Release v2.7.0 — deep attack-surface platform (passive ASM) - #2

Merged

azmolhaque merged 19 commits into

mainfrom

claude/new-session-thsmic

Jul 21, 2026

Commits on Jul 18, 2026

Fix false negative: class-aware entropy gating for structural detectors
claude
committed
6ab492a
Fix false negative: route AI-dismissed structural matches to manual review
claude
committed
13dc564
docs: record AI-dismissed-structural fix in changelog
claude
committed
faca7cd
Add passive subdomain enumeration via Certificate Transparency (deep-ASM slice 1)
claude
committed
71d9a9e
Harden subdomain enumeration: multi-source + retries (crt.sh is flaky)
claude
committed
75f9c49
docs: changelog reflects multi-source subdomain enumeration
claude
committed
983a613
Add multi-target orchestration: domain -> scan every live host (deep-ASM slice 2)
claude
committed
83e5de4
Add historical path discovery from public archives (deep-ASM slice 3)
claude
committed
e788205
Feed historical JS bundles into the scan (deep-ASM slice 3.5)
claude
committed
b24d68b
Fix deep-scan dropping the specified host; let historical reveal hosts
claude
committed
b4c017c
Deep-scan report: show the actual findings, not just per-host counts
claude
committed
ede764c
Dedupe historical JS seeds by path (collapse cache-buster variants)
claude
committed
7d0bb27
Add dashboard domain-mode + deep-scan API (deep-ASM slice 6)
claude
committed
b1dcae7
Add surface intelligence: endpoint extraction + associated-host graph (slices 5 & 4)
claude
committed
32994b5
Stop tracking SQLite journal; ignore *.db-journal
claude
committed
1a72c89
Makefile: run server via `python -m uvicorn` and --loop auto
claude
committed
4e40189

Commits on Jul 19, 2026