Recruiting tools let teams define AI steps in plain language, while open-source HR suites run on security patches.

The week in HR and recruiting

Applicant tracking systems are handing recruiters a prompt box. Instead of picking from fixed automation actions, teams can now write what they want in plain language and have an agent run it on every candidate at a stage. The adjacent pattern is rule authoring in plain English for payroll.

On the open-source side the week looked quite different: HR suites spent it closing security advisories.

Leaders

Teamtailor added Smart action, a trigger that runs a recruiter-written prompt against every candidate entering a stage, and a Co-pilot that chases missing candidate information on its own. It also shipped detection of hidden instructions in resumes, an unusual and honest acknowledgment that candidate documents can attack the screening agent.

Workable is making its recruiting agent the default way to work a pipeline. The latest releases add bulk evaluation with the Agent, approval reminders and a choice of which OFCCP self-identification questions to ask. Two tracks are visible: agentic recruiting and a widening HR suite.

Ashby is on the opposite approach, giving admins finer controls instead of agents: configurable context in approval requests, a default to complete feedback on stage change, and connectors from global application questions to candidate fields for reporting and automation.

Workyard shipped an overtime rule builder where users describe the rule in plain English and the product compiles it. It also surfaced accounting-system project numbers and team member IDs across the app and added bank linking for expense cards.

Wildcards

Horilla shipped six security releases in three weeks, closing more than a dozen reported advisories from stored cross-site scripting to salary-redirect and self-approval flaws, and capped the run with a no-login remote code execution fix. An HR system holds salary and identity data, so the pace is both a risk signal and a maintenance one.

Ever Gauzy shipped nine patch releases in a single day after adding an anonymous usage-statistics plugin and encrypted instance identity in 111.49.0. The follow-ups tightened the off switch and fixed claim handling.

Themes that compounded

• Plain-language configuration appeared at Teamtailor and Workyard.
• Screening rules got more specific at Tanda, where Hire now requires a resume or cover letter and can auto-reject on wrong answers.
• Compliance content crowded out features at Employment Hero, whose AI Recruitment Agent remains its main product move in the window.
• Admin controls and integrations dominated at Envoy, which replaced a third-party ID processor with its own AI document analysis.
• Payroll accounting was the focus at Frappe HR, which added separate liability accounting for employer contributions.

Watch this week

Watch whether other applicant tracking systems copy Teamtailor's resume-injection detection as prompt-defined steps spread, since the feed shows the defense shipping alongside the feature. Watch Horilla's next release for further advisories, and Ever Gauzy for another patch run after its usage-statistics rollout.