HiddenLayer Console Release Notes

We are delighted to announce the latest release of the HiddenLayer Console, as part of our continued commitment to providing the industry's most advanced AI security solutions. This latest update introduces new features and enhancements that offer an even more robust, intuitive, and effective cybersecurity for your AI experience.

Release notes for the HiddenLayer Console version 26.7.1 released on July 14, 2026.

• The ability to regenerate the Client Secret for an API Key has been added under Settings > API Keys > Actions.
  • This feature enables generation of a new Client Secret and extension of permissions expiration, without needing to recreate the API key.
  • The Client ID is kept the same.

• Recent Scans under Supply Chain will now display Threat Levels, matching the Supply Chain data table.

• Data tables for Discovery, Supply Chain, and Runtime Security will now default to displaying 50 results.

Release notes for the HiddenLayer Console version 26.7.0 released on July 7, 2026.

• Added a status display for Azure subscriptions for Asset Discovery. An error tooltip will appear if there is an issue with onboarding an Azure subscription.

Azure integration card	Azure subscription status

Error tooltip displayed for an onboarding issue.

Release notes for the HiddenLayer Console version 26.6.5 released on June 30, 2026.

• Minor UI bug fixes.

Release notes for the HiddenLayer Console version 26.6.4 released on June 23, 2026.

• Multiple subscriptions can be selected during Azure Asset Discovery onboarding.

• Minor UI bug fixes.

Release notes for the HiddenLayer Console version 26.6.2 released on June 15, 2026.

• False positive and false negative for Interactions can now be reported in bulk
  • Interactions can be multi-selected which will reveal a Report Issue button

• Fixed an issue where the scrollbar was not visible for API key permissions.

Release notes for the HiddenLayer Console version 26.6.1 released on June 9, 2026.

Under Interaction Details, event processing time has been added to demonstrate the time elapsed for interactions analysis.

• The processing time is displayed in both the API and Console UI only for new interactions.
  • Customers with hybrid deployments will need to update to a new Runtime Security image when released in the near future.

• Fixed an issue for the Azure Discovery integration where adding a second integration from a tenant different than the first integration, will fail with this error message: “Azure role assignment failed. Please check your permissions and try again.”
• Fixed an issue where the scrollbar was not visible for data tables.

Release notes for the HiddenLayer Console version 26.6.0 released on June 2, 2026.

Tagging has been added for Discovered assets within the Discovery module. This feature enhances filtering capabilities by enabling custom tagging for assets, as well as importing tags from the cloud providers themselves.

• Custom tags with key:value pairs can be added for individual or multiple assets. These tags are modifiable and can be tailored to specific identification needs.

• Discovered tags are tags imported from the cloud provider. These tags are managed from within the cloud provider, and cannot be modified within the HiddenLayer Platform.
  • The supported cloud providers are: AWS, Databricks, and Azure.

• Assets can also be filtered by tag under the Filter button.

• Fixed the overflow issue where long evidence values overflowed and pushed the cell off the right edge.

  • Now the long evidence is truncated, with the full value being visible when you hover over the value.

• Fixed the issue where only 100 interactions were being exported.

• Changed the Sessions table truncation to ... when there is only one requester.

• Fixed an issue with tag filtering when a tag contains a colon (like an AWS ARN).

Release notes for the HiddenLayer Console version 26.5.3 released on May 26, 2026.

• The side navigation has been updated to include semantic linking, enabling opening items in new tabs, as well as enhancing user accessibility for screen readers.

• Reduced loading times for models with high file counts under the Supply Chain model details page.

Release notes for the HiddenLayer Console version 26.5.2 released on May 19, 2026.

• A Community Scan for Hugging Face can now render and display the following JSON files when scanning model files:

  • config.json
  • tokenizer.json
  • tokenizer_config.json
  • added_tokens.json
  • generation_config.json
  • vocab.json
  • special_tokens_map.json
  • genai_config.json
  • preprocessor_config.json
  

• JSON files will not be displayed if they exceed the following limits:

  • Files with 10 million characters or more.
  • Tree depths greater than 28 levels.
  • Tree nodes greater than 500,000 nodes.

• When viewing the Files tab for scan details, if there are more than 50 files, the list is paginated.

  

• The file drop down on the Asset Scans table will display a maximum of 20 files with detections.

• Advisories are notices that appear alongside detections.

• Note: TokenBreak and Suspicious File Format have been moved to the Advisories section.

  

• Under Supply Chain > Asset Scans, long file paths will be truncated to display the full file name.
• This can be seen on the Asset Scans table when clicking the file drop down, as well as within the scan details under the Files tab.

• Fixed an issue under Settings > Integrations where the Azure Asset Discovery integration card would intermittently not show the three dot configuration button.
• Fixed an issue where .cpkt files could not be selected when scanning a local model file in the Console UI.

• Date: May 28, 2026
• Time: 9PM ET / 8PM CT / 6PM PT
• Maintenance Window: 1 hour
• Impact Level: Low

• During the maintenance window, a security update will be performed for a third party vendor.
• During this time frame, the HiddenLayer Console may be inaccessible for a few minutes.
• No other functionality will be impacted during this update.

Release notes for the HiddenLayer Console version 26.5.1 released on May 12, 2026.

• You can now filter by severity on the Interactions tab, when viewing Red Teaming details in the Console.
• You can filter by high, medium, and low severity levels.

• Email notifications will be automatically sent to tenant administrators when an API key is nearing its expiration date.

  • Notifications will be sent 7 days in advance, and then 1 day before expiration.
  • The email notification will include the name of the API key and the expiration time stamp in UTC.

• Improved the console navigation to reduce re-renders when navigating.

• On the SSO details page, the ACS URL field labels were correct, but the actual fields were inadvertently swapped. This has been resolved.

• Fixed an issue where some tool tips did not work as expected.

Release notes for the HiddenLayer Console version 26.5.0 released on May 5, 2026.

• For Supply Chain tables in the Console, the Threat Level column is now pinned, so it is always visible.
• With the Threat Level column always visible, the link to the scan details page is also always visible.

• Copy buttons have been added to the AI Attack Simulation CONFIG ID and PROMPT SET ID for the Execution Settings.

• The CONFIG ID and PROMPT SET ID are generated when creating the AI Attack Simulation evaluation.

  • The CONFIG ID is generated when running an evaluation from a Red Team Configuration.
  • The PROMPT SET ID is generated when running an evaluation from a Red Team Prompt Set.
  • These IDs display on the Config tab on a Red Team Evaluation results page.

• When creating a Red Team Evaluation, changing a default severity mapping now displays an Override icon to identify the change.

• The Run New Evaluation and Start Evaluations buttons are now hidden from users who have the Viewer user role.
• This is to reduce confusion because the Viewer user role cannot run AI Attack Simulation evaluations.

• Under Settings > SSO
  • The values for the Assertion Consumer Service (ACS) Callback URL and Secondary Assertion Consumer Service (ACS) Callback URL are reversed.
  • Use the Secondary ACS Callback URL as the primary URL.

Release notes for the HiddenLayer Console version 26.4.3 released on April 28, 2026.

• Create configurations for you AI Attack Simulation Red Teaming.
• Red Team Configurations can include a target model, target system prompt, and severity mapping. Advanced options include applying a Runtime Project and execution strategy.
• See Red Team Configurations for more information.

• The Console Viewer role now has read-only access to the AI Attack Simulation pages.

• Fixed an invalid regular expression issue when adding a new scan in the Console.

• Fixed an issue with displaying a large number of file types for Scan Results on the Asset Scan results page.

Release notes for the HiddenLayer Console version 26.4.2 released on April 21, 2026.

• Added a Success Rate column under Attack Simulation > Red Teaming > Evaluation Results.

• Fixed a display issue where the sidebar would not expand when clicking on the user profile icon.
• Fixed other minor display bugs.

• Fixed PII highlighting being misaligned on long prompts containing special characters under Runtime Security > Interactions details.

Release notes for the HiddenLayer Console version 26.4.1 released on April 14, 2026.

• Minor display bugs

Release notes for the HiddenLayer Console version 26.4.0 released on April 7, 2026.

• Users can now control when HiddenLayer Support can access the tenant Console.
  • This feature is located under Settings > Tenant Settings.
  • When access is granted, this enables HiddenLayer Support to remotely login to your tenant for troubleshooting purposes.

• Access will be tracked under Settings > Audit Log.

  • HiddenLayer Support will have a role called “HL Admin” and the Actor column will display the Hiddenlayer user accessing the Console.

Release notes for the HiddenLayer Console version 26.3.3 released on March 31, 2026.

• SSO is now self-service and can be enabled or modified at the tenant level without having to contact HiddenLayer support.
• See the SSO documentation for more information.

• The Policy Status column for the Discovery > Discovered Assets table is now sortable and filterable.

• Added UTC time zone label for applicable charts and graphs.

Release notes for the HiddenLayer Console version 26.3.2 released on March 19, 2026.

• API keys have been updated with a new scope for permissions related to AI Attack Simulation.
• See the AI Attack Simulation release notes for more information.

• Project cards have been updated to replace the “Created On” date with “Last Modified” date.

• The User Settings column under Settings > Users has been updated with new action icons.

Release notes for the HiddenLayer Console version 26.3.1 released on March 16, 2026.

• Country has been renamed to Country of Origin.
• Tooltips have been added for Country of Origin and Geographic Footprint.

• Minor display bugs.

Release notes for the HiddenLayer Console version 26.3.0 released on March 10, 2026.

• New functionality for Model Card Compliance Overrides and changes related to Model Intelligence have been enabled with this release. See the Supply Chain release notes for more information.

• Fixed an issue under Reports where the Assets by Provider chart displayed incorrect color coding for discovered cloud providers.

• Fixed an issue under File Details where compliance information was not displayed when there are no associated detection categories for the model file.

• Fixed an issue where the AI Response field under the Interaction Details modal erroneously displayed the message “The AI refused to provide an output for this request due to security rules.”

  • This message has been replaced with “No response data available.”

• Fixed a sizing issue for data table columns.

Release notes for the HiddenLayer Console version 26.2.1 released on February 24, 2026.

• Completely revamped and improved UX navigation for the Settings > Integrations page.
• Integrations are now categorized by relevant integration type, as well as being filterable by HiddenLayer products or enabled state.

• Fixed an issue where tool tips were not displaying.

Release notes for the HiddenLayer Console version 26.2.0 released on February 10, 2026.

• A user can now report false positives or false negatives for detections directly in the Console under Runtime Security.

• This functionality is located under the Detection Details for a given Detection.

  
  

• Enhanced page performance for the Projects and Policies pages.
• Added detection counts to the Projects page when in list view.

• Added automatic parsing of authorization headers when inputting a Splunk HEC Token for the Splunk integration.

• Added functionality where the “Objectives” section is removed when blank for an Evaluation Summary.

• Added a drop down for “Original Content” where applicable when reviewing Red Teaming results. This drop down can be found under: Red Teaming > Pick an evaluation > Interactions > Pick an Attacker Result.

  

• Fixed numerous and minor UI/UX issues.

• Removed “TokenBreak” as a filterable value for the Detections and Interactions table.
• Fixed minor UI/UX issues.

• Fixed an issue where SSO-provisioned users were allowed to perform a federated login.
• Fixed a UI issue where SSO configurations were not present in the Console after configuration.
• Fixed minor UI/UX issues related to the side navigation.

Release notes for the Console version 26.1.0 released on January 13, 2026.

The Runtime Protection module has been renamed to Runtime Security.

Added a background image to the side navigation panel.

The following items have been resolved in this release.

• Console

  • Fixed an issue where counts displayed in graphs and charts would overflow.
  • Fixed an issue where charts with percentages would erroneously round up to 100%.

• Runtime Security

  • Fixed an issue where “Nothing Here” is displayed instead of “---” for an interaction or detection with no assigned project.

• Supply Chain

  • Fixed an issue under Detection Summary where display widgets would overlap.
  • Fixed an issue under Model Details where column headers would overlap.

• Integrations

  • Fixed an issue under Settings > Integrations where changes to the Splunk configuration could not be saved until a Splunk HEC token is entered.

Release notes for the Console version 25.12.2 released on December 16, 2025.

A user can be automatically logged out of your tenant when idle for an approximate amount of time. This time can be customized.

• When a value is not set, a user will be automatically logged out after approximately 90 minutes.
• Contact HiddenLayer Support to discuss enabling this feature in your tenant.

This release also includes bug fixes and performance improvements related to filtering and sorting for data tables in the Console UI.

Release notes for the Console version 25.12.1 released on December 9, 2025.

When a user logs out of your tenant, they can be redirected to your custom URL. For example, users can be redirected to your organization's SSO page.

Note: Customers with an existing SSO configuration can contact HiddenLayer Support to enable and configure a custom logout URL for their tenant. Customers setting up SSO for the first time can provide a custom logout URL during the standard SSO configuration process with HiddenLayer Support.

The detections badge has been updated on the Detections page.

The Detections and Interactions tables now have a default filter enabled to display the last seven days.

For results with zero files scanned, the expandable row is disabled because there is no data to display.

The table filters for Supply Chain and Runtime Protection now include filtering by Threat Level.

The Policy list now loads more content as you scroll down the page.

This release also includes bug fixes and performance improvements.

Release notes for the Console version 25.12.0 to be released on December 1, 2025.

• New sidebar navigation and organization of settings and features.

• Completely revamped and improved UX navigation for a seamless user experience.

• Each module provides exportable data tables for data analysis.

The product modules have been renamed in the Console UI to better match your workflow. The following are the new names and the old names for the product modules.

• Discovery = AI Asset Discovery

  

• Supply Chain = Model Scanner

  

• Runtime Protection = AI Detection & Response (AIDR)

  

• The new Security Dashboard provides a high-level data overview using graphs and charts.

  

• A comprehensive tutorial section, with links to user documentation.

  

Release Notes for AISec Platform Console version 25.11.3 released on November 26, 2025

• Fixed an issue for Model Scanner where non-compliant files detected in a compliant archive are not displayed under Detection Summary in the Console UI.

Release Notes for AISec Platform Console version 25.11.2 released on November 19, 2025

• Fixed an issue where the Policy tab was hidden under the Model Scanner page.

Release Notes for AISec Platform Console version 25.11.1 released on November 14, 2025

• Minor enhancement for the Console UI for Model Scanner to handle scanning of non-model files.
• Users can now submit entire folders with less risk of running into issues.

Release Notes for AISec Platform Console version 25.11.0 released on November 7, 2025.

• Model Genealogy is now Model Intelligence to provide a better description of the data provided.

Release Notes for AISec Platform Console version 25.10.1 released on October 30, 2025.

A search bar has been added to the Asset Inventory page, allowing users to search for assets within the page.

API permissions now includes accessing the Console audit log. Users will be able to query for the Audit Log via API. There is a new Audit permissions entry when creating a new API key. To create an API key, see API Keys.

Note: Existing API keys will not have the new Audit permission. A new API key will need to be created to use this new permission.

The audit log in the Console UI is only viewable by users with the Administrator role.

• All other roles will not have access to the audit log. (User Admin, Analyst, Viewer)
• This was done to enhance data separation and privacy so only authorized users can see the audit log and its contents.

• Fixed an issue on the AIDR page where the Detections tab appears to be loading forever.

Release Notes for AISec Platform Console version 25.10.0 released on October 16, 2025.

HiddenLayer is pleased to announce the release of a new feature called AI Asset Discovery.

AI Asset Discovery takes discovered assets and provides insight into the HiddenLayer platform helping to secure those assets.

There is initial provider support for Databricks and AWS Bedrock/Sagemaker. Assets are discovered every 5 minutes.

AI Asset Discovery provides the following features integrated into this view:

• Asset Relationships
• Model Scanner Integration
• Automated Red Teaming

Asset Relationships adds a relationships mapping that maps how assets are connected to each other in a top-down hierarchical view.

The following Databricks assets are supported:

• Catalog

  • Schema

    • Model

      • Endpoint

The following AWS Bedrock assets are supported:

• Agent

  • Model

The following AWS Sagemaker assets are supported:

• Endpoint

  • Model

When models are discovered, automated scanning occurs for the discovered model assets, and users can then view the scan results.

To view scan results, click Actions > View Model Scan.

When endpoints are discovered, users can create an Automated Red Teaming target from those discovered endpoint assets, adding the results to the user’s asset inventory.

For an endpoint asset type, click on Actions for the following options:

• Add Target

  • This option will add the selected endpoint as a target for automated red teaming.

• View Target

  • This option will redirect the user to the Targets view under Automated Red teaming, with the view pre-filtered to the previously added endpoint.
  • The user can then choose to modify the target or run an attack against the target.

Known Issues

There is a known issue where deleting an Automated Red Teaming target associated with an endpoint asset will cause an error when attempting to use the Add Target action in the AI Asset Discovery view.

• This issue occurs when the following actions are taken in this order:

  • Add Target is selected for an endpoint in the AI Asset Discovery view

    • The endpoint is then added as an Automated Red Teaming

  • Under the Automated Red Teaming view, the previously added endpoint is removed.

  • Add Target is selected again for the same endpoint in the AI Asset Discovery View

• Automated Red Teaming functionality is not affected and the endpoint can be added as a target under the Automated Red Teaming view.

• Fixed model scanner issue specific to the Firefox browser where selecting “Add to Selected Existing Model” could cause the New Scan modal to disappear.
• Fixed a date and time stamp display issue for assets discovered under the AI Asset Discovery page.

Release Notes for AISec Platform Console version 25.9.0 released on September 30, 2025.

• On the Model Scanner page, the Asset Scans table includes a Policy Status column. The status displays Compliant or Noncompliant based on the policy assigned.

• Added constraints to the default policy so specific information cannot be edited, like the project name or project ID.

• Bug fixes

Release Notes for AISec Platform Console version 25.8.0 released on August 26, 2025.

• A redesigned left-side menu provides faster access to Model Scanner outputs, including scans, threat levels, AI BOM downloads, and detailed results.

  • See the new page here (requires a login): Model Scanner page.

• Model Scanner Genealogy:

  • Model Genealogy delivers critical insights into model architecture, ancestry, and task alignment to support trust, security, and compliance in AI deployment. Model Genealogy is a Model Scanner feature.
  • Model Genealogy is available in both SaaS and hybrid deployments, with support for ONNX and Safetensors formats.
  • See the Model Genealogy documentation.

• A new AIDR page for reviewing your detections and easily viewing specific prompts and responses.

  • See the new page here (requires a login): AIDR page.

• This replaces the Detections / AIDR page in the console.

• Add Model has been renamed to New Scan for improved usability.

Release Notes for AISec Platform Console version 25.6.0 released on June 26, 2025.

• Customers can now create projects to represent unique AI applications or use cases.
• Projects can use a custom policy to configure AIDR detectors, rather than using one universal policy for all use cases.

• The Sandbox in the Console now provides historical chat context and more sample prompts.

Release Notes for AISec Platform Console version 25.5.0 released on May 20, 2025.

• Console administrators can see a record of when API keys expire along with the ability to view enriched data for audits log entry with more details about the resource when it exists.

• Admin Audit Log: New actor column to display API Key client IDs along with expandable rows to view enriched data. Additionally, content space has been optimized with refined spacing and table layouts to accommodate various screen types.

Release Notes for AISec Platform Console version 25.3.0 released on March 26, 2025.

• Date Range Picker: Highlights the date range along with minor visual enhancements and bug fixes.

Release Notes for AISec Platform Console version 25.2.1 released on February 27, 2025.

• New write API permissions for Model Scanner CLI Hybrid Mode.

Release Notes for AISec Platform Console version 25.2.0 released on February 19, 2025.

API Key Scoping enables developers to create specific API keys with clearly defined permissions, adhering to the principle of least privilege. This practice allows organizations to minimize security risks by ensuring that each API key has only the permissions necessary for its intended use.

Enhanced password reset, allowing users to create a new password through an email link to the platform.

The HiddenLayer Customer Support and Developer Portals are accessible from the main navigation bar and the page footer.

• The Customer Support Portal centralizes product announcements, documentation, knowledge base articles, answers to common questions, and submission of support requests.
• The API Developer Portal provides customers with access to APIs that integrate HiddenLayer's AIDR into their existing processes, as well as detection alerts, data, and actions powered by the Platform.

• Model cards (Default & List View): Streamlines content, improves usability, and status visibility along with user access to delete the model.
• Model Inventory: Dynamically adjusts the number of model cards displayed based on screen size.
• Model Pages: Content space has been optimized with refined spacing and table layouts to accommodate various screen types.

Release Notes for AISec Platform Console version 25.1.0 released on January 22, 2025.

When a Console administrator creates a user, an onboarding email is sent that includes a link for the user to create their own password.

Access to HiddenLayer’s Zendesk and API Documentation Portal from the Console using single sign-on (SSO).

• Refresh Admin Integrations page UI.
• User credentials are no longer returned and displayed in the Console, instead an email is sent to the respective user being created or who's password is reset.
• Support for an email domain allowlist that restricts users being created to only those matching the allowlist (existing tenants are grandfathered in with a wildcard that allows any domain).

Release Notes for AISec Platform Console version 24.12.0 released on December 17, 2024.

• The Console now provides search filters on the Model Inventory page. You can filter by Model Scanner status, AIDR status, a date range for when the scan was created, and selected Service Providers.

• The Console now shows the Detection Categories that were checked, in the context of the broader HiddenLayer categories within the Model Scanner Detection Summary pages.
• Additionally, all categories will have descriptions and links to articles in the Innovation Hub, filtered to the selected category.

• The Console now allows customer admins to monitor internal and HiddenLayer user activity by role and activity with timestamps. The current monitored activity includes login, model upload, and creation.

Release Notes for the AISec Platform Console version 24.10.2 released on November 6, 2024.

When uploading a model file to the console, a message displays informing the user to not close the tab or navigate away from the Model Inventory page; doing so will cancel the upload.

• A user can open a new browser tab without affecting the upload.

Release Notes for the AISec Platform Console version 24.9.1 released on September 30, 2024.

Model Scanner Detection Details offers:

• Detection Summary with Threat Level for the Model
• Enhanced risk information for each detection
• List of model version files with detections

elease Notes for the AISec Platform Console version 24.9.0 release on September 17, 2024.

• Create a Custom Entity to customize data leakage information for personally identifiable information (PII).

Release Notes for the latest AISec Platform version 24.8.2 release on August 28, 2024.

AISec Platform administrators can assigned a defined role to AISec Platform users. The defined roles are:

• Admin: Can view all pages, has access to the admin section, and can manage users (add, edit, change role, and delete users).
• User Admin: Can manage users (add, edit, change role, and delete users).
• Analyst: Can view all data and interact with the Model Inventory, Models, Detections, and LLM Sandbox. Does not have access to the administrator functions.
• Viewer: Read-only access to the AISec Platform and does not have access to the administrator functions.

Release Notes for the latest AISec Platform version 24.8.0 release on August 20, 2024.

Requestor data is part of the Inferences and Detections details in the AISec Platform. The Requestor is the ID (like UUID or IP address) associated with the Inference or Detection. The Requestor data can be used to further investigate and determine any patterned behavior, which then allows users to take the appropriate actions.

AISec Platform administrators have the ability to create and delete API keys for their tenant.

AISec Platform administrators can add, edit, and delete users.

Release Notes for the latest AISec Platform version 24.7.0 release on July 23, 2024.

AISec Platform Administrators can set up their SSO provider to provide single sign-on for their organization. The SSO feature uses SAML version 2.0.

Please contact Support at [email protected] for assistance.

If a scan results in an Unsupported Status, you can now submit a Support ticket from the Platform UI.

The Side Navigation icons now include hover-over text that displays the icon label, like Model Inventory, Detections, and Admin.

This release also includes performance improvements and bug fixes.

Release Notes for the latest AISec Platform version 24.6.0 release on June 20, 2024.

When a detection occurs, the AISec Platform includes the MITRE ATLAS ID and a link to the MITRE ATLAS page to provide more context about the detection.

The AISec Platform now allows you to upload and add a model directly from the UI that is stored locally on your local machine. You don’t need the API requests or the CLI commands to have a model file scanned by the AISec Platform Model Scanner. Just go to your Model Inventory page in the AISec Platform, click the Add a Local Model icon, and upload your file.

The Model Scanner now provides scan status details for an unknown file type.

Improved scanning ONNX files.