Azure DevOps, Bitbucket Cloud & enterprise SSO

New

Connect Azure DevOps repositories

Azure DevOps repositories can now be connected to Odin for white-box pentesting and finding verification.

Bring Bitbucket Cloud into your security workflow

Run white-box pentests, review pull requests, and retest findings on Bitbucket Cloud repositories.

Manage access through your identity provider

Enterprise sign-in now supports SAML and OIDC, alongside SCIM provisioning, verified domains, role mapping, and SSO enforcement. (for enterprise customers)

Give read-only members access to discussions

Read-only members can now be granted permission to participate in finding discussions, including posting replies, editing or deleting their contributions, and adding attachments.

Configure PR reviews for each repository

Choose how compact PR reviews appear on individual repositories. Propose, approve, or revoke decisions on findings, with administrator approval for suppression rules. GitHub decision commands are tied to the finding version being reviewed. (for teams using compact PR reviews)

Improved

Keep reviews moving through interruptions

Pull request reviews recover more reliably from temporary interruptions and show clearer failure states when they cannot complete. Failed GitHub review checks now include a link to retry in Odin.

Review larger repositories more efficiently

Whitebox analysis and PR reviews handle large repositories and long-running analysis more efficiently, with repository context focused on the changes being reviewed.

Navigate Odin more smoothly

Lighter page loads, faster searches, and more responsive controls make everyday work smoother. Asset views are easier to explore across large environments and smaller screens.

Connect GitHub and Bitbucket more reliably

GitHub account linking now supports enterprise-managed users. Bitbucket PR reviews handle reconnections and retries more reliably.

Fixed

Avoid duplicate launches and charges

Repeated clicks and retried requests no longer create duplicate whitebox pentests or retests, helping prevent duplicate work and credit charges.

Keep saved credentials intact

Leaving credential fields blank no longer clears previously saved credentials. Trial setup can also be restarted after completion.

Keep findings visible in reports

Corrected cases where findings were missing from reports and Vanta exports, and where informational severity labels appeared blank.