Release Notes — April 10, 2026
Network scanning is now generally available, threat hunting gets snapshots and workflow improvements, Azure DevOps git support and three new identity provider integrations are live.
New Features
Section titled “New Features”Network Scanning
Section titled “Network Scanning”You can now scan your external network infrastructure for open ports and services. Network scanning uses industry-standard tools to discover exposed services across your assets, with findings prioritized by severity. Configure scan targets and schedules from your scan settings page.
Threat Hunting Snapshots
Section titled “Threat Hunting Snapshots”Save point-in-time captures of your threat hunting queries and results. Snapshots let you bookmark investigations, share findings with your team, and return to specific states of an investigation without re-running queries.
Improved Threat Hunting Workflow
Section titled “Improved Threat Hunting Workflow”We’ve made it faster to investigate security events across your environment. The threat hunting experience now includes a more intuitive query builder, better result navigation, and streamlined filters.
Confidence Labels for Security Detections
Section titled “Confidence Labels for Security Detections”It’s now easier to prioritize which alerts to investigate first. Security monitoring detections now display human-readable confidence ratings (high, medium, low) instead of raw numeric scores.
Automatic Noise Reduction Suggestions
Section titled “Automatic Noise Reduction Suggestions”Security monitoring now suggests noise reduction filters based on patterns in your event data. These suggestions help you cut through alert fatigue and focus on the events that matter.
Key-Value Search in Threat Hunting
Section titled “Key-Value Search in Threat Hunting”You can now search for specific field values directly within threat hunting using key-value pair syntax, making it faster to locate events matching exact criteria in structured log data.
Smart IP Address Search
Section titled “Smart IP Address Search”When you search for an IP address in security monitoring, the system now automatically detects the format and applies optimized IP-specific search — no need to use a separate operator or special syntax.
Expanded Structured Data Extraction
Section titled “Expanded Structured Data Extraction”More event types in security monitoring now have structured fields automatically extracted, giving you richer filtering and search capabilities across a wider range of data sources.
Test Webhook Button for Alert Configurations
Section titled “Test Webhook Button for Alert Configurations”You can now send a test payload when configuring webhook-based alert notifications, making it easy to verify your endpoint is receiving and processing alerts correctly before going live.
Scanner Traffic Reference Page
Section titled “Scanner Traffic Reference Page”A new reference page documents the IP addresses and HTTP headers your scans originate from, so you can allowlist Fencer traffic in your firewalls and WAF rules.
Asset Criticality Controls
Section titled “Asset Criticality Controls”You can now assign a criticality level to individual assets using a slider in asset configuration. Criticality helps prioritize vulnerabilities based on the business importance of the affected asset.
Fix Vulnerabilities from Slack
Section titled “Fix Vulnerabilities from Slack”When a vulnerability has an automated fix available, the Slack notification now includes a “Fix” button. One click triggers the fix directly from Slack, and you will receive a thread notification when the fix completes.
Cancel Pending Penetration Test Requests
Section titled “Cancel Pending Penetration Test Requests”You can now cancel a penetration test request while it is still in the pending state, giving you more control over your testing pipeline.
Redesigned Signup Experience
Section titled “Redesigned Signup Experience”The signup flow has been redesigned with a progressive, step-by-step layout that guides new users through account creation more smoothly.
Integrations
Section titled “Integrations”New Relic Logs in Threat Hunting
Section titled “New Relic Logs in Threat Hunting”New Relic application logs are now directly queryable from the threat hunting view. If you have a New Relic integration connected, your application log data flows into the same search and investigation workflow as your other security event sources.
Azure DevOps Git Support
Section titled “Azure DevOps Git Support”You can now connect your Azure DevOps git repositories to Fencer to take advantage of integrated vulnerability scanning on pull requests, identity monitoring and general code & secrets scanning to protect you from threats.
New Identity Provider Integrations
Section titled “New Identity Provider Integrations”Three new identity provider integrations are now available:
- New Relic — Sync team members from your New Relic account for identity management and access reviews.
- Prefect — Connect your Prefect workspace to track who has access to your data pipeline orchestration platform.
- Attio — Sync workspace members from Attio, your CRM, for a complete picture of SaaS access across your organization.
Degraded Status for Integrations
Section titled “Degraded Status for Integrations”Integrations that experience partial failures now display a “degraded” status instead of appearing fully healthy or fully broken. This gives you better visibility into integrations that are working but encountering intermittent issues.
Improvements
Section titled “Improvements”- 20 new Azure resource types added to asset inventory, covering compute, networking, storage, and database resources for more complete cloud visibility.
- Contributor billing deduplication now consolidates duplicate contributor identities (such as those from AI coding agents) into a single billable contributor.
- New contributors are highlighted on the usage screen so you can quickly spot who was recently added.
- Bot contributor detection improved to use account type metadata in addition to name-based heuristics, reducing false positives in contributor counts.
- Duplicate contributor normalization automatically merges contributors that appear under multiple identities.
- Alerts configuration UI refined for a cleaner, more intuitive setup experience.
- Application scanning feedback now provides clearer status updates throughout the scan lifecycle.
- Vulnerability page performance improved — pages that previously took over 15 seconds now load significantly faster.
- Snowflake search optimization enabled across all security monitoring data source tables for faster query performance.
- Snowflake table clustering strategies updated across all event types for improved query efficiency.
- Code scanning engine tuning with improved parallelism, quieter output, and refined rule selection for faster and more accurate scans.
- Governance compliance window extended to 13 months, giving you more flexibility for annual compliance reviews.
- Comment filter added to the vulnerability datagrid for filtering by comment status.
- Copy as prompt or markdown button added to vulnerability details for easy sharing with AI tools or documentation.
- Bucket policy snippets now displayed for relevant cloud vulnerability findings.
Bug Fixes
Section titled “Bug Fixes”- Fixed a high-impact issue where resolved vulnerabilities were not being marked as resolved in Vanta, causing compliance drift between platforms.
- Fixed application scan failures caused by misconfigured scanner dependencies.
- Fixed architecture scans hanging for hours when the certificate transparency service was unresponsive.
- Fixed Google Workspace integration reliability issues during nightly sync.
- Fixed Linear and Jira integration buttons missing from the bulk actions toolbar.
- Fixed custom vulnerability rule identifiers not propagating to live vulnerability records.
- Fixed a crash when upserting cloud storage buckets with duplicate titles across active and resolved vulnerabilities.
- Fixed webhook error handling in notification configuration forms.
- Fixed database deadlocks during concurrent scan writes.
- Fixed premature timeout of long-running scheduled scans.
- Fixed various scanner error handling issues across domain scanning, dependency scanning, and network scanning tools.
Coming Soon
Section titled “Coming Soon”These features are currently in early access and rolling out soon:
- SCIM v2 user provisioning — Automate user lifecycle management by connecting your identity provider (such as Rippling or Okta) to provision and deprovision workspace members automatically.
- HRIS provider integrations — Connect HR systems including Gusto, Rippling, Justworks, and QuickBooks for automated identity and access management.
- Third-party service detection — Automatically discover third-party services your organization uses by analyzing source code, DNS records, and secret scan results.
- Fencer CLI — A command-line interface for interacting with Fencer from your terminal, with secure OAuth-based authentication.
- CSV export for all datagrids — Export any datagrid view to CSV with a single click.
Interested in early access to any of these features? Reach out to us and we’ll get you set up.