Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

82 matching stories — new capability, in Application Security (ASPM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

New capability

Tenable Expands Open Security Ecosystem to Extend Exposure Intelligence and Accelerate AI Security Outcomes

Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced the expansion of its open technology and partner ecosystem to accelerate integrated security workflows across the entire tech stack. Tenable OPEN for AI delivers validated, ready-to-use AI workflows, enabling organizations to use Tenable’s deep exposure intelligence with their preferred AI models, agents and tools. Tenable OPEN for AI launch partners include BeyondTrust, Cohesity, Command Zero, Corelight, In

New capability

One-Line Change to RCE: How Easily a Java Deserialization Flaw Is Introduced

What’s the impact of moving a single line of code? Summary A single statement in a 316-line Apache Tomcat refactor, super.messageReceived(msg) moved three lines down from inside a try block to after the catch, introduced two distinct vulnerabilities (CVE-2026-34486). The move turned Tomcat’s cluster encryption layer from fail-closed to fail-open (CWE-636), so messages that fail decryption are forwarded with the attacker’s original bytes. Those bytes reach an existing, unfiltered ObjectInputStrea

New capability

Introducing Qodo 3.0: Quality and Governance for the Agentic Software Factory

Engineering organizations are building toward an agentic software factory, where agents take on more of the work at every stage of the SDLC, and the systems that govern quality need to keep pace with that shift. As the software factory takes shape, engineers take on a greater responsibility to preserve judgment. They define the standards […] The post Introducing Qodo 3.0: Quality and Governance for the Agentic Software Factory appeared first on Qodo.

New capability

News alert: Archipelo launches Salmon to create verifiable audit trails for AI agent activity

SAN FRANSICO, Sept. 25, 2026, CyberNewswire — Archipelo today announced Salmon, Execution Verification Infrastructure (EVI) for AI agents and autonomous systems, powered by a cryptographic protocol designed to make execution history verifiable. Salmon establishes verifiable execution history and state … (more…) The post News alert: Archipelo launches Salmon to create verifiable audit trails for AI agent activity first appeared on The Last Watchdog.

New capability

OX Security Launches OX Cloud, Redefining Cloud Security for the Agentic Era

OX Cloud introduces a new class of cloud security built for AI agents that access data, call tools and take action – with real-time visibility into what they can reach, what they are doing and when they cross intended boundaries NEW YORK, Sept. 16, 2026 — OX Security today launched OX Cloud, a next-generation cloud […] The post OX Security Launches OX Cloud, Redefining Cloud Security for the Agentic Era appeared first on OX Security.

New capability

Introducing the Software Map in Qodo: Risk, Mapped Across Every Repo

Most engineering organizations have a diagram of their architecture. Almost none of them describe the system as it exists today. That was survivable when code moved at human speed. A service got added every few months. Someone updated the wiki page eventually. The two or three engineers who held the whole system in their heads […] The post Introducing the Software Map in Qodo: Risk, Mapped Across Every Repo appeared first on Qodo.

New capability

Introducing the CyberAgents Exchange AI Inspector: Rigorous review for community-built AI

Open-source registries for AI agents are only effective when they include a rigorous, transparent security review process for community submissions. That’s why for its new CyberAgents Exchange registry, Tenable paired its exposure management expertise with OpenAI GPT Cyber models to create the CyberAgents Exchange AI Inspector.Key takeawaysThe Exchange Inspector combines Tenable’s exposure detection with OpenAI’s GPT Cyber models and with human oversight to rigorously vet submissions made to the

New capability

Built for Agents, Better Outcomes for Humans: Introducing Qodo’s Agentic Toolbox

Today, Qodo is excited to release our new Agentic Toolbox, a packaged set of tools and skills that brings Qodo’s Context Engine, independent review, and governance capabilities directly into coding agent workflows. The Agentic Toolbox equips coding agents with ready-made tools and skills for understanding the systems they change and bringing quality into every stage […] The post Built for Agents, Better Outcomes for Humans: Introducing Qodo’s Agentic Toolbox appeared first on Qodo.

New capability

Introducing Agent Relay: Cloud-Hosted Agents, Self-Hosted Execution

Today, Coder is introducing Agent Relay, launching with Cursor as our first integration partner. Agent Relay gives enterprises a new way to run cloud-hosted coding agents inside secure, self-hosted Coder workspaces instead of the agent vendor's cloud.

New capability

Introducing JFrog Preview: Getting New Capabilities Into Your Hands, Faster

TLDR: “Preview” isn’t a lightweight version of GA, and it isn’t a beta with a new name on it. It just changes the timing and access. You’ll see new JFrog capabilities the day they’re ready for real use, not the day they’re ready for a press release. We’re starting at swampUP 2026. As we know, …

New capability

Introducing OWASP OASIS: AI Fixes, Community Validated

Global initiative fights AI with AI and application security community expertise, validating and implementing AI-generated fixes to remediate open source vulnerabilities at scale SAN FRANCISCO, CA — August 26, 2026

New capability

Introducing JFrog Platform Federation: One Control Plane for Synchronizing Every Site in Your Software Supply Chain

It’s 2 p.m. on a Tuesday. Your primary region goes down. Your software artifacts have been syncing to your Disaster Recovery site the way they were designed to, but your projects, permissions, and security policies were never part of the package. Instead of flipping the lights back on, your platform team is scrambling to manually …

New capability

Introducing Escape's Channel Partners

After announcing our channel partner program last month, we are excited to now be working with eleven incredible partners, with more soon to join us!Escape's Channel Partner Program is built on a simple principle: a two-way relationship centered on the shared goal of helping security teams do

New capability

Waratek Launches Reflection Protection, a Zero-Configuration Defense Against Known and Zero-Day Unsafe Java Reflection and Class-Loading Attacks

Waratek, the leader in runtime application security, today announced the release of its new Reflection Protection rule, a dedicated runtime security feature designed to block exploitation of unsafe reflection and dynamic class-loading vulnerabilities, for both known CVEs and zero-days, without requiring any code changes, application downtime, or complex configuration. “Every week brings a new CVE, and the gap between disclosure and exploitation keeps shrinking,” said Doug Ennis, CEO

New capability

Phoenix Security Launches the Exploit Hunt: A Threat-Model-Led AI Red Team That Attacks Your Code and Proves the Exploit

Phoenix Security releases Exploit Hunt at Black Hat USA 2026 — an AI red team that takes targets from a live threat model and reports a finding only after writing and validating a runnable proof-of-concept exploit. Available in Phoenix Purple now. The post Phoenix Security Launches the Exploit Hunt: A Threat-Model-Led AI Red Team That Attacks Your Code and Proves the Exploit appeared first on Phoenix Security.

New capability

Tenable Launches Industry’s First Open-Source AI Agent Exchange to Advance Collective Cyber Innovation and Defense

Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today launched the CyberAgents Exchange, a new open-source AI exchange created to foster industry collaboration and improve collective cyber defense. The CyberAgents Exchange, powered by Tenable, is the only purpose-built, cybersecurity-native registry for AI agents, skills, MCP servers and multi-agent playbooks in the current market. Security teams are increasingly turning to AI to scale security operations and manage

New capability

Introducing Kura: Adaptive Security Context built for secure agentic coding

Kura equips coding agents with precise security context at scale, continuously adapting to each task so they can securely plan, implement, and test every change based on your organization's architecture, controls, and business logic. The post Introducing Kura: Adaptive Security Context built for secure agentic coding appeared first on Clover Security.

New capability

Rapid7 Expands UK and Ireland Channel Presence Through Strategic Partnership with Exclusive Networks

Ross Baker is Senior Director, Northern Europe at Rapid7.As organizations across the United Kingdom and Ireland embrace AI, cloud technologies, and digital transformation in the name of enhancing customer experiences and accelerating business growth, the cybersecurity landscape must continue to evolve just as quickly.In this environment, business leaders still expect security to enable innovation, not slow it down. They're pushed to reduce risk, improve visibility across expanding attack surface

New capability

GrammaTech Introduces Tbdisasm and IterDisasm, New Tools for Recovering Hidden Code

Ithaca, NY — GrammaTech today announced the open‑source release of Tbdisasm, a new tool that helps experts uncover hidden code inside packed, encrypted, or otherwise obfuscated software. Tbdisasm works by monitoring a target binary’s execution and emitting runtime disassembly as GTIRB, an open intermediate representation for binary analysis and rewriting. The post GrammaTech Introduces Tbdisasm and IterDisasm, New Tools for Recovering Hidden Code appeared first on GrammaTech.