Skip to content

Release Notes

Stay up to date with the latest features, improvements, fixes, and maintenance updates to the Alpha Strike Labs Platform.

Release notes are published whenever a new platform version becomes available. The latest release is shown first. Use the release history to navigate to previous releases.

5.2.0 - Feature Release

Release date: November 5, 2026

Version 5.2.0 adds an overview of all TLS certificates in scope, moves mass manipulation into the project settings, and makes Excel exports of large projects faster and more reliable.

Highlights

  • Certificates overview: The new Certificates tab under Assets lists the TLS certificates of all services in scope, with their validity status and certificate chain. Filter the list, open a certificate in the certificate viewer, or export the results as CSV or JSON. Host details now show the certificate of every TLS service, not only of HTTP(S) services.
  • Mass manipulation in the project settings: Create, name, validate, and apply mass manipulations on the Mass Manipulation tab of the project settings. The JSON editor suggests fields and values as you type and marks errors where they occur. See Mass manipulation.

Improvements

  • E-mail security: The DNSSEC status next to each host is clearer, and empty MTA-STS details are no longer shown.
  • Hosts: Several services can be expanded at the same time, and host details update immediately after you add or remove a service.
  • Open ports: On hosts that answer on many ports without an identified protocol, typically CDNs and proxies, these ports are now hidden from the project results. See Hidden open ports.
  • Excel export: The Excel export from the dashboard is faster and more reliable for large projects. While an export is running, starting another one shows an explanatory message.
  • Filters: An invalid custom filter expression shows a message that points to the error.
  • Accessibility: Text and tab contrast meet WCAG AA, and the page language follows the interface language, so screen readers use the correct pronunciation.
  • Usability: Result counts show a loading indicator instead of "0" while data is loading. The Getting Started dialog opens automatically once for every user.
  • Notification e-mails: Wording is clearer and consistent across all notification e-mails.

Fixes

This release also resolves issues in search term management, table column filters, the Whois tab, API key labels, resource limit messages, the dashboard layout, and the project location map.

Important Changes

  • Mass manipulations apply all actions: If a mass manipulation contains further actions after an add or change action, these actions are now applied as well. Such manipulations may change more data than before. Review them before the next scan or monitoring run of the project.

5.1.0 - Feature Release

Release date: October 23, 2026

Version 5.1.0 introduces project modes, new E-mail security and Whois views, and bulk actions for certificates. It also strengthens authentication and access control. If you use the API, review the API changes below.

Highlights

  • Project modes: Choose how a project collects data when you create it. Active mode offers the deepest coverage and includes active checks such as DNS queries. Database mode uses database lookups without direct interaction with the target. Stealth mode searches only the platform's own databases. Options and tabs that a mode does not support are hidden.
  • E-mail security: The new E-mail security tab under Assets rates the SPF, DKIM, DMARC, MTA-STS, DANE, DNSSEC, and TLS setup of each mail domain. The results are also included in the Excel export. The checks run in Active mode projects with the E-mail security checks option enabled, which new presets enable by default. Results appear after the next scan of the project. See E-mail security.
  • Whois overview: The Whois tab under Assets shows the networks and autonomous systems that host your active assets, with service and IP counts.
  • Certificate bulk actions: Select several certificates in Discovery to add their values to the project, blacklist them, or delete them. You review the extracted values before the change is applied.
  • Search job details: A new dialog shows the search terms, progress, and log of a search job. The job list refreshes automatically.

Improvements

  • Monitoring: Every monitoring run also rechecks darknet leaks and employee data, within the limits of your plan. Monitoring settings, including the notification e-mail address, are saved together.
  • Search terms: Matching is case-insensitive, so "Acme" and "acme" are the same term. TLD search terms can include the darknet scope, and darknet searches run only for search terms with darknet scope.
  • Discovery: Adding results to a project takes a single step. Certificate actions are offered only where they apply, and placeholder values are hidden.
  • Projects: Projects show the current username of their owner. Project export and import preserve the scan options, and the cost preview includes employee lookups selected through a filter.
  • Maps: Location maps load their tiles from the platform instead of an external map service.
  • Interface: A more compact layout shows more content. The file selector has been refreshed, and the Darknet tables have new switches.

Security

This release strengthens authentication, session handling, and access control across the platform. Sessions now end after one hour of inactivity.

Fixes

This release also improves the reliability of scans and monitoring, and resolves issues in Discovery suggestions and validation, project filters and status indicators, resource limit indicators, darknet downloads, and several dialogs and layouts.

Important Changes

  • User groups have been retired: Projects are shared through company membership or direct project access. If you no longer see a project that was shared with you through a group, ask its project manager to grant you access.
  • Feature access follows project access: Features that previously required an individual user permission, such as Intel, are available to every user with access to a project. All project members can view and export the project's stored darknet leak and employee data.

API Changes

If you integrate with the Alpha Strike Labs Platform API, check the following changes:

  • Authentication: Send the X-API-Key header with every request. API keys no longer create a session or receive a session cookie.
  • Error responses: Requests for projects you cannot access return 404 instead of 403. Endpoints may return a list of structured errors instead of a single Error string.
  • Project mode: Set the project mode when you create a project, and include ProjectMode in every project update. The separate endpoint for changing the project mode has been removed.
  • Certificate blacklist: POST /api/project/{projectID}/suggestion/certificate/blacklist takes an explicit values list of the values to blacklist instead of a filter.
  • Whois data: bulk/whoisdata uses POST instead of GET. Send the filter in the JSON request body; paging and sorting remain query parameters.
  • Employee data: The /api/social/* routes have been removed. Use the project-scoped /api/project/{projectID}/socialdb/… routes instead.

5.0.0 - Major Release

Release date: August 14, 2026

Alpha Strike Labs Platform 5.0.0 marks the first stable release of the new platform, delivering a redesigned user experience and a comprehensive workflow for configuring projects, discovering assets, reviewing findings, and continuously monitoring the external attack surface.

Highlights

  • Redesigned user experience: A completely redesigned interface provides clearer navigation and more efficient workflows across the platform.
  • Project-based workflow: Create projects and define search terms to establish the scope of your external attack surface.
  • Asset Discovery: Discover and analyze internet-facing assets associated with your organization.
  • Findings: Review identified security-relevant observations and prioritize areas that require attention.
  • Continuous Monitoring: Monitor projects for changes to assets and findings over time.
  • Improved platform performance: Significant improvements to responsiveness, processing, and stability.

Improvements

  • Redesigned core workflows throughout the application.
  • Improved navigation and information hierarchy.
  • Improved filtering and sorting across Discovery and Findings.
  • Improved feedback for long-running operations and scans.
  • Added consistent empty states, validation messages, and error handling.

Maintenance

  • Updated core platform components and dependencies.
  • Improved application monitoring and operational stability.
  • Completed production-readiness and security hardening.