Skip to main content
Resources · Product Updates

AIPTx Product Updates: What's New in AI Penetration Testing

New capabilities and meaningful improvements, explained in terms of what changes for your team. For version-by-version detail, see the release notes.

Updates
6
Current version
5.2.14
Latest update
February 12, 2026
Detail
See release notes

All updates

Latest AIPTx Product Updates (Newest First)

Versions and dates track the published package on PyPI, so this page and the version in your requirements file never describe different software.

v5.2

February 12, 2026

Detection

Business logic testing, as a first-class scan type

Twenty-nine abuse patterns (race conditions, IDOR, price manipulation, workflow bypass) now run as their own scan phase, against the class of business logic flaw that has no CVE and no signature.

  • 29 business logic abuse patterns
  • Race condition detection with controlled concurrency
  • IDOR testing across authenticated identities
  • +1 more
Read: Business Logic Testing Update

v5.2

February 12, 2026

Detection

90+ SAST rules across Python, JavaScript, Java and Go

Static analysis with rules written against real exploit conditions rather than pattern matches, wired to the same validation and ranking as everything else.

  • 90+ security rules, four languages
  • Taint tracking from source to sink
  • Secret detection with entropy and format checks
Read: SAST Ruleset Update

v5.0

February 3, 2026

Detection

DAST for applications that stopped being pages

GraphQL, WebSocket and single-page application scanners ship together, so the parts of a modern application a crawler never reached are now tested like the rest of it.

  • GraphQL scanner
  • WebSocket scanner
  • SPA-aware crawling
Read: GraphQL, WebSocket and SPA Scanning Update

v4.0

January 31, 2026

Accuracy

Nothing gets reported until it has been exploited

Every candidate finding is now validated by replay before it reaches your queue. Unreproducible candidates are dropped rather than downgraded, which is what takes a scanner queue from thousands to dozens.

  • Validation replay before reporting
  • LLM-assisted triage with evidence grounding
  • Suppression with recorded reasoning
Read: False Positive Reduction Update

v3.0

January 21, 2026

Workflow

Security testing that runs in the pull request

SARIF output, inline pull request annotations and configurable merge blocking bring findings to the engineer who wrote the code, at the moment they can still change it cheaply.

  • SARIF output
  • Pull request annotations
  • Configurable merge blocking
  • +1 more
Read: CI/CD and PR Blocking Update

v2.0

December 14, 2025

Coverage

Active Directory and OSINT, in the same assessment

Internal Active Directory path enumeration and external footprint discovery join the same engine, so the route from a leaked credential to a domain controller is one graph rather than two reports.

  • Active Directory attack path enumeration
  • Kerberos and certificate abuse checks
  • Lockout-aware credential testing
  • +1 more
Read: Active Directory and OSINT Update

Staying current

How to Keep Up with AIPTx Releases and Updates

Upgrade the package

Updates ship to PyPI. Everything on this page is available to anyone on the current version.

pip install --upgrade aiptx

Read the release notes

Every version with its features, improvements, fixes and anything that needs action before upgrading.

Read the version-by-version changelog

Sessions worth an hour

Practical sessions on penetration testing, API security and running an assessment programme. Live with real Q&A, and available on demand afterwards.

See the session slate

FAQ

AIPTx Product Updates FAQs

What's new in AIPTx?

The latest version of AIPTx is 5.2.14 (Feb 12, 2026). New features and improvements include: a dedicated business logic testing scan, 90+ SAST rules for Python, JavaScript, Java and Go, GraphQL, WebSocket and SPA scanning, validation replay to reduce false positives, CI/CD pull request blocking, and Active Directory and OSINT modules.

How do I update AIPTx to the latest version?

AIPTx releases updates through PyPI, and upgrading is as simple as running pip install --upgrade aiptx. Before doing any upgrade, it's usually best to read through the release notes on the website to see what, if anything, may need to be done before upgrading.

Where can I find the AIPTx release notes and changelog?

The complete list of changes for each version is in the AIPTx changelog. It also includes any necessary steps you may need to take before upgrading, and is the best place to find out exactly what has changed since the last release. This Product Updates page provides an overview of the most important features and changes in each release.

What new penetration testing features has AIPTx added recently?

Recent highlights include: (1) business logic testing (race conditions, IDOR, price manipulation); (2) SAST with taint tracking and secret detection; (3) GraphQL and WebSocket scanners with SPA-aware crawling; (4) Active Directory attack path enumeration with Kerberos and certificate abuse checks; (5) automated validation of findings before they are reported.

Are new AIPTx features available to all users, or do I need a special plan?

These features are available to anyone using the current version. For plan or pricing questions, visit AIPTx pricing or contact the team.

How does AIPTx reduce false positives and integrate with CI/CD pipelines?

AIPTx replays every candidate finding to validate it, and discards it if it can't be reproduced, so your queue only contains findings that have been validated. For CI/CD, it supports SARIF output, inline pull request annotations and configurable merge blocking, so developers see security findings before code is merged.

See Your Attack Surface in Real-Time with AIPTx AI Pentesting

Run a comprehensive VAPT assessment powered by advanced security tools. Get actionable findings in hours, not weeks. No credit card required.

See AIPTx pricing or book an AI pentesting demo.