v1.1.0 - RAG & Multi-Agent Security

What's New in v1.1.0

This release introduces comprehensive security scanning for RAG (Retrieval-Augmented Generation) systems and Multi-Agent orchestration frameworks.

RAG Security Scanner

• 30+ security rules covering vector stores, document ingestion, and poisoning detection
• 8 vector stores supported: Pinecone, Chroma, Weaviate, Qdrant, Milvus, PGVector, Redis, FAISS
• New CLI commands: secureagent rag scan, rag vector-stores, rag documents, rag poisoning, rag test

Multi-Agent Security Scanner

• 30+ security rules for orchestration, communication, and delegation attacks
• 4 frameworks supported: LangGraph, AutoGen, CrewAI, AutoGPT
• Detects: workflow cycles, privilege escalation, circular delegation, message injection, replay attacks
• New CLI commands: secureagent multiagent scan, multiagent orchestration, multiagent communication, multiagent delegation, multiagent frameworks

Jailbreak Detection

• New secureagent detect command group for jailbreak and prompt injection detection

Security Testing Payloads

• Multi-agent attack payloads (MA-001 to MA-010)
• RAG poisoning payloads

Test Coverage

• 308 tests passing
• Comprehensive test coverage for all new scanners

---

Installation

pip install secureagent

Quick Start

# Scan RAG system
secureagent rag scan ./rag-project

# Scan multi-agent system
secureagent multiagent scan ./agents

# Detect jailbreak attempts
secureagent detect jailbreak "user input"

---

Full Changelog: v1.0.2...v1.1.0

v1.0.2

Full Changelog: v1.0.1...v1.0.2

v1.0.1 - CI/CD Fixes

Bug Fixes

• Fixed CLI compatibility with Typer 0.12+ and Click 8.3+
• Fixed Docker image not loading in CI for testing
• Pinned Typer to >=0.9.0,<0.12.0 to avoid breaking changes
• Pinned Click to >=8.0.0,<8.2.0 to avoid secondary flag validation errors

CI/CD Improvements

• Added explicit dependency version constraints in CI workflows
• Added load: true to Docker buildx action for proper image testing
• All CI jobs now passing (tests, lint, security scan, Docker, integration)

Full Changelog: v1.0.0...v1.0.1

Full Changelog: v1.0.0...v1.0.1

Full Changelog: v1.0.0...v1.0.1

Full Changelog: v1.0.0...v1.0.1

Full Changelog: v1.0.0...v1.0.1

Full Changelog: v1.0.0...v1.0.1

SecureAgent v1.0.0

SecureAgent v1.0.0 - Initial Release

The first comprehensive security platform for AI agents and cloud infrastructure.

Features

AI Agent Security Scanning

• MCP Server Scanner (7 security rules)
• LangChain Agent Scanner (7 security rules)
• OpenAI Assistants Scanner (6 security rules)
• AutoGPT/CrewAI Scanner

Cloud Security

• AWS Scanner (S3, IAM, EC2, Security Groups)
• Azure Scanner (Storage, Key Vault)
• Terraform Scanner (11 IaC checks)

AI Inventory & Discovery

• Automatic agent discovery
• Agent catalog management
• Model and tool registry
• Data source mapping

Risk & Permission Analysis

• Permission mapping
• ML-powered risk scoring (93.2% accuracy)
• Blast radius analysis
• Data flow tracing

Compliance & Reporting

• OWASP LLM Top 10 mapping
• OWASP MCP Top 10 mapping
• SOC 2 controls
• PCI-DSS mapping
• HIPAA controls
• Multiple output formats (Console, JSON, SARIF, HTML)

Integrations

• GitHub Actions / Code Scanning
• GitLab CI
• Slack notifications
• Webhook support

Installation

```bash
pip install secureagent
```

Quick Start

```bash
secureagent scan ~/.config/claude/claude_desktop_config.json
secureagent scan ./my-project --scanners mcp,langchain
secureagent cloud scan --provider aws
```

Documentation

• Getting Started: docs/getting-started.md
• How It Works: docs/how-it-works.md
• Scanners Guide: docs/scanners.md
• CLI Reference: docs/cli-reference.md