The Vulnara documentation is live
Guides, quick starts and reference now live at vulnara.io/docs. They cover scanning, findings, the security score, the GitHub Action, the CLI, the GraphQL API and AI agents over MCP.
News
Scheduled scans and reports
Scan a repository or a whole workspace on a schedule, at any minute of the hour, and schedule workspace syncs the same way. A schedule can also email a report, so your team gets the latest results without opening the platform.
Email preferences and member recipients
Each user can now mute the categories of email they do not want. Alert rules can send email to members of your team directly, and the platform tells you when no alert rule is notifying anyone.
Query Vulnara from your AI agent
Vulnara now has an MCP endpoint. Claude, ChatGPT or any other MCP-compatible client can read your scans, findings and security posture after you sign in, without leaving your workflow.
Triage findings with VEX statuses
Mark each finding with a VEX status such as not affected or false positive, with a justification. Every decision is kept in an append-only history, and the findings explorer filters by what was decided.
A dashboard that shows what is open now
The dashboard counts each finding once, from the latest scan of each repository, and shows how exposure, the security score and remediation changed over the period you choose. Findings reported by more than one scanner are marked as corroborated.
PDF reports with an executive summary
Download workspace, repository and scan reports as PDF. The summary report now opens with an executive summary, lists every repository by workspace with its score, and links back to each record on the platform.
Alerts in Slack, Discord and Telegram
Alert rules now deliver to Slack, Discord and Telegram, in addition to email and webhooks. Webhooks can carry custom HTTP headers, and each rule can use its own message template.