Product Updates

Real-time SAST, SCA, and secrets scanning directly in VS Code and JetBrains IDEs. Get inline vulnerability highlights, fix suggestions, and scan-on-save with zero context switching.

Dedicated security panel inside the IDE showing findings summary, severity breakdown, and one-click remediation for detected vulnerabilities.

Findings detected in the IDE automatically sync to the TigerGate dashboard. Suppress false positives once and the suppression applies across IDE, CI/CD, and dashboard.

Full authenticated DAST with browser-based crawling, login sequence recording, and session token management. Scans behind authentication walls for complete web app coverage.

Automatic API endpoint discovery from web applications during DAST scans. Identifies hidden APIs, undocumented endpoints, and shadow APIs exposed by SPAs.

Schedule DAST scans on a recurring basis with configurable frequency, scan windows, and automatic comparison against previous scan baselines.

Real-time detection of cloud configuration drift from IaC-defined state. Auto-remediation engine reverts unauthorized changes with approval workflows and dry-run mode.

Continuous verification that running container images match their signed and scanned versions. Detects image tampering, unauthorized replacements, and drift from approved image policies.

Policy-as-code admission controller with OPA/Rego support. Block deployments based on image scan results, SBOM requirements, signature verification, and custom organizational policies.

Unified security posture view across AWS Organizations, GCP Organization, and Azure Management Groups with account-level drill-down and cross-account trend analysis.

Live threat intelligence integration with automated IOC matching and alerting for runtime events.

Build custom compliance frameworks by combining controls from existing standards or creating your own.

Interactive Slack bot for triggering scans, viewing findings, and managing alerts directly from Slack.

Replaced orchestrator with NATS JetStream for distributed workflow orchestration with at-least-once delivery guarantees.

Deploy scanners across multiple regions for faster scans and data residency compliance.

Native integration with GitHub Advanced Security for SARIF upload and code scanning alerts.

Comprehensive AI/LLM security scanning for prompt injection, PII leakage, and harmful content detection in AI applications.

Full Oracle Cloud Infrastructure support with 51+ CIS benchmark checks for OCI resources.

Automated remediation for common misconfigurations with dry-run mode and approval workflows.

Native integration for automated compliance evidence collection supporting SOC 2, ISO 27001, PCI-DSS, and HIPAA.

Kubernetes admission controller for blocking vulnerable or non-compliant container deployments.

Visualize potential attack paths across cloud resources with risk-based prioritization.

Website security audits with DAST, performance testing (Lighthouse), SEO analysis, and WCAG accessibility compliance.

Dedicated REST, GraphQL, and SOAP API security testing with authentication, authorization, and injection detection.

83+ CIS Kubernetes Benchmark v1.8.0 checks for pod security, RBAC, network policies, and admission controllers.

Image vulnerability scanning with Trivy integration, CVE detection, malware scanning, and SBOM generation.

Dynamic application security testing with Nuclei templates and AI-powered penetration testing.

Kernel-level monitoring with eBPF probes for execve, file operations, network connections, and privilege escalation.

SAST with Semgrep, SCA with OSV database, secrets detection, and IaC scanning with Checkov.

Cloud security posture management for AWS, GCP, and Azure with CIS benchmark compliance.

ESR model for compliance control evaluation across SOC 2, ISO 27001, PCI-DSS, and GDPR frameworks.

React-based dashboard with real-time metrics, compliance status, and vulnerability tracking.