Q2 2025

Q3 2025

Q4 2025

Q1 2026

Quarterly Roadmap

Develop a VSCode extension that integrates CybeDefend’s security capabilities directly into the IDE. This plugin will enable developers to run SCA (Software Composition Analysis), SAST (Static Application Security Testing), and IaC (Infrastructure as Code) scans within their workflow, providing real-time security feedback and actionable insights without leaving the IDE.Additionally, the extension will feature a Security Champion Chatbot, allowing developers to ask questions about vulnerabilities, get security guidance, and propose fixes at any time. The AI-powered Autofix will also be available to suggest and apply security patches automatically, enhancing secure coding practices effortlessly.

Completed

High Priority

VSCode IDE Plugin

Florentin Ledy

Upgrade CybeDefend’s SAST (Static Application Security Testing) engine with advanced cross-file dataflow analysis and AI-driven false positive reduction, improving detection accuracy and minimizing noise.Key enhancements:<ul><li>Cross-File Dataflow Analysis – Track dataflows across multiple files, modules, and services to detect security issues that span across different parts of the codebase.</li><li>AI-Powered False Positive Reduction – Leverage machine learning to identify and understand custom input validation or security functions, even when they are not part of standard frameworks.</li><li>Context-Aware Security Analysis – Detect whether user inputs are properly sanitized and validated, preventing unnecessary alerts for safe code implementations.</li><li>Smarter Vulnerability Classification – Differentiate between real security risks and cases where security controls are already in place.</li></ul>

Planned

Enhanced SAST Engine – Cross-File Dataflow & AI-Powered False Positive Reduction

A new Europe-based instance of the CybeDefend platform is planned for release by the end of Q2, hosted on SecNumCloud-certified infrastructure. Built on OVHcloud, this deployment will ensure full compliance with European cybersecurity standards, offering a sovereign, secure, and trusted environment for customers operating in regulated or sensitive sectors. This initiative reflects our commitment to data sovereignty, regulatory alignment, and trustworthy cloud security for our European clients.

Addition of a Europe Instance Certified SecNumCloud

Develop an IntelliJ IDEA extension that integrates CybeDefend’s security capabilities directly into the IDE. This plugin will allow developers to run SCA (Software Composition Analysis), SAST (Static Application Security Testing), and IaC (Infrastructure as Code) scans within their workflow, providing real-time security feedback and actionable insights without leaving the IDE.Additionally, the extension will feature:<ul><li>Security Champion Chatbot – Ask questions about vulnerabilities, get security guidance, and propose fixes at any time.</li><li>AI-powered Autofix – Automatically suggest and apply security patches to detected issues.</li></ul>

In Progress

IntelliJ IDEA Plugin

Introduce the ability to generate OWASP Top 10 security reports for individual projects, multiple projects, or an entire organization. This feature will analyze detected vulnerabilities and map them to the latest OWASP Top 10 categories, providing detailed risk assessments and remediation guidance.Users will be able to:<ul><li>Generate project-level or organization-wide reports for compliance and security monitoring.</li><li>Export reports in various formats (PDF, JSON, CSV) for easy sharing and integration.</li></ul>

OWASP Top 10 Security Report Generation

Enhance CybeDefend with Container Analysis capabilities, enabling security scanning for container images stored in Docker Hub and Google Artifact Registry. This feature will detect vulnerabilities, misconfigurations, and compliance issues within containerized applications, ensuring a secure software supply chain.By integrating with these registries, CybeDefend will provide automated scanning, risk assessments, and actionable remediation insights to help teams identify and fix security issues before deployment.

Container Analysis for Docker Hub & Google Artifact Registry

Introduce Dynamic Application Security Testing (DAST) to CybeDefend, enabling runtime vulnerability detection in web applications and APIs. Unlike SAST, which analyzes source code, DAST will test running applications to identify real-world security issues.Key capabilities:<ul><li>Automated security scanning for web applications and APIs to detect SQL injection, XSS, authentication flaws, misconfigurations, and more.</li><li>Black-box testing approach that simulates real-world attacks without requiring access to source code.</li><li>Continuous security validation in CI/CD pipelines to detect vulnerabilities before production deployment.</li></ul>

DAST Analysis

Integrate CybeDefend with Jira to streamline vulnerability management by automatically creating and tracking security issues within development workflows.This feature will enable:<ul><li>Automatic ticket creation for detected vulnerabilities, assigning them to the right teams.</li><li>Real-time sync between CybeDefend and Jira to keep security issues up to date.</li><li>Customizable severity mapping to align with project priorities.</li><li>Direct links to remediation guidance for faster resolution.</li></ul>

Jira Integration

Enhance Software Composition Analysis (SCA) with intelligent vulnerability triage to reduce noise and focus on actionable risks. This feature will:<ul><li>Ignore unused dependencies – Libraries installed but not actually used in the project will be excluded from reports.</li><li>Lower priority for vulnerabilities without available fixes, allowing teams to focus on issues they can remediate.</li><li>Integrate Autofix with GitHub, automatically generating Pull Requests with security patches for fixable vulnerabilities.</li></ul>

Intelligent SCA Vulnerability Prioritization & Autofix

Introduce a Policy Management system in CybeDefend, allowing organizations to define and enforce custom security policies across their projects. This feature will provide granular control over security requirements, enabling proactive risk management.Key capabilities:<ul><li>Custom Security Policies – Define organization-specific security rules, compliance standards, and best practices.</li><li>Security Guards &amp; Custom Build Breaks – Enforce security thresholds with automated break-build mechanisms in CI/CD pipelines based on policy violations.</li><li>Risk-Based Project Classification – Assign risk levels to projects (e.g., high-risk, critical) and apply stricter security controls accordingly.</li><li>Predefined Policy Templates – Provide out-of-the-box security policies based on industry standards and best practices, adapting to the criticality of applications.</li><li>Real-time Alerts &amp; Notifications – Send alerts when security policies are violated, ensuring quick response to risks.</li></ul>

Policy Management

Enhance CybeDefend’s security analysis by correlating results from SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) to improve vulnerability detection accuracy and prioritization.Key capabilities:<ul><li>Cross-analysis of static and dynamic findings to identify vulnerabilities that exist in both code and runtime, reducing false positives.</li><li>Automated exploit validation to confirm whether detected vulnerabilities can be actively exploited.</li><li>Smarter prioritization by highlighting vulnerabilities that are both present in the codebase and exploitable in a running environment.</li></ul>