Changelog

What's new in Orvanta

v1.4.0Current

AI fix review & security PRs

  • +Adversarial self-review on every generated fix before you see it.
  • +One-click assembly of approved fixes into a single GitHub security PR.
  • +Live security score that improves as you approve fixes.
v1.3.0Recent

The AI security agent

  • +Conversational agent grounded in your scan context.
  • +Attack-scenario and business-impact generation per finding.
  • +Codebase understanding: frameworks, data layer, auth, and API surface.
v1.2.0Earlier

Dependency advisories & secrets

  • +Advisory matching for npm and PyPI packages with known CVEs.
  • +Provider-key detection (AWS, Stripe, OpenAI, GitHub, Google, Slack).
  • +Taint-aware SQL injection, SSRF, and path-traversal detection.