Scorpr Engine Changelog
Track continuous updates to our vulnerability signatures, headless Chromium crawling worker nodes, and AI-native remediation engine.
PostgREST 12 RLS Fuzzer & Multi-Engine Cursor Fix Studio
Major engine release introducing deeper Supabase PostgREST 12 permission inspection, unified prompt patches for Cursor & Claude Code, and Dual-Layer Workspace RBAC.
- ▶Added SEC-01 to SEC-10 automated rule checks covering Supabase PostgREST RLS bypasses, Stripe/AWS credential leaks, and exposed production sourcemaps.
- ▶Upgraded ARCHITECT AI Fix Studio to output unified Markdown patches compatible with Claude Code and Windsurf Cascade.
- ▶Launched Dual-Layer Workspace RBAC (Owner, Admin, Security Auditor, Client Viewer) for AI dev shops and venture studios.
- ▶Integrated zero-trust SSRF DNS pinning to prevent internal RFC-1918 CIDR exploration.
Headless Chromium INP Telemetry & Turbopack Chunk Mapping
Enhanced PULSE with real-time Interaction to Next Paint (INP) measurements and deep Turbopack chunk parsing.
- ▶Chromium worker nodes now evaluate sub-millisecond TTFB and INP metrics alongside standard LCP and CLS values.
- ▶Extended secret-scanning regex heuristics to match Next.js 15 Turbopack runtime chunk manifests.
- ▶Added automatic detection of unhandled React hydration mismatches and console Error stack traces.
RADAR GEO/AEO Engine & Automated /llms.txt Generator
Introduced the RADAR engine to help SaaS founders optimize their products for ingestion by ChatGPT, Perplexity, and Claude.
- ▶Built raw SSR vs DOM hydration ratio calculation to detect blank SPA shells invisible to AI bots.
- ▶Added 1-click downloadable `/llms.txt` and Schema.org JSON-LD generation tailored to the scanned domain.
- ▶Implemented simulated crawler views for OpenAI GPTBot, ClaudeBot, and PerplexityBot.
GitHub Actions Gatekeeper & REST API v1
Launched the official CI/CD pipeline integration allowing engineering teams to enforce automated pre-deploy security gates.
- ▶Released `scorpr-security/scorpr-action@v1` for automated GitHub Actions pipeline blocking on failed audits.
- ▶Published REST API v1 (`POST /scans`, `GET /scans/:id`) with JWT Bearer authentication.
- ▶Added webhook alert notifications for Slack and Discord channels.
Have a Vulnerability Signature Suggestion?
Our security researchers constantly monitor new AI code generation patterns and popular open-source libraries.