New release of the Spectra Assure Portal and Public API documentation, covering the 2026.4.1 Portal version.
rl-protect download links and hashes for version 1.0.1Content updates for Spectra Assure Community API and integrations.
repository path parameter has been renamed to community in the "Show report for a package version" and "Show details about a package" endpoints.Added a section with links to official rl-protect integrations on the rl-protect landing page
Fixed incorrect connection name example in the rl-protect quick start guide
Documentation release for the Spectra Assure CLI 3.4.0 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2026.3.2 Portal version.
Updated the rl-deploy download links and hashes for version 2.6.0
Transformed the list in the Importing files from URLs section of the scan command page into a table to make the information on the supported URLs and PURLs more readable
Added support for PURL import to File Stream and Projects
Added Supported URLs and PURLs section to File Stream
Added support for managing users via SCIM (System for Cross-domain Identity Management) when SAML SSO method is used
Added the new Import a version from PURL endpoint to the Portal API specification
Added a landing page for rl-protect docs in the new "Community integrations" section
Created a quick start guide and reference documentation for supported commands in rl-protect docs
Published release notes for the first official version of rl-protect
Updated the product release notes
Updated a list of models with SPLX data in the AI testing guide
On the Community and language coverage page, added support for Bcrypt Private Keys under Cryptography
Added a Package manifest coverage page that lists all package manifest formats supported by Spectra Assure and rl-protect
Documentation release for the Spectra Assure CLI 3.3.3 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2026.3.1 Portal version.
Content-Length parameter as required when uploading and scanning a version Added new behaviors to the reference docs: BH12037, BH12038, BH12039, BH12040, BH12041, BH12042, BH12043, BH12044, BH12045, BH12046, BH12047, BH12048, BH12049, BH12050, BH12051, BH12052, BH12053, BH12054, BH12055, BH12056, BH12057, BH12058, BH12059, BH12060, BH12061, BH12062, BH15374, BH15375, BH15376, BH15377, BH15378, BH15379, BH15380, BH15381, BH16439, BH16440, BH16441, BH16442, BH16443, BH19581, BH19582, BH19583, BH19584, BH19585
Added support for Skopeo to the Community and language coverage page
Renamed the Analysis reports category under Concepts & Reference to Schemas. This category now contains Configuration schemas and Report schemas to highlight the difference between different schemas
Documentation release for the Spectra Assure CLI 3.3.2 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2026.2.2 Portal version.
Documentation release for the Spectra Assure CLI 3.3.1 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2026.2.1 Portal version.
rl-deploy download links and hashes for version 2.5.0 Published the product release notes page for Spectra Assure Community
Added MCP Registry to the Supported communities section on the Community category landing page
Updated the tables for the existing service categories. In particular: Chat exchange, Data exchange, Data provider, File exchange, User finance, VoIP provider
Added support for Safetensors to the Community and language coverage page and Supported archive formats table
Documentation release for the Spectra Assure CLI 3.3.0 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2026.1.2 Portal version.
Updated the rl-deploy download links and hashes for version 2.4.9
Added Amazon ECR (AWS ECR) support to the scan command
Created a new Manage CLI Capacity page where Organization Administrators can allocate portions of the total monthly quota to each registered CLI site key, ensuring that each CLI's dedicated quota is preserved and cannot be consumed by other CLIs within the organization
Included details on the CLI usage for an organization in the Usage details for an organization endpoint
Added new behaviors to the reference docs: BH12079, BH12080, BH15372, BH15373
Updated a list of models with SPLX data in the AI testing guide
Added support for ONNX to the Community and language coverage page and Supported archive formats table
Added support for RL-SAFE to the Supported archive formats table
Added Spectra Assure Community to the docs homepage
Reordered and moved all categories in the navbar except for ReversingLabs to the left
Documentation release for the Spectra Assure CLI 3.2.5 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.12.2 Portal version.
Added information about enabled password protection and package download options when ReversingLabs Support is selected in the first step of the report sharing workflow
Updated the Vendor communication guide with an option to share the report automatically with ReversingLabs Support from the report sharing dialog
Updated the SAFE Viewer download links and hashes for version 1.5.3
Removed the Snap download format for SAFE Viewer due to Electron build errors
Added new models to the list of models with SPLX data in the AI testing guide
Added new behaviors to the reference docs: BH12081, BH12082, BH12083, BH12084, BH12085, BH12086, BH12087, BH12088, BH12089, BH12090, BH12091, BH15371, BH16426, BH16427, BH16428, BH18253, BH18254, BH19580
On the Community and language coverage page added support for MS Private Keys under Cryptography
Documentation release for the Spectra Assure CLI 3.2.3 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.12.1 Portal version.
Updated the rl-deploy download links and hashes for version 2.4.8
Added PS Gallery support to the scan command
Added information on storing authentication details provided during URL import to File Stream, Projects workflows, and Data privacy pages
Created a new Insights guide explaining the new issue aggregator functionality on the Portal
Created a new Insights workflows page showing users how to work with the new feature to get the best results
Added a list of roles to the Link Name step of sharing a report, including the new ReversingLabs Support role
Created a new conceptual guide - Understanding the Spectra Assure approach - to help prospects and customers align their needs with the product capabilities
Resolved minor issues in the conceptual guide about Spectra Assure analysis
Added new models to the list of models with SPLX data in the AI testing guide
Added new Data provider and VoIP provider services to docs
Updated the tables for the existing service categories. In particular: Chat exchange, Data exchange, ReversingLabs, User finance, User identity
Added new behaviors to the reference docs: BH12092, BH12093, BH12094, BH12095, BH12096, BH15368, BH15369, BH15370, BH16422, BH16423, BH16424, BH16425, BH17446, BH17447, BH19577, BH19578, BH19579
Added Linux and Windows to policy repository statistics
On the Community and language coverage page added support for Signatures (OpenPGP) under Cryptography
Documentation release for the Spectra Assure CLI 3.2.2 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.11.2 Portal version.
Under System recommendations for rl-secure, updated the minimum recommended SSD storage for large file processing to 50 GB
Updated the rl-deploy download links and hashes for version 2.4.7
Reorganized the Portal docs to match the Portal UI redesign. In particular, the following changes were made:
Removed the Members and Settings pages from Navigate the Portal section. Replaced them with the Policies page used for configuring policies on group level
Renamed the User and group management page to Roles and permissions. This page now includes only a list of user roles and permissions on the Portal
Renamed the Members page to Group and member management. Updated the page with content from the User and group management page
Created new Analysis capacity and Organization policy configuration pages
Renamed the Administration guides section to Organization settings for configuring options on organization level. This section now includes:
Moved the File Stream workflows and Projects workflows pages to the Workflows guides section
Added an admonition with more information on the derived version upload to the Projects page
Updated the Software table name (now File Stream table) and fields on the File Stream page, as well as the Packages and Releases (now Versions) table fields on the Projects page
Added the Password change section on the How to access the Portal page
Requires Approval status has been renamed to Approval Pending throughout the docs
Updated the outdated interactive guides and reduced their number in the Portal docs to improve the content flow
Updated the SAFE Viewer download links and hashes for version 1.5.1
Added new SAFE Viewer install method in Windows. Now the SAFE Viewer can be installed both from the UI and the Terminal
On Community and language coverage and File format coverage pages added support for:
Added support for GHSA to the Component identification page
Refreshed the behavior statistics
Added new behaviors to the reference docs: BH12097, BH12098, BH16417, BH16418, BH16419, BH16420, BH16421, BH19576
Documentation release for the Spectra Assure CLI 3.2.0 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.11.1 Portal version.
Updated the policy configuration schema with new options under the tracking section. The main policy configuration example now also includes this information
Added rl-diff to the report command and the Diff guide
Updated the rl-deploy download links and hashes for version 2.4.6
Added the new --no-compression parameter for Docker image import to the scan command
Added the new vulnerabilities.summary field in the rl-json report schema
Added rl-diff support to the Export analysis report API endpoint
New endpoints for working with Spectra Assure Community have been added to the Portal API
Added a new AI testing guide to the Concepts > Conceptual guides section of the docs. This guide gives insight into AI models and how they're tested and scanned with Spectra Assure
Updated the product release notes
Created a new page with the complete rl-diff report schema and a report example, and included the new report type on the Spectra Assure analysis reports page under Concepts
On Community and language coverage and File format coverage pages, added support for:
Updated the total amount of analyzed packages for each community on individual policy pages. The policy graphs now also include VS Code and PS Gallery data
Added new Malware detection policies to the documentation: SQ30251, SQ30252, SQ30253
Added new Threat hunting policies to the documentation: TH16601, TH16602, TH16603, TH16604, TH16605, TH20115, TH20116
Added new behaviors within the following ranges to the reference docs:
BH12099-BH12100BH13912-BH13999BH14101-BH14149BH15101-BH15112BH15348-BH15367BH16394-BH16416BH17442-BH17445BH19571-BH19575Documentation release for the Spectra Assure CLI 3.1.2 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.10.2 Portal version.
Amazon Bedrock long-term API key and Amazon Bedrock short-term API key to the list of supported secretsDocumentation release for the Spectra Assure CLI 3.1.1 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.10.1 Portal version.
Updated the SAFE Viewer download links and hashes for version 1.4.9
Added the missing description for the Component Age graph on the Report summary page
Added a new Static dependencies guide to the Concepts > Conceptual guides section of the docs. This guide gives insight into static dependencies and the process of their identification in Spectra Assure
Updated the product release notes
Added new behaviors to the reference docs: BH13860, BH13861, BH13862, BH13863, BH13864, BH13865, BH13866, BH13867, BH13868, BH13869, BH13870, BH13871, BH13872, BH13873, BH13874, BH13875, BH13876, BH13877, BH13878, BH13879, BH13880, BH13881, BH13882, BH13883, BH13884, BH13885, BH13886, BH13887, BH13888, BH13889, BH13890, BH13891, BH13892, BH13893, BH13894, BH13895, BH13896, BH13897, BH13898, BH13899, BH13900, BH13901, BH13902, BH13903, BH13904, BH13905, BH13906, BH13907, BH13908, BH13909, BH13910, BH13911
Fixed the incorrect link to the Portal data privacy and collection guide in the Featured content part of the docs homepage
In the Concepts category dropdown, replaced Third-Party Risk Management (TPRM) with Conceptual guides
Added the develop and release package dependency glossary entries to Concepts > Basic concepts
Documentation release for the Spectra Assure CLI 3.1.0 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.9.2 Portal version.
Added support for Docker Image import to the Importing files from URLs section on the scan command page
Updated the rl-deploy download links and hashes for version 2.4.5
Separated the Policy configuration workflow from the Portal Settings page. This helps users focus on the actions available on each page of Portal settings, without having to scroll through the general information every time
Added the new Session Lifetime Configuration page to the Portal docs
Updated the interactive guides to show the new Session Lifetime Configuration page in the Portal Settings page sidebar
Updated the SAFE Viewer download links and hashes for version 1.4.8
Removed the Experimental badge from macOS
Updated the product release notes
Added Spectra Assure personal access token to the list of supported secrets
Added the BH13859 behavior to the reference docs
Updated the Behavior prevalence section with changes regarding the generation of maliciousness data
Added the following services to the AI and User identity service pages:
GitHub Copilot APIGitHub Copilot Authentication APIGitHub Copilot Chat Service APIDocumentation release for the Spectra Assure CLI 3.0.3 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.9.1 Portal version.
Updated the rl-deploy download links and hashes for version 2.4.4
Added a new admonition on updating the entire purl with the rename command to make it clear that renaming the entire purl is a multi-step process
Documented the new Portal Package Limit progress bar on the Portal Settings page
Updated the interactive guides to show the new Portal Package Limit progress bar on the Portal Settings page
Added diagrams to the Components guide to clearly illustrate the examples
Added IntuneWin to the Supported archive formats table and Community and language coverage page
Updated the sidebar descriptions for some Sensitive information policies to match new page descriptions
Added new behaviors to the reference docs: BH13851, BH13852, BH13853, BH13854, BH13855, BH13856, BH13857, BH13858, BH16393
Redesigned the Community and language coverage page to make the community-related information readily available
Documentation release for the Spectra Assure CLI 3.0.2 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.8.2 Portal version.
rl-deploy download links and hashes for version 2.4.3Added the following new services to the list of supported secrets:
eBay production credentialsOry opaque access token, Ory opaque refresh tokenDeepSeek API key, Groq API keyDocumentation release for the Spectra Assure CLI 3.0.1 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.8.1 Portal version.
MaxFileSizeExceeded 400 response message to the Import a version from URL endpoint in the Portal APIAdded new helper tools rl-scan-url and rl-scan-purl to the CLI Docker image (rl-scanner)
Documented the new feature for importing software packages from URLs in the Portal Docker image (rl-scanner-cloud)
Updated the SAFE Viewer download links and hashes for version 1.4.5
Added support for the SAFE Viewer macOS installer (currently experimental)
Documentation release for the Spectra Assure CLI 3.0.0 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.7.3 Portal version.
Added new options related to package import to the rl-secure scan command
Added the new rl-secure export command
Updated the rl-deploy download links and hashes for version 2.4.2
Documented the new file upload wizard, which now also supports file import from a URL of choice. This feature is available both on the File Stream and the Projects pages
Updated the upload instructions in the Portal quick start guide
Added the new Import a version from URL endpoint to the Portal API specification
Renamed the Sync version endpoint to Rescan a version so it's clearer what action it refers to
Updated the Portal API specification to match the rl-checks report:
bad_checksum, bad_format, bad_password, and unsupported fields to StatisticsUpdated the interactive guides to show the new Upload button
Updated product release notes
Added DMG:APFS to the Supported archive formats table
Fixed multiple broken links in the CLI and Other sections of the 2025-07-17 docs changelog entry
Documentation release for the Spectra Assure CLI 2.9.0 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.7.2 Portal version.
Added the license status return codes to the following commands: init, list, report, sync, update, vault, rl-deploy, rl-safe
Updated the existing return codes in the scan and license commands
Created a policy configuration guide for Community
Updated the policy configuration schema
default_linux option community section for configuring trigger conditions for the policies focused on open source components and dependencies included in the applicationidentity.dependency.scenario fieldhash value to the processing.filter.matches field Updated the policy configuration guide for BOM editing according to policy configuration schema changes
Added the scanning guidelines to the TPRM guide, to help users get the most out of the Spectra Assure products and ensure accurate analysis results
Added new Threat hunting policies to the documentation: TH16501, TH16502, TH16503, TH16504, TH16505, TH16506, TH16507, TH16508, TH16509, TH18301, TH18302, TH30101, TH30102, TH30103, TH30104, TH30105, TH30106, TH30107, TH30108, TH30109, TH30110, TH30111, TH30112, TH30113
Added new behaviors to the reference docs: BH13836, BH13837, BH13838, BH13839, BH13840, BH13841, BH13842, BH13843, BH13844, BH13845, BH13846, BH13847, BH13848, BH13849, BH13850, BH16392
Added the new statistics.dependencies field in the rl-json report schema and the rl-checks report schema
Updated product release notes
Documentation release for the Spectra Assure CLI 2.8.2 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.7.1 Portal version.
rl-deploy version, release date, links, and hashes to v2.4.1Updated the SAFE Viewer download links and hashes for version 1.3.3
Fixed the incorrect description for the Components page of the report on the SAFE report landing page
Added a new Component identification guide to the Concepts > Conceptual guides section of the docs. This guide gives insight into components and the process of their identification in Spectra Assure
Updated the verified glossary entry with a more accurate explanation of software identity verification methods
Updated the maximum file size limit in the TPRM guide, the Partners landing page, the Licensing guide, the rl-scanner-cloud Docker image, and license and scan command examples
Documentation release for the Spectra Assure CLI 2.8.1 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.6.2 Portal version.
Updated the documentation for the rl-secure find command with instructions on how to use the new SBOM searching option
Updated the maximum file size limit for CLI processing on the CLI system recommendations page
Updated product release notes
Explained the new "Prevalence in Spectra Intelligence" section for behaviors that pulls the data from the ReversingLabs malware database
Documentation release for the Spectra Assure CLI 2.8.0 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.6.1 Portal version.
Added new OpenAI handler to the list of secrets on the find command page
Added the CTRE license to the list of Third-party open source software
Updated the rl-deploy version, release date, links, and hashes to v2.4.0
Updated product release notes
Added support for ZFS to the Community and language coverage page
Moved the preview stream configuration for the CLI Docker image (rl-scanner) to the Partners > Preview stream configuration page. Rewritten parts of this page to include new info
Added the Microsoft 365 Copilot API, Microsoft Copilot API, and Microsoft Copilot Chat Service API endpoints to the AI services table
Added new behaviors to the reference docs: BH13833, BH13834, BH13835
Documentation release for the Spectra Assure CLI 2.7.1 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.5.2 Portal version.
Fixed the incorrect number of Threat hunting and Differential analysis policies on the Policies category landing page
Updated the Supported proprietary licenses list with the missing licenses
Added a page for new ReversingLabs service category, which lists all official Spectra services
Separated AI and Data processor services, as well as Collaboration and Data exchange services for ease of reference
Added an explainer table with a Service type column to individual service category pages to make the distinction between a service category and a service type more clear
Listed some previously undocumented service types on the xBOM page
Added new behaviors to the reference docs: BH13830, BH13831, BH13832, BH15356, BH15357, BH16391, BH17439, BH17440, BH17441
Documentation release for the Spectra Assure CLI 2.7.0 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.5.1 Portal version.
Updated the policy configuration schema
provider is a new required field, and flow is required in the networking.protocol.filter.address.service objectproduct, version, publisher and license are now optional in the processing.filter.identity.component and processing.filter.identity.dependency objectsdescription is a new optional field in processing.filter.identity.component and processing.filter.identity.dependency objectsediting is a new optional field in the processing.filter.identity.dependency objectprocessing.filter.hunting.behaviors now supports setting a behavior ID to 'pass'processing.filter.hunting.indicators allows targeting behaviors by their description textUpdated the policy configuration guides for behaviors and BOM editing according to policy configuration schema changes
Reorganized content on the vault command page to make it clearer which options are supported by which sub-command
Updated the content on the find command page
Updated product release notes
Reorganized content on the Community and language coverage page
Updated the rl-json report schema
report.metadata.components.identity, report.metadata.cryptography, report.metadata.dependencies.identity, report.metadata.ml_models, report.metadata.servicescatalogue version in the schemaSplit the report examples from schemas on all report schema pages in conceptual docs for a more consistent structure and easier access to examples
Increased font size in all tables to improve readability
First release of the Spectra Assure Community documentation.
The Spectra Assure Community product now has a dedicated section on the Spectra Assure docs website.
Previously, the Community item in the top navbar was a direct link to the official Community page. Now it's a dropdown that lets you access new content and makes space for future documentation about the product.
Specifically, the Community section of the docs website now contains:
vault command page in the CLI section of the 2024-04-10 docs changelog entryDocumentation release for the Spectra Assure CLI 2.6.3 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.4.2 Portal version.
Replaced SAFE with rl-html in the Supported report formats table on the report command page
Added explanations for custom return codes communicating the license state to the scan and license commands
Updated the SAFE Viewer version, hashes, and download links to v1.2.0
Added a section on the auto-approval feature to the Portal Settings page
Added the auto-approval feature to the File Stream vs Projects comparison table to indicate that it's supported in both
Added an RSS feed to the Changelog page, allowing users to subscribe to docs-related updates via RSS
Added new behaviors to the reference docs: BH13778, BH13779, BH13780, BH13781, BH13782, BH13783, BH13784, BH13785, BH13786, BH13787, BH13788, BH13789, BH13790, BH13791, BH13792, BH13793, BH13794, BH13795, BH13796, BH13797, BH13798, BH13799, BH13800, BH13801, BH13802, BH13803, BH13804, BH13805, BH13806, BH13807, BH13808, BH13809, BH13810, BH13811, BH13812, BH13813, BH13814, BH13815, BH13816, BH13817, BH13818, BH13819, BH13820, BH13821, BH13822, BH13823, BH13824, BH13825, BH13826, BH13827, BH13828, BH13829, BH15343, BH15344, BH15345, BH15346, BH15347, BH15348, BH15349, BH15350, BH15351, BH15352, BH15353, BH15354, BH15355, BH16389, BH16390, BH19570
Updated the product release notes
Mentioned the new Malware page of the report where applicable and updated the graphics to illustrate the changes
Added Coinminer, Dropper, and Mail to the list of supported threat types
Declared the SQ30101 policy as enabled by default
Removed the incorrect statement on ML models from the ML-BOM section of the xBOM page
Updated the link to the ReversingLabs EULA in the API reference documentation
Fixed a broken anchor link on the CLI report command page
Corrected the wrong rl-deploy version number in the last docs changelog update
Documentation release for the Spectra Assure CLI 2.6.2 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.4.1 Portal version.
Added a new status sub-command to rl-secure vault that checks if the password vault has been initialized for the specified package store
Added Palantir JWT to the list of supported secrets under the find command
Updated the rl-deploy version, release date, links, and hashes to v2.3.1
Added new behaviors to the reference docs: BH13765, BH13766, BH13767, BH13768, BH13769, BH13770, BH13771, BH13772, BH13773, BH13774, BH13775, BH13776, BH13777
Removed the incorrect reference to rl-cve from the rl-uri report schema frontmatter
Fixed a broken link in the Suppress secrets policy configuration guide
Fixed tags in the report example on the rl-uri report schema page
Removed the duplicate listing of differential analysis policies on the Policies > Threat hunting page
Transformed SAFE and Integrations categories into dropdowns. All important pages in these categories can now always be accessed from any part of the docs
Fixed the CBOM glossary entry to mention that it's included only in the CycloneDX report format
Documentation release for the Spectra Assure CLI 2.6.1 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.3.2 Portal version.
Added Anthropic API key to the list of supported secrets under the find command
Updated the main policy configuration example with new sections
Updated phrasing in all policy configuration guides to clarify where and how policy changes apply, and which policy configuration objects are used
Created a policy configuration guide for declaring network services
Created a policy configuration guide for BOM editing
Updated the instructions for networking filters to match the new opt-in behavior for declaring networking placeholders
Updated the policy configuration schema with new objects supported in the xBOM release (networking.protocol.filter.address.service, processing.filter.identity.component, processing.filter.identity.model_card, processing.filter.identity.dependency)
Updated the rl-checks report schema with objects added in the xBOM release (report.scans.scan-{type}.rl_store, report.scans.scan-{type}.assessments.assessment.evaluations)
Updated the Portal API specification:
Updated SAFE Viewer version, hashes, and download links to v1.1.1
Updated the product release notes
Added examples of ML models, services, and algorithms to the xBOM page
Added a missing behavior ID (BH13402) in the Monitor behavior category
Fixed some broken links to individual policies in expandable sections on the Known vulnerabilities and Application hardening pages
Made a distinction between the my.secure.software domain and region-specific domains across all pages that refer to servers and connectivity
Documentation changes related to the Spectra Assure CLI 2.6.0 / 2025.3.1 Portal product update.
--submit-only, --rl-portal-host, --rl-portal-server)Documentation release for the Spectra Assure CLI 2.6.0 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.3.1 Portal version.
Added new --[show-]models, --[show-]sbom, --[with-]license, and --no-dep[endencie]s options to the inspect command. Their usage has been illustrated by accompanying examples
Added the --no-tracking option to the report command
Marked the --no-vex option as deprecated in the report command
Expanded the admonition about --keep-reference on the rl-secure scan command page to include the Windows issue
Added the Windows issue regarding symbolic links to the CLI Troubleshooting page
Created a new How Spectra Assure analyzes software page under Concepts & Reference that explains the different stages in the analysis process. A diagram was used to visualize the entire process and make the order of analysis steps easier to understand
Created a new Services category under Concepts & Reference, containing all supported SaaSBOM services sorted by type
Reorganized the tables on the Community and language coverage page to improve search, navigation, and content maintenance
Added the following new policies to the documentation:
New policies in the Malware detection category focus on adware, PUAs and low-quality content in software components and their dependencies: SQ30121, SQ30205, SQ30122, SQ30204, SQ30201, SQ30206, SQ30203, SQ30202
New policies in the Digital signatures category focus on issues with countersigning and integrity validation of signatures: SQ20133, SQ20136, SQ20135, SQ20134, SQ20132
New policies in the Threat hunting category focus on developer reputation, detecting additional known software supply chain compromises, and identifying behaviors typical for infostealer, keylogger, and rootkit malware: TH15110, TH15403, TH20108, TH20113, TH15402, TH15401, TH20114, TH20112, TH18201, TH15405, TH15108, TH18202, TH15109, TH20110, TH15404, TH20109, TH20111
Updated the verified glossary entry with new verification types
Added new glossary entries for SaaSBOM, CBOM, ML-BOM, BOV, and VEX
Updated the Spectra Assure analysis reports page with new information on new Bill of Materials formats
Updated the product release notes
Added BTRFS filesystem support on Community and language coverage and File format coverage pages
Updated the CycloneDX and SPDX versions in the docs. We're now using CycloneDX 1.6 and SPDX 3.0.1
Documentation release for the Spectra Assure CLI 2.5.5 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.2.2 Portal version.
rl-deploy version, release date, links, and hashes to v2.3.0 Made a new Best practices for working with projects guide in the Portal docs. It includes the best naming practices, as well as all important information on the projects hierarchy and usage on Spectra Assure Portal
Separated the workflows from the Portal File Stream and Projects pages. This helps users focus on the actions available on each page, without having to scroll through the general information every time
Simplified the File Stream and Projects workflows and added roles tags to each. This eliminates the need to check the User and group management page for every action
Replaced all screenshots with interactive guides in the Portal docs
Moved the Reproducibility check section from the Projects page to the Report landing page
Updated the SAFE Viewer version, release date, links, and hashes to v1.0.4
Added information on the new File Stream header to the Summary page of the SAFE report. It allows users to export parts of the report in various formats and move the version to a project of their choice right from the top of the landing page of the report
Removed the incorrectly included RAT from the list of Threat types on the Summary page of the report
Re-designed API, Portal, and CLI category landing pages to look the same as Integrations, Partners, and SAFE category landing pages in our docs
Moved Reproducibility checks, Live secret validation, and Managing third-party risks guides to a new Conceptual guides sidebar category
Documentation release for the Spectra Assure CLI 2.5.4 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.2.1 Portal version.
Updated the rl-deploy version, release date, links, and hashes to v2.2.9
Updated the rl-secure list and rl-secure report pages to indicate that those commands don't require an active license
Added the new Entitlements section to the Settings page. It allows users to check which SAFE Assessment categories are enabled for their ReversingLabs cloud account and are evaluated during software analysis
Made changes to the Settings page. Screenshots on the page have been replaced with interactive guides, while the textual content has been refreshed
Fixed the incorrect year in the 2025.1.2 version title in the Portal release notes
Information about the ServiceNow integration can now be accessed from the Integrations page
Added support for creating the PDF summary (rl-summary-pdf) to the Portal Docker image documentation
Updated the information relating to the SAFE Assessment part of the report summary
Updated the SAFE Viewer version, release date, links, and hashes to v1.0.3
New behaviors have been added.
Landing pages for Application hardening and Threat hunting policies have been improved by adding links to headings so it's easier to navigate within the page.
Documentation release for the Spectra Assure CLI 2.5.3 product update.
New release of the Spectra Assure Portal and Public API documentation, covering the 2025.1.2 Portal version.
For a fresh start to the new year, we've slightly redesigned the home page.
There's a new product card for Integrations, a new section with a link to this changelog, and improved descriptions for Featured content.
Updated the information on Entitlements. Entitlements are now more dynamic, since they're no longer tied to the user license, but to the user account
Updated the list of secrets supported by the find command
Added the new PDF Summary export feature to the Portal and API docs
Resolved minor issues in the Portal API reference docs:
Updated the product release notes
Added a short description of the new PDF Summary export to the Analysis reports page
Removed all references to the unused endpoint (api.reversinglabs.com) from the docs