Work comfortably in low light with a dark theme you can switch on anytime.

If you work in low light or spend long stretches in the portal, dark theme reduces eye strain without changing how anything works. It's a visual preference only — your workflows, data, and reports stay exactly the same.

Head to to switch to dark theme.

Every page is now just one click away in a nav built to make the most of your screen.

The redesigned navigation cuts out the extra clicks that used to stand between you and the page you need. Icons and pills flag where something's changed, so nothing important slips past you.

Pin your most-visited pages to Favourites from the sidebar to build your own shortcut bar.

Get the depth of a manual penetration test in hours, not weeks.

Traditional pentests lock you into weeks of procurement and a point-in-time snapshot that's often outdated before it lands. With AI Pentesting, you get expert-level findings on demand, so your security testing can keep pace with how fast you build - whether you're prepping for an audit, closing out a security questionnaire, or just want confidence in your app.

In the portal, select from the left nav, click , then choose the AI Pentest option. See our help and support article here

Get visibility into Microsoft 365 configuration risks across Entra, Exchange, SharePoint, and Teams as part of your existing Azure cloud security scans.

Most organisations' real attack surface now lives as much in Microsoft 365 configuration - identity, email, collaboration tools - as it does in cloud infrastructure. This extends your existing Azure coverage into that space, without adding a separate integration to manage.

To unlock full coverage, here.

Send Intruder vulnerabilities straight into your Linear workflow, without leaving the platform.

If your team manages remediation in Linear, vulnerabilities no longer need manual re-entry into your backlog. Critical and high findings can flow into Linear automatically, and you can see at a glance which issues are already tracked - so nothing gets missed or duplicated.

Head to Integrations → Linear to connect your workspace and configure auto-create rules.

Need help getting set up? See our support article here.

Import and scan your Docker Hub images for vulnerabilities directly inside the Intruder portal.

If you store images in Docker Hub, you can now bring them into the same vulnerability monitoring you already use for your cloud infrastructure - no separate tooling, no manual tracking of which tags have changed. New and updated images get scanned automatically so nothing sits unmonitored.

Head to Discovery → Container Images → "Add registry" in top right corner → Add Docker Hub to connect your account and start discovering repositories. For help getting set up, see our support document here.

Reliably target the right container image, even when your tags don't follow a single naming convention.

Not every team tags container images the same way — some use semantic versions, some add suffixes like , and some use neither. Exact-match and semver rules can't cover those mixed cases, which means the wrong image can end up in scope. With regex tag matching, you can describe your own tag pattern and consistently resolve the correct production image, even across repositories that don't share a convention.

When setting up or editing a container image target, choose the regex option for your tag rule and enter your pattern. You can find out more about adding container images in our support documentation here.

See everything exposed across your perimeter — every monitored port, the service running on it, and what needs your attention — in one place.

The exposures that cause incidents are rarely the ones you already know about — it's the forgotten admin panel, the database that was never meant to be reachable, or the legacy service nobody owns. Attack Surface view puts your whole internet-facing perimeter in front of you, so you can take what's unnecessary offline and lock down what needs to stay. Reduce what's exposed today and you're harder to attack tomorrow.

See the Attack Surface in the left nav of your portal to see what's exposed across your targets.

Your open Intruder issues now flow straight into Vanta, so your vulnerability evidence stays current without manual uploads.

Keeping Vanta's view of your vulnerabilities up to date used to mean uploading reports by hand. Now your live issues sync across on their own, so your compliance evidence reflects what Intruder is actually seeing — without the busywork. Less to maintain, and a more accurate picture for auditors.

Already connected to Vanta? Disconnect and reconnect the integration in your portal to switch sync on — this is needed for Vanta to grant the new permission. New connections have it on by default. Find the Vanta integration on the Integrations page.

You can now export open issues into CSV directly from the issues page.

Until now, you could only export fixed or snoozed issues. With this update, you can pull your open issues into a CSV and report on active risk.

Head to the Issues page and click the export button next to the Sort control to download your open issues as a CSV.