Hi AUDIT logoHi AUDIT
Log inGet started
Changelog

What's new

Detectors, CVE data, and playbooks stay current on the MCP server. You never update local tooling.

v0.4.0Aug 2026

COBOL playbook & expanded taint coverage

New
  • New web2-cobol playbook: copybook mapping, batch-routine analysis, and mainframe threat modeling.
  • Taint analysis now covers Kotlin, C#, Ruby, and PHP sinks.
  • web2_errors tool: error-handling and information-leak analysis.
  • Report generator supports custom branding for audit firms.
v0.3.0Jun 2026

OWASP Top 10 2025 posture scoring

New
  • web2_security tool scores your codebase against OWASP Top 10 2025 with CWE enrichment on every finding.
  • False-positive triage playbooks (filter, web2-filter) cut noise by ranking findings on reachability.
  • Attack-hypothesis validation: ask the agent to prove or disprove a suspected exploit path.
v0.2.0Apr 2026

Solana support

New
  • Solana program analysis: account constraints, signer validation, and Anchor-specific detectors.
  • solana-overview and solana-access playbooks for program onboarding and authority mapping.
  • Inheritance graph and storage layout tools for upgrade-safety reviews on EVM contracts.
v0.1.1Mar 2026

Stability & IDE detection

Improved
  • hiauditagent mcp add now detects Cursor, Claude Code, and Windsurf configs automatically.
  • Faster analysis on large monorepos through incremental file hashing.
  • Fixed detector duplicates when scanning nested workspaces.
v0.1.0Feb 2026

Private beta

New
  • Initial release: 12 MCP tools for Solidity static analysis, access control, and gas reporting.
  • PoC generation and audit-ready report drafting.
  • One-command install via curl.