Release Logs
Current Release
Version: v2.0.0
Release Date: October 6, 2026
CoreFix v2.0.0 is a major platform release. Scanning now runs through corefix, a single Go-based CLI that replaces raw docker run commands, CodeFix can autofix vulnerabilities directly in your code, and web application testing gains multi-user, RBAC, and broken access control (BAC) coverage.
Read the full v2.0.0 release notes
Highlights
- CoreFix CLI — a single Go-based binary that abstracts away complex
docker runcommands for both code and web scanning. - Autofixes dashboard added to the frontend, for reviewing and tracking CodeFix remediation across your projects.
- CodeFix agent that autofixes vulnerabilities in your code. Currently handles secrets, SAST, code hotspots/bugs, IaC, and Kubernetes manifest file fixes.
- Multi-user and access control testing for web apps — RBAC and BAC testing, backed by additional custom ZAP scripts.
Release History
| Version | Release Date | Key Highlights |
|---|---|---|
| v2.0.0 | October 6, 2026 | CoreFix CLI, Autofixes dashboard, CodeFix autofix agent, multi-user/RBAC/BAC web testing |
| v1.7.0 | July 17, 2026 | Malicious package scanner, Slack/Teams integration, AI fallback detection, OpenAPI baseline backup to R2, and bug fixes |
| v1.6.0 | July 15, 2026 | AI GOV Scanner, AI BOM, auto-populated API threat intelligence dashboard, Vercel sandbox attack API (Labs), deterministic web scan config |
| v1.5.0 | July 13th, 2026 | Exploit verification, Python PoC generation, Playwright-based PoC/exploit screenshots to R2 and DB, OAuth complex bypass via header injection, Labs auto-project creation and queuing |
| v1.4.0 | July 4th, 2026 | HAR recording dashboard, SBOM integration and dashboard, package health scoring, Labs dashboard with one-click vulnerable app deployment |
| v1.3.0 | June 25th, 2026 | ZAP pre-auth check, custom scanner profiles (CLI/CI-CD), extended ZAP coverage up to 6 hrs, container scanning (Grype, Dockle), SonarQube integration |
| v1.2.0 | June 23rd, 2026 | Scanner logs to R2, live scanner logs in frontend, ZAP policy tuning, bug fixes in API keys and workspace management |
| v1.1.0 | June 12th, 2026 | API keys, workspace creation and invites, triggers, cron jobs, CI/CD integrations, free credits, credit calculation |
| v1.0.0 | June 2, 2026 | First public CoreFix release with code scanning, web scanning, AI enrichment, reports, and Chrome Extension support |