Release Notes — February 28, 2026

This release introduces SaaS configuration scanning for Google Workspace and Microsoft Entra, a comprehensive lifecycle email system for trial users, and identity support for eight new providers — bringing your total identity visibility to over 20 connected services.

New Features

Lifecycle Emails

Fencer now sends intelligent, automated emails throughout the trial experience. New users receive onboarding guidance at key moments — 1 hour, 24 hours, 3 days, and 7 days after signup — with content that adapts based on whether you’ve connected integrations or scheduled an onboarding call. As your trial nears its end, you’ll receive reminders at 3 days and 1 day remaining, plus a follow-up if you don’t convert. Every email is designed to help you get the most out of Fencer.

Identity Management Expansion

Identity support has been added for eight new providers: AWS, GCP, Vanta, Snowflake, Drata, Railway, Iru, and Microsoft Entra. The identity module now includes employee status tracking so you can flag active, inactive, and offboarded users. You can view sync job history in a scrollable popover, get smart review action recommendations based on identity status and relationships, and use inline editing for quick updates. Non-admin users are now properly restricted from editing identity information.

AI-Powered Check Enrichment

Security checks are now automatically enriched with categories, keywords, and industry-standard mappings, making it easier to find relevant checks and understand how they relate to established security frameworks.

Check Grouping

Security checks can now be grouped together, giving you a more organized and actionable view of your security posture across different categories.

Soft Organization Delete

Organizations can now be soft-deleted, preserving your data for potential recovery while immediately removing access. This replaces permanent deletion, giving you a safety net if an organization is removed by mistake.

SIEM Data Source Identifiers

SIEM data sources for GitHub and 1Password now use unique identifiers for more reliable ingestion tracking. A daily organization sync ensures your data warehouse stays current with your Fencer configuration.

Integrations

Google Workspace Security Checks

Four new SaaS configuration checks for Google Workspace: detection of permissive third-party app access that could expose organizational data, identification of weak MFA methods like SMS-only verification, inconsistent MFA enrollment across your team, and alerts when you have too many super admin accounts.

Microsoft Entra Security Checks

New configuration scanning for Microsoft Entra (formerly Azure AD) that detects overly permissive guest access policies — a common misconfiguration that can expose internal resources to external users.

Expanded Railway Security Checks

Six new checks for Railway projects: root user container execution, default template passwords that haven’t been changed, exposed TCP ports, environment variable leakage across environments, missing deployment protection, and resource limit enforcement.

GitLab Integration Enhancements

GitLab has received a major upgrade this release. AI-powered fix suggestions are now available for GitLab repositories, scan results appear directly as commit statuses on your merge requests, and you can edit connection settings without disconnecting. GitLab projects now support contributor counting, repository-level configuration via fencer.yaml, identity management, and default branch scanning.

Expanded Vercel Security Checks

New checks analyze your vercel.json configuration for CORS misconfigurations, missing security headers, and additional deployment settings that could expose your application.

GCP Cloud SQL Logs

A new SIEM ingestion pipeline for GCP Cloud SQL Logs, giving you visibility into database access patterns and potential security events across your Cloud SQL instances.

SIEM Data Source Pipeline Redesign

The data source status pages have been redesigned with a visual pipeline flow that makes it easy to see the health of each ingestion stage at a glance. GCP Monitor setup now runs in the background for improved reliability.

Vercel Identity Support

Vercel now supports identity management, automatically syncing user accounts from your Vercel team into the identity module.

Security

Dependency Security Update

Updated a dependency in the PDF report generation service to address a known vulnerability.

Improvements

• Faster code analysis — Eliminated performance bottlenecks in repository queries, making code analysis pages load significantly faster.
• Redesigned scan page — The scan page and split-screen view have been redesigned for a cleaner, more intuitive layout.
• AI fix improvements — AI-powered fix suggestions now run on serverless infrastructure for faster turnaround, with better tracking of fix attempts.
• Clickable remediation links — Links in vulnerability remediation guidance are now clickable, making it easier to follow fix instructions.
• Clearer vulnerability icons — Updated vulnerability icon colors to more clearly indicate severity levels.
• Streamlined penetration testing — Removed the option to manually add pentesters, simplifying the penetration test workflow.
• Smarter signup flow — The signup process now detects pending invitations to prevent unnecessary organization creation.
• Kubernetes scanning — Improved error handling for container scanning and better setup instructions for AWS EKS.
• Human-readable secret identifiers — Secrets now use readable slugs instead of numeric IDs.
• New role options — Added Founder and CEO as available role selections.
• SIEM detection tuning — Sigma rules now support configurable lookback windows for more flexible detection authoring.

Bug Fixes

• Fixed grouped vulnerability view showing groups with a count of zero.
• Fixed non-live vulnerabilities incorrectly appearing in query results.
• Fixed resolved vulnerabilities being counted as unresolved in security checks.
• Fixed container scanning issues for non-native architecture images and ECR platform detection.
• Fixed weekly container scan scheduling to properly chain after architecture scans.
• Fixed penetration tester role menu visibility and navigation, plus access controls for vulnerability status endpoints.
• Fixed SIEM ALB ingestion pipeline and usage page data spike from missing baseline data.
• Fixed a crash in the SIEM Hunts drawer.
• Fixed scanner empty states display, GitHub summary page counts, and several duplicate key integrity errors.
• Fixed accept invite button alignment, scan data validation, and integration view permissions.

Coming Soon

We’re actively testing several features that will be rolling out soon:

• BitBucket integration — Code repository scanning for BitBucket-hosted projects.
• Network discovery — Automated discovery of network assets and exposed services across your infrastructure.
• SaaS configuration scanning — A dedicated interface for managing SaaS security checks, starting with 2FA enforcement detection.
• Fencer MCP server — Connect AI assistants directly to your Fencer security data using the Model Context Protocol.
• More identity providers — OpenAI, Anthropic, Zoom, PostHog, Calendly, Notion, and Microsoft Entra identity integrations are in testing.
• Vulnerability comments — Add discussion threads directly on vulnerability detail views for better team collaboration.
• SIEM usage dashboard — Visualize your SIEM data ingestion volume and contributor activity.
• GitLab MR scanning — Automatically scan branches with open merge requests.
• Global search — A new search experience with text search on every major view.
• Vercel, Railway, and Supabase GA — These integrations are moving to general availability.

Interested in early access to any of these features? Reach out to us and we’ll get you set up.