Skip to content
Dreadnode Dreadnode Dreadnode

July 16, 2026

Agent Output available in beta for all orgs

← All updates

Agent Output available in beta for all orgs

13 new 10 improved 23 fixed

  • Slash-command palette in the web chat composer. Typing / opens a fuzzy-filtered overlay with built-in actions (/new, /clear, /rewind, /model, /agent, and more) plus dynamically-discovered skills.
  • @-mention agent picker in the chat composer. Type @ to open an inline agent picker navigable by keyboard or mouse; selecting an agent inserts it as a mention in your message.
  • /background launcher in the web chat composer. Type /background <task> (or /bg) to spin up a headless session without leaving your current conversation.
  • Chat session interface overhaul. New tool renderers (glob, grep, read, query, web search), an improved session header, capability picker, and read-only session notices ship in the web chat.
  • Improved model selector in chat. A ‘manage models’ button now lives inside the selector, model settings are consolidated into one table, and the add/remove flow has new tooltips and UX affordances.
  • “Agent Output” replaces “Structured Output” throughout the UI. The nav item, route (/agents/agent-outputs/), and all references are renamed; severity sorting is now case-insensitive so CRITICAL/Critical items rank correctly.

The web chat composer gets a full command surface this week: type / for a fuzzy-filtered slash-command palette and @ to pick an agent inline — matching the TUI experience in the browser.

New

  • Agent Output available in beta for all orgs. Agent Output is available in beta for all orgs including on-prem/enterprise, with beta labeling in the UI and new documentation.
  • ATLAS multi-agent attack framework. The SDK’s dreadnode.airt.atlas module runs multi-agent campaigns against deployed environments across eight attack modes using a MDP+Hedge router; executed tool calls are captured per-trial and surfaced in findings across the UI, API, and SDK.
  • Comprehensive multimodal transform library (170 image/audio/video). The SDK now ships 130+ image, audio, and video perturbations for red teaming vision and audio/video models, covering ImageNet-C corruptions, AugLy augmentations, SpecAugment, and published jailbreak techniques (FigStep, DolphinAttack).
  • AI red-teaming TUI exposes 131 multimodal transforms. Exposed media transforms grow from 26 to 131 (57 image, 52 audio, 22 video), including ImageNet-C corruptions, SpecAugment masking, and DolphinAttack-style audio attacks.
  • LiteLLM bundled for on-prem inference. Enterprise/self-hosted installs can enable LiteLLM via a new bundled Helm subchart, giving on-prem deployments access to dn/* models, TUI/chat inference, and the Admin Model Deployments surface.
  • E2B as a first-class on-prem sandbox provider. Self-hosted installs can now configure E2B via KOTS toggle — set your API key, pick the published template, and task-based evaluations work out of the box.
  • --max-steps budget on evaluation runs. dn evaluation create and evaluation.yaml now accept --max-steps / max_steps: for reproducible cost control independent of model latency.
  • AgentMail email inbox integration for web-security agents. Agents can now manage email inboxes via AgentMail — list/create inboxes and list, get, send, or reply to messages.
  • AWS SageMaker and Nova Sonic target docs. New docs cover probing AWS SageMaker (including SigV4 auth, multimodal attacks, raw audio endpoints) and AWS Nova Sonic (bidirectional speech-to-speech streaming). AWS/Nova Sonic deps are now bundled in core — no extras needed.
  • Azure AI Foundry multimodal target docs. New docs page covers probing Azure AI Foundry / Azure OpenAI multimodal deployments (text+image, text+audio) with the SDK and TUI.
  • Self-hosted architecture documentation. A new architecture page documents the Kubernetes/Helm topology, network requirements, trust boundaries, and optional external services for on-prem deployments.
  • Internal Network Engagements Now Run End-to-End Through Specialized Agents Automated internal-network and Active Directory engagements now run through a pipeline of specialized agents — from discovery through exploitation, credential harvesting, and reporting — with new lateral-movement and coercion tools for deeper attack paths.
  • Out-of-Band Vulnerability Testing Now Runs Without External Tooling Detecting blind vulnerabilities such as blind SSRF now works without any external tooling, with automatic provider fallback keeping tests reliable.

Improvements

  • Session sharing UX and deeplink. Agent session sharing now shows a popover with plain-language visibility state (Private / Shared with workspace) and a copyable deeplink.
  • Worker grouping headers enriched in Agent Sessions. Grouped session views now show live count, total, last activity, and a notice when grouping covers only the current page.
  • Assessment findings automatically carry target/judge model metadata. dreadnode.airt infers target and judge model info from configs so findings are populated without manual annotation; Nova Sonic raises a clear install hint immediately if streaming deps are missing.
  • DataGrid rows use border separation instead of zebra striping. Rows now separate via borders with a clearer active-row indicator and improved hover/selected states.
  • Caido SDK client preferred over MCP. Web-security agents now use the direct caido-sdk-client Python library when importable, reducing per-call overhead and improving routing accuracy.
  • Wordlists provisioned for password cracking at install time. The network-ops capability now ships rockyou.txt, SecLists 10k-most-common.txt, and OneRuleToRuleThemAll.rule at install time so hashcat and john_the_ripper work out of the box.
  • TUI agent picker shows locally installed capability version. The Ctrl+A agent picker now displays the locally installed version of each capability next to its name.
  • On-prem docs: first-model setup steps and platform-administration page. Install guides now include first-model setup steps, a new platform-administration page consolidates admin workflows, and stale SaaS-only model claims are corrected.
  • AI Red Teaming docs reorganized with a How-to guides section. Multimodal Red Teaming moves to the new section with a redirect from the old URL; Azure judge rubric tightened to avoid false-positive jailbreak scores on deflections.
  • Project metadata editor keyboard navigation and inline validation. The editor now supports keyboard navigation with revert/rollback on cancel.

Fixes

  • Filter popover no longer freezes the UI on large orgs. Filter rows are capped at 100 with search to find additional values; 3,000 facet values drop from 182 ms to 15 ms render time.
  • spawn_agent no longer hangs on sub-agent failures. Errors are now surfaced and a 900 s timeout prevents infinite waits.
  • Agent sessions no longer get stuck in an unrecoverable 400 state. Tool-call repair at the provider boundary handles compaction splits and orphaned tool messages from mid-run cancellations; duplicate or blank tool-call IDs are also sanitized.
  • No-arg tools now include the required parameters field. Fixes 400 errors on Together AI, DeepInfra, and other strict providers that require parameters even when empty.
  • llm_judge with dn/* models no longer silently scores 0.0. Routing now goes through the platform gateway correctly instead of raising a BadRequestError and returning a false-negative score.
  • pitch_shift transform no longer fails 100% of the time. An un-awaited coroutine caused every execution to fail with AttributeError; it now runs correctly.
  • SageMaker SigV4 multimodal targets work end-to-end. Three root-cause bugs (missing boto3, unresolved image paths, unsubstituted template placeholders) that silently produced zero real trials are fixed.
  • Web-security capability now emits structured findings. report_item is correctly offered to the agent so typed findings (web_vulnerability, web_endpoint) appear in the app instead of silently falling back to the generic report tool.
  • Impacket tools in network-ops install and resolve reliably. Multiple fixes address ModuleNotFoundError and FileNotFoundError across uv-managed runtimes, Python version mismatches, and false-positive script path detection; impacket_atexec and impacket_dcomexec drop the unsupported target_ip parameter for impacket 0.13.x compatibility.
  • Combined NTLM relay attack tool and certipy_find signature fix. New impacket_ntlmrelay_attack combines relay and coercion into a single call; certipy_find now takes structured params (breaking change for agents using the old args=[] form).
  • Generated ATLAS and agentic campaign scripts no longer crash with NameError: get_generator. Missing import is now included in both ATLAS and agentic-mode generated scripts.
  • atlas_attack objectives parameter is now optional. Omitting it defaults to one objective per OWASP-ASI category instead of raising a TypeError.
  • Sandbox provider unreachability no longer 500s all API endpoints. Non-sandbox endpoints stay online; sandbox-specific endpoints return 503; org/user endpoints are also correctly excluded from the degraded path.
  • Model deployment names without dn/ prefix now fail loudly. Admin API returns HTTP 400 instead of silently making the deployment invisible.
  • Task-based evaluations on unsupported providers return a clear error upfront. Providers that don’t support template builds (e.g. OpenSandbox) now return HTTP 400 at submission instead of failing silently mid-run.
  • Session exports record the correct model. Empty model strings from the agent definition no longer overwrite the user-configured model in trajectory exports.
  • TUI session browser placeholder and Ctrl+O deep-link fixed. Project filter shows a real example in the placeholder; Ctrl+O opens the correct URL instead of a 404.
  • TUI reasoning blocks truncate in compact mode and wrap correctly. Reasoning now truncates to 6 lines in compact mode (expand with ^O); wrapped lines no longer lose their gutter indent.
  • dn CLI no longer crashes on exit after /quit. Orphaned ThreadPoolExecutor threads are now drained on shutdown.
  • TUI no longer leaks reasoning traces from previous sessions. All conversation widgets are cleared on /new or session switch.
  • Agent session deep links load correctly instead of showing empty client data.
  • Oversized SVGs render correctly in the agent session view. Previously showed a broken image icon.
  • dn/ models tip in docs corrected. dn/ models are zero-setup and billed to your Dreadnode account — DREADNODE_LLM_BASE and DREADNODE_LLM_API_KEY are not required.