Documentation release for the Spectra Assure CLI 3.5.8 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.9.1 Portal version.

Community​

• Updated the product release notes

Other​

• Updated the AI testing guide to include the following models with SPLX data: nvidia/NVIDIA-Nemotron-3-Nano-30B-A3B-Base-BF16 and nvidia/NVIDIA-Nemotron-3-Nano-30B-A3B-FP8

• Added new behaviors within the following range to the reference docs: BH11937 - BH11956

Documentation release for the Spectra Assure CLI 3.5.7 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.8.2 Portal version.

CLI​

• Added CLI-only support for Docker Hardened Images import to the Importing files from URLs section

Portal​

• Added support for HuggingFace and Maven import to Portal

Community​

• Removed the quarantine reason from the package header in the Community quick start, as it is no longer displayed in the UI. The rules for quarantining packages remain unchanged

• Updated the product release notes

Other​

• Added Spectra Assure scanning guidelines to help users understand which parts of a software package are scanned based on its package type. The guidelines include a general introduction to scanning with Spectra Assure, as well as guides for specific package types, including ML models and VM images

• Added new services to the following service categories:

  • Chat exchange: SAP Emarsys Messaging API, SAP Emarsys Send Message API, SAP Emarsys SMS Partner API
  • Data exchange: Mimecast API, SAP Emarsys API, Sophos API
  • Mail exchange: SAP Emarsys Email Campaign API, SAP Emarsys Send Email API

• Updated the product release notes

• Added support for PyInstaller and InstallBuilder on Linux; both are now listed under Supported installer formats

• Added new behaviors to the reference docs:

  • BH11957 - BH11998
  • BH15382
  • BH15383
  • BH16528 - BH16532
  • BH19594 - BH19601

Documentation release for the Spectra Assure CLI 3.5.6 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.8.1 Portal version.

Portal​

• Added support for exporting RL-SAFE reports at different points in a package version history from the Projects page

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.6.6

Other​

• Added new services to the following service categories:

  • Chat exchange: LiveChat Agent API, LiveChat Agent Send Message API, LiveChat API, LiveChat Customer API, LiveChat Customer Send Message API, LivePerson API, LivePerson Domain API, LivePerson Fetch Message API
  • Mail exchange: Elastic Email API, Elastic Email Fetch Email API, Elastic Email Send Email API, Mailjet Email API, Mailjet Email Fetch Email API, Mailjet Email Send Email API, Zendesk API
  • VoIP provider: AVOXI API, Sinch Conversation API, Sinch Conversation Send Message API, Sinch Elastic SIP Trunking API, Sinch Voice API, Sinch Voice Callouts API, Sinch Voice Calls API, Sinch Voice Conferences API

• Updated the AI testing guide to include the following models with SPLX data:

  • nvidia/NVIDIA-Nemotron-3-Nano-30B-A3B-BF16
  • Qwen/Qwen3-VL-8B-Instruct
  • Qwen/Qwen3-VL-30B-A3B-Instruct
  • Qwen/Qwen3.5-9B
  • Qwen/Qwen3.5-27B
  • Qwen/Qwen3.5-35B-A3B
  • Qwen/Qwen3.5-397B-A17B

• Added the Gemini service to the Supported services table to support liveness check for the Gemini API key

• Added the Gemini API key to the list of supported secrets

• Redesigned the Community and language coverage, File format coverage, and Package manifest coverage pages to improve readability

Documentation release for the Spectra Assure CLI 3.5.5 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.7.3 Portal version.

CLI​

• Added CLI-only support for Maven package import to the Importing files from URLs section

Integrations​

• Updated the rl-protect download links and hashes for version 1.1.0

• Updated a list of supported package manifests for the latest version of rl-protect

• Updated the rl-protect server list command to display user account details, monthly quota, and current usage information

• Added new --target-* options to the rl-protect scan command. Use these options to select a specific artifact of a published software package version for rl-protect to scan. Note that combining different --target-* options comes with some restrictions

• Added usage examples for rl-protect commands to illustrate common usage patterns

• Updated the rl-protect release notes

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.6.5

Community​

• Updated the product release notes

Other​

• Updated schemas and schema examples with new fields. In particular:

  • rl-cve now contains install and scenario fields
  • rl-json now contains install and matches fields under the identity category

• Updated the product release notes

Documentation release for the Spectra Assure Community update.

Community​

• Updated the Community API reference docs and the API usage tiers guide with information on rate limiting

• Added a link to the new JFrog Artifactory integration on the rl-protect integrations page

• Updated the product release notes

Other​

• Published a best practices guide for protecting your software projects from supply chain attacks

Documentation release for the Spectra Assure CLI 3.5.4 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.7.2 Portal version.

CLI​

• Added CLI-only support for HuggingFace model import to the Importing files from URLs section

• Updated the rl-deploy download links and hashes for version 2.6.4

Portal​

• Updated the descriptions for release_date and is_released fields in the Portal API reference documentation. If a version is released but the release date is omitted, the release_date value defaults to the current date

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.6.4

Community​

• Added ClawHub to the list of supported communities

• Updated the product release notes

Other​

• Added the following services to the existing Data exchange service list: Bitbucket API, Sentry API, Meraki API, Veracode API

• Added the following services to the existing User finance service list:

  • Airwallex Payment API, Airwallex Payment Sandbox API, Airwallex API, Airwallex Sandbox API
  • QuickBooks Online Sandbox API, QuickBooks Online Payment Sandbox API, QuickBooks Online API, QuickBooks Online Payment API
  • Paya Payment Sandbox API, Paya Payment API, Paya API, Paya Sandbox API
  • Payoneer Payment Sandbox API, Payoneer Sandbox API, Payoneer Payment API, Payoneer API, Payoneer Authorization Sandbox API, Payoneer Authorization API

• Updated the product release notes

Documentation release for the Spectra Assure CLI 3.5.3 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.7.1 Portal version.

Portal​

• Updated the the Portal API reference documentation:

  • Added and corrected error codes across several endpoints
  • Updated descriptions to improve clarity
  • Approval endpoints are now listed only in their own category, and no longer duplicated in Version

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.6.3

Community​

• The Show report for a package version endpoint response now includes ai_insights

• Updated the product release notes

Other​

• On Community and language coverage and File format coverage pages, added support for Parquet as an archive format

• Added new behaviors within the following ranges to the reference docs:

  • BH11999 - BH12020
  • BH16520 - BH16527
  • BH19588 - BH19593

Documentation release for the Spectra Assure CLI 3.5.2 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.6.2 Portal version.

CLI​

• Updated the rl-deploy download links and hashes for version 2.6.3

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.6.2

Community​

• Updated the product release notes

Other​

• Added the following secrets to the list of supported secrets: Private Packagist API credentials, Private Packagist Conductor token, Private Packagist organization token, Private Packagist organization read-only token, Private Packagist user token

Documentation release not tied to any product update.

Community​

• Updated conditions for the pass verdict in the Community quick-start guide

Other​

• Updated the AI testing guide to include the following models with SPLX data:

  • google/gemma-4-26B-A4B-it
  • google/gemma-4-31B-it
  • google/gemma-4-E2B-it
  • google/gemma-4-E4B-it
  • meta-llama/CodeLlama-70b-Instruct-hf
  • microsoft/Phi-3-Mini-128K-Instruct
  • microsoft/Phi-3.5-mini-instruct
  • microsoft/phi-4
  • microsoft/Phi-4-reasoning
  • Qwen/Qwen3-Coder-30B-A3B-Instruct
  • Qwen/Qwen3-30B-A3B-Instruct
  • xai-org/grok-2

• Fixed typos in the mistralai/Mistral and deepseek-ai/DeepSeek-Coder-1.3b-Instruct model names in the AI testing guide

Documentation release for the Spectra Assure CLI 3.5.1 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.6.1 Portal version.

CLI​

• Added support for GHSA ID (GitHub Security Advisories identifier) to the find command

Portal​

• Added a new View Audit Logs page where Organization administrators can review, filter, investigate, and export audit events

• New endpoints for exporting Portal logs have been added to the Portal API

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.6.1

Other​

• The RL-CVE report now includes the ai-summary field

Documentation release for the Spectra Assure Community update.

Community​

• The Community quick-start guide now includes the Package quarantine section explaining a new flag for open-source software packages that may be unsafe until they can be verified as trustworthy

• The Show details about a package endpoint response now includes quarantine

• Updated the product release notes

Documentation release for the Spectra Assure CLI 3.5.0 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.5.2 Portal version.

CLI​

• Updated the rl-deploy download links and hashes for version 2.6.2

• Added the Tree-sitter dependency to the list of Third-party open source software

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.6.0

Community​

• Added Maven to the list of supported communities

• Added Community Pulse to the Community homepage

• Updated the product release notes

Integrations​

• Updated the rl-protect download links and hashes for version 1.0.3

Other​

• Updated the product release notes

• Added AI Skills support to the Community and language coverage page

• Updated the AI testing guide to include the following models with SPLX data: deepseek-ai/DeepSeek-V3.2, google/gemma-2-2b-it, google/gemma-2-9b-it, google/gemma-3-270m-it, google/gemma-3n-E2B-it, mistralai/Devstral-Small-2-24B-Instruct-2512, mistralai/Ministral-3-3B-Instruct-2512, mistralai/Ministral-3-8B-Instruct-2512, mistralai/Ministral-3-14B-Instruct-2512

• Added the missing overrides section to the rl-profile example

• Refreshed the policy and behavior statistics

• Added new Threat hunting policies to the documentation: TH16129, TH16130, TH16131, TH16701, TH16702, TH16703, TH16704, TH16705, TH16801, TH16802, TH16803, TH16804, TH16805, TH17133, TH17134, TH17135, TH17136, TH17137, TH20117, TH30114, TH30115

• Added new behaviors to the reference docs:

  • BH12021 - BH12029
  • BH16482 - BH16519
  • BH19586
  • BH19587

Documentation release for the Spectra Assure CLI 3.4.2 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.5.1 Portal version.

CLI​

• Added Cista and RapidJSON licenses to the list of Third-party open source software

Portal​

• Documented the new option that lets users receive an email notification when any of the following actions on their Portal instance are complete:

  • file upload and URL/PURL import on both File Stream and Projects pages
  • moving file to a project
  • version or package reanalysis, initiated from the Actions menu or triggered by a group or organization policy configuration change

• Updated the Portal API reference documentation with a new endpoint for viewing information about the Spectra Assure Community account

Community​

• Updated the product release notes

Other​

• Added the complete rl-protect report schema and example under Concepts & Reference

• Added a page for the new OSS repository service category, which lists all services tied to open-source software (OSS) repositories

• Renamed the Spectra Assure personal access token to Spectra Assure Portal personal access token in the list of supported secrets

• Added new behaviors within the following ranges to the reference docs:

  • BH12030-BH12036
  • BH16445-BH16481

Documentation release for the Spectra Assure CLI 3.4.1 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.4.2 Portal version.

CLI​

• Updated the rl-deploy download links and hashes for version 2.6.1

Portal​

• New endpoints for managing Portal users when SSO is enabled have been added to the Portal API

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.5.9

Community​

• Created an API usage tiers and upgrade guide explaining the differences between Community and Portal APIs and their respective tiers. It also helps users choose the appropriate tier and understand what changes when moving between tiers

• Updated the product release notes

• Added the new endpoint for checking user account information to the Community API reference docs

Integrations​

• Updated the rl-protect download links and hashes for version 1.0.2

Other​

• Updated the product release notes

• Added the following secrets to the list of supported secrets:

  • Web service access credentials: GitLab OAuth application credentials
  • Web service access tokens: GitLab cluster agent token, GitLab deploy token, Gitlab PAT Legacy, Sentry organization authentication token, Sentry user authentication token, SonarQube badge token, SonarQube global analysis token, SonarQube project analysis token, SonarQube scoped organization token, SonarQube user token
  • Web service API keys: Anthropic admin API key, OpenRouter API key, Perplexity API key

• Updated the list of User finance services

• Added support for GHSA to rl-json

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.4.1 Portal version.

Integrations​

• Updated the rl-protect download links and hashes for version 1.0.1

Other​

• Updated the product release notes

Content updates for Spectra Assure Community API and integrations.

Community​

• Updated the Community API reference documentation with the latest changes released in the API. Note that the repository path parameter has been renamed to community in the "Show report for a package version" and "Show details about a package" endpoints.

Integrations​

• Added a section with links to official rl-protect integrations on the rl-protect landing page

• Fixed incorrect connection name example in the rl-protect quick start guide

Documentation release for the Spectra Assure CLI 3.4.0 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.3.2 Portal version.

CLI​

• Updated the rl-deploy download links and hashes for version 2.6.0

• Transformed the list in the Importing files from URLs section of the scan command page into a table to make the information on the supported URLs and PURLs more readable

Portal​

• Added support for PURL import to File Stream and Projects

• Added Supported URLs and PURLs section to File Stream

• Added support for managing users via SCIM (System for Cross-domain Identity Management) when SAML SSO method is used

• Added the new Import a version from PURL endpoint to the Portal API specification

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.5.8

Integrations​

• Added a landing page for rl-protect docs in the new "Community integrations" section

• Created a quick start guide and reference documentation for supported commands in rl-protect docs

• Published release notes for the first official version of rl-protect

Other​

• Updated the product release notes

• Updated a list of models with SPLX data in the AI testing guide

• Refreshed the policy and behavior statistics

• On the Community and language coverage page, added support for Bcrypt Private Keys under Cryptography

• Added a Package manifest coverage page that lists all package manifest formats supported by Spectra Assure and rl-protect

Documentation release for the Spectra Assure CLI 3.3.3 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.3.1 Portal version.

Portal​

• Marked the Content-Length parameter as required when uploading and scanning a version

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.5.7

Other​

• Added new behaviors to the reference docs: BH12037, BH12038, BH12039, BH12040, BH12041, BH12042, BH12043, BH12044, BH12045, BH12046, BH12047, BH12048, BH12049, BH12050, BH12051, BH12052, BH12053, BH12054, BH12055, BH12056, BH12057, BH12058, BH12059, BH12060, BH12061, BH12062, BH15374, BH15375, BH15376, BH15377, BH15378, BH15379, BH15380, BH15381, BH16439, BH16440, BH16441, BH16442, BH16443, BH19581, BH19582, BH19583, BH19584, BH19585

• Added support for Skopeo to the Community and language coverage page

• Renamed the Analysis reports category under Concepts & Reference to Schemas. This category now contains Configuration schemas and Report schemas to highlight the difference between different schemas

Documentation release for the Spectra Assure CLI 3.3.2 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.2.2 Portal version.

Portal​

• New endpoints for working with group and organization profile configuration files have been added to the Portal API

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.5.6

Community​

• Updated the product release notes

Other​

• Added information on AI usage to CLI and Portal privacy guides

• Under Concepts & Reference, created a new page with the complete rl-profile configuration file schema and example

Documentation release for the Spectra Assure CLI 3.3.1 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.2.1 Portal version.

CLI​

• Updated the rl-deploy download links and hashes for version 2.5.0

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.5.5

Community​

• Published the product release notes page for Spectra Assure Community

• Added MCP Registry to the Supported communities section on the Community category landing page

Other​

• Updated the tables for the existing service categories. In particular: Chat exchange, Data exchange, Data provider, File exchange, User finance, VoIP provider

• Added support for Safetensors to the Community and language coverage page and Supported archive formats table

• Added new licenses and behaviors to reference docs

Documentation release for the Spectra Assure CLI 3.3.0 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.1.2 Portal version.

CLI​

• Updated the rl-deploy download links and hashes for version 2.4.9

• Added Amazon ECR (AWS ECR) support to the scan command

Portal​

• Created a new Manage CLI Capacity page where Organization Administrators can allocate portions of the total monthly quota to each registered CLI site key, ensuring that each CLI's dedicated quota is preserved and cannot be consumed by other CLIs within the organization

• Included details on the CLI usage for an organization in the Usage details for an organization endpoint

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.5.4

Other​

• Added new behaviors to the reference docs: BH12079, BH12080, BH15372, BH15373

• Refreshed the policy and behavior statistics

• Updated a list of models with SPLX data in the AI testing guide

• Added support for ONNX to the Community and language coverage page and Supported archive formats table

• Added support for RL-SAFE to the Supported archive formats table

• Added Spectra Assure Community to the docs homepage

• Reordered and moved all categories in the navbar except for ReversingLabs to the left