Released in 1.3.0, 1.3.1, 1.3.2

This release connects multiple GitHub accounts to one organization, brings AI-assisted triage to bulk vulnerability selections, and adds an authentication-bypass test for gateway path handling. Endpoint trace listings load quickly on large workspaces, AI-driven crawls spend their budget on real pages instead of filter variants, and AI-guided login now proves it actually signed in before a scan continues.

Released in 1.2.135.4, 1.2.135.5, 1.2.135.6, 1.2.135.7

This release is about trusting what you see. Duplicate API endpoints can now be merged in bulk, TLS findings from the Satellite are reported again after being silently absent, and scan results no longer render a vulnerable or unrecognised scan as clean. Custom AI-authored tests gain a full authoring lifecycle — create, validate, approve — with every run bound to the exact code a human reviewed. Note the breaking change to the API Surface export below before upgrading any integration that reads it.

Released in 1.2.135.2, 1.2.135.3

This release connects Levo to WSO2 API Gateway with a one-click push of endpoints, gives the Service Graph its own full-screen page, and adds AI-assisted triage from the vulnerability view. Security testing results are markedly more trustworthy: tests that could not run are reported as skipped rather than failed, several classes of false positives are gone, and injection tests once again reach the endpoints they target. DAST scans gain second-factor support, PDF reports get a redesign, and sign-in, SSO and administration are more reliable across identity providers.

Released in 1.2.135.1

This release lets security teams tune API security testing per application, puts test-run cleanup under role-based control with bulk delete, and introduces a Beta Service Graph in the API catalog. It also broadens test coverage to form-encoded APIs and unauthenticated-access probes, produces cleaner OpenAPI specs for strict gateway imports, and makes on-prem component health alerts far less noisy.

Release period: September 1 – September 8, 2026

A short but active stretch: a new API discovery source, two new integrations, and an overhauled component health monitoring experience, alongside a batch of accuracy and reliability fixes across security testing and web application scanning.

Release period: August 1 – August 31, 2026

August was a big month for coverage and visibility: a major expansion of web application scan checks, sharper AI Firewall detection, and a redesigned view into every on-prem component's health.

Release period: July 1 – July 31, 2026

This month's release focuses on making your API inventory easier to trust and act on — clearer endpoint activity data, safer parameter editing, broader DAST framework coverage, and a more reliable test-run experience.

Release period: June 1 – June 30, 2026

June brought major upgrades to authentication testing and AI Security policy controls, faster performance across the platform, new integrations, and a rebuilt scheduled reporting engine.

Release period: May 1 – May 31, 2026

May deepens Levo's AI security stack: a redesigned Policy Hub with identity-aware policies, a next-generation AI traffic tagger that attributes traffic to individual agents and sessions, and a full Agent Detail view. We also added Streamable HTTP transport for the MCP server, deeper API discovery from source code, and broad reliability and performance gains across the platform.

Release period: April 1 – April 30, 2026

April brings AI security front and center: discovery of AI agents, models, and MCP tools from cloud providers, the first AI Policies and guardrail alerting, and a major step forward for web application scanning (DAST) with AI-driven authentication. We also expanded reporting, hardened sensors, and shipped new deployment options.