October 23rd 2026 - New attributes for assets and vulnerabilities

• The Assets API scanStatus field and the scanStatus filter parameter both now support a new value, Finalizing, which is temporarily added to Fast DAST assets after a scan completes while results are still being settled.
• The Vulnerability API (JSON, XML, and CSV output) now returns a verification_status field (verified or unverified) for every vulnerability.
• Vulnerabilities discovered by Fast DAST scans that are awaiting verification (which were previously omitted from vulnerability queries entirely) will now appear with verification_status: unverified, and their attack_vectors list will be limited to a configurable maximum number of entries (5 by default) until verification completes.

The updated public API documentation can be found at:

• Retrieve assets
• Retrieve vulnerabilities
• Retrieve vulnerability