Release Notes — May 8, 2026
Self-Requested Penetration Tests are now generally available and enhanced code analysis and AI-powered SIEM analysis are now on for all accounts. The rest of this release is quality and security improvements: scheduled network scans, PR scans that rebase against main automatically, smarter endpoint vulnerability detection, and richer vulnerability descriptions as well as email notifications for sensitive account events.
New Features
Section titled “New Features”Self-Requested Penetration Tests
Section titled “Self-Requested Penetration Tests”Teams can now request penetration tests directly from within Fencer. The request flow, status tracking, and result delivery are all built into the platform. This feature is now generally available, including a new UI for tracking a pentest from request through report delivery.
AI-powered Security Event Analysis
Section titled “AI-powered Security Event Analysis”On any security event in the Hunts view, click Ask AI to get an instant breakdown of what happened, the key technical details, why it matters from a security perspective, and concrete next steps to investigate. It’s built to accelerate triage and help anyone on your team make sense of a noisy event without digging into the raw payload.
Security
Section titled “Security”Security Alert Emails
Section titled “Security Alert Emails”Fencer now sends email notifications for sensitive account events: password changes, MFA configuration, and invitation acceptance. Account holders are notified any time one of these actions occurs on their account.
Integrations
Section titled “Integrations”GCP Cloud Asset Inventory Feed
Section titled “GCP Cloud Asset Inventory Feed”Fencer now recognizes and tracks GCP Cloud Asset Inventory Feed as an asset resource type, ensuring these resources appear correctly in your cloud inventory.
Improvements
Section titled “Improvements”- Daily and weekly network scans are now active. Scheduled scans run automatically, keeping your network asset inventory current without manual intervention.
- Subdomain discovery from DNS providers. AWS Route53, Cloudflare, and DigitalOcean DNS scans now automatically extract subdomains from your DNS records, expanding asset coverage without requiring additional certificate transparency lookups.
- Pull request scans stay current with your main branch. PR scans now automatically rebase against the latest main branch before running, so results reflect your actual merge target, which is especially useful when you have long-running feature branches.
- Enhanced code analysis is now available for all accounts. The updated code analysis engine provides richer context for findings, reducing noise and improving the quality of results.
- Smarter endpoint vulnerability detection. Fencer no longer raises vulnerabilities for packages where no newer version exists (unless rated high or critical), reducing noise from packages with no available fix.
- Richer vulnerability descriptions. Descriptions, remediation guidance, and references now combine data from all available sources, giving you more complete context in a single view.
- Fencer Agent CLI improvements. Improved ergonomics, better asset handling, and enhanced deeplinks navigate directly to relevant findings from agent responses.
- Vulnerability lookup via MCP improved. Filtering and lookup accuracy improved for teams using Fencer through an MCP-connected client.
- Security event query performance improved. Query times on large security event datasets are significantly faster.
- CSV export in data grids is now available for all accounts.
- Active Contributors page now shows actual last contribution dates instead of a placeholder.
Bug Fixes
Section titled “Bug Fixes”- Fixed the asset inventory drawer returning a 404 error when opened from certain pages.
- Fixed an asset cleanup job incorrectly removing assets that were still associated with active scan results.
- Fixed organizations on the daily scan plan triggering duplicate scans.
- Fixed the findings list becoming unusable, and restored the Scan All button on endpoint and artifact pages.
- Fixed broken Last Scan links on vulnerability detail pages.
- Fixed displaying the dependency graph for individual dependencies in large codebases.
- Fixed an issue with the Gitlab integration that sometimes return scan failures due to auth race conditions.
- Fixed a crash in threat hunting when rapidly switching between events.
- Fixed AWS scans failing in opt-in regions by using the correct regional endpoint for credential issuance.
- Fixed reconnecting a Cloudflare monitor causing a duplicate constraint error when the previous connection was removed.
- Fixed intermittent identity correlation errors caused by duplicate emails and concurrent sync tasks.
- Fixed the DNS detail page crashing when an asset resource was unlinked.
- Fixed profile images failing to load due to a Content Security Policy restriction.
Coming Soon
Section titled “Coming Soon”These features are currently in testing and rolling out soon:
- Inbox & Notification Center — A unified notification center with a live badge count, alerts for member activity and integration health, and per-organization filtering. Dismiss controls and pagination are included.
- Architecture Security Review — An AI agent that maps your infrastructure as an attack graph and surfaces exploitable paths an adversary could follow. The full review with findings appears in a split-pane UI.
- Vulnerability Review Workflow — Dedicated review pages for structured vulnerability triage, letting your team assess, annotate, and track remediation decisions in one place.
- AI Fix History — A full list of AI-assisted fix attempts with status tracking, so you can see which vulnerabilities have been addressed automatically and what the outcome was.
- Automatic Asset Inventory Pruning — Assets that disappear from recent scans will automatically age out of your inventory, keeping it accurate without manual cleanup.
- Fencer Agent: Schedule Scans — Run scans on demand or at a future time from the Fencer CLI agent using natural language, without configuring a cron expression or switching to the web interface.
- Fencer Agent: Vulnerability and Asset Triage — Update vulnerability priority and asset criticality from your terminal or Slack conversation, without leaving your current workflow.
- Cloudflare Audit Log Ingestion — Scheduled ingestion of Cloudflare audit logs into your security event stream, alongside other SIEM data sources.
Interested in early access to any of these features? Reach out to us and we’ll get you set up.