Product

Changelog

Last updated 6 November 2026

What changed in Defexity, newest first. Every scanner rule is documented in the rule reference; how we protect your data is in the trust center.

6 November 2026

Task titles, notes and checklists, and board names and plans, are now encrypted at rest. See the trust center.
New trust center, about page and this changelog.
Legal pages now name who runs Defexity.
Checkout cannot be opened in test mode on the live site.

Repository scans now check GitHub Actions workflows: actions pinned to a moving branch, privileged triggers without permissions, self-hosted runners on pull requests, and long-lived cloud keys (CODE-080 to CODE-087).
AI boards: a copy-paste prompt lets your coding agent write a detailed project brief, without secrets, for the board builder.
AI boards have daily caps per workspace and across the site.
Apple Pay and Google Pay can be used in checkout.
The privacy policy names every company that processes data for us.

Workspace: tasks, a Today list, recurring tasks, reminders and a visual planning board.
Findings: explain, turn into a task, or add to a board.
Security review fixes: an emergency kill switch, alerts for credential stuffing, tighter rate limits, and a fix that keeps shared scan data out of workspace sessions.

Scanner accuracy pass: about 30 rules now report only clear problems, so fewer false alarms (code rules skip tests, docs and example env files; SQL, secret and HTML rules need real evidence).
The free public beta ended; every workspace is now on its own plan.