July 2026 Summaries

Detectify has introduced Apex Discovery, a new feature designed to enhance attack surface management by automatically identifying root domains likely associated with an organization, including those from mergers and acquisitions, subsidiaries, and shadow IT. This tool aims to provide comprehensive security coverage by allowing organizations to review curated domain suggestions, confirm ownership, and protect these domains with continuous discovery and vulnerability assessments. Apex Discovery combines multiple attribution techniques to connect domains to organizations, overcoming challenges such as GDPR limitations in the EU, and focuses on high-confidence candidates rather than overwhelming users with raw data. The semi-automated process ensures organizations maintain control over their domain inventory while expanding their security reach, integrating seamlessly into the existing Detectify workflow to facilitate immediate protection of newly confirmed domains.

Dynamic Application Security Testing (DAST) has traditionally been used as a final safety check before software deployment, but legacy tools are struggling to keep up with the fast-evolving attack surface, leading to alert fatigue and inefficiencies. Traditional DAST tools rely on static vulnerability signatures and public CVE lists, which result in numerous false positives and fail to adapt to modern tech stacks, thus creating blind spots. Modern approaches, such as those used by Detectify, emphasize payload-based verification that simulates real-world attacks to confirm exploitability and reduce false positives to less than 0.3%. These advanced tools integrate continuous attack surface monitoring, automated asset discovery, and deep application scanning, providing security teams with accurate, actionable insights and reducing friction between development and security teams. Furthermore, these tools are evolving to support autonomous workflows by breaking down scanning expertise into modular micro-utilities and facilitating integration with AI-driven pipelines.