Botpress disclosed on November 6, 2026 that an intruder used a flaw in an internal authentication proxy and an employee API credential to read bot configurations in 16 customer workspaces. The configurations can hold third-party credentials, and integration settings were changed in two additional workspaces. Authentication Flaw Preceded Workspace Access On October 12, 2026, someone began probing the authentication proxy protecting several internal tools. A flaw in its sign-in validation allowed the attacker to enter with sessions that appeared to belong to Botpress staff. From October 13 through October 21, 2026, the attacker had access to those tools and some connected systems, using that time to understand how Botpress’s systems worked. The access provided visibility into customer account information and internal data, including data related to staff API credentials. The investigation found no evidence that any employee’s identity-provider account was compromised. On October 21, between 07:44 and 08:23 UTC, the attacker used the employee’s API credential and its administrator access to read configurations in 16 workspaces. The employee was a member of those customer workspaces and held administrator access to them. A bot’s configuration includes settings for installed integrations, which can contain AI provider API keys, messaging-channel tokens, CRM credentials...

Botpress disclosed a breach in which an attacker stole a staff API credential and read bot configs in 16 customer workspaces, targeting AI credits for resale.

Chatbot development frameworks compared for 2026: Rasa, Dialogflow CX, Amazon Lex, Microsoft 365 Agents SDK, Botpress and LangGraph, and when to buy instead.

Botpress incident on October 29, 2026: Status: Identified Since 14:00 UTC, the Viber agent builder, agent preview, and new agent setup may not respond or may time out. Deployed ag Started 3:14 PM UTC, resolved ongoing (● 8m). Affected: Viber.

Botpress incident on October 28, 2026: Status: Monitoring The breaking change has been identified and has been rolled back. We are seeing services being available again. We will b Started 7:43 PM UTC, resolved ongoing (● 22m). Affected: Viber, Desk, Dashboard.

Free AI assistants and chatbot builders verified October 2026: ChatGPT, Claude, Gemini, Mistral, Copilot, Perplexity free tiers; Tidio (50 conversations, 10 seats), Botpress (100), Landbot (100), Typebot (200), Crisp (2 seats), ManyChat (25 contacts), Zapier Chatbots (2 bots), Dialogflow ES, Rasa Developer Edition — caps, models, seats, branding, paid steps.