Product Release Note 2026

Discovery

Enhanced Evidence Insights for API Characteristics and Compliance Issues

SaaS

Traceable now provides a more robust evidence experience for API characteristics and related compliance issues. APIs discovered through multiple sources, including live traffic analysis, API documentation uploads, Sonar, and code analysis, are enriched with automatically learned attributes such as authentication type, encryption status, and external or internal exposure.

With this enhancement, you can drill down into detailed evidence supporting API characteristics and compliance findings. This enables clearer visibility into why an API is flagged, for example, when an externally accessible API lacks authentication, and helps you take appropriate remediation actions with greater confidence.

Notifications Based on API Ownership

SaaS and On-prem (1.36.0)

Traceable now enables email notifications to API owners for blocked activity specific to their APIs. When ownership is configured, relevant stakeholders are automatically informed of enforcement actions. This improves accountability, accelerates remediation, and strengthens collaboration across teams.

Change Insights for Inventory and Issues via Chatbot

SaaS and On-prem (1.36.0)

Traceable now supports querying Inventory and Issues through the AI chatbot to obtain change insights. You can use natural language queries to explore issue trends and inventory updates, enabling faster analysis and more informed decision-making. For more information, see Ask AI.

Protection

IP Resolution

SaaS and On-prem (1.36.0)

Traceable now provides IP Resolution capabilities to manage and enforce IP-based access controls using custom configuration rules. You can define and apply rules to allow, block, or monitor traffic based on IP attributes. This enhancement improves access governance and strengthens network-level protection across your APIs.

Updated Web Application Protection Ruleset (January 2026)

SaaS and On-prem (1.36.0)

Traceable has published a new version of the Web Application Protection ruleset. The updated rules enhance detection coverage and protection accuracy. For more information, see WAF Policies Changelog.

Enhanced Configuration and Tuning for API Protection Policies

SaaS and On-prem (1.36.0)

Traceable has enhanced API Protection policies with additional configuration options and behind-the-scenes tuning improvements. You can now adjust thresholds and fine-tune policy behavior to better align with your specific use cases. This provides greater flexibility while maintaining strong detection accuracy. For more information, see API Protection Policies.

Testing

AST Processor Redesign

SaaS and On-prem (1.36.0)

Traceable has redesigned the AST processor to improve system reliability during test generation. These internal enhancements strengthen stability, optimize processing workflows, and improve overall testing performance.

Runner Health Dashboard

SaaS

Traceable now provides a Runner Health Dashboard that enables you to monitor runner metrics and logs directly from the Traceable platform. Available with CLI version 2.4.0 or later, this enhancement provides real-time visibility into runner performance, operational status, and execution logs. For more information, see Understanding Runners Dashboard.

Integrations

Custom Jira Template Management

SaaS and On-prem (1.36.0)

Traceable now allows you to create, edit, and delete custom Jira templates by mapping relevant AppSec attributes to Jira project labels. This enhancement enables more structured and context-rich ticket creation, improves issue traceability, and streamlines collaboration between security and engineering teams. For more information, see Jira integration.

Data Collection

Agent Observability Dashboard

SaaS and On-prem (1.36.0)

Traceable introduces a new Data Collection deployment dashboard that provides comprehensive visibility into agent health metrics. You can monitor granular details across tracers, including Kubernetes clusters, namespaces, and custom deployment names. This enhancement improves operational visibility and helps you proactively identify and resolve data collection issues.

Protection

Linked Visibility Across Events, Actors, and Accounts

You can now easily identify the relationship between Risky Bot Accounts, Risky Bot Actors, and the events generated by them through embedded linkages across pages. For example, on the Bot Accounts page, selecting the Events Count shows how many events were generated by that account.

API Protection Policies Reorganization

SaaS and On-prem (1.35.0)

API Protection policies are now reorganized and categorized according to industry standards, providing clearer visibility into platform capabilities. Additional configuration options are now available at the threat rule level to support better tuning and compatibility with customer applications.

Schema Validation Using Uploaded API Specifications

SaaS and On-prem (1.35.0)

First-class schema validation detection is now available, with the option to configure monitoring based on uploaded API specifications. For more information, see Request Schema Validation.

Improved Custom Signature Policy Creation Flow

SaaS and On-prem (1.35.0)

The create-and-update flow for custom signature policies has been redesigned to be more intuitive. The workflow is now action-first, which dynamically determines the available criteria options based on the selected action. This reduces unnecessary back-and-forth and improves overall usability. For more information, see the Custom Signatures tab in the Custom Policies topic.

Discovery

Navigation and Terminology Update

SaaS and On-prem (1.35.0)

Traceable has updated the navigation and terminology to improve clarity and align with how users explore data across the platform. The following are the updates:

• Catalog is now Discovery

• Analytics is now Explore Data and has moved under the new Insights section

• Reports are also now part of Insights

API Versioning Support via Headers and Query Parameters

SaaS and On-prem (1.35.0)

You can now configure rules to extract API version information from URLs, headers, or query parameters. This also enables the creation of fine-grained policies and rules targeting specific API versions, since each version is treated as a distinct API endpoint. For more information, see the API Versioning tab in API Discovery.

Testing

AI-Powered AST Authentication Hook Generation

SaaS

You can now generate custom authentication hooks using AI. For more information, see Authentication.

CLI 2.x with Prechecks Now Generally Available

SaaS and On-prem (1.35.0)

CLI v2 is now GA and available for upgrade. This release delivers improved stability along with enhanced resource management and monitoring capabilities. For more information, see CLI Pre-checks and Installation.

Data Collection

Data Collection Support for Netlify Edge Functions

SaaS

You can now onboard using Netlify Edge Functions, enabling real-time data capture directly at the network edge. For more information, see Netlify Edge Function.