Choose the plan that fits your workflow
Flexible pricing designed to scale with your needs. Whether you're an individual or a team, find the right plan to unlock all the features you need to boost productivity.
Backend API
CLI Tool
February 25, 2025
v 2025.3.2
New field added to Query Data, bulk delete domain scans endpoint, changes in severity issues, and bug fixes.
New Features:-
field=exposures [Query Data]:Added the field=exposures query in Query Data to show detected keys and secrets in JSON format.
Bulk Delete Domain Scans:The /bulkDeleteFiles endpoint is now used to delete multiple domain scans at once.
Changes:-
Improved pattern detection for S3 buckets [JS Intelligence]:Enhanced regex patterns to better detect S3 bucket URLs and hostnames.
API key values instead of API key names:API key values are now visible in the severity issues endpoint instead of just the API key names for better context.
Removed services input from /startCron and /updateCron API endpoints:The services field is no longer required for the /startCron or /updateCron API endpoints.
Bug Fixes:-
Cronjob exhaustion limits email:Updated the template for the cronjob exhaustion limits email.
February 7, 2025
v 2025.3.2
Monthly free API calls, recent queries, profile picture uploads, and bug fixes.
New Features:-
Save Recent Queries:Recent queries made in the query builder are now automatically saved.
Profile Picture Upload:Users can now upload profile pictures to their accounts.
Changes:-
Free API Call Limits Renewal:Instead of deactivating the account's API calls after 7 days, free API calls will now be renewed every 30 days.
Bug Fixes:-
Enterprise Enquiry Form Sanitization Bug:Implemented HTML sanitization in fields including name, company name, additional comments, etc., in the enterprise enquiry form.
API Call Limit Exceeded Bug Fixed:Resolved a bug related to the API call limit exceeded service.
January 24, 2025
v 2025.3.2
JS Fuzzing, JS Subdomain Scanning, False Positive Filtering
New Features:-
JS Fuzzing:JS URL extraction process now includes fuzzing with a wordlist of common .js files.
JS Subdomain Scanning:By adding ?subdomains=true in the /automateScanDomain API endpoint, you can now include the subdomains present in the final JS URLs for rescanning.
Changes:-
False Positive Filtering:We remove false positive API paths, extracted domains, extracted URLs, node modules with dependency confusion, and module scanner results (Keys & Secrets).
Bug Fixes:-
Performance improvements in microservices.
December 20, 2024
v 2025.3.2
Added concept of workspaces, Google Oauth, API caching, and bug fixes
New Features:-
Workspaces:wkspId is now attached to every document, including JS URL, JS Intelligence, Keys & Secrets, domains, etc. This keeps your projects separate and helps in differentiation.
Google Oauth:You can now log in via Google, and existing accounts using Gmail can use this option as well.
API Caching:At our first layer, we've implemented caching to improve response times.
Bug Fixes:-
Fixed bugs in the JS Intelligence Table and export options.
February 14, 2024
v 2025.3.2
Task Assignment Fix and M1 Performance
Fixed issue with task assignments not saving properly.
Improved performance on M1 chips for faster load times.
Bug fixes for project tagging.
Backend API
CLI Tool
February 25, 2025
v 2025.3.2
New field added to Query Data, bulk delete domain scans endpoint, changes in severity issues, and bug fixes.
New Features:-
field=exposures [Query Data]:Added the field=exposures query in Query Data to show detected keys and secrets in JSON format.
Bulk Delete Domain Scans:The /bulkDeleteFiles endpoint is now used to delete multiple domain scans at once.
Changes:-
Improved pattern detection for S3 buckets [JS Intelligence]:Enhanced regex patterns to better detect S3 bucket URLs and hostnames.
API key values instead of API key names:API key values are now visible in the severity issues endpoint instead of just the API key names for better context.
Removed services input from /startCron and /updateCron API endpoints:The services field is no longer required for the /startCron or /updateCron API endpoints.
Bug Fixes:-
Cronjob exhaustion limits email:Updated the template for the cronjob exhaustion limits email.
February 7, 2025
v 2025.3.2
Monthly free API calls, recent queries, profile picture uploads, and bug fixes.
New Features:-
Save Recent Queries:Recent queries made in the query builder are now automatically saved.
Profile Picture Upload:Users can now upload profile pictures to their accounts.
Changes:-
Free API Call Limits Renewal:Instead of deactivating the account's API calls after 7 days, free API calls will now be renewed every 30 days.
Bug Fixes:-
Enterprise Enquiry Form Sanitization Bug:Implemented HTML sanitization in fields including name, company name, additional comments, etc., in the enterprise enquiry form.
API Call Limit Exceeded Bug Fixed:Resolved a bug related to the API call limit exceeded service.
January 24, 2025
v 2025.3.2
JS Fuzzing, JS Subdomain Scanning, False Positive Filtering
New Features:-
JS Fuzzing:JS URL extraction process now includes fuzzing with a wordlist of common .js files.
JS Subdomain Scanning:By adding ?subdomains=true in the /automateScanDomain API endpoint, you can now include the subdomains present in the final JS URLs for rescanning.
Changes:-
False Positive Filtering:We remove false positive API paths, extracted domains, extracted URLs, node modules with dependency confusion, and module scanner results (Keys & Secrets).
Bug Fixes:-
Performance improvements in microservices.
December 20, 2024
v 2025.3.2
Added concept of workspaces, Google Oauth, API caching, and bug fixes
New Features:-
Workspaces:wkspId is now attached to every document, including JS URL, JS Intelligence, Keys & Secrets, domains, etc. This keeps your projects separate and helps in differentiation.
Google Oauth:You can now log in via Google, and existing accounts using Gmail can use this option as well.
API Caching:At our first layer, we've implemented caching to improve response times.
Bug Fixes:-
Fixed bugs in the JS Intelligence Table and export options.
February 14, 2024
v 2025.3.2
Task Assignment Fix and M1 Performance
Fixed issue with task assignments not saving properly.
Improved performance on M1 chips for faster load times.
Bug fixes for project tagging.
Backend API
CLI Tool
February 25, 2025
v 2025.3.2
New field added to Query Data, bulk delete domain scans endpoint, changes in severity issues, and bug fixes.
New Features:-
field=exposures [Query Data]:Added the field=exposures query in Query Data to show detected keys and secrets in JSON format.
Bulk Delete Domain Scans:The /bulkDeleteFiles endpoint is now used to delete multiple domain scans at once.
Changes:-
Improved pattern detection for S3 buckets [JS Intelligence]:Enhanced regex patterns to better detect S3 bucket URLs and hostnames.
API key values instead of API key names:API key values are now visible in the severity issues endpoint instead of just the API key names for better context.
Removed services input from /startCron and /updateCron API endpoints:The services field is no longer required for the /startCron or /updateCron API endpoints.
Bug Fixes:-
Cronjob exhaustion limits email:Updated the template for the cronjob exhaustion limits email.
February 7, 2025
v 2025.3.2
Monthly free API calls, recent queries, profile picture uploads, and bug fixes.
New Features:-
Save Recent Queries:Recent queries made in the query builder are now automatically saved.
Profile Picture Upload:Users can now upload profile pictures to their accounts.
Changes:-
Free API Call Limits Renewal:Instead of deactivating the account's API calls after 7 days, free API calls will now be renewed every 30 days.
Bug Fixes:-
Enterprise Enquiry Form Sanitization Bug:Implemented HTML sanitization in fields including name, company name, additional comments, etc., in the enterprise enquiry form.
API Call Limit Exceeded Bug Fixed:Resolved a bug related to the API call limit exceeded service.
January 24, 2025
v 2025.3.2
JS Fuzzing, JS Subdomain Scanning, False Positive Filtering
New Features:-
JS Fuzzing:JS URL extraction process now includes fuzzing with a wordlist of common .js files.
JS Subdomain Scanning:By adding ?subdomains=true in the /automateScanDomain API endpoint, you can now include the subdomains present in the final JS URLs for rescanning.
Changes:-
False Positive Filtering:We remove false positive API paths, extracted domains, extracted URLs, node modules with dependency confusion, and module scanner results (Keys & Secrets).
Bug Fixes:-
Performance improvements in microservices.
December 20, 2024
v 2025.3.2
Added concept of workspaces, Google Oauth, API caching, and bug fixes
New Features:-
Workspaces:wkspId is now attached to every document, including JS URL, JS Intelligence, Keys & Secrets, domains, etc. This keeps your projects separate and helps in differentiation.
Google Oauth:You can now log in via Google, and existing accounts using Gmail can use this option as well.
API Caching:At our first layer, we've implemented caching to improve response times.
Bug Fixes:-
Fixed bugs in the JS Intelligence Table and export options.
February 14, 2024
v 2025.3.2
Task Assignment Fix and M1 Performance
Fixed issue with task assignments not saving properly.
Improved performance on M1 chips for faster load times.
Bug fixes for project tagging.