Lineage everywhere
More CI systems, registries and cluster types connected end to end, so more findings resolve from the commit to the internet-facing ingress without a missing hop. See image-to-workload binding.
Product roadmap
The SecurityVault roadmap:
what we are building next.
The themes we are investing in, chosen around the decisions security and platform teams need to defend. Themes, not ship dates: everything that has shipped is on the changelog.
Investment themes
What are we investing in?
Six themes, each aimed at a decision security teams need to make with more confidence.
01
02
Native engine depth
More framework models for taint analysis, deeper interprocedural analysis across more languages, and published accuracy benchmarks against the tools we run alongside.
03
Runtime evidence
Observed reachability on the same finding as static reachability, from an eBPF runtime sensor and IAST, so priority reflects what actually executes.
04
Scanning in your environment
Scans that run inside your own clusters, for regulated teams that need code and images to stay in-house, with per-cluster policy and simple onboarding.
05
More hosting choice
Hosted service starts in India. US and EU hosted regions are planned in response to customer demand and are not available today. You can also discuss self-hosted deployment, which is available on request today.
06
New platform modules
The same graph extended to new questions. Explore each offering below and discuss evaluation scope and rollout with our team.
Platform offerings
Explore our expanding platform offerings.
Register interest on any module to hear first and help shape it.
SaaS security posture (SSPM)
Will continuously check Microsoft 365, Google Workspace, Salesforce, Slack, Zoom and GitHub posture.
Data security posture (DSPM)
Will discover and classify sensitive data across cloud storage, databases and SaaS.
Runtime testing (IAST)
In-app agents that will confirm SAST findings with runtime taint flows.
Breach & attack simulation
ATT&CK-mapped campaigns that will measure whether controls block or detect.
AI security posture (AI-SPM)
Will discover AI services and test LLM apps for prompt injection and data leakage.
AI governance
Will bring policy, autonomy tiers and a signed decision log to every AI use case.
Detection & response
Will add tested detections, prioritised alerts, incidents and audited playbooks.
Threat intelligence
Will match indicator feeds and exploit context against your findings and assets.
How we prioritise
How do we decide what to build next?
Customer decisions first
We start from the decision a team cannot yet defend, and work back to the evidence it needs.
Truth before breadth
A new module ships when its results are explainable and fail closed, not when a feature list needs filling.
Shipped means shipped
Nothing is described as available until it is. Shipped work is recorded on the changelog in plain terms.
Shape the roadmap
Tell us which decision you need to defend.
Roadmap conversations start with your team, your estate and the gap you most need closed. Design partners help set the order.