Release Notes — March 13, 2026
You can now scan your AI skill files and MCP server configurations for security issues directly within your code scan pipeline — bringing automated security analysis to your AI tooling alongside your existing application scans.
New Features
Section titled “New Features”AI Skill & MCP Server Scanning
Section titled “AI Skill & MCP Server Scanning”You can now automatically detect security vulnerabilities in AI skill files and MCP server configurations as part of your code scans. The new Ramparts scanner analyzes MCP server definitions for misconfigurations, while the skill scanner checks AI skill files for security issues. Both run automatically when relevant files are found in your repositories.
External Asset Scanning
Section titled “External Asset Scanning”Network scans now capture screenshots of discovered assets, giving you a visual overview of what’s exposed externally. This makes it faster to identify unexpected services or content on your public-facing infrastructure.
SaaS Configuration Scanning
Section titled “SaaS Configuration Scanning”You can now scan Zoom, Microsoft Entra, and Google Workspace configurations for security misconfigurations. These checks help you identify risky settings across your SaaS tools — such as weak authentication policies or overly permissive sharing defaults.
GCP SIEM Detection Rules
Section titled “GCP SIEM Detection Rules”Seven new detection rules are now available for GCP environments, covering Cloud SQL, Cloud DNS, firewall rule changes, and more. These rules automatically flag suspicious activity across your Google Cloud infrastructure.
SIEM Event Processing
Section titled “SIEM Event Processing”Event processing has been expanded with GCP storage metrics collection via the Cloud Monitoring API, improved backfill capabilities for 1Password and GitHub events, and better handling of system columns across legacy data.
Vendor Management
Section titled “Vendor Management”You can now manage your third-party vendors directly in Fencer. Import vendors in bulk via CSV, add vendors manually, and export your vendor list to Excel. Vendor records are automatically created when you enable an integration and removed when you disable it.
Azure SIEM Data Sources
Section titled “Azure SIEM Data Sources”Azure data sources are now supported in the SIEM, with bulk ingestion services, batch data source management, and new type mappings for Azure event data.
Lifecycle Emails
Section titled “Lifecycle Emails”If your trial has ended, you’ll now receive a clear email letting you know your trial status and next steps. No more guessing about what happens after your trial period.
Threats Page Redesign
Section titled “Threats Page Redesign”The threats page has been rebuilt with a modern interface, with improved UI and easier navigation when reviewing threat models.
Improvements
Section titled “Improvements”Identity & Access
Section titled “Identity & Access”You can now reconnect your Google Workspace connection without removing and re-adding the integration. An integrations button has also been added to the identities page for quicker access to configuration.
Application Security
Section titled “Application Security”Deleted assets can now be restored, dashboard widget numbers and links are more consistent, and several admin interface improvements make day-to-day management smoother.
MCP Scanning Improvements
Section titled “MCP Scanning Improvements”MCP endpoints now support the Streamable HTTP transport, skill scanner results no longer include temporary file paths, and hardcoded secret false positives are filtered from skill scanner output.
Bug Fixes
Section titled “Bug Fixes”- Fixed multiple issues with domain scanning, including DNSSEC key errors, DMARC vulnerability counting, and domain data synchronization with existing integrations.
- Fixed scanner rule suggestions and added the ability to suggest disabling a rule directly from a vulnerability.
- Resolved issues with stale asset cleanup missing assets that had no completed scans.
- Fixed Cloudflare DNS records not syncing to DNS record objects.
- Fixed Google Workspace scopes for proper OAuth authorization.
- Fixed missing DLP checks and CAA record checks for SaaS configuration scanning.
- Fixed SaaS account icons not displaying correctly.
- Fixed an issue where the skill scanner ran unnecessarily on repositories without skill files.
- Fixed Celery panel configuration to use the correct backend.
- Fixed admin report email delivery.
Integrations
Section titled “Integrations”
Git Providers
Section titled “Git Providers”Significant reliability improvements across Git provider integrations, including better error handling for authorization failures, consistent repository owner and name usage, and suspended asset tracking. These changes make your GitHub, GitLab, and Bitbucket connections more robust.
Sentry
Section titled “Sentry”The Sentry integration has been repaired and is now working correctly for identity management and event correlation.
Azure Container Scanning
Section titled “Azure Container Scanning”You can now enable container scanning for your Azure integration directly from the integrations page.
Coming Soon
Section titled “Coming Soon”- Network Scan UI — A dedicated interface for viewing and managing network scan results is rolling out soon.
- Bitbucket Integration — Native Bitbucket support for code scanning and repository management is in early access.
- Azure SIEM Monitoring — A monitoring UI for Azure SIEM data sources is on the way.
- Domain Scanning Redesign — New domain scanning pages with improved workflows are coming soon.
- Penetration Test Requests — You’ll soon be able to request penetration tests directly from within Fencer.
- Ashby Integration — Ashby HR platform integration for identity management is rolling out soon.
Interested in early access to any of these features? Reach out to us and we’ll get you set up.