Release Notes — May 22, 2026

Several features that were in early access are now generally available: the Inbox & Notification Center, Automatic Asset Inventory Pruning, SAML SSO with SCIM user provisioning, and Fencer Triage for AI-assisted vulnerability triage. We also expanded AI fixer visibility with a live progress timeline and bulk scheduling, and shipped a new network services asset page.

New Features

Inbox & Notification Center

The unified notification center is now generally available for all accounts. You get a live badge count, alerts for member activity and integration health, per-organization filtering, dismiss controls, and pagination — all in one place.

Automatic Asset Inventory Pruning

Assets that disappear from recent scans now automatically age out of your inventory, keeping it accurate without manual cleanup. If a pruned asset is rediscovered in a later scan, Fencer automatically restores it.

SAML SSO and SCIM Provisioning

SAML single sign-on and SCIM user provisioning are now generally available and work with any standards-compliant identity provider. Members can self-link existing accounts to SSO, IdP-bound email addresses are verified at sign-in, and deprovisioned usernames can be safely reused without resurrecting ghost users.

Schedule AI Fixes in Bulk

Trigger AI fixers across many vulnerabilities at once. Bulk scheduling automatically skips vulnerabilities the fixer cannot address and reports a clear summary of what it did and didn’t fix.

AI Fix Progress Timeline

AI fixer progress is now visible directly in the vulnerability view. Each fix attempt shows a growing checkpoint timeline, a multi-file diff viewer for proposed changes, and dockable details inside the vulnerability drawer.

Fencer Triage

Our AI-assisted vulnerability triage is now generally available under the name Fencer Triage. Untriaged vulnerabilities are clearly labeled, and you can submit feedback on triage decisions to help improve future results.

Agent Activity View

A new view shows org-scoped agent runs and Slack agent activity so you can see what automated agents have done across your organization.

Network Services Asset Page

A new Assets view dedicated to network services discovered during scanning gives you a single place to inventory exposed services across your environments.

Historical Asset Trends

Assets pages can now analyze historical trends so you can see how your asset inventory has changed over time.

Weekly Vulnerable Dependency Digest

You’ll now receive a weekly email summarizing vulnerable dependencies with explicit upgrade steps, so you can plan remediation without opening the dashboard.

In-App Support Chat

Reach our support team directly from inside Fencer via the new chat widget, with a dedicated support email surfaced alongside it.

Integrations

Cloudflare Paused Domains

Domains in a paused state in Cloudflare are now handled correctly during domain creation, avoiding sync errors when adding new monitored domains.

Improvements

• Re-run scans on endpoint vulnerabilities. You can now manually re-run a scan on an endpoint vulnerability to confirm a fix or refresh detection state.
• Agent optimized scanner summaries. Scan summaries are now better optimized for agents, so you can point your coding agents at the CI results and have them address any findings.
• Domain discovery improvements. Look-alike domain detection now probes both HTTP and HTTPS to find a working path, cloud DNS record sync handles incremental updates more reliably, and the domain overview shows up to 500 entries.
• Per-recipient penetration test notifications. Penetration test status emails are now sent per-recipient with personalized context, instead of a single shared email thread.
• Grid view preferences remembered. The last view you selected on data grid pages is now preserved across navigations.

Bug Fixes

• Fixed adding repositories from Bitbucket, GitLab, and Azure DevOps.
• Fencer no longer flags routine version bumps as new license-risk dependencies when the license has not actually changed.
• AWS live scan permission errors are now surfaced on the container scan instead of being silently swallowed.
• Mismatched container image tags are now treated as a configuration issue with a clearer message, instead of an image-not-found error.
• Fixed a data consistency issue in third-party asset resource creation, and an issue where architecture scans could replace all DNS records when only a subset changed.
• Asset graph completion no longer stalls on slow or partial domain discovery.
• Restored the vulnerability trend line and fixed the Show Counts button on the Asset Resource page that could throw an error.
• Fixed the re-run button on the GitHub Fencer check that was failing to trigger a new scan.
• Fixed a blank-page crash when closing the app drawer while it was maximized.
• Fencer no longer creates endpoint vulnerabilities for low- and medium-severity findings when no upgrade is available.
• Detection rule details now show the rule’s display name instead of an internal identifier.
• SIEM now better detects forced GitHub tag modifications.

Coming Soon

These features are currently in testing and rolling out soon:

• Security Advisory feed. Previously called Architecture Security Review. Get a comprehensive analysis of attack paths and potential security risks in system design.
• STRIDE threat modeling. A new STRIDE-based threat modeling review type joins the Security Advisory feed, splitting audits into “Analyze attack path” and “Model threats” actions.
• Vulnerability Review Workflow. Dedicated review pages for structured vulnerability review are still rolling out, with a new start-review popup and clearer ignored/deferred status indicators.
• Refreshed Domain Management UI. A reworked domain management interface is in testing, bringing clearer organization of monitored domains and DNS records.
• Refreshed User Settings. User settings pages are being migrated to a refreshed React-based experience with a cleaner layout.

Interested in early access to any of these features? Reach out to us and we’ll get you set up.