Skip to content

October 1, 2026

Web Chat Interface Redesign

← All updates

Web Chat Interface Redesign

5 new6 improved14 fixed

Teams can now choose a sandbox’s capabilities, compute, secrets and idle timeout before it starts, then check its status, installed capabilities, health issues and logs in a panel beside their web chat session.

New

  • Bulk triage for Agent Output findings. You can now select multiple findings on the Agent Output page and set their triage status in a single action, with per-row results and a confirmation toast.
  • SDK Assessment.record_attack_result(). A new method lets custom-target attacks emit traces and materialize findings in the platform, so results from flows like multistep tool attacks and indirect injection are no longer invisible.
  • AIRT dataset library documentation. The AI Red Teaming Datasets documentation now covers the full public dataset library: 497 curated, license-cleared datasets across 7 media types with OWASP LLM and Agentic coverage mapping.
  • Dataset attribution metadata in SDK push. Datasets pushed via the SDK now carry license, tags, language, task categories, and source provenance, so the license badge, tag filters, and Source section populate correctly in the platform.
  • Bulk close and reopen project memories. You can now select multiple memories on the Memories page and close or reopen them in one action via the bulk-action bar.

Improvements

  • Web chat session view overhauled. Sandbox configuration, runtime status, and capability inspection are now surfaced directly in the sessions page with dedicated panels for sandbox setup, runtime health, and issues.
  • Safe clickable links in agent content. Links in agent messages, tool results, memories, and item notes are now clickable — each opens a confirmation dialog showing the actual destination before navigating.
  • Organization owner management from the org page. Organization owners can now be added and removed directly from the org detail page; adding an unrecognized email prompts confirmation before creating an account.
  • No-model-deployments notice on self-hosted installs. Self-hosted installs with no model deployments now show an informational notice on the home page and in model-dependent CLI guides, directing platform admins to the deployment page and others to their admin.
  • AI red-teaming reference docs reorganized per topic. The AI red-teaming reference docs are reorganized into per-topic pages — transforms, attacks, and multi-agent probing each have dedicated sections with clearer structure.
  • Docs site support contact modal. The docs site header now has a help button that opens a support modal with contact addresses for general inquiries and technical issues.

Fixes

  • Custom-target attacks now record spans and findings. Custom-target attacks (multistep, AgentVigil, EVA) now record spans and findings against the assessment, so results appear in the UI with the correct OWASP-Agentic category.
  • OWASP Agentic categories correctly assigned to agentic findings. Agentic attack findings now map to the correct OWASP Agentic (ASI) categories instead of collapsing to generic LLM jailbreak categories.
  • AIRT report generation and trace exports no longer fail. AIRT report generation and trace Parquet exports no longer fail with a “Report build failed” error after the request completes.
  • Hosted evaluations with agent-side script verification no longer end as infra_error. Hosted evaluations using agent-side script verification no longer end as infra_error after the agent finishes normally.
  • BYOK model evaluations with egress allowlists now provision correctly. Hosted evaluations using BYOK models (e.g. openrouter/…) with egress allowlists now provision correctly and surface configuration errors immediately instead of retrying until the circuit breaker trips.
  • Long-running eval generations no longer drop mid-stream. Long-running eval generations no longer fail mid-stream with connection drop errors during extended model outputs.
  • Session list sorts by most-recent activity. Session lists and the web-chat sidebar now sort by most-recent activity — messages, edits, and other writes correctly advance the session’s last-updated timestamp.
  • MCP servers in E2B sandboxes no longer fail to start. MCP servers in E2B sandboxes no longer fail to start with a permission error when invoking uv run.
  • Session transcript preserved through poll failures. The session transcript now stays visible through consecutive poll failures, retrying incrementally with exponential backoff instead of clearing the messages you were reading.
  • TUI runtimes screen corrected. The TUI runtimes screen now shows paused runtimes correctly (no longer marked expired), names runtimes by key instead of a raw ID prefix, and lets you search by key or provider sandbox ID.
  • Opening an archived session no longer resets the list scope. Opening a session from the Archived list no longer resets the list back to Active, so the session you clicked stays visible in the list beside it.
  • Session expired mid-page now opens the sign-in modal. When your session expires mid-page, browser API calls now open the sign-in modal instead of silently showing empty tables or transient error toasts.
  • Selected agent shown correctly in Web Chat response headers. Web Chat response headers now correctly identify the selected agent when you switch away from the default, both during a live session and after a page refresh.
  • Trace viewer explains unpreviewable media files. The trace viewer now shows an explanatory message and a Download button when a media file can’t be previewed, instead of leaving a silent empty player.