Changelog

What's new in XploitScan

v0.4.0March 24, 2026

AST Parsing, Dependency Scanning, Confidence Scores

  • +AST-based analysis for JavaScript/TypeScript — dramatically reduces false positives
  • +Dependency vulnerability scanning against CVE databases
  • +Entropy-based secret detection — catches secrets regardless of format
  • +Multi-file cross-reference analysis for auth and config patterns
  • +Configuration file deep analysis (tsconfig, Dockerfile, CI/CD)
  • +Confidence scores (high/medium/low) on every finding
  • +Framework-aware rule filtering — fewer irrelevant findings
  • +Rebranded to XploitScan with new domain xploitscan.com
  • +Shared navigation bar across all authenticated pages
  • +Clerk authentication with dark theme support
v0.3.0March 23, 2026

96 Security Rules, PDF Export, Team Support

  • +Added 96 security detection rules (up from 10)
  • +PDF report export with security grades
  • +Team/org support with shared scan history
  • +Slack and Discord webhook integrations
  • +Public security badge for READMEs
  • +CLI --watch mode for continuous scanning
  • +.xploitscanrc configuration file support
  • +OWASP Top 10 and CWE compliance mapping
v0.2.0March 15, 2026

Web Dashboard & Drag-and-Drop

  • +Web dashboard with drag-and-drop ZIP scanning
  • +Git diff scanning mode
  • +Scan history with score trends
  • +Framework auto-detection
  • +Security grade (A-F) scoring system
v0.1.0March 8, 2026

Initial Release

  • +CLI scanner with 10 custom security rules
  • +AI-powered analysis with Claude
  • +Semgrep and Gitleaks integration
  • +JSON and SARIF output formats
  • +GitHub Actions integration