What's New
Stay up to date with the latest features, improvements, and fixes in GitGuard.
Faster scans, honest progress, and aborts that stick
July 16, 2026
Scan Activity now tracks the real pipeline: quiet pulse while files load,
file counts only once scanning starts, then a full-bar pulse while the
report builds. Progress no longer jumps backward or pretends a partial
fetch was a full scan.
Repository fetches prefer GitHub GraphQL (with REST only to fill gaps),
so large repos finish more completely instead of green-checking
something like 34/441. Incomplete fetches fail clearly instead of
looking "done."
Abort stops the live scan, updates the side panel immediately, and can
no longer be overwritten by a late "completed" from a dying run.
Also tightened realtime updates (fewer ghost active scans / stale
toasts) and cut noisy Next.js auth false positives from scan results.
Strengthen verified domain security checks
March 20, 2026
Enhanced domain verification security with stricter validation and safer verification handling to better protect verified domains from abuse and unauthorized claims.
AI Penetration Testing and Live Security Tests
February 28, 2026
Live Security Test (DDoS) and AI Pentest reports now match the Scan History experience so you can share, bookmark, and reopen any report.
- AI Penetration Testing: Run dynamic tests against a live app or with repo context (blackbox, whitebox, or hybrid). Discovery finds endpoints and parameters; dedicated agents attempt real exploitation (SQL injection, XSS, CSRF, auth bypass, IDOR, SSRF, security headers, and more). Findings include request/response evidence and optional AI validation so you see confirmed issues, not just code patterns.
- Live Security Tests (DDoS): Exercise a target URL with configurable tests (e.g. load, SQLi, XSS, CSRF checks) and view results with severity and timing. Run from the dashboard with optional AI enhancement.
- Reports for both are shareable and open in a full-page view; URLs and browser history stay in sync.
Add interactive code diff viewer and file-grouped scan results
February 19, 2026
View auto-fix suggestions with syntax-highlighted diffs, expandable code context, and unified/split view modes. Scan results are now grouped by file for easier navigation. All scanners (semgrep, IaC, custom rules) now include surrounding code context for complete diff expansion.
Add advanced security scanning features
February 14, 2026
PR-level scanning with GitHub Check Runs and inline annotations, AI-generated auto-fix suggestions via LLM fallback chain, Semgrep integration with OWASP Top 10 and security audit rules, Infrastructure-as-Code scanning for Terraform/CloudFormation/Kubernetes/Docker, custom security rules with regex and natural language support, and security trends dashboard for tracking posture over time. Includes Row Level Security on all database tables for defense-in-depth.