2026.5.0 — Pro
Released November 2026
New: Bounty Delta
Bounty Delta converts confirmed attack-surface changes into prioritized bug bounty opportunities.
- Detects newly exposed endpoints, services, subdomains, findings, and infrastructure changes.
- Scores opportunities using urgency, novelty, confidence, and supporting evidence.
- Uses AI Review to explain why a change matters and recommend validation steps.
- Maps changes to likely bug classes such as IDOR/BOLA, takeover conditions, dangling references, and exposed management services.
- Opens the recommended SpyHunt validation module directly.
- Hides removed assets by default while retaining an optional history filter.
- Supports search, filtering, and Markdown report exports.
New: Attack Path AI
Attack Path AI correlates reconnaissance results to uncover meaningful relationships and potential routes through a target's attack surface.
- Connects hosts, endpoints, services, technologies, findings, and infrastructure.
- Highlights promising entry points and high-value assets.
- Identifies multi-step attack paths that isolated scanner results may miss.
- Uses existing reconnaissance evidence to keep AI recommendations grounded.
- Explains why each path may be significant.
- Recommends the appropriate SpyHunt modules for safe validation.
- Helps researchers move from broad reconnaissance to focused vulnerability testing.
Additional Improvements
- Redesigned Bounty Delta interface with clearer statistics and evidence views.
- Continuous license expiration enforcement during active sessions.
- Clock-rollback protection with dedicated automated coverage.
- Updated SpyHunt branding and application packaging.
- New builds for macOS Apple Silicon, Intel Mac, Linux, and Windows x64.