Changelog
What's new in XploitScan
v0.4.0March 24, 2026
AST Parsing, Dependency Scanning, Confidence Scores
- +AST-based analysis for JavaScript/TypeScript — dramatically reduces false positives
- +Dependency vulnerability scanning against CVE databases
- +Entropy-based secret detection — catches secrets regardless of format
- +Multi-file cross-reference analysis for auth and config patterns
- +Configuration file deep analysis (tsconfig, Dockerfile, CI/CD)
- +Confidence scores (high/medium/low) on every finding
- +Framework-aware rule filtering — fewer irrelevant findings
- +Rebranded to XploitScan with new domain xploitscan.com
- +Shared navigation bar across all authenticated pages
- +Clerk authentication with dark theme support
v0.3.0March 23, 2026
96 Security Rules, PDF Export, Team Support
- +Added 96 security detection rules (up from 10)
- +PDF report export with security grades
- +Team/org support with shared scan history
- +Slack and Discord webhook integrations
- +Public security badge for READMEs
- +CLI --watch mode for continuous scanning
- +.xploitscanrc configuration file support
- +OWASP Top 10 and CWE compliance mapping
v0.2.0March 15, 2026
Web Dashboard & Drag-and-Drop
- +Web dashboard with drag-and-drop ZIP scanning
- +Git diff scanning mode
- +Scan history with score trends
- +Framework auto-detection
- +Security grade (A-F) scoring system
v0.1.0March 8, 2026
Initial Release
- +CLI scanner with 10 custom security rules
- +AI-powered analysis with Claude
- +Semgrep and Gitleaks integration
- +JSON and SARIF output formats
- +GitHub Actions integration