Product Changelog

What we have shipped

A running record of every release, fix, and improvement. Updated with each deploy.

v1.6.0Major

July 28, 2026

NewAI Security Analysis on CVE detail pages: click to expand a CVE-specific breakdown of Description, Impact, and Mitigation generated by Claude. Content is derived from the actual NVD description. not templates.
NewRemediation Workflow: track every CVE fix through a structured 5-stage pipeline. Open → Investigating → Patching → Testing → Mitigated. with timestamps and notes at each stage.
NewTeam Workspaces: invite teammates, assign stacks, and manage access with role-based permissions (Admin, Member, Viewer). All activity visible to the whole team.
NewCI/CD Integration: generate API tokens to query your stack's open Critical/High CVEs from any pipeline. Native GitHub Actions step available at outrightly/scan-action.
ImprovedFeed card layout overhauled: severity badge now inline with the CVE title, description limited to 2 lines, zero empty-space gaps. Cleaner signal-to-noise ratio at a glance.
ImprovedAI analysis fallback quality: when an API key is not configured, fallback summaries now extract the actual component name, affected functions, trigger conditions, and consequences from the NVD description rather than using CVSS-template sentences.
v1.5.0Major

July 1, 2026

NewInfrastructure scanning: passive DNS resolution and TLS certificate monitoring for all tracked domains
NewAPI v1 is now generally available. Full documentation at /docs#api-auth
ImprovedCVE matching engine now evaluates affected version ranges from OSV, NVD, and GitHub Advisory Database simultaneously, reducing false-negative rate by 31%
ImprovedAlert email redesign: grouped by severity with one-click acknowledge links
FixedGo module version comparison now correctly handles pseudo-versions (vX.Y.Z-YYYYMMDDHHMMSS-abcdefabcdef)
v1.4.2Patch

June 18, 2026

NewCISA KEV feed now syncs every 2 minutes, down from 6 hours
ImprovedImproved version matching for Cargo ecosystem: pre-release suffixes now handled correctly
FixedFixed false positives on npm packages with pre-release version specifiers (e.g. 1.0.0-beta.3)
FixedWebhook retry logic now uses exponential backoff with jitter instead of fixed 30-second intervals
v1.4.1Patch

June 5, 2026

ImprovedDashboard alert list now supports bulk acknowledge and bulk dismiss
FixedStack file upload parser was silently dropping packages with non-semver versions in requirements.txt
FixedFixed alert counter badge not updating in real time on the dashboard overview
v1.4.0Minor

May 22, 2026

NewGitHub Advisory Database ingestion now runs hourly
ImprovedFeed filters now persist across sessions via URL query params, enabling deep-linking to filtered views
ImprovedCVE detail page expanded: full CVSS vector breakdown, affected version range display, and patch version callout
FixedScrollbar layout shift on feed page when navigating between short and long content pages
v1.3.0Minor

May 4, 2026

NewGitHub Sync: connect a repository and Outrightly auto-parses your dependency manifests with daily re-sync
NewWebhook signatures: all webhook payloads now include HMAC-SHA256 signature in X-Outrightly-Signature header
ImprovedNVD API ingestion now uses the v2 modifiedDate-based delta sync, reducing API call volume by 80%
FixedSlack messages for CVEs with very long descriptions were being truncated without indication
v1.2.0Minor

April 10, 2026

NewSlack integration: route CVE alerts to any channel via incoming webhook, with per-stack configuration
NewDaily digest emails: opt-in grouping of all alerts into a single morning email
NewNotification severity threshold: filter alert channels by minimum CVSS score
ImprovedOnboarding flow redesigned: stack creation now completes in under 60 seconds with package suggestions
v1.0.0Launch

March 1, 2026

NewPublic launch of Outrightly
NewReal-time CVE monitoring for npm, PyPI, Go, Cargo, Maven, RubyGems, and NuGet ecosystems
NewCISA KEV integration: Known Exploited Vulnerabilities always trigger real-time alerts
NewPublic security feed with full-text search and severity filtering
NewStack management: manual package entry, manifest file upload, and GitHub repo sync
NewAlert delivery via email and custom webhook