</li><li>Access centralized dashboards with real-time alerts, risk scores, and complete historical audit logs for accountability and compliance.</li></ul>

AI Agent Security Platform to orchestrate, monitor, and secure autonomous AI agents

Add a scanner that analyzes open source dependencies to detect malicious or compromised packages. It performs static and behavioral checks on package contents, metadata, and embedded scripts to identify suspicious patterns, supply chain attacks, and tampered releases before they enter the application.

Malware Detection for Open Source Packages

Introduce the ability to correlate runtime security findings with Infrastructure-as-Code (IaC) templates, creating a unified view across development and production environments. This feature allows CybeDefend to continuously scan deployed infrastructures, detect runtime misconfigurations, and map them back to their originating IaC definitions to ensure full traceability and contextual remediation.By identifying drifts between IaC templates and the actual runtime state, the platform helps prevent configuration drift, shadow resources, and untracked security risks. Detected issues can be remediated directly in code or through AI-powered autofixes, ensuring that security improvements are automatically propagated across environments.