> ## Documentation Index
> Fetch the complete documentation index at: https://docs.pleri.ai/llms.txt
> Use this file to discover all available pages before exploring further.
# Changelog
> I'm constantly shipping new features to simplify code security, cloud security, and compliance so your team can build with confidence.
1. **Workspace: write scripts, query everything, validate findings on the spot:** I can now run scripts directly against your full Plerion dataset and live AWS accounts. No sampling. If you want to validate whether a flagged resource is actually exploitable, I'll pull the live config and confirm. If you need a custom query across your findings that Plerion doesn't surface out of the box, I'll write the script and run it against all your data. Cross-account, multi-region, any slice you need. It all runs in a secure sandbox with network access locked to AWS and Plerion APIs only.
***
1. **Token limits per tenant**: Admins can now set a monthly token cap for each tenant, giving you direct control over how much I consume across your organization. Set a limit, and I'll stay within it — no surprises at the end of the month.
1. [**Pleri MCP server**](/tools/mcp): I now speak the Model Context Protocol, so you can plug me directly into the AI clients your team already uses, including Claude Code, Claude Desktop, Cursor, VS Code, Windsurf, and Zed. Ask me about cloud risks, findings, and security posture right from your editor or AI assistant, without ever switching tabs. Grab a Plerion API token, point your client at my MCP endpoint, and I'll show up wherever you work.
1. **Skill scopes — user and tenant**: Skills now have clear scoping. User-scoped skills are private to you, while tenant-scoped skills are shared across your entire organization and apply to everyone automatically. Tenant skills take precedence when names overlap, so admins can enforce organization-wide standards. [Learn more about skill scopes](/guides/skills/create-your-own-skills#skill-scope).
2. **Template skills**: A new template gallery gives you pre-built playbooks you can install with one click. Choose from templates like Incident Response Runbook, Executive Risk Report, Compliance Audit, Vulnerability Triage, and more. Each template creates a personal copy you can customize. [Browse templates](/guides/skills/create-your-own-skills#template-skills).
3. **Import skills from zip or GitHub**: You can now import skills from a `.zip` file or directly from a GitHub repository URL. This makes it easy to share skills across teams, pull in community playbooks, or migrate between environments. Imported skills auto-detect naming collisions and keep everything safe. [Learn more about importing](/guides/skills/create-your-own-skills#importing-skills).
1. **Assign Jira ticket to a user**: I can now assign Jira tickets to specific users when creating or updating them, so the right person is on it from the start without any extra steps. Just tell me who to assign it to and I'll take care of it.
To use this, make sure your Jira integration has the right permissions. If you already have Jira connected, go to the **Jira integration page** in Plerion and click the **Update permission** button. If the button isn't there, you're already set up. No action needed for new integrations.
1. **90% fewer tokens, more interactions**: I've completely rethought how I work under the hood. Instead of loading every tool at once, I now only pick up what's needed for the task at hand. The result: up to **90% reduction in tool overhead**, which means you can have longer conversations with me, I can process significantly more information in each session, and I respond faster. You won't need to start fresh as often — I can do more before we even get close to a limit.
2. [**Create your own skills**](/guides/skills/create-your-own-skills): You can now teach me how your team works. Write a playbook once — your triage process, your escalation steps, your weekly review routine — and I'll follow it precisely every time the situation calls for it. No more repeating yourself, no drift. Skills are scoped to you or the whole tenant, can carry supporting files, and follow the open [Agent Skills](https://agentskills.io/specification) standard so they're portable and version-controlled.
3. **HTML reports**: I can now generate full HTML reports — structured, styled, and print-ready. Create your own skill to define exactly how a report should look, and I'll produce something you can hand to leadership or include in a board pack. Brand them with your company's colours, add charts and tables, and print or export directly from the browser.
1. [**Exploitability analysis**](/guides/skills/exploitability-analysis): I can now tell you exactly which vulnerabilities can be exploited in our cloud environment, not just in theory. Instead of drowning in thousands of critical findings, I evaluate each CVE against specific assets and the environment, show the evidence, and cut through the noise so the focus stays only on what truly matters. Expect \~90% less alert fatigue, faster remediation of real risks, and every decision visible, traceable, and defensible.
1. **Attack path details in graph**: I now display attack path details in a graph, so you can trace the path from entry point to impact.
2. **Fact-check details for public exposure findings**: For public exposure findings, I now show fact-check details when available, so you can see the evidence that backs them up and act with confidence.
3. **ROI insights dashboard**: I now show a dedicated ROI dashboard, so you can clearly see the value I deliver across your tenant through adoption trends, usage patterns, and the security areas where I create the most impact — helping you justify and optimize your AI investment.
4. **Usage and limits tracking**: I now provide detailed usage metrics, including tokens consumed, questions asked, active users, and progress toward plan limits, so you can monitor engagement, manage consumption, and ensure your teams are getting the most out of me.
5. **Memory**: "About you" is now **Memory**, with two scopes: your personal preferences and tenant-wide managed by admins. I reference Memory everywhere, so my responses stay tailored to you and your team.
6. **Enabled by default**: I'm now there with you from day one, so you're fewer clicks away from getting started with me.
1. **Planning and step-by-step execution**: For complex requests, I now plan first, show you the steps I'm taking, and mark each one complete so you can see how I'm solving it from start to finish.
2. **Exemption support for vulnerabilities and findings**: I can now help you manage exemptions for vulnerabilities and findings.
3. **Risk lifecycle**: I can now help you update the lifecycle of top risks.
1. **SBOM (Software Bill of Materials) — code data**: I now have access to data about your code. I can surface components, licenses, and supply-chain risks in your codebase so we can spot and act on issues fast.
2. **Default model upgrade:** I now use Claude Sonnet 4.6 as my default model, making me smarter, faster, and more reliable than ever.
3. **Audit logs**: I now log more of what I do in audit logs, from the tasks I run to the changes I make, so you have better visibility related to my actions in your environment.
4. **Deep links**: I can now direct you to resources in AWS, Azure, and GCP more easily, so you can jump straight to the right place in the console or docs without hunting.
5. **Create ticket**: I have made it incredibly easy to send important issues to our ticketing system with just one click.
1. **End-to-end vulnerable dependency fix on GitHub**: I can now create a task to track and drive the fix so we have a clear path from finding an issue to shipping the fix. On GitHub, I take vulnerable dependencies from finding to merge: I raise pull requests to fix them, request review or assign the PR to the right person, nudge when something sits unreviewed, and follow up until it's merged. I also do housekeeping: when PRs stay unresolved for too long (e.g., abandoned or superseded), I help close them so our backlog stays clean. GitLab and Bitbucket are coming soon.
1. **Go project vulnerability fixes**: I can now automatically fix vulnerabilities in your Go projects, helping you maintain secure dependencies in your code.
2. **Pause tasks**: You can now pause scheduled tasks you have assigned to me so they stop running on their schedule. Resume them anytime and I will start running them again, without needing to delete or recreate the task.
1. [**ServiceNow**](/tools/servicenow): I can now create, update, retrieve and search ServiceNow incidents from start to finish.
1. **Vulnerability lookup**: I can now provide clear, detailed information about vulnerabilities across millions of records from authoritative sources such as
CVE.org (operated by MITRE), NIST's NVD, GitHub Security Advisories, and many other advisories — and
enriching it with real-world signals (such as vulnerability sightings/trends over time) and risk context like an
EPSS score (which shows how likely a known software vulnerability is to be exploited in the real world).
For example, you can ask me about React2Shell (CVE-2025-55182) and I'll explain what it is, why it matters, what active risk signals look like, and
what's affected in your cloud and code — without you having to piece it together yourself.
1. **Tasks**: I’ve simplified the wording by renaming repetitive work to tasks, so things are clearer and more intuitive.
1. **Personalized onboarding flow:** If you're new here, I now guide you through a short onboarding flow where I learn about your role, priorities, and security focus areas. This helps me personalize insights and recommendations from day one, so you can get set up quickly and see value faster.
1. **Product update notifications via Slack and email**: I can now send product updates about new features and improvements directly to your email or a Slack channel, so you never miss what's new.
1. **Chrome extension**: I’m better integrated with your browser. I now open in a side panel, so I don’t block your view, and I use page context to make security work easier.
2. **Onboarding checklist**: I now show a clear setup checklist so you can see what’s left to do and get the most value out of me from day one.
1. **Spotlight notifications in Slack**: I can now send high-priority issues that need attention to our Slack so we can discuss and resolve them together.
1. **Fixing IaC issues**: I’m getting smarter in fixing IaC issues, I can suggest changes, help plan the next steps, and fix IaC issues with your input in mind.
1. **Spotlight dashboard**: I now have a dashboard that highlights high priority issues that need your attention. You can investigate each issue directly or dismiss it if it's not relevant, helping you focus on what matters most.
1. **Shai-Hulud 2.0 npm supply-chain worm assessment**: I can now assess exposure to the Shai-Hulud 2.0 npm worm, the evolved variant of the original supply-chain threat.
2. **Search through Linear and ClickUp**: I can now search through issues and tasks in your Linear and ClickUp workspaces, making it easier to find, review, and act on our ongoing work together.
1. **Sidebar as default chat location**: Based on user feedback, I've moved to the sidebar as the default chat location. You can switch back to the navbar anytime in Settings.
1. [**Linear**](/tools/linear): I can now create, update, comment and close Linear issues from start to finish.
1. [**ClickUp**](/tools/clickup): I can now create, update, comment and close ClickUp tasks from start to finish.
1. **New UI layout options**: I'm introducing two new ways to interact with me across the Plerion platform:
* **Right sidebar**: I now appear in a dedicated panel on the right side of the interface.
* **Navbar integration**: You can also open me directly from the top navigation bar.
When opened, I'll push the main Plerion interface to the left, ensuring all content remains visible without obstruction. This replaces the previous movable chat bubble design, creating a cleaner and more natural experience that aligns with how leading AI assistants integrate into products.
2. **Documentation guidance**: I can now search documentation to provide step-by-step guidance for using and exploring all available features.
3. **Bitbucket repositories**: I can now automatically fix vulnerabilities and Infrastructure-as-Code (IaC) misconfigurations in your Bitbucket repositories by creating pull requests with the necessary patches and updates.
1. **Quickstart prompts**: You can now get started faster with some of my most useful prompts directly from the chat window. Just click to launch a conversation or explore a capability instantly.
1. **SBOM (Software Bill of Materials)**: I can now help you see what's really inside your software and its dependencies with new SBOM capabilities:
* **Dashboard**: I provide a centralized view of SBOM components across cloud workloads with instant insights on packages in use, their licenses, and any affected components. It's your bird's-eye view of your entire software supply chain.
* **Threat assessment**: I automatically analyze SBOM components against active supply-chain threats. For example, I can assess exposure to threats like the **Shai-Hulud npm worm**, detecting vulnerable packages, impacted assets, and recommending immediate mitigation steps.
* **Interactive exploration**: Dive deep into SBOM components with me. Explore versions, licenses, and vulnerability details in real time.
**Note:**
* With this update, I've learned to proactively assess software supply-chain threats. When zero-day attacks or supply-chain incidents hit, I can quickly search for potential exposure and help the team remediate fast.
* Azure and Kubernetes support is limited, but stay tuned - more to come soon.
* Code-based SBOM analysis isn't available yet. Right now, my focus is on cloud workloads, and code SBOM support will be added in the future.
1. **Improved report generation**: I can now include full **Unicode characters**, **emoji**, and **mathematical symbols** in the PDF reports I generate. Your reports will now look exactly as intended, whether they include technical notation or expressive visuals.
1. **Learn, investigate, and remediate**: You can now chat with me directly from the Plerion platform when viewing any finding, asset, vulnerability, or risk. With one click, you can learn more, investigate, and remediate issues.
1. **Enhanced Slack security**: I now only respond to verified Plerion platform users in Slack, ensuring our security conversations stay within our trusted team environment. This keeps our security discussions private and secure.
2. **Improved table display**: Tables you generate with me now display perfectly for everyone. I’ve smoothed out the layout so your data looks clean, aligned, and easy to read.
3. **Export code issues and repositories**: I can now export lists of code issues and repositories to CSV format, making it easier to share findings with your team or analyse data in your preferred tools.
1. **Pin and rename chat**: I now let you pin important chats so they’re always at your fingertips, and rename them to keep things clear and organized. This way, the conversations that matter most never get lost, and you can stay focused on moving security work forward.
2. **Conversation length tracking**: I now show you exactly how long our conversation has gotten with a smart progress indicator. When our chat gets too long, I'll suggest starting fresh to keep my responses sharp and relevant - because shorter conversations help me give you better, more focused answers.
1. [**Firefox**](/tools/firefox): I'm now available in Firefox to help you manage security tasks directly in your browser.
1. **Default model upgrade**: I now use **Claude Sonnet 4.5** as my default model — making me smarter, faster, and more reliable than ever.
1. **Dashboards**: I can now build dashboards for you — suggesting live views, creating reports from any data, and even bringing dashboards directly into Slack. This makes it easier to visualize security insights and collaborate with your team in real time.
2. **Requesting reviews for change requests**: I can now create change requests and assign them to repository contributors for review, helping us resolve code issues faster together.
1. **Feature requests**: You can now share feature requests with me, helping me understand what you need most and continue improving as your AI security engineer.
1. **Chat feedback**: You can now upvote or downvote my responses to share what’s helpful (and what’s not). This helps me keep getting sharper as your AI security engineer.
1. **Chat source visibility**: I now show you the sources of information I use in our conversations, so you can see exactly where my insights come from.
1. **Delete chat**: I now let you delete chats you had with me to give you more privacy and control.
1. **Python project vulnerability fixes**: I can now automatically fix vulnerabilities in your Python projects, helping you maintain secure dependencies and code.
1. **Fix vulnerabilities in GitHub repositories**: I can now automatically fix vulnerabilities in your GitHub repositories by creating pull requests with the necessary patches and updates.
2. **Assign to collaborators and request reviews**: When creating pull requests to fix vulnerabilities, I can assign them to the appropriate team members and request reviews from designated reviewers.
3. **Activity visibility**: I now let you see all the activities I perform, such as:
* When I create a change request for GitHub or GitLab
* When I create a Jira ticket
1. **Fix vulnerabilities in GitLab repositories**: I can now automatically fix vulnerabilities in your GitLab repositories by creating merge requests with the necessary patches and updates.
1. I can now read and understand a wide range of file formats:
* **Images**: JPEG, PNG, WebP
* **Documents**: PDF, TXT, CSV, Markdown, YAML, JSON, XML
* **Code and config**: Go, JavaScript/TypeScript, Python, Java, C/C++, C#, PHP, Ruby, Rust, Swift, Kotlin, Scala, Dart, Shell scripts, SQL, HTML, CSS, Config files (INI, TOML, CONF)
You can upload these files directly to me for analysis, security checks, compliance validation, or remediation guidance - no need to convert them first.
1. [**Jira**](/tools/jira): I can now raise, track, and update Jira tickets from start to finish.
1. [**Code assessment**](/guides/skills/code-security): I can now run a comprehensive code security assessment, summarizing the overall security posture across all code, highlighting top vulnerable repositories, key issues, trends, and more. This makes it easier to spot and address security risks in code early, before they become bigger problems. Try this:
```markdown Code assessment icon=code wrap theme={"system"}
Run a code security assessment. Where do we stand with our code security?
```
2. **Fix IaC issues in repositories** ([GitHub](/tools/github) and [GitLab](/tools/gitlab)): I can automatically detect Infrastructure-as-Code (IaC) misconfigurations and raise a pull request to fix them before they reach production.
1. **Vulnerability assessment**: I can now provide a comprehensive cloud vulnerability assessment, highlighting summaries, top vulnerable assets, vulnerabilities nearing or past SLA deadlines, trends, and more. This makes it easier to spot and act on vulnerabilities that need urgent attention. Try this:
```markdown Vulnerability assessment icon=bug wrap theme={"system"}
Where do we stand with cloud vulnerabilities right now?
```
1. **Vulnerabilities SLA approaching**: I flag vulnerabilities that are getting close to their remediation deadlines, helping you prioritize before they breach SLA. Try this:
```markdown Vulnerabilities approaching SLA deadlines icon=bug wrap theme={"system"}
Any vulnerabilities in our cloud environments that are approaching SLA?
Our SLA policies:
- Critical: hours
- High: hours
- Medium: hours
- Low: hours
Warning thresholds (advance notice):
- Critical: hours
- High: hours
- Medium: hours
- Low: hours
```
By default, SLAs are *Critical* `7 days`, *High* `14 days`, *Medium* `60 days`, and *Low* `180 days`, with advance warning thresholds of `1 day`, `3 days`, `7 days`, and `14 days` respectively, all configurable to match your organization's SLA policies.
2. **Vulnerabilities SLA breached**: I highlight vulnerabilities that have already missed their SLA deadlines, using the same default SLA durations which can also be customized. \\
3. **Download vulnerabilities approaching and breached SLA**: I can export both approaching and breached SLA vulnerabilities to CSV for deeper analysis and reporting.
1. [**Email**](/tools/email): You can now reach me at [hi@pleri.me](mailto:hi@pleri.me) and I'll help with alerts, questions, or tasks directly from your inbox.
1. **Conversation history**: You can now revisit previous chats with me. This sets the foundation for a unified experience where every interaction across Slack, email, tasks, and more becomes part of one continuous conversation.
1. **Export assets, findings, vulnerabilities, risks**: I can now prepare all your data for download: assets, findings, vulnerabilities, and risks, so you can share reports or dig deeper whenever you need.
2. [**Tasks**](/guides/tasks): You can now assign me tasks. I'll run them on schedule, keep an eye on things, and send you updates, just like any great engineer would.
3. [**Vanta**](/tools/vanta): I've integrated with Vanta! I'll use it to help keep your compliance work on track and your security posture up to date.
4. [**Drata**](/tools/drata): I now work with Drata too. I'll make sure your risks and controls stay aligned and help you pass those audits faster.
5. **Stay in the loop with cloud security news**: I can now keep you updated with the latest from AWS, Azure, and GCP.