News

Release notes, announcements, and what's happening with Bromure.

· by The Bromure team

Bromure Agentic Coding 2.4.0 — Catch prompt injections in the files your agent reads

Bromure Agentic Coding 2.4.0 adds a fourth pillar: on-device prompt-injection detection. A poisoned README, a line in a fetched page, a string in a tool's output, or a hidden directive in a CLAUDE.md can quietly tell your agent what to do — leak a file, weaken a check, run a script. 2.4.0 scans the untrusted content flowing to the model and the rules files it trusts, and can log, ask, or block before the request ever reaches the model. Everything runs on your Mac; nothing leaves it.

Read more
· by The Bromure team

Bromure Agentic Coding 2.2.0 — Stop supply-chain attacks before the package lands

Bromure Agentic Coding 2.2.0 turns the proxy every package crosses into a scanning checkpoint. Brand-new releases are quarantined no matter what the VM says, every package is scanned against OSV and socket.dev, and postinstall scripts are stripped from the tarball — so a poisoned dependency can't run on your next `npm install`. Bromure's supply-chain protection was Guillaume Valadon's idea.

Read more
· by The Bromure team

Bromure Agentic Coding 2.0.0 — Guardrails stop destructive commands at the protocol level

Bromure Agentic Coding 2.0.0 is here. New Guardrails block destructive actions — dropping a database, deleting Kubernetes pods, pushing to a registry — at the protocol level, before the request ever leaves the VM. Plus Grok support, hot credential changes with no VM restart, and brokering for ClickHouse, MongoDB, and Elasticsearch.

Read more
· by The Bromure team

Bromure Web 3.4.0 and Agentic Coding 1.4.0 — Chrome extensions, MCP everywhere

Two new releases today. Bromure Web 3.4.0 adds support for Chrome extensions, screenshots over MCP, and newer Linux kernel modules. Bromure Agentic Coding 1.4.0 ships an MCP server so any MCP-capable client can drive the VM, its shared folders, and its session tracing.

Read more
· by Renaud Deraison

Bromure Agentic Coding is here — plus Bromure Web 3.2.0

Two new binaries today. Bromure Agentic Coding runs Claude Code and Codex inside a Linux VM that shares only the folders you pick, swaps your real tokens and SSH keys at the wire, and can record every prompt and tool call. Bromure Web 3.2.0 ships native macOS tabs, printing, and keyboard shortcuts.

Read more
· by The Bromure team

Bromure 3.0.0 — ready for the enterprise!

Version 3.0.0 introduces the Enterprise edition of Bromure — managed VMs for BYOD, SSO-gated enrollment, standardized work profiles, full session tracing, and enforced anti-phishing. Plus newer kernel modules, refined font rendering, and fewer nags.

Read more
· by Renaud Deraison

On the From Noise to Signal podcast with Mehul Revankar

A one-hour conversation about the origins of Nessus, why AppSec is changing fast, how Bromure came out of a honeypot, and what it means to be a technical founder in the AI era.

Read more
· by The Bromure team

Bromure v2.6.0 released — phishing, IKEv2, and more!

Version 2.6.0 brings an anti-phishing plugin, auto-updates, IKEv2 support, pinch-to-zoom, smarter battery management, and a long list of fixes.

Read more