Skip to content

Release Notes — April 10, 2026

Network scanning is now generally available, threat hunting gets snapshots and workflow improvements, Azure DevOps git support and three new identity provider integrations are live.

You can now scan your external network infrastructure for open ports and services. Network scanning uses industry-standard tools to discover exposed services across your assets, with findings prioritized by severity. Configure scan targets and schedules from your scan settings page.

Save point-in-time captures of your threat hunting queries and results. Snapshots let you bookmark investigations, share findings with your team, and return to specific states of an investigation without re-running queries.

We’ve made it faster to investigate security events across your environment. The threat hunting experience now includes a more intuitive query builder, better result navigation, and streamlined filters.

It’s now easier to prioritize which alerts to investigate first. Security monitoring detections now display human-readable confidence ratings (high, medium, low) instead of raw numeric scores.

Security monitoring now suggests noise reduction filters based on patterns in your event data. These suggestions help you cut through alert fatigue and focus on the events that matter.

You can now search for specific field values directly within threat hunting using key-value pair syntax, making it faster to locate events matching exact criteria in structured log data.

When you search for an IP address in security monitoring, the system now automatically detects the format and applies optimized IP-specific search — no need to use a separate operator or special syntax.

More event types in security monitoring now have structured fields automatically extracted, giving you richer filtering and search capabilities across a wider range of data sources.

Test Webhook Button for Alert Configurations

Section titled “Test Webhook Button for Alert Configurations”

You can now send a test payload when configuring webhook-based alert notifications, making it easy to verify your endpoint is receiving and processing alerts correctly before going live.

A new reference page documents the IP addresses and HTTP headers your scans originate from, so you can allowlist Fencer traffic in your firewalls and WAF rules.

You can now assign a criticality level to individual assets using a slider in asset configuration. Criticality helps prioritize vulnerabilities based on the business importance of the affected asset.

When a vulnerability has an automated fix available, the Slack notification now includes a “Fix” button. One click triggers the fix directly from Slack, and you will receive a thread notification when the fix completes.

You can now cancel a penetration test request while it is still in the pending state, giving you more control over your testing pipeline.

The signup flow has been redesigned with a progressive, step-by-step layout that guides new users through account creation more smoothly.

New Relic application logs are now directly queryable from the threat hunting view. If you have a New Relic integration connected, your application log data flows into the same search and investigation workflow as your other security event sources.

You can now connect your Azure DevOps git repositories to Fencer to take advantage of integrated vulnerability scanning on pull requests, identity monitoring and general code & secrets scanning to protect you from threats.

Three new identity provider integrations are now available:

  • New Relic — Sync team members from your New Relic account for identity management and access reviews.
  • Prefect — Connect your Prefect workspace to track who has access to your data pipeline orchestration platform.
  • Attio — Sync workspace members from Attio, your CRM, for a complete picture of SaaS access across your organization.

Integrations that experience partial failures now display a “degraded” status instead of appearing fully healthy or fully broken. This gives you better visibility into integrations that are working but encountering intermittent issues.

  • 20 new Azure resource types added to asset inventory, covering compute, networking, storage, and database resources for more complete cloud visibility.
  • Contributor billing deduplication now consolidates duplicate contributor identities (such as those from AI coding agents) into a single billable contributor.
  • New contributors are highlighted on the usage screen so you can quickly spot who was recently added.
  • Bot contributor detection improved to use account type metadata in addition to name-based heuristics, reducing false positives in contributor counts.
  • Duplicate contributor normalization automatically merges contributors that appear under multiple identities.
  • Alerts configuration UI refined for a cleaner, more intuitive setup experience.
  • Application scanning feedback now provides clearer status updates throughout the scan lifecycle.
  • Vulnerability page performance improved — pages that previously took over 15 seconds now load significantly faster.
  • Snowflake search optimization enabled across all security monitoring data source tables for faster query performance.
  • Snowflake table clustering strategies updated across all event types for improved query efficiency.
  • Code scanning engine tuning with improved parallelism, quieter output, and refined rule selection for faster and more accurate scans.
  • Governance compliance window extended to 13 months, giving you more flexibility for annual compliance reviews.
  • Comment filter added to the vulnerability datagrid for filtering by comment status.
  • Copy as prompt or markdown button added to vulnerability details for easy sharing with AI tools or documentation.
  • Bucket policy snippets now displayed for relevant cloud vulnerability findings.
  • Fixed a high-impact issue where resolved vulnerabilities were not being marked as resolved in Vanta, causing compliance drift between platforms.
  • Fixed application scan failures caused by misconfigured scanner dependencies.
  • Fixed architecture scans hanging for hours when the certificate transparency service was unresponsive.
  • Fixed Google Workspace integration reliability issues during nightly sync.
  • Fixed Linear and Jira integration buttons missing from the bulk actions toolbar.
  • Fixed custom vulnerability rule identifiers not propagating to live vulnerability records.
  • Fixed a crash when upserting cloud storage buckets with duplicate titles across active and resolved vulnerabilities.
  • Fixed webhook error handling in notification configuration forms.
  • Fixed database deadlocks during concurrent scan writes.
  • Fixed premature timeout of long-running scheduled scans.
  • Fixed various scanner error handling issues across domain scanning, dependency scanning, and network scanning tools.

These features are currently in early access and rolling out soon:

  • SCIM v2 user provisioning — Automate user lifecycle management by connecting your identity provider (such as Rippling or Okta) to provision and deprovision workspace members automatically.
  • HRIS provider integrations — Connect HR systems including Gusto, Rippling, Justworks, and QuickBooks for automated identity and access management.
  • Third-party service detection — Automatically discover third-party services your organization uses by analyzing source code, DNS records, and secret scan results.
  • Fencer CLI — A command-line interface for interacting with Fencer from your terminal, with secure OAuth-based authentication.
  • CSV export for all datagrids — Export any datagrid view to CSV with a single click.

Interested in early access to any of these features? Reach out to us and we’ll get you set up.