Shipped continuously.
Every improvement to the platform, in the open. No big-bang upgrades, no maintenance windows.
ATT&CK coverage matrix published
Detection coverage is now mapped to the MITRE ATT&CK Enterprise matrix and published in the docs — measurable, versioned, and regenerated from the detection set itself. See the matrix →
Identity graph correlation v3
Token-theft chains now resolve across SaaS, IdP, and endpoint in a single view — 40% faster traversal.
Sub-minute containment, now sub-45s
Median containment dropped to 42s with parallelized response execution.
FedRAMP High GovCloud region
IL5-ready deployment now generally available in US GovCloud.
Detections-as-code sync
Resolved a rare drift between Git-managed rules and the live engine.