Apex changelog

Add 100, 200, 400, or a custom number of standard credits to resume pruned hunting jobs on the same Standard or Audit scan. The page shows the resumed state, continuation marker, and new findings as they arrive.

The discovery chart now uses credits consumed when available and adds a modeled discovery curve, estimated finding ceiling, discovery outlook, credit-limit line, and a time-axis fallback for older scans.

Standard credits now use a single product-credit unit. Existing standard balances and usage were re-denominated by 200, and each legacy Audit entitlement was converted into 2,000 standard credits. Standard scans use 200 credits by default, Audit scans use 2,000, and PR/Fix Review and Lite entitlements keep their existing units.

Findings can now be grouped by when they were found, with Today, Yesterday, Last week, and Earlier buckets that keep normal row actions, scan labels, and fix-review status visible.

View screenshots

Run scan now includes threat-model context by default. Users can answer setup questions, reuse and edit an existing threat model, or choose auto-generate when they want Apex to create one without follow-up questions.

Fix review and PR scan flows are smoother for larger workspaces, with searchable PR selection, branch selection, filtered finding batches, clearer run status, and automatic skipping of already verified findings.

The findings table gained exclusion filters, sticky group headers, row timestamps, severity-change indicators, and a validity grouping so teams can scan and sort results faster.

Apex fixed several user-facing edge cases, including pending-user workspace list failures, in-progress shared finding links, stale workspace access states, and threat-model resume behavior after reloads.

Apex AI PDF reports now generate more reliably and give users clearer retry options when something needs attention.

Workspace users can export selected findings with the context needed to share them outside Apex.

View screenshots

The workspace repository picker was redesigned for denser selection, clearer provider grouping, and smoother large-repo browsing.

View screenshots

Connection problems now show clearer next steps instead of leaving users with a vague setup failure.

Workspace users can start fix review batches across current-repo findings, use PR selection when needed, and see progress without leaving the scan view.

Company home, workspace action toolbars, and findings rows were tightened for repeated triage work and clearer scan status.

Fix review scans now publish GitHub check results and result comments, giving pull requests a direct signal when Apex has reviewed the proposed fix.

Clarion handoffs now stay tied to the right workspace and pull request, reducing the chance of cross-workspace mix-ups.

Workspace findings now open in dedicated detail pages with sortable tables, team notes, export controls, and clearer failed-scan states.

Apex can send fix-review context to Clarion and show delivery status directly on findings.

Workspaces gained a running scan strip to keep active work visible while users browse findings and workspace context.

The create and edit workspace flows now match more closely, keep important setup steps open, and give clearer step navigation.

Fix-review scans can now include multiple pull requests, with a searchable selector that makes large review sets easier to manage.

PDF reports now show cleaner links, clearer feedback, and less duplicated context.

Audit scans introduced a dedicated entitlement and predictable cost labels. Those historical entitlements were later consolidated into standard credits in the August 19 release.

Workspace creation now defaults to a guided setup wizard that walks through provider connection, repository selection, details, and scan launch.

View screenshots

Finding proof-of-concept replay views gained skip and speed controls so reviewers can move through long terminal recordings efficiently.

Apex added a direct scan-fixes path for retesting pull requests after changes are ready.

Apex Black became available in the relevant workspace experience.

PDF reports can open when ready and recover more gracefully when generation takes longer than expected.

Users can select multiple findings and send them to Clarion in one pass.

The run scan panel gained PR search and more responsive authenticated navigation around workspace switching.

View screenshots

GitHub comments can invoke Apex PR scans and keep the review context visible in Apex.

View screenshots

Local source scans now support planning and upload flows for teams working outside a hosted repository.

PDF reports gained a cleaner presentation, clearer client comments, and more dependable export behavior.

Audit scans now start from the selected mode more consistently.

Apex CLI can connect to workspaces and export results for local workflows.

View screenshots

The scan manual was rewritten around workflow guidance, scan types, threat model inputs, and reusable planning templates.

View screenshots

Repository and severity filters were added to findings lists, including toggle-style repo filters and more stable open-state behavior.

Finding feedback became company-wide, with per-user notes preserved on shared finding feedback.

Apex added a multi-round threat model setup flow with editable models, multi-select answers, viewer support, and clearer progress states.

Companies can manage Clarion webhooks, run test deliveries, and see clearer connection states.

Scan credit costs became configurable and the higher-depth audit tier gained dedicated pricing and guidance copy.

Workspace auto-scan scheduling lets teams keep repositories under recurring review.

A shared status banner gives teams a clearer way to communicate service state.

Apex added scan-credit packages and a credit-aware create-workspace flow.

GitLab repository connections became available to workspace users, including provider grouping and checkout-return persistence.

The run scan flow moved into an inline panel with repository, branch, commit, and context controls in one place.

Client onboarding gained a smoother self-serve path from signup into Apex.