Get started
Security and privacy

Security Changelog

Notable security remediations at Sapling, newest first. Each entry is published after the change is live.

Security overview Report a vulnerability

Routine dependency and operating system updates ship continuously and are not listed individually. For audit reports and security documentation, visit the Trust Center.

October 2026

Infrastructure

Retired the Sapling blog

On October 21, 2026 we permanently shut down blog.sapling.ai, our WordPress blog. Rather than keep patching a PHP application stack that existed only to publish marketing posts, we removed it from our public footprint.

  • Took the blog server offline after reviewing a PHP vulnerability affecting its software stack.
  • blog.sapling.ai now redirects to sapling.ai, and links to the blog have been removed from our website and documentation.
  • The Sapling product, API, and browser extensions do not depend on the blog and were not changed.