Added single sign-on support so users can log in through their organization's identity provider, with proper session handling on logout.
Introduced a redesigned admin interface for managing your fleet, users, and permissions with a more modern, streamlined experience.
Added fine-grained, per-environment permission controls — admins can add or remove users, reset passwords, and grant access across all environments at once.
Queries and file collection requests now default to all active endpoints when no specific targets are chosen, and support bulk actions.
Simplified the login flow by removing unnecessary environment requirements.
Improved the endpoint picker used when targeting queries and file collection, with combined hostname/UUID search, typeahead suggestions, and support for entering multiple endpoints at once.
Streamlined the layout for creating new file-collection requests to match the query creation experience.
Refined navigation and controls to better respect each user's role and permissions.
Session tokens are now rotated on every login for stronger session security.
Expanded compatibility with the latest endpoint agent version.
Fixed an issue where logging out didn't fully clear session state in some cases.
Fixed an issue where the audit log page could trigger unnecessary repeated loading.
Fixed environment name validation so renaming an environment can no longer collide with an existing one.
Fixed a race condition that could cause inaccurate query execution counters.
Fixed an issue preventing macOS endpoint agents from reloading correctly during quick enrollment for non-root users.
Fixed handling of oversized requests so they now return a proper error instead of failing unexpectedly.
Closed several security gaps related to authentication, session handling, and cross-environment data access, and resolved a rate-limiting bypass and a user-enumeration timing issue.