v0.60.0: 8 New Security Tools (454 Total)

What's New in v0.60.0

8 New Security Analysis Tools

1. expose_headers - Analyze Expose-Headers: sensitive headers exposed, missing expose, wildcard.
2. redirect_chain - Analyze redirect chain: HTTP downgrade, open redirect, missing hop limit.
3. url_parser_confusion - Analyze URL parser confusion: backslashes, embedded credentials, dangerous protocols.
4. websocket_upgrade - Analyze WebSocket upgrade: insecure ws://, missing origin, no message limits.
5. cross_origin_resource_policy - Analyze Cross-Origin-Resource-Policy: missing CORP, unsafe cross-origin, mismatched.
6. hsts_include_subdomains - Analyze HSTS includeSubDomains: missing directive, no preload, short max-age.
7. mixed_content - Analyze mixed content: active HTTP resources, passive content, missing upgrade.
8. cors_max_age - Analyze CORS Max-Age: too long, missing, negative value.

Total: 454 tools

v0.59.0: 8 New Security Tools (446 Total)

What's New in v0.59.0

8 New Security Analysis Tools

1. cors_safelist - Analyze CORS safelist bypass: wildcard origin, origin reflection, null origin.
2. iframe_sandbox_policy - Analyze iframe sandbox policy: missing sandbox, allow-scripts+same-origin combo.
3. report_to_header - Analyze Report-To header: missing group, invalid endpoint, deprecated report-uri.
4. nel_header - Analyze NEL header: missing report_to, invalid config, sampling rate.
5. expect_ct_header - Analyze Expect-CT header: missing enforce, max-age too short, CT enforcement.
6. cors_credentials - Analyze CORS credentials: wildcard+credentials, missing allow-credentials, insecure HTTP.
7. service_worker_scope - Analyze service worker scope: missing scope, broad root scope, HTTP registration.
8. client_hints - Analyze client hints: missing hints, insecure hints, critical-CH config.

Total: 446 tools

v0.58.0: 8 New Security Tools (438 Total)

What's New in v0.58.0

8 New Security Analysis Tools

1. host_header_injection - Analyze Host header injection: Host validation, redirect URLs, cache key poisoning.
2. csv_formula_injection - Analyze CSV formula injection: export protection, formula prefix, cell escaping.
3. log_forging_risk - Analyze log forging: newline stripping, control characters, sanitization.
4. missing_csp_directive - Analyze missing CSP directives: default-src, unsafe-inline, fallback directives.
5. insecure_cookie_scope - Analyze insecure cookie scope: domain, path, subdomain exposure.
6. tabnabbing_risk - Analyze tabnabbing: target=_blank, window.opener, opener navigation.
7. subresource_integrity - Analyze subresource integrity: SRI hash, external scripts, CDN resources.
8. missing_permissions_policy - Analyze missing Permissions-Policy: camera, microphone, geolocation restrictions.

Total: 438 tools

v0.57.0 - 430 Tools

Adding 8 new analysis tools: Unsafe Eval Usage, SQL Injection ORM, Race Condition TOCTOU, Memory Corruption Risk, Insecure Webhook Verification, API Version Deprecation, Prototype Pollution, DNS Rebinding Risk

v0.56.0 - 422 Tools

Adding 8 new security analysis tools: Missing HSTS, IDOR (Insecure Direct Object Reference), Authentication Bypass, Privilege Escalation, Missing CSRF Protection, Insecure JWT Storage, Missing Rate Limiting, Debug Mode Enabled

v0.55.0 - 414 Tools

Adding 8 new security analysis tools: XML Signature Wrapping, Insecure Randomness, Missing Content-Length, Cookie Prefix Bypass, Unicode Normalization, WebSocket Origin Bypass, Missing X-Frame-Options, SQL Concatenation

v0.54.0 - 406 Tools

Adding 8 new security analysis tools: GraphQL Injection, NoSQL Injection, GraphQL Depth Limit, Path Normalization, Buffer Overread, HTTP Parameter Pollution, DOM Clobbering, PostMessage Security

v0.53.0: 8 New Security Tools (398 total)

v0.53.0 - 8 New Security Analysis Tools (398 total)

New Tools:

• certificate_validation - Analyze certificate validation: TLS verification, certificate chain, hostname verification
• memory_safety - Analyze memory safety: buffer overflow, use-after-free, unsafe allocation
• input_sanitization - Analyze input sanitization: XSS prevention, URL encoding, dynamic code execution
• crypto_random - Analyze cryptographic random: CSPRNG usage, seeded PRNG, token entropy
• session_fixation - Analyze session fixation: session regeneration, login session handling, session ID generation
• open_redirect - Analyze open redirect: redirect URL validation, Location header, returnUrl parameters
• xml_bomb - Analyze XML bomb: entity expansion, DTD processing, parser limits
• ldap_injection - Analyze LDAP injection: filter escaping, DN validation, search limits

v0.52.0 — API Latency & 7 More

v0.52.0 — 385 Tools

8 new analysis dimensions:

1. API Latency Distribution — percentile tracking, tail latency budget, spike detection, budget consumption
2. Cross-Service Health — health aggregation, dependency timeout, cascade isolation, cycle detection
3. Consumer Offset Monitor — lag alert, offset commit failure, stall detection, rewind safeguard
4. Config Value Detection — validation, sensitive encryption, override restriction, drift detection
5. DB Connection Pool — size bounds, leak detection, exhaustion action, timeout tuning
6. Background Job Reliability — idempotency, retry limit, stuck detection, schedule overlap
7. Canary Release — metric comparison, promotion criteria, auto-rollback, gradual traffic ramp

Total: 385 code analysis tools for DeepSeek Harness.

v0.51.0: 8 New Security Tools (377 total)

v0.51.0 - 8 New Security Analysis Tools (377 total)

New Tools:

• crlf_injection_prevention - Analyze CRLF injection: header sanitization, log injection, response splitting
• session_timeout_policy - Analyze session timeout: expiration, idle timeout, renewal limits
• zip_slip_prevention - Analyze zip slip: archive extraction paths, entry names, traversal sequences
• ssrf_detection - Analyze SSRF: user-controlled URLs, private IPs, dangerous protocols
• process_env_leak - Analyze env var leaks: logs, stack traces, client responses
• redos_complexity - Analyze ReDoS: nested quantifiers, greedy loops, exponential backtracking
• null_byte_injection - Analyze null byte: file paths, extension bypass, include truncation
• mime_type_spoofing - Analyze MIME spoofing: extension-only checks, magic bytes, Content-Type trust