What's new in CloudGuard

Introduces add google workspace activity telemetry and feature flag management for enhanced Google Workspace & Cloud security management.

Introduces optimize deploy detection, vercel build-time changelog hooks, and edge cache headers for enhanced Google Workspace & Cloud security management.

Refines operational ergonomics and telemetry performance for guarantee unique build deploymentid, auto-approve changelog on deploy, and enable instant banner detection.

Introduces update changelog for v0.2.9 and add ui primitives for enhanced Google Workspace & Cloud security management.

Added active deployment polling and window-focus checks that detect new server deployments. Users are prompted with a non-intrusive top banner displaying the new version, a link to the release changelog, and a one-click refresh button to load the latest build without data loss.

Introduced organization-level governance controls allowing administrators to lock CloudGuard into Single Company mode (preventing multi-client clutter) or toggle Multi-Client mode for MSPs and agency oversight.

Published an interactive security and risk assessment addressing 8 core dimensions including zero-body email storage, AES-256-GCM envelope encryption, k-anonymity breach queries, and tenant SQL scoping with animated architectural diagrams.

Dynamic client-level scoping for multi-project organizations. Projects and alerts can now be grouped under distinct client entities with team assignment controls.

Connected the visual topology canvas to live workspace data, visualizing identities, IAM bindings, service accounts, and critical attack path vectors in real time.

Enforced strict SQL and memory scoping so team members only see findings, leaked credentials, and security warnings belonging to their authorized client accounts.

Resolved an infinite state re-render loop on the Visualize topology canvas by stabilizing node positions and memoizing edge layout calculations.

Expanded topology mindmap node generation to represent auxiliary service accounts and critical attack vectors (DevOps → SA-147 → roles/owner).

Interactive wizard guiding domain administrators through creating GCP service accounts, uploading credentials safely, and authorizing OAuth client scopes.

Automated 5-step diagnostic suite validating JWT signing, token exchange, Admin Directory read access, and audit log viewer permissions.

Security audits default to strict Read-Only mode. Destructive actions (like disabling service accounts or revoking roles) require explicit administrator confirmation.

Detailed execution log showing command payloads, target GCP resource IDs, timestamped approval metadata, and rollback verification.

Inspect SPF, DKIM, and DMARC authentication verdicts, sender IPs, and punycode lookalike patterns in a slide-out drawer without ever storing email body content.

Added fuzzy string matching and homoglyph detection for incoming messages attempting to spoof internal company domains or financial partners.

Rich sandbox environment populated with realistic employees, multi-factor status, breached passwords, and active IAM bursts across 5 departments.

Simulated phishing exercises and credential leakage drills to demonstrate employee coaching workflows and instant quarantine response.

Combined directory breach intelligence, IAM burst velocity anomaly detection, and opt-in Gmail phishing quarantine into a single unified triage queue.

Engineered SHA-256 10-character hash prefix queries for LeakCheck and Have I Been Pwned integration, ensuring employee plaintext emails never leave the premises.