apPosture Product Updateshttps://apposture.com/updates/Release notes and product updates for apPosture, the self-hosted ASPM platform.en[New] SAST engine reaches OWASP Benchmark 0.994https://apposture.com/updates/apposture-2.4.0-0SASTWed, 24 Jun 2026 00:00:00 +0000100% precision, 99.4% recall on the public OWASP Benchmark - the false-positive discrimination bar that keeps findings trustworthy enough to gate on.[Security] TLS ingress with automated certificate renewalhttps://apposture.com/updates/apposture-2.4.0-1PlatformWed, 24 Jun 2026 00:00:00 +0000Let's Encrypt termination with auto-renew on the self-hosted ingress - no manual cert rotation.[Improved] Anti-freeze caps on the local LLMhttps://apposture.com/updates/apposture-2.4.0-2PlatformWed, 24 Jun 2026 00:00:00 +0000Hard CPU / memory limits so AI analysis can never stall the host it runs on.[Improved] Host CPU / RAM / disk health metricshttps://apposture.com/updates/apposture-2.4.0-3PlatformWed, 24 Jun 2026 00:00:00 +0000Live host resource metrics surfaced on the admin Health page for self-hosted operators.[New] SSRF and XXE detectors mined from real-world writeupshttps://apposture.com/updates/apposture-2.3.10-4DASTTue, 23 Jun 2026 00:00:00 +0000New dynamic detectors held to the reachable-vs-confirmed severity discipline, so a probe is never over-claimed as an exploit.[New] Priorities drill-down with owner and SLA trackinghttps://apposture.com/updates/apposture-2.3.10-5PlatformTue, 23 Jun 2026 00:00:00 +0000Assign an owner and track the remediation SLA clock per finding, from first-seen.[Improved] Richer triage context on every vulnerabilityhttps://apposture.com/updates/apposture-2.3.10-6PlatformTue, 23 Jun 2026 00:00:00 +0000More evidence and reachability context attached to each finding to speed triage.[Security] PII masking across all exports and evidencehttps://apposture.com/updates/apposture-2.3.9-7ReportingTue, 23 Jun 2026 00:00:00 +0000Sensitive values are masked in every export, report and evidence bundle by default.[New] Per-client API rate limitinghttps://apposture.com/updates/apposture-2.3.9-8PlatformTue, 23 Jun 2026 00:00:00 +0000Protects the API and downstream scanners under multi-team load.[New] Kubernetes Helm chart for self-hosted deploymenthttps://apposture.com/updates/apposture-2.3.9-9PlatformTue, 23 Jun 2026 00:00:00 +0000A first-class Helm chart for running the platform on your own cluster.[Improved] Deeper code coverage and estate-wide scanner parityhttps://apposture.com/updates/apposture-2.3.9-10SCATue, 23 Jun 2026 00:00:00 +0000Consistent depth across the /code disciplines so posture is comparable app-to-app.[New] Cross-framework controls with 'fix once, satisfy many'https://apposture.com/updates/apposture-2.3.5-11ComplianceTue, 23 Jun 2026 00:00:00 +0000A control-to-sub-control hierarchy that maps one remediation to every framework it satisfies.[New] One-click audit evidence-pack export with attestationhttps://apposture.com/updates/apposture-2.3.5-12ComplianceTue, 23 Jun 2026 00:00:00 +0000Export a signed evidence pack recording who attested what, and when - built for auditors.[New] Supply-chain malicious-package and end-of-life feedshttps://apposture.com/updates/apposture-2.3.5-13SCATue, 23 Jun 2026 00:00:00 +0000Flags known-malicious and end-of-life dependencies alongside known CVEs.[New] Gate policy export as OPA / Regohttps://apposture.com/updates/apposture-2.3.0-14ComplianceTue, 23 Jun 2026 00:00:00 +0000Export the enforcement policy as OPA / Rego to run it anywhere in your pipeline.[New] GRC review-and-attestation workflowhttps://apposture.com/updates/apposture-2.3.0-15ComplianceTue, 23 Jun 2026 00:00:00 +0000A formal review-and-sign path for governance teams, with rule-to-compliance mapping, scope filters and search.[GA] End-to-end pipeline gate, verified on a real repositoryhttps://apposture.com/updates/apposture-2.2.0-16CI/CDWed, 03 Jun 2026 00:00:00 +0000The full CI/CD gate reaches general availability - proven on a real repo, not a demo.[New] Portable, checksum-pinned CI agenthttps://apposture.com/updates/apposture-2.2.0-17CI/CDWed, 03 Jun 2026 00:00:00 +0000One agent (test / monitor / upload / container) that auto-detects GitHub, GitLab and Jenkins.[New] Per-branch baseline so pre-existing issues never block a mergehttps://apposture.com/updates/apposture-2.2.0-18CI/CDWed, 03 Jun 2026 00:00:00 +0000PRs gate on new-vs-default-branch only; each microservice repo maps to its own application in one posture.[New] PR decoration for branch protectionhttps://apposture.com/updates/apposture-2.2.0-19CI/CDWed, 03 Jun 2026 00:00:00 +0000A commit status check plus an update-or-create PR / MR comment, wired for required-check branch protection.[New] MFA / TOTP with one-time backup codeshttps://apposture.com/updates/apposture-2.1.1-20IdentityTue, 02 Jun 2026 00:00:00 +0000Two-factor authentication for local accounts, with recoverable backup codes.[New] Scoped, expiring, revocable API tokenshttps://apposture.com/updates/apposture-2.1.1-21IdentityTue, 02 Jun 2026 00:00:00 +0000Personal and service tokens with least-privilege scopes and full revocation.[New] Role-scoped RBAC with least-privilege defaultshttps://apposture.com/updates/apposture-2.1.1-22IdentityTue, 02 Jun 2026 00:00:00 +0000Role-based access control and a secure onboarding flow, safe by default.