Stellar Security Portal Update: What’s New in June 2026

Over the past month the Stellar Security Portal (formerly Soroban Security Portal) has gotten many upgrades and changes! Here’s what’s new and why it matters.

A Fresh Look for 2026

We’ve renamed the portal to the **Stellar Security Portal** to reflect that our scope covers the Stellar ecosystem and to strengthen the Stellar brand. Along with the name change comes a full visual refresh with cleaner layouts, a new animated and cleaned up homepage, smoother scroll animations, and better accessibility for users. If you haven’t visited in a while, the homepage feels like a more modern experience. Any existing links to the previous domain are also automatically forwarded to the new one, but if anything is amiss please let us know!

Discuss Findings Directly on a vulnerabilities page

You can now leave threaded comments on any protocol or vulnerability page. Reply to others, upvote helpful comments, @mention users to bring them into the conversation, and get real-time notifications when someone responds to you. Comment authors can edit their posts with full version history visible, and everything ties into our moderation system so discussions stay constructive.

Even though the audit report findings are static, now the community can ask questions, share context, and debate severity right where the data lives. This also gives protocols and auditors a chance to make public comments directly related to the vulnerability that is mentioned.

So if you are a protocol that has taken the time to address issues post-audit this is your chance to help new developers learn from your experiences!

Rate Protocols and Auditors

The portal now supports 1–5 star ratings with written reviews for both protocols and auditors. Your rating is weighted by your reputation score, so established contributors carry more signal. It’s a simple way for the community to surface which auditors consistently deliver quality work and which protocols have strong security track records.

Pages Actually Load Fast Again

If you’ve noticed the Reports or Vulnerabilities pages feeling sluggish, that should be fixed. Cover images are now properly cached and lazy-loaded, and the vulnerability list no longer pulls PDFs and embedding vectors just to show you a card. Descriptions load on demand when you expand them. The result is significantly faster browsing, especially on slower connections.

See What’s Getting Attention

As part of the feedback we received from the SCF Public Goods program, every report, vulnerability, protocol, and auditor page now shows a public view count (bot traffic filtered out, so the numbers reflect real interest). It’s a small addition, but it helps contributors know their work is being seen and helps users notice popular pages.

Easier to Share

Report and vulnerability detail pages now have share buttons and rich previews when you share a link in Discord or on X, it shows the actual title and description instead of a generic stub. If you spread the word about interesting reports with other developers and community members it will look something like this:

https://stellarsecurityportal.com/report/64

When linking reports we wanted to display a snapshot of the report to convey basic information at a glance such as number of vulnerabilities, the amount fixed and the fix rate. It’s a small change but will make it easier to inform others.

Should any other information be displayed?

More People Can Contribute

One of the biggest changes is that we’ve lowered the barrier to become a Contributor. If you’re an SCF Navigator or part of an SCF Project, you can now add and edit reports and vulnerabilities. The previous requirement was SCF Pilot tier, which excluded a lot of knowledgeable community members who wanted to help. These roles and permissions are automatically assigned based on your roles within the Stellar Developers discord, if you haven’t yet now might be a good time to join!

Behind the Scenes

On the reliability side, we’ve fixed several issues from recent security reviews, regenerated database migrations so deploys are clean, and set up daily automated database backups. The moderation dashboard also got some polish.

In June there have also been more report and vulnerability additions and we expect these numbers to increase this month.

We are also nearing close to 700 vulnerabilities logged into the portal!

Now It’s Time to Get Involved

As usual we plan to continue updating and improving the Portal with community feedback and support in mind. So if you’ve read this far, here’s how you can help:

1. Leave a star review on a protocol or vulnerability you’ve worked with. Your experience helps others make informed decisions.
2. Are we missing an audit report? The portal is only as good as the data in it. If you know of an audit that isn’t listed, let us know or submit it directly yourself.
3. Are you an audited protocol? Share your experience or review the report on the portal to update your users on what changed post-audit.

Be sure to visit the portal at stellarsecurityportal.com and try out the new features.