Implemented

🚁 Peer Reviewer Assistant now blocks vulnerable code: The assistant used to only comment on pull requests. It now blocks the pull request when it finds vulnerabilities in the new code, before they reach your main branches. It also applies your organization's risk policies, such as minimum severity and exclusions, and records every finding on the platform.

When a release can't wait, you can grant an exception to approve the pull request and move to production. Setup takes a few clicks, and the assistant reviews every branch in your repositories, short-lived ones included. Available on GitHub and Azure DevOps for the Essential and Advanced plans.

🎯 Priority Score with reachability and VLAI: Fluid Attacks' Priority Score now weighs whether a vulnerability is reachable and its VLAI severity, so your remediation order reflects the real risk of each issue. VLAI rates every open vulnerability, from automated and manual techniques alike, based on each finding's description rather than its weakness alone. Use it alongside your other criteria to decide what to fix first.

🧾 Commit details in Billing: The Billing section shows every commit Fluid Attacks detected in a given month, even if it was created earlier. See where each author's charge comes from and spot inconsistencies, for more transparency and control over your billing.

🌳 Filter SCA vulnerabilities by advisory: A new filter lets you find SCA vulnerabilities by the ID of the advisory behind them, such as a CVE. When a critical CVE is disclosed, you see everything it affects in your group in seconds.

🐳 Docker image scanning in restricted networks: We added Egress and Connector support to Docker image scanning, so you can scan images in network-restricted environments without extra steps.

⚠️Fluid Attacks call notice⚠️

Our education specialists may call your team members to provide onboarding and adoption support for new platform features. This is a reliable procedure in which we will never seek to discuss your software's vulnerabilities. However, if you have any questions, please contact us at help@fluidattacks.com.

✨Have 10-15 minutes to spare?✨

Share your opinions on our AppSec solution on Gartner Peer Insights and earn a $25 gift card! Your feedback helps others make informed decisions and shapes the future of application security. Just follow this link! Remember, your review can also be in Spanish.