Currently shipping: v1.18
What's new.
Every release we've shipped, in reverse chronological order. We ship to production weekly. Major releases land roughly every 2-3 weeks.
- •
v1.18
May 8, 2026LatestGranular RBAC, compliance frameworks, and full observability.- NewGranular RBAC: 30-permission catalog with per-member grant/revoke overrides on top of role hierarchy. OWNER cannot be revoked.
- NewCompliance frameworks shipped seeded: CIS Controls v8 (18), SOC 2 TSC (17), HIPAA Security Rule (15), ISO 27001:2022 Annex A (16). Per-control attestation, evidence URLs, framework rollup with weighted percentage.
- NewObservability page at /admin/observability — counters, percentile-summary observations (p50/p95/p99), recent structured events with level filtering.
- ImprovedKeyboard shortcuts modal: pin-to-screen toggle. Renders as bottom-right widget instead of overlay; collapsible to single-line strip; persists in localStorage.
- Platform76 tests passing across 10 files.
v1.17
Apr 20, 2026Form builder, KB categories, and GDPR data export.- NewPublic intake form builder. Drag-list field designer (text/email/select/multiselect/checkbox/etc.), regex validation, public org-branded /f/[slug] page with auto-ticket creation on submit.
- NewKB categories + tags. Hierarchical category tree, inline category creator, category dropdown + tags input on the new-article form.
- NewGDPR data export: platform-admin button on /admin/customers/[id] dumps 27 entity collections to a single JSON download (audited via AuditLog).
- Platform60 tests passing across 8 files.
v1.16
Mar 30, 2026Cross-entity full-text search, recurring invoices, CMDB asset relationships.- New/search page with grouped results across tickets, assets, KB, documents, contacts. Snippet windowing with HTML-escaped <mark> highlighting. Topbar dropdown linked through to /search.
- NewRecurring invoice automation. ACTIVE contracts with autoInvoice=true generate Invoices on billingDayOfMonth, advance nextInvoiceDate, idempotent on retries.
- NewCMDB asset relationships: AssetRelation graph (RUNS_ON / DEPENDS_ON / CONNECTED_TO / MEMBER_OF / OWNED_BY). New /assets/[id] detail page with bidirectional relationships panel.
- Platform47 tests passing across 7 files.
v1.15
Mar 12, 2026Timesheet workflow + dispatcher capacity bars.- NewTimesheet at /timesheet: weekly grid with per-day totals, submit/unsubmit/delete inline, 'Submit all drafts' bulk action.
- NewApproval workflow at /timesheet/approvals (manager-only). Per-row Approve/Reject with reason. APPROVED entries are immutable — server-enforced.
- NewDispatcher capacity card: per-tech weekly utilization bar (color tones at 50/80/100%), scheduled vs logged hours, 7-day mini-bar histogram.
- Platform42 tests passing.
v1.14
Feb 22, 2026Quotes, vendors + purchase orders, per-invoice Stripe payment links.- NewQuote pipeline: DRAFT → SENT → VIEWED → ACCEPTED → INVOICED. Public org-branded accept page at /q/[token] with margin shown internally only.
- NewVendors + Purchase orders. /purchase-orders/[id] receives PO lines, idempotent on over-receive, auto-spawns Asset rows when spawnAssetType is set on the line.
- NewPer-invoice Stripe payment links. POST /api/invoices/[id]/payment-link creates a one-off, cached on the Invoice. Webhook flips Invoice → PAID + clears link.
v1.13
Feb 4, 2026Documentation system, password vault, custom fields, test scaffolding.- NewDocumentation system. Articles / runbooks / processes / meeting notes / diagrams in a tree-structured markdown editor. Polymorphic DocLink to assets/contacts/sites/tickets/agents/contracts/projects.
- SecurityPassword vault with AES-256-GCM ciphertext + HKDF-SHA256 key derivation. Reveal endpoint is audited via PasswordViewLog + AuditLog. 30s auto-hide on reveal.
- NewCustom fields per entity type. Text / longtext / number / date / select / multiselect / checkbox / url / email. <CustomFieldsPanel> mounted on ticket detail.
- PlatformVitest scaffolded. 28 passing tests across crypto, lifecycle, snmp profiles, and custom fields.
v1.12
Jan 19, 2026Hardware H.264 encoders in the agent-helper crate.- NewOpenH264 cross-platform software encoder (Cisco BSD-3) with built-in RGB → YUV420. ~5× quality at the same bandwidth as JPEG.
- NewPer-platform hardware skeletons: Windows Media Foundation, macOS VideoToolbox, Linux VAAPI. Each compiles under a Cargo feature flag.
- NewRuntime fallback factory: tries platform hardware → OpenH264 → JPEG. Operator pin via ADMINSYS_ENCODER=hw|openh264|jpeg|auto.
v1.11
Jan 5, 2026Native mobile app — iOS + Android.- NewExpo + React Native app at mobile/. expo-router file-based nav, expo-secure-store for the PAT (iOS Keychain / Android Keystore), expo-notifications for push.
- NewScreens: Tickets (list, search, create, detail with reply/resolve), Endpoints (online filter, last-heartbeat), Alerts (severity-coded, all open across tenants), Settings.
- NewCRITICAL alerts now fire to web (toaster), desktop (Tauri), AND mobile push simultaneously via lib/push.ts (Expo Push Service).
v1.10
Dec 15, 2025Realtime gateway — WebSocket alerts.- NewStandalone Node WS server at realtime/server.ts (port 3030, npm run realtime). Auth via NextAuth cookie OR PAT. Org-scoped channels enforced.
- NewThree publish backends: in-process EventEmitter, Redis pub/sub, HTTP POST to gateway. Picked at call time depending on env.
- Improved<RealtimeToaster /> client. Subscribes to all org-alert channels, top-right toasts with severity tone, 8s auto-dismiss, exponential reconnect.
v1.9
Dec 1, 2025Async ingest queue for 5k+ endpoints.- Newlib/ingest-queue.ts: buffered batch writer. Memory backend (default) with 1s flush + 200-job force-flush. Optional Redis backend.
- Improved/api/agent/ingest now returns 202 Accepted. Heartbeats coalesce per agent — 1000 flapping endpoints = 1 row touched per agent per second, max.
- New/admin/system: new 'Async ingest queue' card showing backend, pending depth, lifetime metrics, last-batch ms/size, error count.
v1.8
Nov 15, 2025Saved views + scheduled email reports.- NewSaved views on /tickets — captures URL searchParams as filter, personal vs shared, click-to-restore.
- NewScheduled reports: weekly_summary (7d) and monthly_exec (30d) with inline-styled HTML email. /settings/reports for cadence config.
- ImprovedReports send from tenant's verified domain via sendOrgEmail().
v1.7
Nov 1, 2025SNMP polling for switches, firewalls, printers, UPS.- NewEight SNMP profiles: cisco_ios, mikrotik, ubiquiti, fortinet, hp_aruba, sophos, printer (RFC 3805), ups (RFC 1628), generic.
- NewAgent SNMP_POLL command handler with v1/v2c/v3 (auth+priv). Server-side parser snapshots scalars, builds interface array, persists time-series samples.
- New/network page: KPI strip, add-device form, table with status, interface up/total ratio, uptime, health chips with tone coding, 'Poll now' action.
v1.6
Oct 15, 2025All 13 vendor adapters complete + public API docs.- NewAcronis, Cove, Sherweb, Ingram adapters added. Total catalog: PAX8, SENTINELONE, M365_GRAPH, CROWDSTRIKE, DATTO_BACKUP, DEFENDER, HUNTRESS, BITDEFENDER, VEEAM, ACRONIS, COVE, SHERWEB, INGRAM.
- New/docs/api: public REST API docs with Bearer + PAT auth, rate limits, GET/POST /api/v1/tickets curl + response shapes, webhook HMAC verification.
- ImprovedPerformance indexes added: Ticket(orgId,status,dueAt), Ticket(orgId,createdAt), Agent(orgId,isOnline,lastHeartbeat), AgentEvent(severity,createdAt).
v1.5
Sep 30, 2025Customer portal magic-link auth, internal scheduler, 2-way email threading.- NewCustomer portal at /portal/[orgSlug]/login. SHA-256 hashed magic-link tokens, 15-min TTL, 30-day cookie session. Contacts can review and reply to tickets.
- NewInternal scheduler replaces external cron. Handlers for integration_sync, domain_checks, lifecycle_recompute, sla_breach_scan, alert_digest. Single /api/cron/tick endpoint.
- New2-way email threading: detects [#NNN] subject token OR In-Reply-To header. Auto-reopens RESOLVED/CLOSED tickets when contact replies.
- NewBitdefender + Veeam adapters.
v1.4
Sep 15, 2025Defender, Huntress, SSL Labs grading, ScalePad-style asset lifecycle.- NewMicrosoft Defender for Endpoint adapter via Graph. Reuses M365 client_credentials shape.
- NewHuntress adapter (HTTP basic, paginated agents, severity-mapped Alerts).
- NewSSL Labs grading on /domains. Cache-first, polls until READY, refreshes 7-day-stale entries (cap 8/run).
- NewAsset lifecycle classifier: 6 stages (eol/replace/warning/aging/healthy/unknown). /lifecycle page with replacement budget forecast and CSV export.
v1.3
Aug 30, 2025M365/Entra (CIPP-class), CrowdStrike, Datto BCDR.- NewMicrosoft Graph adapter: users with sign-in activity + licenses, MFA registration, directory roles, subscribedSkus, conditional access policies, secure score, risky sign-ins.
- NewCrowdStrike adapter: paginated devices/queries + batch entities, active detections, severity-mapped Alerts.
- NewDatto BCDR adapter: failed-backup-in-24h → CRITICAL, off-site sync stale > 7d → WARN.
- New/m365 dashboard: MFA coverage %, no-MFA list (admins flagged), license inventory + wasted seats, secure score per tenant, risky sign-ins, stale 90-day accounts.
v1.2
Aug 15, 2025Native desktop client (Tauri 2) + PAT auth + installer pipeline.- NewTauri 2 desktop app with system tray. Tray menu: Show window, Connect to last device, Refresh, Sign out, Quit. Slack-style minimize-to-tray.
- SecurityPersonalAccessToken (PAT) model with sha256 + prefix lookup. Issue/list/revoke at /api/desktop/pat[/:id] (cookie-auth).
- New/api/downloads/desktop?os=windows|mac|linux serves .msi/.exe/.dmg/.deb/.AppImage installers.
v1.1
Jul 30, 2025Platform admin console.- New/admin overview: KPI strip, plan-mix bars, MRR/ARR rollup, signups 30d/7d, agents online, expiring trials, recent invoices, audit feed.
- New/admin/customers paginated/filtered (plan, sub status, search) + customer detail with server actions: override plan, set seats, extend trial, force status. All audited.
- New/admin/system: DB row counts, agent ingest rate (heartbeats/hr), command queue, integration sync table, recent agent errors (24h).
v1.0
Jul 15, 2025Public launch — ticket templates, domain monitoring, PWA, Slack/Teams, SentinelOne.- NewTicket templates with chip picker on the new-ticket page. Spawn checklist items as internal-note sub-tasks.
- NewTicket merge: consolidates comments + time + CSAT to parent, closes source.
- NewDomain monitoring: RDAP for WHOIS, TLS for SSL, DNS TXT for DMARC/SPF/DKIM. /domains page + /api/cron/domain-checks.
- NewApprovalRequest schema. Multi-approver gates that hold tickets ON_HOLD until all approve.
- NewPWA: manifest.webmanifest, sw.js shell-cache, SVG icons. Root layout registers SW.
- NewSlack + Teams real outbound chat ops via IntegrationConnection.configJson webhookUrl.
- NewSentinelOne adapter: real S1 API agents pagination + active threats. Upserts DiscoveredDevice + Alert rows.
Want to influence what we ship next?
Customer requests drive about 70% of the roadmap. Send us yours — we read every one.