Documentation release for the Spectra Assure CLI 3.7.0 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.10.2 Portal version.

CLI​

• Updated policy configuration with new supported options: sbom_info for specifying custom metadata to add to the SBOM; liveness.verifier.endpoint.pinned_root for specifying hashes of pinned CA certificates, and support for SemVer in version range expressions for processing filters

• Updated the rl-deploy download links and hashes for version 2.6.6

Portal​

• The Portal API now supports working with the Catalog

Community​

• Updated the product release notes

Integrations​

• Updated the package manifest coverage page to indicate newly added support for yarn.lock (Modern) files in rl-protect

• Updated the rl-protect download links and hashes for version 1.2.0

• Updated the rl-profile configuration schema with new supported options (configuration.target, configuration.environment, policy.ai_code_intent, policy.governance.community.private, policy.overrides.POLICY-ID.patterns)

SAFE​

• Updated the SAFE Viewer download links and hashes for version 2.1.0

Other​

• Added the following new policies to the Threat hunting policy category: TH16132, TH16510, TH20118

• Added the following new behavior ranges to the reference docs: BH11931 - BH11936, BH15385 - BH15394, BH16533 - BH16535

Documentation release for the Spectra Assure CLI 3.6.0 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.10.1 Portal version.

CLI​

• Updated policy configuration to include the unmask_secrets option, used to store discovered secrets in plaintext format within the rl-json report

Portal​

• The Portal API now supports working with the File Stream

• Updated the product release notes

• Importing images from DockerHub into the Portal now requires DockerHub credentials

• RL-SAFE reports can be downloaded for analyzed files in the File Stream

Integrations​

• Updated the rl-protect download links and hashes for version 1.1.1

Resolve​

• Updated the download links, hashes, and product release notes for version 1.1.2

SAFE​

• Updated the SAFE Viewer download links and hashes for version 2.0.1

First release of the Spectra Resolve product documentation.

Resolve​

• A new product has joined the Spectra Assure platform - Spectra Resolve is an AI-native application security tool for dependency management. Access the official Resolve documentation from the new AI dropdown in the top navbar

Community​

• Updated the product release notes

Other​

• The Spectra Assure docs website now has a cookie consent banner powered by the CookieYes service. Website visitors can choose whether to reject or accept cookies, and manage their cookie preferences by following links in the banner

Documentation release for the Spectra Assure CLI 3.5.9 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.9.2 Portal version.

CLI​

• Updated the rl-deploy download links and hashes for version 2.6.5

• Updated CLI third-party licenses by removing the Yara license and adding the libexpat license

Portal​

• Added new Software catalog page where users can view and download all software packages in a Portal organization marked safe to use

• Added support for Docker Hardened Images to the Importing files from URLs section

• Updated the product release notes

• Created a page for AI settings where Organization Administrators can manage how built-in AI features are used across their Portal instance

SAFE​

• Updated the SAFE Viewer download links and hashes for version 2.0.0

Community​

• Created a new guide for the Spectra Code extension to help users identify and assess vulnerable dependencies early in development, both in their projects and in installed VS Code extensions - all directly within VS Code

• Updated Community API specification

Documentation release for the Spectra Assure CLI 3.5.8 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.9.1 Portal version.

Community​

• Updated the product release notes

Other​

• Updated the AI testing guide to include the following models with SPLX data: nvidia/NVIDIA-Nemotron-3-Nano-30B-A3B-Base-BF16 and nvidia/NVIDIA-Nemotron-3-Nano-30B-A3B-FP8

• Added new behaviors within the following range to the reference docs: BH11937 - BH11956

Documentation release for the Spectra Assure CLI 3.5.7 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.8.2 Portal version.

CLI​

• Added CLI-only support for Docker Hardened Images import to the Importing files from URLs section

Portal​

• Added support for HuggingFace and Maven import to Portal

Community​

• Removed the quarantine reason from the package header in the Community quick start, as it is no longer displayed in the UI. The rules for quarantining packages remain unchanged

• Updated the product release notes

Other​

• Added Spectra Assure scanning guidelines to help users understand which parts of a software package are scanned based on its package type. The guidelines include a general introduction to scanning with Spectra Assure, as well as guides for specific package types, including ML models and VM images

• Added new services to the following service categories:

  • Chat exchange: SAP Emarsys Messaging API, SAP Emarsys Send Message API, SAP Emarsys SMS Partner API
  • Data exchange: Mimecast API, SAP Emarsys API, Sophos API
  • Mail exchange: SAP Emarsys Email Campaign API, SAP Emarsys Send Email API

• Updated the product release notes

• Added support for PyInstaller and InstallBuilder on Linux; both are now listed under Supported installer formats

• Added new behaviors to the reference docs:

  • BH11957 - BH11998
  • BH15382
  • BH15383
  • BH16528 - BH16532
  • BH19594 - BH19601

Documentation release for the Spectra Assure CLI 3.5.6 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.8.1 Portal version.

Portal​

• Added support for exporting RL-SAFE reports at different points in a package version history from the Projects page

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.6.6

Other​

• Added new services to the following service categories:

  • Chat exchange: LiveChat Agent API, LiveChat Agent Send Message API, LiveChat API, LiveChat Customer API, LiveChat Customer Send Message API, LivePerson API, LivePerson Domain API, LivePerson Fetch Message API
  • Mail exchange: Elastic Email API, Elastic Email Fetch Email API, Elastic Email Send Email API, Mailjet Email API, Mailjet Email Fetch Email API, Mailjet Email Send Email API, Zendesk API
  • VoIP provider: AVOXI API, Sinch Conversation API, Sinch Conversation Send Message API, Sinch Elastic SIP Trunking API, Sinch Voice API, Sinch Voice Callouts API, Sinch Voice Calls API, Sinch Voice Conferences API

• Updated the AI testing guide to include the following models with SPLX data:

  • nvidia/NVIDIA-Nemotron-3-Nano-30B-A3B-BF16
  • Qwen/Qwen3-VL-8B-Instruct
  • Qwen/Qwen3-VL-30B-A3B-Instruct
  • Qwen/Qwen3.5-9B
  • Qwen/Qwen3.5-27B
  • Qwen/Qwen3.5-35B-A3B
  • Qwen/Qwen3.5-397B-A17B

• Added the Gemini service to the Supported services table to support liveness check for the Gemini API key

• Added the Gemini API key to the list of supported secrets

• Redesigned the Community and language coverage, File format coverage, and Package manifest coverage pages to improve readability

Documentation release for the Spectra Assure CLI 3.5.5 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.7.3 Portal version.

CLI​

• Added CLI-only support for Maven package import to the Importing files from URLs section

Integrations​

• Updated the rl-protect download links and hashes for version 1.1.0

• Updated a list of supported package manifests for the latest version of rl-protect

• Updated the rl-protect server list command to display user account details, monthly quota, and current usage information

• Added new --target-* options to the rl-protect scan command. Use these options to select a specific artifact of a published software package version for rl-protect to scan. Note that combining different --target-* options comes with some restrictions

• Added usage examples for rl-protect commands to illustrate common usage patterns

• Updated the rl-protect release notes

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.6.5

Community​

• Updated the product release notes

Other​

• Updated schemas and schema examples with new fields. In particular:

  • rl-cve now contains install and scenario fields
  • rl-json now contains install and matches fields under the identity category

• Updated the product release notes

Documentation release for the Spectra Assure Community update.

Community​

• Updated the Community API reference docs and the API usage tiers guide with information on rate limiting

• Added a link to the new JFrog Artifactory integration on the rl-protect integrations page

• Updated the product release notes

Other​

• Published a best practices guide for protecting your software projects from supply chain attacks

Documentation release for the Spectra Assure CLI 3.5.4 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.7.2 Portal version.

CLI​

• Added CLI-only support for HuggingFace model import to the Importing files from URLs section

• Updated the rl-deploy download links and hashes for version 2.6.4

Portal​

• Updated the descriptions for release_date and is_released fields in the Portal API reference documentation. If a version is released but the release date is omitted, the release_date value defaults to the current date

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.6.4

Community​

• Added ClawHub to the list of supported communities

• Updated the product release notes

Other​

• Added the following services to the existing Data exchange service list: Bitbucket API, Sentry API, Meraki API, Veracode API

• Added the following services to the existing User finance service list:

  • Airwallex Payment API, Airwallex Payment Sandbox API, Airwallex API, Airwallex Sandbox API
  • QuickBooks Online Sandbox API, QuickBooks Online Payment Sandbox API, QuickBooks Online API, QuickBooks Online Payment API
  • Paya Payment Sandbox API, Paya Payment API, Paya API, Paya Sandbox API
  • Payoneer Payment Sandbox API, Payoneer Sandbox API, Payoneer Payment API, Payoneer API, Payoneer Authorization Sandbox API, Payoneer Authorization API

• Updated the product release notes

Documentation release for the Spectra Assure CLI 3.5.3 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.7.1 Portal version.

Portal​

• Updated the the Portal API reference documentation:

  • Added and corrected error codes across several endpoints
  • Updated descriptions to improve clarity
  • Approval endpoints are now listed only in their own category, and no longer duplicated in Version

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.6.3

Community​

• The Show report for a package version endpoint response now includes ai_insights

• Updated the product release notes

Other​

• On Community and language coverage and File format coverage pages, added support for Parquet as an archive format

• Added new behaviors within the following ranges to the reference docs:

  • BH11999 - BH12020
  • BH16520 - BH16527
  • BH19588 - BH19593

Documentation release for the Spectra Assure CLI 3.5.2 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.6.2 Portal version.

CLI​

• Updated the rl-deploy download links and hashes for version 2.6.3

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.6.2

Community​

• Updated the product release notes

Other​

• Added the following secrets to the list of supported secrets: Private Packagist API credentials, Private Packagist Conductor token, Private Packagist organization token, Private Packagist organization read-only token, Private Packagist user token

Documentation release not tied to any product update.

Community​

• Updated conditions for the pass verdict in the Community quick-start guide

Other​

• Updated the AI testing guide to include the following models with SPLX data:

  • google/gemma-4-26B-A4B-it
  • google/gemma-4-31B-it
  • google/gemma-4-E2B-it
  • google/gemma-4-E4B-it
  • meta-llama/CodeLlama-70b-Instruct-hf
  • microsoft/Phi-3-Mini-128K-Instruct
  • microsoft/Phi-3.5-mini-instruct
  • microsoft/phi-4
  • microsoft/Phi-4-reasoning
  • Qwen/Qwen3-Coder-30B-A3B-Instruct
  • Qwen/Qwen3-30B-A3B-Instruct
  • xai-org/grok-2

• Fixed typos in the mistralai/Mistral and deepseek-ai/DeepSeek-Coder-1.3b-Instruct model names in the AI testing guide

Documentation release for the Spectra Assure CLI 3.5.1 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.6.1 Portal version.

CLI​

• Added support for GHSA ID (GitHub Security Advisories identifier) to the find command

Portal​

• Added a new View Audit Logs page where Organization administrators can review, filter, investigate, and export audit events

• New endpoints for exporting Portal logs have been added to the Portal API

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.6.1

Other​

• The RL-CVE report now includes the ai-summary field

Documentation release for the Spectra Assure Community update.

Community​

• The Community quick-start guide now includes the Package quarantine section explaining a new flag for open-source software packages that may be unsafe until they can be verified as trustworthy

• The Show details about a package endpoint response now includes quarantine

• Updated the product release notes

Documentation release for the Spectra Assure CLI 3.5.0 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.5.2 Portal version.

CLI​

• Updated the rl-deploy download links and hashes for version 2.6.2

• Added the Tree-sitter dependency to the list of Third-party open source software

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.6.0

Community​

• Added Maven to the list of supported communities

• Added Community Pulse to the Community homepage

• Updated the product release notes

Integrations​

• Updated the rl-protect download links and hashes for version 1.0.3

Other​

• Updated the product release notes

• Added AI Skills support to the Community and language coverage page

• Updated the AI testing guide to include the following models with SPLX data: deepseek-ai/DeepSeek-V3.2, google/gemma-2-2b-it, google/gemma-2-9b-it, google/gemma-3-270m-it, google/gemma-3n-E2B-it, mistralai/Devstral-Small-2-24B-Instruct-2512, mistralai/Ministral-3-3B-Instruct-2512, mistralai/Ministral-3-8B-Instruct-2512, mistralai/Ministral-3-14B-Instruct-2512

• Added the missing overrides section to the rl-profile example

• Refreshed the policy and behavior statistics

• Added new Threat hunting policies to the documentation: TH16129, TH16130, TH16131, TH16701, TH16702, TH16703, TH16704, TH16705, TH16801, TH16802, TH16803, TH16804, TH16805, TH17133, TH17134, TH17135, TH17136, TH17137, TH20117, TH30114, TH30115

• Added new behaviors to the reference docs:

  • BH12021 - BH12029
  • BH16482 - BH16519
  • BH19586
  • BH19587

Documentation release for the Spectra Assure CLI 3.4.2 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.5.1 Portal version.

CLI​

• Added Cista and RapidJSON licenses to the list of Third-party open source software

Portal​

• Documented the new option that lets users receive an email notification when any of the following actions on their Portal instance are complete:

  • file upload and URL/PURL import on both File Stream and Projects pages
  • moving file to a project
  • version or package reanalysis, initiated from the Actions menu or triggered by a group or organization policy configuration change

• Updated the Portal API reference documentation with a new endpoint for viewing information about the Spectra Assure Community account

Community​

• Updated the product release notes

Other​

• Added the complete rl-protect report schema and example under Concepts & Reference

• Added a page for the new OSS repository service category, which lists all services tied to open-source software (OSS) repositories

• Renamed the Spectra Assure personal access token to Spectra Assure Portal personal access token in the list of supported secrets

• Added new behaviors within the following ranges to the reference docs:

  • BH12030-BH12036
  • BH16445-BH16481

Documentation release for the Spectra Assure CLI 3.4.1 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.4.2 Portal version.

CLI​

• Updated the rl-deploy download links and hashes for version 2.6.1

Portal​

• New endpoints for managing Portal users when SSO is enabled have been added to the Portal API

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.5.9

Community​

• Created an API usage tiers and upgrade guide explaining the differences between Community and Portal APIs and their respective tiers. It also helps users choose the appropriate tier and understand what changes when moving between tiers

• Updated the product release notes

• Added the new endpoint for checking user account information to the Community API reference docs

Integrations​

• Updated the rl-protect download links and hashes for version 1.0.2

Other​

• Updated the product release notes

• Added the following secrets to the list of supported secrets:

  • Web service access credentials: GitLab OAuth application credentials
  • Web service access tokens: GitLab cluster agent token, GitLab deploy token, Gitlab PAT Legacy, Sentry organization authentication token, Sentry user authentication token, SonarQube badge token, SonarQube global analysis token, SonarQube project analysis token, SonarQube scoped organization token, SonarQube user token
  • Web service API keys: Anthropic admin API key, OpenRouter API key, Perplexity API key

• Updated the list of User finance services

• Added support for GHSA to rl-json

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.4.1 Portal version.

Integrations​

• Updated the rl-protect download links and hashes for version 1.0.1

Other​

• Updated the product release notes

Content updates for Spectra Assure Community API and integrations.

Community​

• Updated the Community API reference documentation with the latest changes released in the API. Note that the repository path parameter has been renamed to community in the "Show report for a package version" and "Show details about a package" endpoints.

Integrations​

• Added a section with links to official rl-protect integrations on the rl-protect landing page

• Fixed incorrect connection name example in the rl-protect quick start guide

Documentation release for the Spectra Assure CLI 3.4.0 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.3.2 Portal version.

CLI​

• Updated the rl-deploy download links and hashes for version 2.6.0

• Transformed the list in the Importing files from URLs section of the scan command page into a table to make the information on the supported URLs and PURLs more readable

Portal​

• Added support for PURL import to File Stream and Projects

• Added Supported URLs and PURLs section to File Stream

• Added support for managing users via SCIM (System for Cross-domain Identity Management) when SAML SSO method is used

• Added the new Import a version from PURL endpoint to the Portal API specification

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.5.8

Integrations​

• Added a landing page for rl-protect docs in the new "Community integrations" section

• Created a quick start guide and reference documentation for supported commands in rl-protect docs

• Published release notes for the first official version of rl-protect

Other​

• Updated the product release notes

• Updated a list of models with SPLX data in the AI testing guide

• Refreshed the policy and behavior statistics

• On the Community and language coverage page, added support for Bcrypt Private Keys under Cryptography

• Added a Package manifest coverage page that lists all package manifest formats supported by Spectra Assure and rl-protect

Documentation release for the Spectra Assure CLI 3.3.3 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.3.1 Portal version.

Portal​

• Marked the Content-Length parameter as required when uploading and scanning a version

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.5.7

Other​

• Added new behaviors to the reference docs: BH12037, BH12038, BH12039, BH12040, BH12041, BH12042, BH12043, BH12044, BH12045, BH12046, BH12047, BH12048, BH12049, BH12050, BH12051, BH12052, BH12053, BH12054, BH12055, BH12056, BH12057, BH12058, BH12059, BH12060, BH12061, BH12062, BH15374, BH15375, BH15376, BH15377, BH15378, BH15379, BH15380, BH15381, BH16439, BH16440, BH16441, BH16442, BH16443, BH19581, BH19582, BH19583, BH19584, BH19585

• Added support for Skopeo to the Community and language coverage page

• Renamed the Analysis reports category under Concepts & Reference to Schemas. This category now contains Configuration schemas and Report schemas to highlight the difference between different schemas

Documentation release for the Spectra Assure CLI 3.3.2 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.2.2 Portal version.

Portal​

• New endpoints for working with group and organization profile configuration files have been added to the Portal API

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.5.6

Community​

• Updated the product release notes

Other​

• Added information on AI usage to CLI and Portal privacy guides

• Under Concepts & Reference, created a new page with the complete rl-profile configuration file schema and example

Documentation release for the Spectra Assure CLI 3.3.1 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.2.1 Portal version.

CLI​

• Updated the rl-deploy download links and hashes for version 2.5.0

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.5.5

Community​

• Published the product release notes page for Spectra Assure Community

• Added MCP Registry to the Supported communities section on the Community category landing page

Other​

• Updated the tables for the existing service categories. In particular: Chat exchange, Data exchange, Data provider, File exchange, User finance, VoIP provider

• Added support for Safetensors to the Community and language coverage page and Supported archive formats table

• Added new licenses and behaviors to reference docs

Documentation release for the Spectra Assure CLI 3.3.0 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2026.1.2 Portal version.

CLI​

• Updated the rl-deploy download links and hashes for version 2.4.9

• Added Amazon ECR (AWS ECR) support to the scan command

Portal​

• Created a new Manage CLI Capacity page where Organization Administrators can allocate portions of the total monthly quota to each registered CLI site key, ensuring that each CLI's dedicated quota is preserved and cannot be consumed by other CLIs within the organization

• Included details on the CLI usage for an organization in the Usage details for an organization endpoint

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.5.4

Other​

• Added new behaviors to the reference docs: BH12079, BH12080, BH15372, BH15373

• Refreshed the policy and behavior statistics

• Updated a list of models with SPLX data in the AI testing guide

• Added support for ONNX to the Community and language coverage page and Supported archive formats table

• Added support for RL-SAFE to the Supported archive formats table

• Added Spectra Assure Community to the docs homepage

• Reordered and moved all categories in the navbar except for ReversingLabs to the left

Documentation release for the Spectra Assure CLI 3.2.5 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.12.2 Portal version.

Portal​

• Added information about enabled password protection and package download options when ReversingLabs Support is selected in the first step of the report sharing workflow

• Updated the Vendor communication guide with an option to share the report automatically with ReversingLabs Support from the report sharing dialog

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.5.3

• Removed the Snap download format for SAFE Viewer due to Electron build errors

Community​

• Published the landing page and the reference docs for the Spectra Assure Community API

Other​

• Added new models to the list of models with SPLX data in the AI testing guide

• Added new behaviors to the reference docs: BH12081, BH12082, BH12083, BH12084, BH12085, BH12086, BH12087, BH12088, BH12089, BH12090, BH12091, BH15371, BH16426, BH16427, BH16428, BH18253, BH18254, BH19580

• Refreshed the policy and behavior statistics

• On the Community and language coverage page added support for MS Private Keys under Cryptography

Documentation release for the Spectra Assure CLI 3.2.3 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.12.1 Portal version.

CLI​

• Updated the rl-deploy download links and hashes for version 2.4.8

• Added PS Gallery support to the scan command

Portal​

• Added information on storing authentication details provided during URL import to File Stream, Projects workflows, and Data privacy pages

• Created a new Insights guide explaining the new issue aggregator functionality on the Portal

• Created a new Insights workflows page showing users how to work with the new feature to get the best results

• Added a list of roles to the Link Name step of sharing a report, including the new ReversingLabs Support role

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.5.2

Other​

• Created a new conceptual guide - Understanding the Spectra Assure approach - to help prospects and customers align their needs with the product capabilities

• Resolved minor issues in the conceptual guide about Spectra Assure analysis

  • Fixed incorrect bullet list indentation for script classifiers
  • Added missing ELF malware classifier to the list

• Added new models to the list of models with SPLX data in the AI testing guide

• Added new Data provider and VoIP provider services to docs

• Updated the tables for the existing service categories. In particular: Chat exchange, Data exchange, ReversingLabs, User finance, User identity

• Added new behaviors to the reference docs: BH12092, BH12093, BH12094, BH12095, BH12096, BH15368, BH15369, BH15370, BH16422, BH16423, BH16424, BH16425, BH17446, BH17447, BH19577, BH19578, BH19579

• Refreshed the policy and behavior statistics

• Added Linux and Windows to policy repository statistics

• On the Community and language coverage page added support for Signatures (OpenPGP) under Cryptography

Documentation release for the Spectra Assure CLI 3.2.2 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.11.2 Portal version.

CLI​

• Under System recommendations for rl-secure, updated the minimum recommended SSD storage for large file processing to 50 GB

• Updated the rl-deploy download links and hashes for version 2.4.7

Portal​

• Reorganized the Portal docs to match the Portal UI redesign. In particular, the following changes were made:

  • Removed the Members and Settings pages from Navigate the Portal section. Replaced them with the Policies page used for configuring policies on group level

  • Renamed the User and group management page to Roles and permissions. This page now includes only a list of user roles and permissions on the Portal

  • Renamed the Members page to Group and member management. Updated the page with content from the User and group management page

  • Created new Analysis capacity and Organization policy configuration pages

  • Renamed the Administration guides section to Organization settings for configuring options on organization level. This section now includes:

    • Group and member management category that includes the Roles and permissions page
    • Organization policy configuration
    • Analysis capacity configuration
    • SSO configuration
    • Portal session configuration

• Moved the File Stream workflows and Projects workflows pages to the Workflows guides section

• Added an admonition with more information on the derived version upload to the Projects page

• Updated the Software table name (now File Stream table) and fields on the File Stream page, as well as the Packages and Releases (now Versions) table fields on the Projects page

• Added the Password change section on the How to access the Portal page

• Requires Approval status has been renamed to Approval Pending throughout the docs

• Updated the outdated interactive guides and reduced their number in the Portal docs to improve the content flow

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.5.1

• Added new SAFE Viewer install method in Windows. Now the SAFE Viewer can be installed both from the UI and the Terminal

Community​

• Added the Malware tab showing detected malware threats to the Report tabs list

Other​

• On Community and language coverage and File format coverage pages added support for:

  • EC Private Keys to Cryptography > Standards
  • Networking > OpenSSH to Cryptography

• Added support for GHSA to the Component identification page

• Refreshed the behavior statistics

• Added new behaviors to the reference docs: BH12097, BH12098, BH16417, BH16418, BH16419, BH16420, BH16421, BH19576

Documentation release for the Spectra Assure CLI 3.2.0 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.11.1 Portal version.

CLI​

• Updated the policy configuration schema with new options under the tracking section. The main policy configuration example now also includes this information

• Added rl-diff to the report command and the Diff guide

• Updated the rl-deploy download links and hashes for version 2.4.6

• Added the new --no-compression parameter for Docker image import to the scan command

• Added the new vulnerabilities.summary field in the rl-json report schema

Portal​

• Added rl-diff support to the Export analysis report API endpoint

• New endpoints for working with Spectra Assure Community have been added to the Portal API

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.5.0

Community​

• Added the NEW! label to the Community quick start guide for packages that have recently been published but still need to be checked manually

Other​

• Added a new AI testing guide to the Concepts > Conceptual guides section of the docs. This guide gives insight into AI models and how they're tested and scanned with Spectra Assure

• Updated the product release notes

• Created a new page with the complete rl-diff report schema and a report example, and included the new report type on the Spectra Assure analysis reports page under Concepts

• On Community and language coverage and File format coverage pages, added support for:

  • GGUF and HDF5
  • Cryptography community
  • NuGet (NUPKG) to PowerShell
  • AI/Model data and Ollama to Machine learning

• Updated the total amount of analyzed packages for each community on individual policy pages. The policy graphs now also include VS Code and PS Gallery data

• Refreshed the policy and behavior statistics

• Added new Malware detection policies to the documentation: SQ30251, SQ30252, SQ30253

• Added new Threat hunting policies to the documentation: TH16601, TH16602, TH16603, TH16604, TH16605, TH20115, TH20116

• Added new behaviors within the following ranges to the reference docs:

  • BH12099-BH12100
  • BH13912-BH13999
  • BH14101-BH14149
  • BH15101-BH15112
  • BH15348-BH15367
  • BH16394-BH16416
  • BH17442-BH17445
  • BH19571-BH19575

Documentation release for the Spectra Assure CLI 3.1.2 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.10.2 Portal version.

CLI​

• Added a list of default passwords to the following command pages: init, scan, sync, vault

Portal​

• Added a list of default passwords to the Filestream and Projects workflows pages

Community​

• Documented the UI redesign changes for Community. More precisely, documented the new badge generation process, along with the new look of the Community landing page and the Community report

Other​

• Added Amazon Bedrock long-term API key and Amazon Bedrock short-term API key to the list of supported secrets

Documentation release for the Spectra Assure CLI 3.1.1 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.10.1 Portal version.

Portal​

• Updated the How to use Local login section on the How to access the Portal page with information on the 24-hour time limit for accepting the email invitation from RL Support

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.4.9

• Added the missing description for the Component Age graph on the Report summary page

Other​

• Added a new Static dependencies guide to the Concepts > Conceptual guides section of the docs. This guide gives insight into static dependencies and the process of their identification in Spectra Assure

• Updated the product release notes

• Added new behaviors to the reference docs: BH13860, BH13861, BH13862, BH13863, BH13864, BH13865, BH13866, BH13867, BH13868, BH13869, BH13870, BH13871, BH13872, BH13873, BH13874, BH13875, BH13876, BH13877, BH13878, BH13879, BH13880, BH13881, BH13882, BH13883, BH13884, BH13885, BH13886, BH13887, BH13888, BH13889, BH13890, BH13891, BH13892, BH13893, BH13894, BH13895, BH13896, BH13897, BH13898, BH13899, BH13900, BH13901, BH13902, BH13903, BH13904, BH13905, BH13906, BH13907, BH13908, BH13909, BH13910, BH13911

• Fixed the incorrect link to the Portal data privacy and collection guide in the Featured content part of the docs homepage

• In the Concepts category dropdown, replaced Third-Party Risk Management (TPRM) with Conceptual guides

• Added the develop and release package dependency glossary entries to Concepts > Basic concepts

Documentation release for the Spectra Assure CLI 3.1.0 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.9.2 Portal version.

CLI​

• Added support for Docker Image import to the Importing files from URLs section on the scan command page

• Updated the rl-deploy download links and hashes for version 2.4.5

Portal​

• Separated the Policy configuration workflow from the Portal Settings page. This helps users focus on the actions available on each page of Portal settings, without having to scroll through the general information every time

• Added the new Session Lifetime Configuration page to the Portal docs

• Updated the interactive guides to show the new Session Lifetime Configuration page in the Portal Settings page sidebar

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.4.8

• Removed the Experimental badge from macOS

Community​

• Added PowerShell Gallery to the Supported communities section on the Community category landing page

Other​

• Updated the product release notes

• Added Spectra Assure personal access token to the list of supported secrets

• Added the BH13859 behavior to the reference docs

• Updated the Behavior prevalence section with changes regarding the generation of maliciousness data

• Added the following services to the AI and User identity service pages:

  • GitHub Copilot API
  • GitHub Copilot Authentication API
  • GitHub Copilot Chat Service API

Documentation release for the Spectra Assure CLI 3.0.3 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.9.1 Portal version.

CLI​

• Updated the rl-deploy download links and hashes for version 2.4.4

• Added a new admonition on updating the entire purl with the rename command to make it clear that renaming the entire purl is a multi-step process

Portal​

• Documented the new Portal Package Limit progress bar on the Portal Settings page

• Updated the interactive guides to show the new Portal Package Limit progress bar on the Portal Settings page

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.4.7

Other​

• Added diagrams to the Components guide to clearly illustrate the examples

• Added IntuneWin to the Supported archive formats table and Community and language coverage page

• Updated the sidebar descriptions for some Sensitive information policies to match new page descriptions

• Added new behaviors to the reference docs: BH13851, BH13852, BH13853, BH13854, BH13855, BH13856, BH13857, BH13858, BH16393

• Redesigned the Community and language coverage page to make the community-related information readily available

Documentation release for the Spectra Assure CLI 3.0.2 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.8.2 Portal version.

CLI​

• Updated the rl-deploy download links and hashes for version 2.4.3

Portal​

• Published the Data privacy and collection page in the new Portal > Reference docs section

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.4.6

Other​

• Added the following new services to the list of supported secrets:

  • Web service access credentials: eBay production credentials
  • Web service access tokens: Ory opaque access token, Ory opaque refresh token
  • Web service API keys: DeepSeek API key, Groq API key

Documentation release for the Spectra Assure CLI 3.0.1 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.8.1 Portal version.

Portal​

• Added the new MaxFileSizeExceeded 400 response message to the Import a version from URL endpoint in the Portal API

Integrations​

• Added new helper tools rl-scan-url and rl-scan-purl to the CLI Docker image (rl-scanner)

• Documented the new feature for importing software packages from URLs in the Portal Docker image (rl-scanner-cloud)

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.4.5

• Added support for the SAFE Viewer macOS installer (currently experimental)

Documentation release for the Spectra Assure CLI 3.0.0 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.7.3 Portal version.

CLI​

• Added new options related to package import to the rl-secure scan command

• Added the new rl-secure export command

• Updated the rl-deploy download links and hashes for version 2.4.2

Portal​

• Documented the new file upload wizard, which now also supports file import from a URL of choice. This feature is available both on the File Stream and the Projects pages

• Updated the upload instructions in the Portal quick start guide

• Added the new Import a version from URL endpoint to the Portal API specification

• Renamed the Sync version endpoint to Rescan a version so it's clearer what action it refers to

• Updated the Portal API specification to match the rl-checks report:

  • Added the bad_checksum, bad_format, bad_password, and unsupported fields to Statistics

• Updated the interactive guides to show the new Upload button

Other​

• Updated product release notes

• Added DMG:APFS to the Supported archive formats table

• Fixed multiple broken links in the CLI and Other sections of the 2025-07-17 docs changelog entry

Documentation release for the Spectra Assure CLI 2.9.0 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.7.2 Portal version.

CLI​

• Added the license status return codes to the following commands: init, list, report, sync, update, vault, rl-deploy, rl-safe

• Updated the existing return codes in the scan and license commands

• Created a policy configuration guide for Community

• Updated the policy configuration schema

  • Added the new default_linux option
  • Added the new community section for configuring trigger conditions for the policies focused on open source components and dependencies included in the application
  • Added the new identity.dependency.scenario field
  • Added the new hash value to the processing.filter.matches field

• Updated the policy configuration guide for BOM editing according to policy configuration schema changes

Integrations​

• Added a guide on how to integrate Spectra Assure with DefectDojo

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.4.0

Other​

• Added the scanning guidelines to the TPRM guide, to help users get the most out of the Spectra Assure products and ensure accurate analysis results

• Added new Threat hunting policies to the documentation: TH16501, TH16502, TH16503, TH16504, TH16505, TH16506, TH16507, TH16508, TH16509, TH18301, TH18302, TH30101, TH30102, TH30103, TH30104, TH30105, TH30106, TH30107, TH30108, TH30109, TH30110, TH30111, TH30112, TH30113

• Added new behaviors to the reference docs: BH13836, BH13837, BH13838, BH13839, BH13840, BH13841, BH13842, BH13843, BH13844, BH13845, BH13846, BH13847, BH13848, BH13849, BH13850, BH16392

• Added the new statistics.dependencies field in the rl-json report schema and the rl-checks report schema

• Updated product release notes

Documentation release for the Spectra Assure CLI 2.8.2 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.7.1 Portal version.

CLI​

• Updated the rl-deploy version, release date, links, and hashes to v2.4.1

SAFE​

• Updated the SAFE Viewer download links and hashes for version 1.3.3

• Fixed the incorrect description for the Components page of the report on the SAFE report landing page

Other​

• Added a new Component identification guide to the Concepts > Conceptual guides section of the docs. This guide gives insight into components and the process of their identification in Spectra Assure

• Updated the verified glossary entry with a more accurate explanation of software identity verification methods

• Updated the maximum file size limit in the TPRM guide, the Partners landing page, the Licensing guide, the rl-scanner-cloud Docker image, and license and scan command examples

Documentation release for the Spectra Assure CLI 2.8.1 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.6.2 Portal version.

CLI​

• Updated the documentation for the rl-secure find command with instructions on how to use the new SBOM searching option

• Updated the maximum file size limit for CLI processing on the CLI system recommendations page

SAFE​

• Updated SAFE Viewer download links and hashes for version 1.3.2

Community​

• Added support for VS Code. Made the change more prominent by creating a new Supported communities section on the Community category landing page

Other​

• Updated product release notes

• Explained the new "Prevalence in Spectra Intelligence" section for behaviors that pulls the data from the ReversingLabs malware database

Documentation release for the Spectra Assure CLI 2.8.0 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.6.1 Portal version.

CLI​

• Added new OpenAI handler to the list of secrets on the find command page

• Added the CTRE license to the list of Third-party open source software

• Updated the rl-deploy version, release date, links, and hashes to v2.4.0

SAFE​

• Added "Uploaded by" info to an admonition on the Report summary page

Other​

• Updated product release notes

• Added support for ZFS to the Community and language coverage page

• Moved the preview stream configuration for the CLI Docker image (rl-scanner) to the Partners > Preview stream configuration page. Rewritten parts of this page to include new info

• Added the Microsoft 365 Copilot API, Microsoft Copilot API, and Microsoft Copilot Chat Service API endpoints to the AI services table

• Added new behaviors to the reference docs: BH13833, BH13834, BH13835

Documentation release for the Spectra Assure CLI 2.7.1 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.5.2 Portal version.

Portal​

• Added support for spaces in SSO group names to the SSO configuration guide

SAFE​

• Updated SAFE Viewer download links and hashes for version 1.3.1

Other​

• Fixed the incorrect number of Threat hunting and Differential analysis policies on the Policies category landing page

• Updated the Supported proprietary licenses list with the missing licenses

• Added a page for new ReversingLabs service category, which lists all official Spectra services

• Separated AI and Data processor services, as well as Collaboration and Data exchange services for ease of reference

• Added an explainer table with a Service type column to individual service category pages to make the distinction between a service category and a service type more clear

• Listed some previously undocumented service types on the xBOM page

• Added new behaviors to the reference docs: BH13830, BH13831, BH13832, BH15356, BH15357, BH16391, BH17439, BH17440, BH17441

Documentation release for the Spectra Assure CLI 2.7.0 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.5.1 Portal version.

CLI​

• Updated the policy configuration schema

  • provider is a new required field, and flow is required in the networking.protocol.filter.address.service object
  • product, version, publisher and license are now optional in the processing.filter.identity.component and processing.filter.identity.dependency objects
  • description is a new optional field in processing.filter.identity.component and processing.filter.identity.dependency objects
  • editing is a new optional field in the processing.filter.identity.dependency object
  • processing.filter.hunting.behaviors now supports setting a behavior ID to 'pass'
  • a new section processing.filter.hunting.indicators allows targeting behaviors by their description text

• Updated the policy configuration guides for behaviors and BOM editing according to policy configuration schema changes

• Reorganized content on the vault command page to make it clearer which options are supported by which sub-command

• Updated the content on the find command page

  • Added the Dropbox short-lived online and offline access tokens to the Web service access tokens section of supported secrets
  • Noted that behaviors can be searched by ID in the introduction
  • Reorganized specialized CLI options for search terms into their own sections
  • Merged the "Search for specific secrets with evidence" example into the "Find active and exposed secrets in a project" example to simplify the page
  • Changed example headings for clarity

Portal​

• Added notes about PDF Summary files automatically refreshing on Portal upgrade to Analysis reports and SAFE report pages

SAFE​

• Documented the new "Component Age" section on the Summary page of the SAFE report
• Updated SAFE Viewer download links and hashes for version 1.3.0
• Improved the content on the SAFE Viewer page to make the information about the current version more visible and explain the transparency report
• Reorganized the content on the SAFE report page to reduce duplicated information; added missing references about PDF summary, and indicated where xBOM information can be found in the report

Other​

• Updated product release notes

• Reorganized content on the Community and language coverage page

  • Virtual Machines are now a standalone section instead of being grouped together with Containers
  • Moved content from tables into simple lists to make it easier to search and navigate

• Updated the rl-json report schema

  • Added new fields in report.metadata.components.identity, report.metadata.cryptography, report.metadata.dependencies.identity, report.metadata.ml_models, report.metadata.services
  • Updated the catalogue version in the schema

• Split the report examples from schemas on all report schema pages in conceptual docs for a more consistent structure and easier access to examples

• Increased font size in all tables to improve readability

First release of the Spectra Assure Community documentation.

Community​

The Spectra Assure Community product now has a dedicated section on the Spectra Assure docs website.

Previously, the Community item in the top navbar was a direct link to the official Community page. Now it's a dropdown that lets you access new content and makes space for future documentation about the product.

Specifically, the Community section of the docs website now contains:

• The product landing page that helps you understand how Spectra Assure Community works and what it's best used for
• The quick start guide that explains the basics of the Spectra Assure Community report and how to share it with others

Other​

• Fixed a broken link to the vault command page in the CLI section of the 2024-04-10 docs changelog entry

Documentation release for the Spectra Assure CLI 2.6.3 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.4.2 Portal version.

CLI​

• Replaced SAFE with rl-html in the Supported report formats table on the report command page

• Added explanations for custom return codes communicating the license state to the scan and license commands

Portal​

• Updated the SAFE Viewer version, hashes, and download links to v1.2.0

• Added a section on the auto-approval feature to the Portal Settings page

• Added the auto-approval feature to the File Stream vs Projects comparison table to indicate that it's supported in both

Other​

• Added an RSS feed to the Changelog page, allowing users to subscribe to docs-related updates via RSS

• Added new behaviors to the reference docs: BH13778, BH13779, BH13780, BH13781, BH13782, BH13783, BH13784, BH13785, BH13786, BH13787, BH13788, BH13789, BH13790, BH13791, BH13792, BH13793, BH13794, BH13795, BH13796, BH13797, BH13798, BH13799, BH13800, BH13801, BH13802, BH13803, BH13804, BH13805, BH13806, BH13807, BH13808, BH13809, BH13810, BH13811, BH13812, BH13813, BH13814, BH13815, BH13816, BH13817, BH13818, BH13819, BH13820, BH13821, BH13822, BH13823, BH13824, BH13825, BH13826, BH13827, BH13828, BH13829, BH15343, BH15344, BH15345, BH15346, BH15347, BH15348, BH15349, BH15350, BH15351, BH15352, BH15353, BH15354, BH15355, BH16389, BH16390, BH19570

• Updated the product release notes

• Mentioned the new Malware page of the report where applicable and updated the graphics to illustrate the changes

• Added Coinminer, Dropper, and Mail to the list of supported threat types

• Declared the SQ30101 policy as enabled by default

• Removed the incorrect statement on ML models from the ML-BOM section of the xBOM page

• Updated the link to the ReversingLabs EULA in the API reference documentation

• Fixed a broken anchor link on the CLI report command page

• Corrected the wrong rl-deploy version number in the last docs changelog update

Documentation release for the Spectra Assure CLI 2.6.2 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.4.1 Portal version.

CLI​

• Added a new status sub-command to rl-secure vault that checks if the password vault has been initialized for the specified package store

• Added Palantir JWT to the list of supported secrets under the find command

• Updated the rl-deploy version, release date, links, and hashes to v2.3.1

Other​

• Added new behaviors to the reference docs: BH13765, BH13766, BH13767, BH13768, BH13769, BH13770, BH13771, BH13772, BH13773, BH13774, BH13775, BH13776, BH13777

• Removed the incorrect reference to rl-cve from the rl-uri report schema frontmatter

• Fixed a broken link in the Suppress secrets policy configuration guide

• Fixed tags in the report example on the rl-uri report schema page

• Removed the duplicate listing of differential analysis policies on the Policies > Threat hunting page

• Transformed SAFE and Integrations categories into dropdowns. All important pages in these categories can now always be accessed from any part of the docs

• Fixed the CBOM glossary entry to mention that it's included only in the CycloneDX report format

Documentation release for the Spectra Assure CLI 2.6.1 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.3.2 Portal version.

CLI​

• Added Anthropic API key to the list of supported secrets under the find command

• Updated the main policy configuration example with new sections

• Updated phrasing in all policy configuration guides to clarify where and how policy changes apply, and which policy configuration objects are used

• Created a policy configuration guide for declaring network services

• Created a policy configuration guide for BOM editing

• Updated the instructions for networking filters to match the new opt-in behavior for declaring networking placeholders

• Updated the policy configuration schema with new objects supported in the xBOM release (networking.protocol.filter.address.service, processing.filter.identity.component, processing.filter.identity.model_card, processing.filter.identity.dependency)

• Updated the rl-checks report schema with objects added in the xBOM release (report.scans.scan-{type}.rl_store, report.scans.scan-{type}.assessments.assessment.evaluations)

Portal​

• Updated the Portal API specification:

  • Added the Usage details for an organization endpoint returning data for an organization and for all groups the user has access to
  • Added the Usage details for a group endpoint returning data for an organization and the selected group (if the user has access to the group)

• Updated SAFE Viewer version, hashes, and download links to v1.1.1

Other​

• Updated the product release notes

• Added examples of ML models, services, and algorithms to the xBOM page

• Added a missing behavior ID (BH13402) in the Monitor behavior category

• Fixed some broken links to individual policies in expandable sections on the Known vulnerabilities and Application hardening pages

• Made a distinction between the my.secure.software domain and region-specific domains across all pages that refer to servers and connectivity

Documentation changes related to the Spectra Assure CLI 2.6.0 / 2025.3.1 Portal product update.

Integrations​

• Updated the Portal Docker image docs with changes related to response codes and configuration parameters (--submit-only, --rl-portal-host, --rl-portal-server)

Other​

• Updated the Analysis reports conceptual guide to clarify that the PDF Summary is now supported in Portal File Stream
• Added new behaviors and licenses to the reference docs
• Modified phrasing in the How Spectra Assure analysis works conceptual guide

Documentation release for the Spectra Assure CLI 2.6.0 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.3.1 Portal version.

CLI​

• Added new --[show-]models, --[show-]sbom, --[with-]license, and --no-dep[endencie]s options to the inspect command. Their usage has been illustrated by accompanying examples

• Added the --no-tracking option to the report command

• Marked the --no-vex option as deprecated in the report command

• Expanded the admonition about --keep-reference on the rl-secure scan command page to include the Windows issue

• Added the Windows issue regarding symbolic links to the CLI Troubleshooting page

SAFE​

• Updated the SAFE Viewer version, release date, links, and hashes to v1.1.0

Other​

• Created a new How Spectra Assure analyzes software page under Concepts & Reference that explains the different stages in the analysis process. A diagram was used to visualize the entire process and make the order of analysis steps easier to understand

• Created a new Services category under Concepts & Reference, containing all supported SaaSBOM services sorted by type

• Reorganized the tables on the Community and language coverage page to improve search, navigation, and content maintenance

• Added the following new policies to the documentation:

  • New policies in the Malware detection category focus on adware, PUAs and low-quality content in software components and their dependencies: SQ30121, SQ30205, SQ30122, SQ30204, SQ30201, SQ30206, SQ30203, SQ30202

  • New policies in the Digital signatures category focus on issues with countersigning and integrity validation of signatures: SQ20133, SQ20136, SQ20135, SQ20134, SQ20132

  • New policies in the Threat hunting category focus on developer reputation, detecting additional known software supply chain compromises, and identifying behaviors typical for infostealer, keylogger, and rootkit malware: TH15110, TH15403, TH20108, TH20113, TH15402, TH15401, TH20114, TH20112, TH18201, TH15405, TH15108, TH18202, TH15109, TH20110, TH15404, TH20109, TH20111

• Updated the verified glossary entry with new verification types

• Added new glossary entries for SaaSBOM, CBOM, ML-BOM, BOV, and VEX

• Updated the Spectra Assure analysis reports page with new information on new Bill of Materials formats

• Updated the product release notes

• Added BTRFS filesystem support on Community and language coverage and File format coverage pages

• Updated the CycloneDX and SPDX versions in the docs. We're now using CycloneDX 1.6 and SPDX 3.0.1

Documentation release for the Spectra Assure CLI 2.5.5 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.2.2 Portal version.

CLI​

• Updated the rl-deploy version, release date, links, and hashes to v2.3.0

Portal​

• Made a new Best practices for working with projects guide in the Portal docs. It includes the best naming practices, as well as all important information on the projects hierarchy and usage on Spectra Assure Portal

• Separated the workflows from the Portal File Stream and Projects pages. This helps users focus on the actions available on each page, without having to scroll through the general information every time

• Simplified the File Stream and Projects workflows and added roles tags to each. This eliminates the need to check the User and group management page for every action

• Replaced all screenshots with interactive guides in the Portal docs

SAFE​

• Moved the Reproducibility check section from the Projects page to the Report landing page

• Updated the SAFE Viewer version, release date, links, and hashes to v1.0.4

• Added information on the new File Stream header to the Summary page of the SAFE report. It allows users to export parts of the report in various formats and move the version to a project of their choice right from the top of the landing page of the report

• Removed the incorrectly included RAT from the list of Threat types on the Summary page of the report

Other​

• Re-designed API, Portal, and CLI category landing pages to look the same as Integrations, Partners, and SAFE category landing pages in our docs

• Moved Reproducibility checks, Live secret validation, and Managing third-party risks guides to a new Conceptual guides sidebar category

Documentation release for the Spectra Assure CLI 2.5.4 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.2.1 Portal version.

CLI​

• Updated the rl-deploy version, release date, links, and hashes to v2.2.9

• Updated the rl-secure list and rl-secure report pages to indicate that those commands don't require an active license

Portal​

• Added the new Entitlements section to the Settings page. It allows users to check which SAFE Assessment categories are enabled for their ReversingLabs cloud account and are evaluated during software analysis

• Made changes to the Settings page. Screenshots on the page have been replaced with interactive guides, while the textual content has been refreshed

• Fixed the incorrect year in the 2025.1.2 version title in the Portal release notes

Integrations​

• Information about the ServiceNow integration can now be accessed from the Integrations page

• Added support for creating the PDF summary (rl-summary-pdf) to the Portal Docker image documentation

SAFE​

• Updated the information relating to the SAFE Assessment part of the report summary

• Updated the SAFE Viewer version, release date, links, and hashes to v1.0.3

Other​

• Policy and behavior statistics have been refreshed.

• New behaviors have been added.

• Landing pages for Application hardening and Threat hunting policies have been improved by adding links to headings so it's easier to navigate within the page.

Documentation release for the Spectra Assure CLI 2.5.3 product update.

New release of the Spectra Assure Portal and Public API documentation, covering the 2025.1.2 Portal version.

CLI​

• Updated the information on Entitlements. Entitlements are now more dynamic, since they're no longer tied to the user license, but to the user account

• Updated the list of secrets supported by the find command

Portal​

• Added the new PDF Summary export feature to the Portal and API docs

• Resolved minor issues in the Portal API reference docs:

  • Fixed the incorrect response message when trying to replace a version
  • Fixed the incorrect request body in Approval (TPRM) endpoints that misrepresented the reason field as optional
  • Removed 400 responses from endpoints that don't support them; replaced generic 404 response for reports with more specific messages
  • Changed content types in response schemas to match the file format that the API returns and clarified response handling for report content
  • Updated request code examples with placeholder value for report type

Integrations​

• Linked the new JFrog Artifactory integration in CLI and Portal sections

SAFE​

• Updated the SAFE Viewer version, download links, and hashes. The "Current version" admonition now also shows the release date of the latest version

Other​

• Updated the product release notes

• Added a short description of the new PDF Summary export to the Analysis reports page

• Removed all references to the unused endpoint (api.reversinglabs.com) from the docs