NYX
False positives are down from 43 to 0 and false negatives from 20 to 1 on the 669-case corpus, scans are roughly 1.35x faster, and a beta dynamic verifier now re-runs Medium-and-higher findings in a sandbox so you can tell a confirmed finding from a guess.
Local pentests for dev apps: install with cargo install nyx-agent, then keep repo context,
live checks, and proof together.
Seven new vulnerability classes, deeper FastAPI authorization tracking, parser hardening checks, and a quieter auth report.
Read more
Sensitive data sent to outbound HTTP calls is now tracked separately from SSRF, with calibration aimed at real leaks.
Read more
The SSA taint engine arrived, cross-file analysis got deeper, and nyx serve opened a local
browser workflow for triage.
Finding scores, lower-noise defaults, state analysis, and inline ignores made scan output easier to work through.
Read more
Custom rules, SARIF output, source-kind severity, non-prod downgrades, and resource leak detection landed together.
Read more
Two-pass cross-file taint analysis, CFG detectors, persisted function summaries, and multi-language analysis made the scanner more serious.
Read more
The first builds set the shape: tree-sitter parsing, a filesystem walker, SQLite-backed indexes, and the first Rust CFG experiments.
Read more