// CHANGELOG

What changed in EyalSec

Changes you can see on the dashboard, on this site and in how es-python behaves on your machines, newest first. Each one links to the part of the user guide that describes it as it works today.

  • Added
  • Changed
  • Fixed
  • Security
#2026-10-15

Thirteen ready-made templates

Added
  • Ready-made es-python templates now cover ten kinds of attack to block: privilege escalation, network code execution, backend and frontend attacks, credentials in logs, token forgery, denial of service, CI and supply chain, LLM and AI agent abuse, and containers and Kubernetes. OWASP Top 10, Low noise and Regulated data complete the set. Ready-made templates ->
Changed
  • These thirteen replace the earlier built-in templates. Rules you already copied from a template stay in your filters, because applying a template always made them your own rules. What a template is ->
#2026-10-14

Settings that save themselves

Changed
  • Unique event and the time zone setting save the moment you change them, and the page confirms with "Saved". There is no Save button to forget. Unique event ->
  • The foreign source is now called "Files other users can change", because it marks any such file your program reads, not only code. Files other users can change ->
#2026-10-13

Find a machine faster

Added
  • Filter the Machines list by name, product and status. The filter is kept in the page address, so a reload or a bookmark brings back the same view. Filtering the list ->
  • Vulnerability pages for Django, Flask and FastAPI, each with the vulnerable code, the fix and the event es-python reports. Vulnerability classes ->
Changed
  • Pages, lists and buttons say they are loading while a request is in flight, instead of looking empty.
#2026-10-10

From a new account to a first event

Added
  • Until es-python sends its first event, the dashboard shows a setup checklist that ticks itself off, with one button for the next step. Setup checklist ->
  • Run your test suite under es-python in CI, with GitHub Actions and GitLab CI examples, or build es-python into a container image. Run es-python in CI ->
  • Make a rule from an event that also matches its taint chain, stack trace, detail line or origin, for that machine or for all of them. Rule from an event ->
Changed
  • The es-python events list opens on most severe first, so the few events worth acting on are not buried under routine rows. Newest first is one click away. Sort ->
  • The es-python install command is a plain curl ... | bash line again. It tells the server which system the host runs, so the right build is picked for it. Install ->
#2026-10-09

Your API key follows your password

Security
  • Changing your password now also revokes your API key, so a key made before the change stops working with it. Revoke a key ->
#2026-10-07

A map that follows your filters

Added
Fixed
  • The events map follows every filter in every view, and says when it is still loading. Events map ->
#2026-10-04

Rules that are easier to write

Added
  • The Event (regex) box of a rule suggests categories and single events from your own list as you type. Suggestions ->
Changed
  • Settings has one page per section, opened from the sidebar. The (?) buttons show a one-line tip on hover, and there are fewer of them. The Settings pages ->
Fixed
  • A rule that hides every event now gets an answer at once, instead of leaving the list searching. When a search is slow ->
#2026-09-25

Store only what you need

Added
  • A per-machine setting to discard suppressed events: flows EyalSec can show were made safe are not stored at all. Discard suppressed events ->
Changed
  • The row menu has one Rule group that makes a Show, Hide, Don't send or Raise rule from the event you clicked. Rule (es-python) ->
  • The user guide is split into small pages, one per topic, and the dashboard's (?) buttons open the section they describe. User guide ->
#2026-09-20

One run at a time

Added
  • Runs: every time es-python starts a program counts as one run. Pick a run on the events page to see only what it reported. Runs ->
Fixed
  • On RHEL, Rocky and Alma 9, installing es-python 3.11 to 3.14 no longer fails because the system SQLite library is older than the sqlite3 module needs. The install completes and shows a warning for that one module. Troubleshooting ->
#2026-09-19

Events that show the code

Added
  • es-python events show the lines of code where the untrusted data came in and where it was used. Event detail ->
  • Decide what makes an event unique: the taint chain, the detail line, the stack trace, the machine and the origin are each a switch. Unique event ->
Changed
  • Usage is metered by detections, so how finely you group events changes what you see, never what you pay. Plans and limits ->
#2026-09-17

The context around an event

Added
  • es-python events carry the command line and, if you switch it on, the environment of the program that reported them. Values that look like passwords, tokens or keys are masked on the machine before anything is sent. Event context ->
  • Choose how long you can stay signed in without using the dashboard. Session timeout ->
Fixed
  • Two kinds of false event in which ordinary values inside a program were reported as untrusted, seen in package managers and in libraries that load modules by name. Reinstall a machine to take the fix. Running es-python ->
#2026-09-15

The events map

Added
  • A Map layout for es-python events: where untrusted data came from, the files it was read from and the operations it reached, as a graph you can pan, zoom and drill into. Events map ->
Changed
  • Critical severity is a darker red, so it no longer reads as high at a glance. Events ->
#2026-09-05

Every current Python

Added
  • es-python runs Python 3.9, 3.10, 3.11, 3.12, 3.13 and 3.14. Each machine matches the version you pick exactly. Running es-python ->
  • Sign in with Google, to the EyalSec account that uses the same email address. Sign in with Google ->

See the latest of it on your own code.

Book a live demo
EyalSec Pricing Docs Security Research Vulnerabilities Security glossary About Contact עברית Login Book a live demo
Press kitChangelogTermsPrivacyDPAAcceptable UseSecurity measuresLicensesRefund Python is a trademark of the Python Software Foundation. EyalSec is not affiliated with or endorsed by the PSF.