Reliably target the right container image, even when your tags don't follow a single naming convention.

Not every team tags container images the same way — some use semantic versions, some add suffixes like , and some use neither. Exact-match and semver rules can't cover those mixed cases, which means the wrong image can end up in scope. With regex tag matching, you can describe your own tag pattern and consistently resolve the correct production image, even across repositories that don't share a convention.

When setting up or editing a container image target, choose the regex option for your tag rule and enter your pattern. You can find out more about adding container images in our support documentation here.

See everything exposed across your perimeter — every monitored port, the service running on it, and what needs your attention — in one place.

The exposures that cause incidents are rarely the ones you already know about — it's the forgotten admin panel, the database that was never meant to be reachable, or the legacy service nobody owns. Attack Surface view puts your whole internet-facing perimeter in front of you, so you can take what's unnecessary offline and lock down what needs to stay. Reduce what's exposed today and you're harder to attack tomorrow.

See the Attack Surface in the left nav of your portal to see what's exposed across your targets.

Your open Intruder issues now flow straight into Vanta, so your vulnerability evidence stays current without manual uploads.

Keeping Vanta's view of your vulnerabilities up to date used to mean uploading reports by hand. Now your live issues sync across on their own, so your compliance evidence reflects what Intruder is actually seeing — without the busywork. Less to maintain, and a more accurate picture for auditors.

Already connected to Vanta? Disconnect and reconnect the integration in your portal to switch sync on — this is needed for Vanta to grant the new permission. New connections have it on by default. Find the Vanta integration on the Integrations page.

You can now export open issues into CSV directly from the issues page.

Until now, you could only export fixed or snoozed issues. With this update, you can pull your open issues into a CSV and report on active risk.

Head to the Issues page and click the export button next to the Sort control to download your open issues as a CSV.

Use Intruder's AI pentesting agents to actively test your issues using the similar methods employed by human pentesters and get recommendations grounded in real-world risk and context.

Traditional vulnerability scanners are rule-based and can't reason about context — they tell you a finding exists, but not whether it's truly exploitable. Manual pentests can, but they're slow and expensive.

AI pentesting closes that gap: the agent reasons about each finding the way a human pentester would, so you get exploitation-grade insight in minutes rather than weeks — with no manual engagement needed.

Get started from the Issues or Pentests page, or read the full guide in our help documentation.

You can now view a full audit trail of key actions across your Intruder account, giving you greater visibility, accountability, and support for compliance requirements.

See which actions are captured in the audit log here.

Previously, customers with multiple users had limited visibility into account activity, making it difficult to investigate changes or meet compliance requirements.

With audit logging, you now have the transparency needed to maintain trust, investigate issues, and support compliance-driven workflows.

You can find the audit log within your Settings.

Gain continuous visibility into vulnerabilities across your containerised workloads with our new agentless container scanning. Automatically scan container images hosted in AWS, GCP, and Azure with no additional setup required if you've already connected your cloud accounts.

If you've already connected AWS, GCP, or Azure to Intruder, container scanning is ready to go:

For more information on getting started, see our help guidance here

Click in Discovery and connect your cloud account in minutes.

Each scanned container image and tag combination (e.g., ) uses one infrastructure licence from your plan.

Need more capacity? Add licences via your billing page or speak with your account admin.

Container image scanning is included in Cloud, Pro, and Enterprise plans

The issues table now includes a comment status filter, so you can instantly cut through a long list and see only the issues that have - or haven't - been commented on.

You can already see at a glance which issues have comments via the icon in the table - but when you're working through a large set of issues, spotting what still needs attention isn't always easy. This filter lets you jump straight to the undocumented items, so nothing gets missed.

Scan reports can now include the full raw scanner output as an additional column in the CSV export. This gives technical teams direct access to the underlying data produced by each scan, without needing to use the API or extract it manually.

Until now, the raw scanner output wasn't exportable without using the API. This change makes that data available directly from the report download, in a format that's immediately usable without additional workarounds.

You can now create and update scheduled scans directly through the public API, bringing scan scheduling in line with the rest of your automated workflows.

- Use the new endpoint to retrieve your existing schedules or create new ones.

- Use to fetch or modify a specific schedule.

For teams running automated security workflows, managing scan schedules through the portal creates an unnecessary manual step. These endpoints mean you can build, adjust, and maintain your scan schedules entirely through the API - keeping your setup consistent, repeatable, and fully under version control.

See the updated API Documentation here