12.3.295 Platform Release

Released September 11, 2026

note

Version 12.3 continues the 12.x platform modernization while achieving feature parity with version 11.x on updated underlying technology.

Highlights

• Vulnerability Deduplication (ExploitIQ). Brinqa now consolidates duplicate vulnerability definitions from across your connected sources into a single, unified Intelligent Vulnerability (IV) and Intelligent Vulnerability Definition (IVD) — cutting noise so each real-world vulnerability has one authoritative record with consolidated evidence and risk. This capability is available to selected customers only in this release.

• Vulnerability remediation via SmartFlows. A redesigned, no-code automation builder lets you trigger flows from webhooks or the API, filter and act on findings, and notify via Email, Slack, or Microsoft Teams — with reusable, system-managed flows and clear on-canvas validation.

• BrinqaIQ Assistant, enhanced. The assistant now holds multi-turn context, answers with grounded BQL and CVE lookups, and can launch and track automations — backed by a unified tool layer shared with the Brinqa MCP integration.

• Programmatic access to the platform. A broad public API (and matching MCP tools) opens up flow execution, record comments, dataset reads and writes, and ticket creation from findings, so external systems and AI agents can drive Brinqa directly.

• Scheduled dashboard reporting. Schedule dashboard snapshots as PDFs, target them to ownership groups, and deliver them by secure link or attachment, with a personal snapshot history.

New features and enhancements

• Intelligent Vulnerabilities & Definitions. New Intelligent Vulnerability (IV) and Intelligent Vulnerability Definition (IVD) models, each with dedicated view pages that show consolidated evidence, contributing sources, and risk scoring.

• Deduplication configuration. A configuration page to turn deduplication on or off, choose which integration sources participate, set the matching confidence level, and enable or disable individual steps of the process.

• Relationship visibility. A new “Intelligent Vulnerabilities” relationship tab on Host, Container, and Container Image detail views, so you can see the consolidated vulnerabilities tied to each asset.

• SmartFlow integration. A system-managed SmartFlow and a dedicated “trigger deduplication processing” action, with orchestration so deduplication runs at the right point in your data pipeline (after data is loaded).

• Matching quality. CVE/CWE post-matching and near-duplicate filtering to improve how definitions are grouped, plus incremental processing so re-runs only reconcile what changed.

• Monitoring & progress. In-product progress indicators for IV/IVD generation, plus operational metrics and a dashboard for the deduplication pipeline.

• SmartFlows. Build automations on a visual canvas with filter and action blocks, webhook and API triggers, and parallel orchestration. New actions send Email, Slack, and Microsoft Teams notifications or deliver a dashboard snapshot, and destination hosts are validated before a flow runs. System-managed flows ship read-only, and validation issues surface directly on the canvas.

• Notification Templates. Compose reusable notification content with a merge-fields editor and data-model–aware dynamic variables, clone existing templates, and reuse them across notification actions.

• BrinqaIQ Assistant & MCP parity. The assistant authenticates with a Brinqa API token and reaches capability parity with the MCP tool surface: running BQL, listing and inspecting flows and automations, managing the automation lifecycle, and looking up CVEs — with sturdier multi-turn conversations and clearer, source-linked answers.

• Brinqa Public API + MCP tools. New public endpoints and matching MCP tools cover flow execution and history, record comments (create, list, search), dataset writes (single and bulk create/update/delete), button-flow discovery and triggering, and ticket creation from findings, plus a BQL grammar reference for AI agents.

• Record Comments. A consolidated comments API lets you read, search, and manage record comments, with BQL support for querying comments and traversing them back to their records.

• Scheduled PDF Dashboard Snapshots. Schedule dashboard exports as PDFs, target ownership groups, manage a personal “My Snapshots” inbox with expiration and bulk delete, and deliver via secure link or attachment.

• Connector Schema Change Review. Select a connector version, review detected schema changes in a diff table, and Review, Ignore, or Resolve each change inline — with user-customized consolidation mappings preserved across connector upgrades.

• Unified navigation & UI refresh. A redesigned sidebar adds collapsed-rail flyouts and collapsible submenu sections that remember their state, alongside expanded multi-theme support and broad styling improvements.

• BQL enhancements. BQL now supports string-literal output columns and UNION ALL to combine multiple filter criteria in a single Metric, plus a debugging option on the BQL API to inspect generated queries.

Addressed issues

• Explorer: Improved record detail views by resolving an issue where one-to-one relationship attributes did not render.

• Explorer: Improved export reliability by resolving an issue where an export could fail while the interface still reported success; failed exports are now clearly surfaced as failed.

• Explorer: Improved export reliability by resolving an issue where an export download could fail with a “file not found” error; exports are now retained reliably, with a clear message when one is unavailable.

• Explorer: Improved the reliability of Findings exports — when an added Asset attribute expands to multiple related values, exports now include all matching records instead of coming back empty.

• Remediation requests: Improved the performance of out-of-the-box remediation request calculations.

• Remediation requests: Improved request processing by resolving an issue where status and computed attributes could fail to persist after a create or transition.

• Remediation requests: Improved request processing by resolving an issue where the interface could show stale record data after a transition or button action until a manual refresh.

• Remediation requests: Improved reliability of exception (remediation) requests by resolving an issue where request status could lag a step behind and newly created requests could be saved without a status or computed attributes.

• Remediation requests: Improved request processing by resolving an issue where a request could remain in “In Review” after being approved or rejected.

• Dashboard reporting: Improved matrix table charts by resolving an issue where drill-down only applied the filters from the first series.

• Dashboard reporting: Improved the dashboard editor by resolving an issue where it could fail when editing Analytics Source widgets.

• Dashboard reporting: Improved Metric Definitions by resolving an issue where definitions using a target dimension alias would not compute.

• BQL: Added support for string literals as output columns in BQL, including within unions.

• BQL: Added UNION ALL support in BQL, letting you combine multiple filter criteria in a single Metric.

• Automation flows: Improved flow scheduling by resolving an issue where paused flows could delay subsequent flow steps.

• Platform resilience: Improved platform resilience by resolving an issue where consolidation work interrupted by a service restart could be left incomplete; interrupted work is now redelivered and resumed.

• Data consolidation: Improved consolidation reliability by resolving an issue where a stalled internal queue transaction could cause vulnerability ticket consolidation to hang; the transaction is now recovered so consolidation completes.

• Data consolidation: Added a consolidate-by-BQL action that lets you re-consolidate a selected subset of source records by targeting them with a BQL query.