All pull requests

Pull requests

• Scan ASGI headers and queries when the bytes are not valid UTF-8

  #720·iacobdaniel opened Sep 24, 2026Contributor·

  ·
  3

• Add track() API for custom event tracking

  #716·timokoessler opened Sep 11, 2026Member·

  ·
  3

• [Aikido] Fix 2 security issues in wrapt, regex

  #715·aikido-autofix[bot] opened Sep 8, 2026Bot·

  ·

• Use zen-internals for IP matching

  #710·hansott opened Sep 3, 2026Member·

  ·

• Add support for Odoo 16-19

  #708·hansott opened Sep 2, 2026Member·

  ·

• Add Odoo sample app

  #705·hansott opened Sep 1, 2026Member·

  ·

• Switch IP matcher implementation

  #701·timokoessler opened Aug 21, 2026Member·

  ·
  9

• Add install test without toolchain

  #700·timokoessler opened Aug 21, 2026Member·

  ·
  3

• Fix issue

  #689·zen-triager-bot opened Aug 7, 2026·

  ·
  1

• Block dangerous AI tool calls via run_vulnerability_scan.

  #678·iacobdaniel opened Jul 30, 2026Contributor·

  ·

• pymongo: Scan _doc & scan a bunch more operations

  #653·bitterpanda63 opened Jun 15, 2026Contributor·

  ·

• Trim trailing dot from trusted IMDS hostnames

  #652·bitterpanda63 opened Jun 8, 2026Contributor·

  ·

• Store body_raw as well as a fix for bb report

  #649·bitterpanda63 opened Jun 2, 2026Contributor·

  ·
  2

• Count 404 requests with foreign extensions as attack wave scans

  #647·bitterpanda63 opened Jun 1, 2026Contributor·

  ·
  2

• add retry-after header when request gets rate-limited

  #638·bitterpanda63 opened May 18, 2026Contributor·

  ·

• Add protect mode validation

  #628·tomaisthorpe opened Apr 30, 2026Contributor·

  ·

• Add idor protection

  #627·bitterpanda63 opened Apr 28, 2026Contributor·

  ·

• Skip wave-attack detection for bypassed requests

  #624·bitterpanda63 opened Apr 16, 2026Contributor·

  ·

• Skip context creation for bypassed IPs

  #623·bitterpanda63 opened Apr 16, 2026Contributor·

  ·

• Include query string in URL for ASGI/WSGI requests

  #622·bitterpanda63 opened Apr 16, 2026Contributor·

  ·

• Add routers to our fastapi app for testing

  #600·bitterpanda63 opened Mar 27, 2026Contributor·

  ·

• Block SQL queries that fail tokenization

  #599·hansott opened Mar 27, 2026Member·

  ·
  1

• Remove the broken "Host" header logic for isRequestToItself

  #596·bitterpanda63 opened Mar 16, 2026Contributor·

  ·

• Update firewall-tester-action to version 1.0.9

  #590·bitterpanda63 opened Feb 12, 2026Contributor·

  ·

• Use more lenient urllib3.util's parse_url

  #588·kapyteinaikido opened Feb 11, 2026Contributor·

  ·