Welcome to Lucent Sky AVM version 2509 MR, the third release of 2025. This release introduces Secure Score, a new way to assess application security posture, expands support for infrastructure-as-code files, and brings enhancements across analysis engines, remediation, and developer interfaces. To learn more about this release, visit Lucent Sky AVM version 2509 release notes.

Let’s take a look at the key new features, enhancements, and important changes in version 2509.

Secure Score and enhanced reporting

A major highlight of this release is Secure Score, a new metric that aggregates security findings into a single score to help developers and stakeholders quickly assess the security posture of an application. Secure Score is calculated using over 200 signals, including vulnerability severity, exploitability, reachability, and whether the vulnerability can be automatically remediated.

Additionally, the CVSS score for vulnerable dependencies now includes both the original CVSS base score of the vulnerability and a context-aware score calculated specifically for the application, providing deeper insight into dependency risks.

Expanded analysis capabilities

Lucent Sky AVM continues to broaden its analysis coverage:

• Source code analysis now includes expanded support for Bicep, SQL, and Terraform files, alongside general improvements for C/C++, ECMAScript, Go, PHP, and Python.
• Binary analysis for Java applications has been further refined.
• Intelligent Analysis algorithms have been enhanced to better identify functionally unchanged parts of a codebase, improving performance by up to 40%.
• The language parsers have been improved to better handle machine-generated files, such as minified ECMAScript files and code generated by large language models.

Smarter dependency analysis

The dependency analysis engine has received several upgrades:

• Enhanced license observation improves visibility into potential license risks and supports adherence to open-source compliance best practices.
• Improved dependency identification and correlation algorithms reduce duplication by more accurately grouping related components.

Interface enhancements and new APIs

Version 2509 introduces several updates to developer interfaces:

• Web UI improvements include streamlined navigation between different contexts, redesigned application and scan lists for better information density, and updated Efficiency Hub with Secure Score trends.
• The Dependency API is now generally available, offering richer context such as referencing applications, discovered files, resulting vulnerabilities, and observed licenses.
• The File API is also generally available, enabling retrieval and contextual viewing of scan-related files, including line-level highlights.
• IDE extensions have been updated to ensure support for recent versions of Eclipse IDE, IntelliJ IDEA, and Visual Studio Code.

Updating to 2509 MR

For customers with managed Lucent Sky AVM instances and Lucent Sky AVM On-Demand, your servers will be updated to 2509 MR in the coming days, unless affected by backward compatibility issues or an opt-out is in effect.

For customers with on-premise Lucent Sky AVM instances, you can update to 2509 MR immediately. Our support team will reach out shortly to schedule the update.