Ostorlab · October 2026

00:00:00 – 00:00:05
We added approvals and introduced Ticket Agent.
Example workflow · Account takeover · Checkout Android app · New approvals · Ticket Agent · Verify Fix

00:00:05 – 00:00:12
We added approvals to control dangerous actions.
Run without asking · Ask me, block if no answer · Ask me, run if no answer · New approvals give you control over dangerous actions.

00:00:12 – 00:00:19
Approve, deny, or give custom instructions.
Example workflow · Only this action waits · Exploit the SQL injection? · Approve · Deny · Custom instructions · Use a read-only proof on staging. · Explore checkout · Inspect responses · Other tests continue

00:00:19 – 00:00:28
We extended scan setup with scope and traffic controls.
Scope guidance · Prompt guidance · Blocked IP / CIDR · Firewall rules · Request rate (QPS) · Supported profiles

00:00:28 – 00:00:37
Introducing Ticket Agent for autonomous automation.
Instructions · Rules · Connected tools · Triage and complex compliance workflows · Autonomous triage and compliance. Review template rules before enabling.

00:00:37 – 00:00:45
Automate triage and complex compliance workflows.
Example workflow · after rule review · Scan completion · Ticket Agent · Review findings · Gather the original proof · Awaiting review

00:00:45 – 00:00:52
We added Verify Fix to start a retest from a finding.
Verify Fix · Keep the finding’s location, weakness and original proof in the retest.

00:00:52 – 00:01:00
We extended retesting to unreleased mobile builds.
Candidate build · Assess the candidate before publishing. · Local selection · not uploaded

00:01:00 – 00:01:08
Verify Fix checks the original proof and possible bypasses.
Illustrative retest plan · Assessment handoff · Original proof · Possible bypasses · Review evidence before deciding to close. · Prepared input · no verdict · Best-effort assessment · human review

00:01:08 – 00:01:12
Control actions and automate follow-up.