MEDUSA v2026.3.2.0 - 4,000+ Rules Milestone

MEDUSA v2026.3.2.0 - 4,000+ Detection Rules

MEDUSA has crossed the 4,000+ detection pattern milestone with this release. This update delivers 335 net-new AI security scanner rules extracted from the latest PaperMiner research batch, covering cutting-edge attack techniques from peer-reviewed AI security papers.

New Scanner Rule Files (12 new YAML files)

AI Security (medusa/rules/ai_security/)

• jailbreaking_scanner.yaml — 143 rules (JUMP++, CL-GSO, AutoDAN, GCG variants)
• ai_red_teaming_scanner.yaml — 67 rules (automated red teaming frameworks)
• genai_security_scanner.yaml — 67 rules (GenAI-specific attack patterns)
• code_gen_security_scanner.yaml — 70 rules (code generation security issues)
• model_poisoning_scanner.yaml — 70 rules (model poisoning attack detection)
• privacy_attacks_scanner.yaml — 66 rules (membership inference, model inversion)
• prompt_injection_scanner.yaml — 37 rules (advanced prompt injection variants)

Agent Security (medusa/rules/agent_security/)

• agentic_attacks_scanner.yaml — 102 rules (agent-specific attack patterns)
• agent_security_scanner.yaml — 86 rules (general agent security)
• mcp_security_scanner.yaml — 47 rules (MCP server vulnerabilities)
• tool_use_attacks_scanner.yaml — 57 rules (tool use attack vectors)

RAG Security (medusa/rules/rag_security/)

• rag_vulnerabilities_scanner.yaml — 49 rules (RAG-specific vulnerabilities)

Scanner Improvements

• Scanner registration: All new rule families registered with correct scanners (owasp_llm_scanner, multi_agent_scanner, model_attack_scanner, tool_callback_scanner)
• False positive reduction: 4 new FP filter patterns (512 total) — 96.8% FP reduction rate
• Rule integrity: Fixed false blocking on legitimate attack examples in rule descriptions
• Can_scan() gates: Tightened to prevent pattern sprawl across unrelated files

Detection Coverage

Category	Rules
Prompt Injection	800+
Agent Security	500+
MCP Server Security	400+
Model Security	400+
Supply Chain	350+
RAG Security	300+
Traditional SAST	1,400+
Total	4,000+

Installation

pip install medusa-security
medusa scan .

What's Changed

Full changelog: v2026.3.1...v2026.3.2.0

---

MEDUSA is an AI-first security scanner for AI/ML, LLM agents, and MCP servers.