SILENTCHAIN Changelog

Fixed a passive-scan false-positive flood of "missing Content-Security-Policy" findings: CSP checks now run only on successful responses, skip the extension's own probe traffic, and are deduplicated per host.

Added request-header fuzzing to Phase 2 active verification (SSRF and proxy headers), improved out-of-band and server-side template injection (SSTI) verification accuracy, and overhauled the local Ollama provider for more reliable structured output.

Added API-focused active checks to Phase 2: GraphQL introspection, insecure deserialization, JWT alg:none and SAML signature stripping, mass assignment, and OAuth redirect_uri tampering.

Streamlined the Advanced settings panel.

Redesigned the HTML advisory report to match the SILENTCHAIN theme, with print and accessibility fixes.

Renamed to "SILENTCHAIN Professional" throughout the Burp UI, banner, settings, and report footers.

Added in-app updates: a license-gated download and guided install flow from inside Burp.

Improved local Ollama reliability on small models: structured JSON output, larger context window, and faster reasoning-model responses.

Fixed Phase 1 analysis timeouts so every AI provider honors the configured request timeout.

Added licensing and a first-run EULA, and hardened Phase 2 injection handling and HTML report output.

Faster Phase 2 active verification with concurrent payload sends (configurable concurrency).

Added HTML advisory report export.

Phase 2 active verification engine with out-of-band (OOB) callback testing.

Added 200+ curated payloads and WAF detection and fingerprinting for 24 WAF types.

Reached 10 AI providers, adding GPT-5.5, Claude Code, OpenRouter, and Z.ai.

SILENTCHAIN Professional v2: the Java / Montoya rewrite of the extension.

Fixed local Ollama returning zero findings on small models (structured JSON output, context and repetition tuning, truncated-response recovery).

Rewritten as a native Java / Montoya extension. Burp AI is now the default provider, passive analysis is opt-in, and findings are emitted as native Burp issues.

Added the Azure OpenAI / Foundry provider, a persistent finding cache, CSV export, a start/stop scanning toggle, a runtime status panel, and a fixed thread pool for stable concurrency.

Detection and stability improvements.