A clearer workspace
Staging organizes website tasks, client workspaces, report history, and account navigation. It also improves mobile layouts and makes release results and incomplete evidence easier to understand.
PRODUCT UPDATES / ROADMAPWhat shipped.
What shipped.
What’s next.
Follow the improvements to StackSnack, see what we’re working on, and help shape what comes next.
Next
Queued for future work.
Release checks and notification controls
Staging tests GitHub-connected comparisons for verified preview deployments, optional release gates, and more control over monitoring emails and Slack alerts.
Private access tests and fix verification
Staging brings together private scan history, targeted record and file comparisons, and a guided finding-to-fix retest. Its disposable Test Lab also checks whether a normal user can gain role or paid-feature access in a connected test app.
Sharper scanner evidence
Staging adds tighter two-account controls, CISA known-exploitation prioritization, better API and dependency discovery, and masked source locations for supported findings.
Release Candidate: v0.2.0-rc.2
We are preparing the next StackSnack release candidate from changes being tested on staging. The scanner and website versions will be frozen and checked together before any live release decision.
Setup guides for supported stacks
Practical setup instructions and troubleshooting for supported apps, starting with the Supabase and Node reference integrations.
Cross-user change tests
Planned checks for whether one test account can edit, take ownership of or delete another test account’s synthetic records in a disposable test app.
Guided app setup
Step-by-step setup showing which ownership checks, backend connections and test accounts are ready, and what needs attention.
No matching items in this section.
Ongoing
Currently in development.
Clearer agency handovers
Clearer branded handover reports that help agencies explain findings, fixes and retest evidence to clients. Improvements are being tested in private staging.
Security history for your app
Follow new, recurring, reopened and confirmed-fixed findings across scans. Improvements are being tested in private staging.
Checks before publishing
Review security findings on preview deployments before publishing changes. GitHub-connected checks are being tested in private staging.
From finding to verified fix
A guided path from a finding to a scoped fix and fresh retest, with distinct outcomes for verified fixes, partial fixes and regressions. In private staging.
StackSnack CLI
A command-line workflow for working with StackSnack from your terminal.
Agent scanner
Development of an agent-based application scanning workflow.
Stronger two-account verification
Additional controls to distinguish a blocked cross-user read from a test that could not establish access to its own sample records.
Vulnerability prioritization
More context for recognized vulnerable dependencies to help builders decide what needs attention first.
No matching items in this section.
Released
Shipped improvements and product updates.
More dependency versions recognized.
The scanner can now recognize exact package versions in Yarn cache paths inside public source maps. This gives the existing vulnerable-library check more version evidence to work with.
One theme. Clearer navigation.
The navy, cobalt and monospace design now carries through the account pages. Phone and tablet menus have separate, easier-to-use links, with keyboard and outside-click controls.
Better use of the scan’s request budget.
Observed API routes are prioritized within the existing probe allowance. Remaining requests can be shared across provider checks, helping the scanner make better use of the work it can complete.
A clearer summary. Evidence when you need it.
The report summary and full technical view now have distinct layouts. Start with the key findings, then open the detailed evidence and check outcomes for a closer review.
Turn findings into an action plan.
Private reports bring together an action plan, questions about findings and rescan summaries. Combined fix prompts help you take the next step in your AI builder.
No matching items in this section.
Considering
Ideas under review.
Security checks for AI agents and their tools
Research into permission boundaries, tool access and handling of untrusted instructions in applications that use AI agents.
AI endpoint access and spending controls
Exploring checks for unauthorized access and unintended usage of supported AI features.
Access-policy changes between deployments
Exploring ways to explain when a deployment broadens access to data.
More connected workflows
Additional ways to connect security findings with the tools builders already use.
No matching items in this section.
No matching items. Try another search or category.