What’s changing?
On Wednesday 18th Feb 2026, we’ll publish improvements to our analysis engine that changes aim to deliver significantly faster scan times and more accurate detections.
In some cases you may see more detections for rules, as our engine is now capable of identifying them. In other cases, you may see fewer detections, as our engine is better at removing false positives.
Please note - once this update goes live, existing scans will be marked as invalid as this is necessary for new scans to get the latest engine & rule improvements. Existing scans will still be accessible through the app however, and ongoing work will not be disrupted.
Which rules are particularly affected?
We in particular expect to have more detections for these rules:
Insecure direct object references (IDOR)
Code vulnerable to cross-site scripting (XSS)
Insecure storage of sensitive information
We expect to have fewer detections for:
CRUD and FLS bypass
Insecure user registrations
If you have any questions about these changes, please don’t hesitate to reach out to us via the in-app chat.