What shipped, when
Every entry below describes something that's live in the product, dated when it shipped. For the longer stories behind the bigger releases, the linked posts go deeper.
- New
Single sign-on over SAML 2.0 and OpenID Connect
Platform users can now sign in through your identity provider. SAML 2.0 and OIDC are both supported, with SCIM 2.0 provisioning, just-in-time account creation, and WebAuthn or FIDO2 hardware keys for MFA.
SSO is available on the Enterprise plan. Offboarding gets simpler in the way you would hope: remove someone from the IdP and their access goes with them.
- Security
XDR and SIEM, powered by Wazuh
Threat detection now runs on the fleet you already manage. The suite covers real-time security alerts, CVE-matched vulnerability detection, file integrity monitoring for files and registry, CIS configuration assessment, MITRE ATT&CK mapping, security system inventory, and operator-driven active response with a full audit trail.
Available on Business and Enterprise plans, with per-tenant agent enrollment and CIDR IP allowlisting.
- New
LynxTrac launches
First public release: real-time monitoring, browser-based remote desktop and SSH, patch management, continuous deployments, log analysis, and cloud governance for AWS, Azure, and Google Cloud. One agent, one console, free forever for up to 2 servers.
Want the running commentary instead of the milestones? The blog covers the thinking behind these changes, and the RSS feed delivers it.