Takumi Guard is an npm registry proxy that strengthens supply chain security.
Add a single registry URL to your .npmrc and malicious package blocking plus post-install tracking and breach notifications are enabled automatically.
Takumi Runner is a secure runner service for GitHub Actions workflows.
Change one line in your workflow file — runs-on: takumi-runner — and eBPF tracing of processes, network connections, and file operations is enabled automatically.
Takumi Blackbox Assessment now supports "Risk Focus Assessment" mode.
You can set priorities for each feature-perspective combination and run assessments incrementally within a credit threshold.
Takumi blackbox assessment reports have been improved.
Reports are now more readable and actionable, with clearer reproduction steps, more specific remediation guidance, and consistent formatting throughout.
We've released the Takumi Autofix feature. This feature automatically generates fix patches for vulnerabilities detected in security assessments and creates Pull Requests.
We've introduced improvements to enhance both recall and precision rate of the Takumi Blackbox Engine.
Takumi Whitebox Assessment is now available directly from the Web Console.
Previously only available via Slack chat or Web chat, you can now run whitebox assessments from the Web Console, just like blackbox assessments. Provide your source code via GitHub repository integration or file upload, and Takumi will analyze the code to detect vulnerabilities.
In the web version of Takumi, you can now select GitHub repositories through Takumi Workplace.
Additionally, with this change, existing scope definitions have been migrated to the Takumi Workplace default.
We have updated the permissions for the Write GitHub Apps.
Repository permissions for Contents has been changed from Read-only to Read and write.
We've made some improvements to the Takumi Blackbox Assessment engine.