You can now view a full audit trail of key actions across your Intruder account, giving you greater visibility, accountability, and support for compliance requirements.

See which actions are captured in the audit log here.

Previously, customers with multiple users had limited visibility into account activity, making it difficult to investigate changes or meet compliance requirements.

With audit logging, you now have the transparency needed to maintain trust, investigate issues, and support compliance-driven workflows.

You can find the audit log within your Settings.

Gain continuous visibility into vulnerabilities across your containerised workloads with our new agentless container scanning. Automatically scan container images hosted in AWS, GCP, and Azure with no additional setup required if you've already connected your cloud accounts.

If you've already connected AWS, GCP, or Azure to Intruder, container scanning is ready to go:

For more information on getting started, see our help guidance here

Click in Discovery and connect your cloud account in minutes.

Each scanned container image and tag combination (e.g., ) uses one infrastructure licence from your plan.

Need more capacity? Add licences via your billing page or speak with your account admin.

Container image scanning is included in Cloud, Pro, and Enterprise plans

The issues table now includes a comment status filter, so you can instantly cut through a long list and see only the issues that have - or haven't - been commented on.

You can already see at a glance which issues have comments via the icon in the table - but when you're working through a large set of issues, spotting what still needs attention isn't always easy. This filter lets you jump straight to the undocumented items, so nothing gets missed.

Scan reports can now include the full raw scanner output as an additional column in the CSV export. This gives technical teams direct access to the underlying data produced by each scan, without needing to use the API or extract it manually.

Until now, the raw scanner output wasn't exportable without using the API. This change makes that data available directly from the report download, in a format that's immediately usable without additional workarounds.

You can now create and update scheduled scans directly through the public API, bringing scan scheduling in line with the rest of your automated workflows.

- Use the new endpoint to retrieve your existing schedules or create new ones.

- Use to fetch or modify a specific schedule.

For teams running automated security workflows, managing scan schedules through the portal creates an unnecessary manual step. These endpoints mean you can build, adjust, and maintain your scan schedules entirely through the API - keeping your setup consistent, repeatable, and fully under version control.

See the updated API Documentation here

Your GregAI conversations are now automatically saved, so you can pick up exactly where you left off at any time. Whether you switch context, navigate elsewhere in the portal, or come back the next day, your chat history is waiting for you.

Security investigations rarely happen in one sitting, and useful insights shouldn't disappear the moment you navigate away. With persistent history, GregAI becomes a genuine part of your ongoing workflow rather than a one-off tool - so the context you build up over time stays with you.

You can now view Cyber Hygiene Scores at the tag level, giving you more granular insight into your security posture across different parts of your estate.

Previously, Cyber Hygiene Scores were only available at the overall account level, making it difficult for larger teams to understand performance across different parts of their estate.

With tag-level visibility, you can now track progress more meaningfully, hold teams accountable, and demonstrate improvements with greater clarity.

This update makes Cyber Hygiene Scores more actionable for both enterprise teams managing complex environments and smaller teams focusing on specific systems.

The scan details page now gives you a clear, stage-by-stage view of exactly what your scan is doing as it runs. You get a live breakdown of each phase from preflight through to final report, with real-time updates as your scan moves forward.

- A step-by-step view of the full scan lifecycle, so you always know exactly where your scan is up to:

- The milestone view also surfaces when the scan started and how long it has been running, giving you the full picture at a glance.

Long-running scans can be hard to keep tabs on, especially when you need to report back to a team or flag something to support. With milestone-based progress, you always have a clear answer to "where is this scan up to?" - which means less uncertainty during complex assessments and faster diagnosis if something needs attention.

You can now customize your Slack and Microsoft Teams notifications, giving you full control over which alerts are sent and when. This helps your team stay focused on what actually needs attention while reducing unnecessary noise.

Previously, Slack and Teams integrations sent every notification by default, which could overwhelm channels with low-signal updates.

With custom notification settings, you can tailor alerts to your team’s needs, keeping communication channels clean, relevant, and actionable.

You can now snooze multiple occurrences of the same issue in one action, making it much faster to manage high-volume findings without losing visibility of future risks.

Only the occurrences you select will be snoozed. Any new occurrences for the same issue will continue to appear, ensuring you don’t miss emerging risks.