Release Summary

Stay informed about new features, enhancements, and fixed issues in the latest BloodHound releases.

This page provides a summary of recent BloodHound product releases, including release dates, version numbers, and links to detailed release notes.

See the release notes archive for previous releases.

Announcements

Black Hat USA 2026

SpecterOps is heading to Black Hat USA 2026 with training courses, technical briefings from our researchers, and Arsenal sessions showcasing tools and tradecraft. Learn more on our Black Hat landing page.

SO-CON 2026 Talks Available on YouTube

We’re excited to share that SO-CON talks are now available online. We’ve also published the presentation slide decks in a public GitHub repository.

2026-07-07

Release	BloodHound	OpenHound	SharpHound	AzureHound
2026-07-07	v9.4.0	v0.2.11	No release	No release

This release opens more administration workflows to auditors in read-only mode, and improves OpenHound collection resilience. Key highlights include:

• OpenHound: Keep long-running jobs alive, identify deployed client versions more easily, and troubleshoot failures with clearer logs.
• Cypher: Run more complex Cypher queries in BloodHound Enterprise and return larger Entity Panel sections than were previously supported.

New Features

Component	Update	Summary
API	Graph ID Lookup APIs	Retrieve nodes and relationships by graph-assigned integer IDs for targeted automation and investigation.

Enhancements

Component	Update	Summary
Administration	Auditor Role Access Improvements	Auditors may now review File Ingest activity and SSO Configuration details.
Administration	Updated Default Admin Email Address	BloodHound Community now uses [e-mail] instead of [e-mail] in configuration and example files.
Data Collection	More Resilient OpenHound Operations	Keep OpenHound jobs alive longer, surface installed versions in BloodHound, and improve logging and failure handling.
Cypher (Enterprise)	Higher Memory Limits for Cypher Queries	BloodHound Enterprise now uses a higher memory limit for Cypher queries.
Zone Builder	Privilege Zone Rule Authoring Improvements	Preserve rule state across rule types and warn before saving Cypher-based rules that return no results.
Zone Builder	Variable Analysis Mode	Skip post-processing after Privilege Zone changes so updated zone definitions and related findings appear faster in the graph.
Accessibility	Accessibility Improvements	Navigate key workflows with clearer focus states, semantic structure, and screen-reader labels.

Fixed Issues

See the release notes for a full list of fixed issues in this release.

2026-06-17

Release	BloodHound	OpenHound	SharpHound	AzureHound
2026-06-17	v9.3.0	v0.2.1	No release	v2.12.2

This release expands OpenHound authentication support, improves visibility and access control across BloodHound administration workflows, and speeds up analysis. Key highlights include:

• Access control: Limit sensitive user data and administration API access for non-administrator roles.
• Audit logging: Capture and review more operator actions in audit logs.
• Explore: Highlight only the paths that traverse a selected node in the graph.
• OpenHound: Use an API client to authenticate the Jamf collector.

New Features

Component	Update	Summary
Data Collection	Jamf API Client Authentication	Authenticate the OpenHound Jamf collector with a Jamf Pro API client.
Data Collection	GitHub Enterprise SSO Support	Connect OpenHound to GitHub Enterprise environments that enforce enterprise-level single sign-on.

Enhancements

Component	Update	Summary
Administration	Role-Based Access Hardening	Limit sensitive user data and administration API access for the User, Power User, and Read-only roles.
Administration	Auditor Access Improvements	Let users with the Auditor role review Manage Users and Manage Clients tables without gaining modification permissions.
Administration	Expanded Audit Logging	Capture more high-risk user actions in audit logs, including Cypher execution and collector operations.
Accessibility	Accessibility Improvements	Navigate data tables more effectively with improved headers, sorting behavior, keyboard support, and screen reader announcements.
API	OpenGraph Extension Namespace Visibility	View each extension’s namespace in the OpenGraph extension information API response.
Explore	Full-Path Highlighting	Highlight the full path through a selected node so you can better isolate how it participates in longer Attack Paths.
BloodHound Enterprise OpenGraph	Pre-Installed SpecterOps Extensions	Use supported GitHub, Jamf, and Okta OpenGraph extensions in BloodHound Enterprise without a separate installation step.
Post-Processing	Analysis Performance Improvements	See results faster with significantly reduced time in analysis.
Posture (Enterprise)	Updated Attack Path Type Names	Review Attack Paths with terminology that matches the latest findings documentation.
Zone Builder (Enterprise)	Search Across Certification Statuses	Search across all certification statuses to confirm whether an object is already present in a zone.

Fixed Issues

See the release notes for a full list of fixed issues in this release.

2026-06-01

Release	BloodHound	OpenHound	SharpHound	AzureHound
2026-06-01	v9.2.2	No release	No release	No release

This release addresses an issue where ingestion jobs were running longer than expected on BloodHound Enterprise.

2026-05-28

Release	BloodHound	OpenHound	SharpHound	AzureHound
2026-05-28	v9.2.0	No release	v2.13.0	No release

This release improves Explore workflows, expands Cypher query capabilities for PostgreSQL backends, and tightens OpenGraph validation. Key highlights include:

• Explore workflow improvements: Added Eligible Roles in the Entity Panel and automatic node selection from search results.
• Cypher query enhancements: Expanded Cypher support with new functions and clauses for more powerful queries on PostgreSQL backends.
• OpenGraph validation updates: Tightened kind validation for reserved tag_ prefixes and updated node schema guidance for extension developers.

Enhancements

Component	Update	Summary
Explore	Eligible Roles in the Entity Panel	Review eligible and approver roles for supported Azure principals directly in the Entity Panel.
Explore	Search Result Node Selection	Open the Entity Panel automatically when you select a search result.
Cypher	Relationship and Node Filtering Support	Use nodes(), relationships(), startNode(), and endNode clauses in Cypher to better match desired paths.
Cypher	List Expansion	Use UNWIND to expand list values into rows.
Cypher	List Navigation	Use head() and tail() to inspect list values returned by Cypher expressions.
Cypher	Query Result Sorting	Sort results in ascending or descending order in RETURN and WITH clauses.
Cypher	Multi-part Query Support	Chain query parts for more reliable multi-step queries.
Cypher	Faster LIMIT Clause Evaluation	LIMIT clauses now evaluate near-instantaneously on PostgreSQL backends.
OpenGraph	Stronger OpenGraph Kind Validation	The tag_ prefix is now reserved in BloodHound. Update your custom kinds if necessary to avoid validation failures.
OpenGraph	Updated Node Schema	We’ve updated how the environmentid and collected properties are used in the node JSON schema.
Risk Metrics	Exposure Tooltip Improvements	Review exposure guidance with platform-agnostic terminology.

Fixed Issues

See the release notes for a full list of fixed issues in this release.

2026-05-06

Release	BloodHound	OpenHound	SharpHound	AzureHound
2026-05-06	v9.1.0	No release	No release	v2.12.1

This release improves graph processing performance, refines core Explore and Administration workflows, and resolves high-impact reliability issues across API, OpenGraph, and collection operations. Key highlights include:

• Post-Processing Performance: Improved graph index coverage for faster traversal paths and incremental edge updates that reduce unnecessary writes during post-processing.
• Explore Workflow Improvements: Updated panel behavior for Cypher results, clearer saved query organization, and improved Entity Panel controls.

Enhancements

Component	Update	Summary
Administration	Database Management	Manage HasSession cleanup from a more consistent location in Database Management.
Explore	Cypher Query Results	Work through Cypher results with adaptive panel behavior for single-node and multi-node results.
Explore	Subcategories for Saved Queries	Navigate saved query categories with clearer grouping and reduced repeated labels.
Explore	Entity Panel Controls	Use clearer collapse and close controls in the Entity Panel to reduce accidental closures.
OpenGraph	Custom Icons	Set default node icons and colors based on the is_display_kind field in an extension definition schema’s node_kinds array.
OpenGraph	Extension Management API	Manage extensions with more granular API permissions for administration and schema data access.
Post-Processing	Optimized Graph Indices	Faster graph traversal and pathfinding from improved index coverage on edge data.
Post-Processing	Incremental Edge Updates	Selected edge types now update incrementally during post-processing, reducing unnecessary writes.

Fixed Issues

See the release notes for a full list of fixed issues in this release.

2026-04-21

Release	BloodHound	OpenHound	SharpHound	AzureHound
2026-04-21	v9.0.2	No release	No release	No release

This release addresses the following issues:

• Resolved an issue where Azure post-processing could fail when PostgreSQL was configured as the graph database on BloodHound Community.
• Expanded the set of supported TLS cipher suites when BloodHound is configured to serve HTTPS directly to resolve SharpHound connectivity issues in certain environments.
• Added an OpenHound download link to the Download Collectors page.

2026-04-13

Release	BloodHound	OpenHound	SharpHound	AzureHound
2026-04-13	v9.0.1	v0.1.0	v2.12.0	v2.12.0

This release introduces new data collection capabilities, improves core navigation and graph exploration workflows, and resolves high-impact API and query reliability issues. Key highlights include:

• Graph Readability: Improved node labels, clearer directional arrows, and more intuitive selection behavior in Explore for easier graph analysis.
• OpenHound: A new data collector framework for OpenGraph extensions, starting with GitHub, Jamf, and Okta collectors.
• OpenGraph Extension Management: A new Administration page to manage OpenGraph extensions.
• OpenGraph Findings: Analyze custom graph findings in Attack Paths and Posture with extension-specific schemas.
• Environment Targeted Access Control: Scope User and Read-only access by environment with dynamic policy controls.
• Table View Organization: Improved organization and readability of table views.
• Azure Post-Processing: Enhanced post-processing capabilities for Azure data.
• Navigation Sidebar Modernization: Updated navigation sidebar for a more intuitive user experience.

New Features

Component	Update	Summary
Data Collection	OpenHound Data Collector Framework	Run standardized OpenGraph data collectors and converters for GitHub, Jamf, and Okta OpenGraph extensions.
OpenGraph	Extension Management	Manage OpenGraph extensions with a new Administration page.
OpenGraph (Enterprise)	Findings	Analyze custom graph findings in Attack Paths and Posture with extension-specific schemas. Contact your account team to enable.
Administration (Enterprise)	Environment Targeted Access Control	Scope User and Read-only access by environment with dynamic policy controls. Contact your account team to enable.
Data Collection (Enterprise)	SharpHound Integrated Windows Authentication	Authenticate SharpHound Enterprise with Active Directory Federation Services (ADFS) using Integrated Windows Authentication (IWA).

Enhancements

Component	Update	Summary
Explore	Graph Readability Improvements	Explore graphs with improved node labels, clearer directional arrows, and more intuitive selection behavior.
Explore	Table View Column Organization	Reorder and pin columns with drag-and-drop for faster analysis of tabular results.
Explore	Improved Graph Export Filenames	Export graph files with more useful filenames to reduce repeated filename collisions.
Administration	Navigation Sidebar Modernization	Use a more predictable navigation experience with improved expand and collapse behavior in the primary sidebar.
Data Collection	Azure Hybrid Post-Processing and Data Hygiene	Keep hybrid Azure and Active Directory (AD) relationship data cleaner with less unnecessary graph churn during post-processing, significantly improving analysis time for tenants with large Azure environments.
Explore	OpenGraph Node Type Filtering in Search	Filter search results by node type to find relevant OpenGraph data faster.
Administration	HasSession Edge Deletion	Delete only HasSession edges from the database to refresh time-sensitive session data without clearing the entire graph.
Accessibility	Accessibility Improvements	Navigate BloodHound more effectively with assistive technologies through clearer component naming and better non-text content labeling across the interface.
Zone Builder (Enterprise)	Certification Selection Behavior	Certify objects in Privilege Zones with clearer list selection behavior that stays aligned with the object details panel.
Posture (Enterprise)	Posture Metric Abbreviation	Analyze posture metrics with more precise counts.
Posture (Enterprise)	Custom Range Validation	Analyze posture trends with more reliable custom date/time range behavior.

Fixed Issues

See the release notes for a full list of fixed issues in this release.

2026-03-26

Release	BloodHound	SharpHound	AzureHound
2026-03-26	v8.9.1	No release	No release

This release resolves the following issues:

• Resolved several issues that could cause analysis to fail.
• Resolved an issue preventing Cypher queries on PostgreSQL from respecting minimum and maximum path length limits.
• Resolved an issue where certain Cypher path queries on PostgreSQL could be slower than expected due to an inefficient edge-to-path join pattern.
• BloodHound will no longer support SHA-1 cipher suites when configured to serve HTTPS directly (without a load balancer).

2026-03-23

Release	BloodHound	SharpHound	AzureHound
2026-03-23	v8.9.0	v2.11.0	v2.11.0

This release introduces new features, enhancements, and fixed issues to improve data collection, OpenGraph ingestion capabilities, and general usability. Key highlights include:

• Privilege Zones is now generally available!
• Property-based edge matching enables hybrid edge creation using cross-system attributes, such as email, username, or hostname.
• AzureHound collects Federated Identity Credentials (FICs) from Azure and adds new nodes and edges in BloodHound to represent these trust relationships.
• BloodHound Enterprise now allows you to upload nodes and edges in separate OpenGraph data payloads without losing disconnected nodes after ingestion.

It also includes a breaking change for OpenGraph data payloads.

New Features

Component	Update	Summary
Data Collection	Azure Federated Identity Credentials	Collect and map Federated Identity Credentials with new AZFederatedIdentityCredential nodes and AZAuthenticatesTo edges.

Enhancements

Component	Update	Summary
OpenGraph	Property-Based Edge Matching	Link nodes by unique database identifiers or dynamically match them using specific attribute values.
OpenGraph	Flexible OpenGraph Node Ingestion	Upload nodes and edges in separate payloads without losing disconnected nodes after ingestion.
Data Collection	Improved Logging for NTLM Collection	Get per-machine status visibility for WMI and Remote Registry attempts with clearer error details.
Explore	Search Component Styling Consistency	Switch between Search, Pathfinding, and Cypher tabs without layout shift.
Explore	Table Layout Scrollbar Visibility	See and use scrollbars more reliably when table layout content overflows.

Fixed Issues

See the release notes for a full list of fixed issues in this release.

2026-03-04

Release	BloodHound	SharpHound	AzureHound
2026-03-04	v8.7.0	v2.10.0	v2.10.0

This release improves graph investigation workflows in Explore and resolves reliability issues in findings export, Zone Builder tagging and filtering, and query naming. Key highlights include:

• Explore adds resizable table columns, Meta node details in the Entity Panel, and clearer edge guidance for Azure role relationships.
• Edge reference coverage expands with a new valid_edges.json schema for valid source-target node relationships and supported edge types.
• Fixed issues improve findings export accuracy, Zone Builder Tier Zero tagging timing and zone membership filtering behavior, and prebuilt query naming clarity.

Enhancements

Component	Update	Summary
Explore	Table Column Resizing	Resize columns in the table layout graph view to review data more comfortably on smaller screens without changing window size.
Explore	Meta Node Information in Entity Panel	Review Meta node details in the Entity Panel without encountering errors.
Explore	Improved Edge Information	Review clearer and more consistent edge guidance for AZOwner, AZOwns, and key Entra ID role edges, plus valid node relationships and supported edge types with a new valid_edges.json schema.

Fixed Issues

See the release notes for a full list of fixed issues in this release.

2026-02-17

Release	BloodHound	SharpHound	AzureHound
2026-02-17	v8.6.1	No release	v2.9.2

This release addresses the following issues:

• Resolved an issue causing partial failures after uploading Azure sample data.
• Resolved memory and CPU performance issues during AD Group and Local Group analysis.

2026-02-11

Release	BloodHound	SharpHound	AzureHound
2026-02-11	v8.6.0	v2.9.1	v2.9.1

This release enhances data collection capabilities with new customization options, expands permissions for Cypher query management, and improves Zone Builder with better rule testing, clearer terminology, and enhanced object identification.

New Features

Component	Update	Summary
Data Collection	User-Agent Flag for AzureHound	Customize the User-Agent header used in AzureHound HTTP requests.

Enhancements

Component	Update	Summary
Data Collection	Last Sign-In from Azure	Track user activity based on last successful sign-in timestamp from Entra ID.
Explore	Updated Permissions for Saved Cypher Queries	User and Power User roles can now edit shared Cypher queries.
Zone Builder	Cypher Rule Testing	Verify your Cypher query with a new Run button before creating rules.
Zone Builder	Consistent Certification Terminology	Revoke button renamed to Reject to align with status filter language.
Zone Builder	Zone Name in Object Information	Quickly identify the zone name instead of position when viewing object information.

Fixed Issues

12 issues resolved across BloodHound, SharpHound, and AzureHound.

2026-01-30

BloodHound	SharpHound	AzureHound
v8.5.2	No release	No release

This release addresses an issue where Local Group relationships could be incorrectly calculated during analysis.

2026-01-27

BloodHound	SharpHound	AzureHound
v8.5.1	No release	No release

This release addresses the following issues:

• Resolved memory and performance issues during local group processing (DCOM, CanPSRemote, AdminTo, CanRDP).
• Resolved an issue where custom icons for nodes in OpenGraph data did not display in the graph on the Explore page.
• Set OpenGraph node search to enabled by default.

2026-01-22

BloodHound	SharpHound	AzureHound
v8.5.0	v2.9.0	v2.8.3

This release introduces new features, enhancements, and fixes to improve usability, performance, and data collection. Key highlights include:

• Keyboard shortcuts improve accessibility
• Zone Builder (renamed) gains clearer forms, rule guidance, and consistent terminology
• APIs add safer filtering, member counts, and source-kind safeguards
• Data collectors add clearer logging and configuration guidance

New Features

Component	Update	Summary
Administration	Keyboard Shortcuts	Navigate and act across the app without relying on the mouse.
API	Count by Kind for Selectors	Retrieve member counts by primary kind to size zone/tag selectors.

Enhancements

Component	Update	Summary
API	Filter Asset Group Tag Members	Filter by primary kind, name, or object ID for cleaner selector results.
API	Search Asset Group Tags	Limit global search to a specific tag to reduce noise.
API	Selector Type Counts	See total, custom, default, and disabled selector counts per tag.
Explore	Cypher	Track query execution with a running state on the Run button.
Explore	OpenGraph Node Search	Find OpenGraph nodes faster with improved search functionality.
Posture	Custom Date Range Time Input	Align preset and custom ranges with a time picker for consistent results.
Zone Builder	Privilege Zone Management (Renamed)	Navigate renamed Zone Builder with clearer rule/object tabs and labels.
Zone Builder	Rules Form	Enable/disable rules faster and separate direct vs expanded sample results.
Zone Builder	Zone and Label Forms	Improved layout, quotas messaging, and protected Tier Zero cues.
Data Collection	AzureHound Configuration	Updated region options reflect Microsoft’s removal of Azure Germany.
Data Collection	Certificate Abuse Collection Status	Computer status logs now capture CARegistry collection progress.

Fixed Issues

12 issues resolved across BloodHound and AzureHound.