SDKs and extensions.

Connect developer workflows to SecurityVault. Confirm package availability and supported versions for your deployment before installing an extension or agent.

IAST runtime agents — planned

Interactive application security testing is on the roadmap and is not available as a released capability today. The proposed agents would observe executed request paths and add runtime evidence to static findings. Untested paths would remain unverified.

Package names, runtime support, installation steps and release timing will be documented when available. Explore the planned IAST capability or discuss your requirements. Install packages only from a release channel confirmed by SecurityVault.

IDE extensions

The VS Code extension and the JetBrains plugin scan the file being edited through POST /api/v2/developer/ide/scan-file and show findings inline, with the remediation template when one exists.

Versioning and support

SDKs are versioned independently of the platform and follow semantic versioning. Breaking changes to the ingest contract are announced in the changelog with a migration note before the old contract is retired.

Next steps

• IAST — what runtime analysis adds to static findings.
• Core concepts — how reachability feeds lineage and risk.
• Webhooks — push findings to your own systems.