Changelog
Version history from v44.32 through v45.1.24 — the bug fixes, new capabilities, and performance wins shipped in each release.
v45.1.24 — License badge + live attack graph + window controls + bundled-tool PATH
- LicenseStatusBadge renders correctly. The header badge was blank for two releases; now shows mode (Development / Licensed / Unlicensed), company name, and active module chips.
- Attack Graph live updates. The live WebSocket stream to the graph panel silently 404'd in v45.1.22/23 — now reconnects and renders nodes/edges in real time during scans.
- Window close / minimize buttons wired. The frameless-window close and minimize controls were no-ops pre-v45.1.23; both now invoke Electron's BrowserWindow directly.
- Bundled tool PATH prepend. The sidecar prefers a bundled helper copy when the current build ships one, and otherwise falls back to the system PATH. See Bundled Tools on Install for the current truth.
v45.1.23 — Layer 3 license scope patterns + scope validator DNS unblocked
- Layer 3 license scope patterns. Administrators can define per-seat allow/deny patterns on a license; scan-start returns 403 with a structured remediation message when a target violates scope. See License Scope Patterns.
- Scope validator DNS unblocked. Pre-v45.1.23 the scan-launch path blocked the Python event loop on a synchronous DNS lookup, making scans "hang 30 s on launch" on slow DNS. The lookup now runs in a worker thread.
- Bundled-helper support landed. Supported builds can ship helper binaries and prepend them to the sidecar PATH at Electron boot, while other builds can still use host-installed tools.
- Public downloads paused (tester-access gate on marketing). The public downloads page became tester-only during v45.1.23 hardening.
v45.1.22 — Help section rewrite + Marketing rewamp
- 21-page help section rewrite covering the autonomous pentest loop, every surface, assistant, reports, FP filter, zero-day hunt, attack chain, troubleshooting, changelog, compliance mappings, and glossary.
- Marketing site rewamp: animated hero, 7-section scroll story, bold comparison table, trust badges.
- Obfuscator root fix (closure-variable rename regression → eliminated; 553-module import sweep gate).
- Unicode-safe SHA-256 in the renderer (fixes btoa InvalidCharacterError on IDN targets).
v45.1.21 — Pentester Assistant live + Playwright auto-install
- In-scan Pentester Assistant (chat panel) with scope-aware actions.
- Playwright Chromium auto-installs on first use (no manual step).
- Launch Assessment screen rework.
- Report export 404 fix.
- CLI terminal color / encoding fallback.
v45.1.20 — Autonomous loop wiring
- Phases 3b / 4 / 5 / 6 explicitly wired end-to-end.
- Per-severity findings flattened into the list API so UI counters never show 0 while findings exist.
- Auto bug-report pipeline — scrubbed, PII-free field reports sent to the PhantomYerra triage server.
v45.1.17 — Usage Telemetry + 17-source Intel Pack
- 52-event usage telemetry (HMAC-signed).
- Build-time intel pack: CISA KEV, MITRE ATT&CK (44 MB), EPSS, CWE Top 25, OWASP Top 10 families (Web / API / Mobile / LLM / Cloud / IoT / CI-CD / Serverless / ML / K8s), PCI DSS 4.0.1, ISO 27001:2022, NIST 800-53 r5, NIS2, DORA, CRA.
v45.1.16 — Auto Bug-Report pipeline
- Field-report telemetry end-to-end (client dedupe + PII scrub → server SQLite → Claude poller).
v45.1.15 — Pentester Assistant + Evidence Auto-Seal RFC 3161
- Deterministic attack chain at scan completion.
- Raw per-tool execution logs.
- Draft-test AI provider keys before activation.
v45.1.12 — 5-layer SPOF hardening
- Router registry +
/api/health/routers. - Build smoke test wired into all 4 build scripts.
- Runtime
-OOassertion for packaged installs. - Obfuscator hard-fail on copy-source paths.
v45.1.8 — Azure Copilot added + subpages live
- Azure Copilot as Level 6 in the 9-level AI fallback chain.
- capabilities.html + agents.html + integrations.html + reports.html subpages live.
v45.1.0 — Pure-Python Marathon shipped
- 1054 MB of third-party binaries removed; pure-Python rewrites landed.
- 27 → 17 shell-outs.
- 9/9 adapter parity vs. legacy binaries.
v44.32.81 — Stable baseline 3
- Autonomous Attack Engine (6 modules).
- Scans Hub, per-seat licensing, kill switch.
v44.32.57 — Stable baseline 2
- Phase-3 license server live (production license validation endpoint).
- 72-hour offline grace, license poll loop, AI key refresh.
v44.32.5 — Stable baseline 1
- Unified boot controller; splash blocks until all intelligence loaded.
- No background process leaks.