March 2026 Summaries

Detectify's new GraphQL API Scanning solution leverages hacker-led research and AI to deliver highly accurate security testing, achieving a 99.7% accuracy rate for identifying complex vulnerabilities within 20 minutes. This service helps enterprises comply with PCI DSS 4.0 and SOC 2 standards, providing developers with actionable remediation guidance. Given the increasing use of GraphQL by leading enterprises for its flexibility, the scanning tool addresses risks that traditional scanners often miss, such as circular dependencies and deep nesting. By employing a proprietary engine with dynamic payload rotation and hacker-informed logic testing, Detectify ensures comprehensive coverage and verification of exploitability. The solution supports various authentication flows and integrates seamlessly into existing developer workflows, enhancing API security with high-fidelity findings and enabling continuous monitoring. The update empowers security teams with an advanced edge, combining the precision of ethical hacker insights with AI-driven analysis to meet modern API security demands.

Organizations often struggle to maintain visibility over their IP ranges, leading to vulnerabilities due to forgotten assets, shadow IT, and legacy hardware. Detectify addresses this issue by launching IP Range Scanning as part of their Surface Monitoring platform, which automates and simplifies the process of identifying vulnerabilities across entire networks without the need for manual tools like Nmap. The tool enables users to input IP ranges using CIDR notation, allowing for continuous monitoring and testing of services running on those IPs, and integrating findings into a unified view within their dashboard. This innovation helps organizations, particularly governmental bodies, on-premises setups, and large enterprises, to secure their high-value IP assets more effectively.

Detectify is enhancing its accessibility and design to ensure an inclusive and efficient user experience while maintaining speed in development. By adopting Tailwind CSS and Shadcn/UI, Detectify aims to create a robust accessibility foundation that complies with AA WCAG standards, focusing on keyboard navigation, focus management, and WAI-ARIA compliance for screen readers. The company is redesigning its component architecture, such as alerts, to simplify choices, ensure contrast, differentiate semantics, and streamline design tokens, moving towards a high-contrast approach that is effective for users with color vision deficiency. This process includes refining the brand palette for better on-screen performance and optimizing typography for improved readability. Detectify's commitment to accessibility is viewed as an ongoing cultural practice rather than a one-time project, emphasizing continuous learning and integration of inclusive design into every aspect of development, thereby empowering security professionals with the best tools available.

Detectify is committed to enhancing the security experience by providing intuitive, efficient, and transparent tools that address the complexities of modern cybersecurity. Recent updates have expanded the platform's capabilities, including new discovery features that enhance visibility over attack surfaces, and a searchable Test Catalogue to ensure transparency and trust in vulnerability assessments. Notable improvements include Protocol Discovery for identifying exposed services beyond common web traffic, and expanded vulnerability testing to address evolving threats, such as issues with Sharp Multifunction Printers and PTZOptics Cameras. Additionally, enhancements to the API Scanning product, like bulk select operations and smarter validation alerts, streamline workflows and prevent errors, ensuring a smoother user experience. The focus on user-centric design and continuous improvement reflects Detectify's commitment to making security tools both powerful and user-friendly.