Release Notes — January 31, 2026

Vulnerability prioritization is here — your vulnerability lists now rank issues by a combined priority score, so you can focus on what matters most. We also shipped global search, a refreshed details view, and several new authentication options rolling out soon.

New Features

Vulnerability Prioritization

Vulnerabilities now carry a priority score that combines severity with asset criticality. Your homepage widget highlights the highest-priority vulnerability group, and all vulnerability lists sort by priority within each severity level — so the most urgent issues surface first.

Global Search

You can now search across vulnerabilities, assets, and other resources from anywhere in the application. Use the new search bar to quickly find what you need without navigating through menus.

Scan All Assets

A new “Scan All” button lets you trigger a scan across every asset of a given type in one click, making it faster to ensure complete coverage across your organization.

Remediation Steps for All Vulnerabilities

Every vulnerability now includes clear remediation guidance directly in the details view. You no longer need to leave the platform to understand how to fix an issue.

Hunts Filter Creation

You can now create and apply filters directly within the hunts data grid, making it easier to narrow down events during threat investigations.

Rules Tab for All Users

The SIEM Rules tab is now visible to all users with appropriate permissions, giving your full team visibility into active detection rules.

Exclude Scheduled Scans

You can now filter out scheduled scans from your scan views to focus on manually triggered or ad-hoc scans.

Manage Discovered Artifacts

You can now ignore or delete discovered artifacts directly from the asset inventory, giving you more control over what appears in your workspace.

Standalone Container Scanning

Container registry scanning can now run independently of a connected cloud account, supporting registries that are not tied to a specific cloud provider.

Detection Rule Engine Enhancements

The detection engine now supports the Sigma rule format with SigmaHQ compatibility and field mappings for cloud audit logs. This means a broader library of community-maintained detection rules can be used alongside your custom rules.

CAA Record Guidance

Domain scan results now explain the value of Certificate Authority Authorization (CAA) records and how they help protect your domains from unauthorized certificate issuance.

Improvements

• Refreshed vulnerability details view — Updated code highlighting, improved button contrast in dark mode, and consistent column display across all views.
• Smarter default filters — Vulnerability groups now exclude ignored and resolved items by default, reducing noise.
• Improved hunts data grid — Better tooltips, improved event description layout, and upgraded grid interactions.
• Updated vulnerabilities data grid — The new data grid is now the default, replacing the legacy version with better performance.
• Scan failure visibility — Scan history now shows a breakdown of failures by scan type, with monitoring to catch systemic issues faster.
• Improved onboarding — Clearer onboarding steps, the checklist now properly dismisses when completed, and signup validation errors are more visible.
• Automated fix improvements — The automated fix system now handles new files correctly, shows clearer error messages, and the S3 bucket policy fixer supports more configuration patterns.
• Faster artifact processing — Scan completion times are reduced thanks to faster software artifact processing.
• Secret handling — Improved tracking when a single secret has multiple associated vulnerabilities.
• Removed manual scan limitation — You can now trigger scans whenever needed without hitting a limit.
• Architecture graph empty states — Helpful messages now appear instead of a blank screen when no architecture data is available.
• Clearer SIEM email configuration errors — Better error messages when setting up email notifications for security detections.
• Updated terms of service link and refreshed email templates.

Bug Fixes

• Fixed links to filtered vulnerabilities from the homepage widget.
• Fixed the dependencies data grid not rendering data.
• Fixed the architecture page crashing when using the browser back button.
• Fixed all copy buttons on the AWS integration page copying the same value.
• Fixed filter submenus jumping to incorrect positions when removing a filter.
• Fixed filtered-out SSL vulnerabilities still appearing in scan results.
• Fixed vulnerability groups not disappearing when their repository is deleted.
• Fixed domain scan details failing to load when sorting by certain columns.
• Fixed the Monitor page being accessible for organizations without monitoring enabled.
• Fixed organization creation with a duplicate slug not redirecting correctly.
• Fixed non-admin users seeing 404 pages on integration pages they should access.
• Fixed GitHub webhook processing failing on oversized payloads.
• Fixed a delay in the SIEM event processor discovering new organizations.
• Fixed several scan task failures caused by unexpected exceptions.
• Fixed copy button display on smaller code blocks.
• Fixed the hunts event detail view not loading.
• Fixed the AWS scan wizard type selector.
• Fixed vulnerability buckets not resolving when all contained vulnerabilities are resolved.
• Fixed AI fix attempt counting and the details page for non-AI fixes.
• Various minor fixes for error handling, pagination, and data consistency.

Integrations

Azure Integration Enhancements

The Azure integration now validates subscription access during the OAuth setup flow, monitors connection health, and manages tokens more reliably — resulting in a smoother and more dependable Azure cloud scanning experience.

Slack Multi-Organization Support

If multiple teams in your company use Fencer with the same Slack workspace, detection notifications now route to the correct organization. We also fixed an issue where Slack-based detection actions could fail in shared workspaces.

Coming Soon

• Azure cloud integration — Connect your Azure subscriptions to discover resources and scan for security misconfigurations. Currently in early access.
• GitLab sign-in — Sign in with your GitLab account, joining GitHub and Google as authentication options. Rolling out soon.
• Microsoft sign-in — Sign in with your Microsoft account for a streamlined login experience. Rolling out soon.
• DigitalOcean container registry scanning — Container scanning is expanding to support DigitalOcean registries. In testing.
• Detection event linking — Security detections will link directly to the events that triggered them for faster investigations. In testing.
• GitHub events firehose — An improved GitHub event ingestion pipeline for more reliable security monitoring. In testing.
• Infrastructure-as-code code snippets — Findings from infrastructure scans will show the specific code that triggered them. In testing.

Interested in early access to any of these features? Reach out to us and we’ll get you set up.