Detection Engine Updates Version 2.173

  Release Date: September 28, 2026

This release adds new detectors for Ory API keys, Kong Konnect personal access tokens, AppSignal API keys, PostHog OAuth access and refresh tokens, Datadog service access tokens, NinzaSMS API keys, TypeSafe AI API keys, and Mistral AI's new prefixed API key format. It also adds a new analyzer for Cohere API keys. The Okta Token with Host and Mistral AI checkers were updated, and the Databricks Authentication Token With Hostname detector now finds more tokens.

New Detectors

• Ory API Key: Add a new detector for Ory API keys.
• Kong Konnect Personal Access Token: Add a detector for Kong Konnect personal access tokens.
• AppSignal API Key: Add a new detector for AppSignal API keys.
• PostHog OAuth Access Token: Add a new detector for PostHog OAuth access tokens.
• PostHog OAuth Refresh Token: Add a new detector for PostHog OAuth refresh tokens.
• Datadog Service Access Token: Add a new detector for Datadog service access tokens.
• NinzaSMS API Key: Add a new detector for NinzaSMS API keys.
• TypeSafe AI API Key: Add a new detector for TypeSafe AI API keys.
• Mistral AI API Key: Added the mistralai_apikey_v2 detector for Mistral AI's new prefixed API key format.

Detector Updates

• Azure Cache for Redis Access Key: Update regex to ensure secrets are not detected mid string.
• Databricks Authentication Token With Hostname: Increase max distance between matches and ban generic host.
• Databricks Authentication Token With Hostname: Increase max distance between matches and ban generic host.
• Okta Token with Host: The Okta Token with Host checker no longer validates tokens against non-organization Okta hosts.
• Mistral AI API Key: Made the Mistral AI checker more robust to API changes.
• Base64 Basic Authentication: Base64 Basic Authentication findings now take precedence over overlapping Base64 Generic High Entropy Secret findings.

New Analyzers

• Cohere API Key: Add a new analyzer for Cohere API keys.