chris (.

🔌 (Connectors) Registered the Intigriti bug bounty connector and the runZero asset connector in the Pro UI. The Qualys connector now sizes its request timeout for large detection exports.

🔌 (Integrations) Integrator assignments now support per-assignment push filters, so you can limit what gets pushed by minimum severity and active-only status.

🤖 (Sensei) Added a cloud dispatch guard, retroactive re-staging of auto-fixes, and a per-row actions menu. Fixed the "Configure Product" button clipping in the findings list.

🎯 (Findings) Request Review is now gated on Finding_View instead of Finding_Edit.

✨ (Pro UI) Export options now prefill from the active table preference, the AI menu was flattened into top-level Sensei, Model Settings, and MCP links, and the PSIRT menu link now opens in a new tab.

📥 (Import) Scan-import cleanup now streams files and fails loudly on error.

⚡ (Performance) Dashboard count tiles no longer time out on large finding buckets.

🪲 (Bug Fixes) Cleared default ordering in count subqueries.

(Connectors) Added a large batch of new Connectors. New findings connectors: CrowdStrike Falcon, Microsoft Defender Vulnerability Management, Microsoft Defender for Cloud, Veracode, Qualys, Rapid7 InsightVM, GitHub Advanced Security, HackerOne, Contrast, Google Cloud Security Command Center, Shodan, Wazuh, Cloudflare, Censys, Docker Scout, and Have I Been Pwned. New asset connectors: GitLab, Atlassian JSM Assets, Bitbucket Cloud, Azure DevOps, Backstage, and Group-IB ASM. Added a GitGuardian secrets connector.

(Integrations) Added new outbound integrators for Jira (Cloud and Data Center, with per-transition custom fields, ticket templates, and a test-render path), PagerDuty, Shortcut, and Bitbucket Cloud. Jira integrations now support setting fields on close/reopen transitions and Jira Cloud OAuth.

(Search) Added cross-model global search backed by native Postgres full-text search and trigram indexes, so you can search across findings and related objects from one place.

(Findings) Added a public API endpoint for merging findings, and “Not X” negation options on the finding status filter.

(Notes) You can now @mention users in notes with autocomplete; mentioned users receive a notification.

(Users) Added bulk API-token and password resets from the users list.

(Sensei) Added candidate triage directly in the findings table

(Pro UI) Reworked the big-table toolbar menu. Long unbroken names now wrap instead of being clipped, table scrollbars stay visible on hover, and in-page navigation refreshes data in place instead of triggering a full-page reload. Added a classic-UI deprecation banner with one-click opt-in to the Pro UI. The test page now shows the effective deduplication matching policy.

(Authorization) Tightened authorization on product reassignment, V3 location routes, location-reference writes, and questionnaire relink routes.

(Performance) close_old_findingsnow fetches only the columns it needs, and uWSGI workers and Celery prefork children are recycled by memory to keep long-running instances healthy.

(Import) Fixed reimport so it dispatches post-processing with the correct per-findingpush_to_jiravalue, stopped dynamic Test Type names from doubling the(scan_type)suffix, and made risk-acceptance findings reinstate correctly when the expiration date is updated via the API.

(Tools) Checkmarx One parser now handles explicit null scanner sections in filtered reports, and the CSV universal parser no longer strips backticks from imported values.

(Bug Fixes) After deleting the object you were viewing, the Pro UI now lands on its parent context instead of erroring; a background sub-fetch 404 no longer ejects authorized users to the 404 page; the global loader no longer gets stuck open in bulk menus; and audit-log history context is now JSON-safe before Celery dispatch.