Changelog
Complete version history and features of SecuryBlack. We release updates regularly.
Nov 20262026.11.7
Servers: what is deployed, at a glance
The Servers list shows what each one has deployed, the usage bars are cleaner, and every detail page links back to its list.
- Each server shows its apps, its databases and the last deploy
- New CPU, RAM and disk bars in Performance: amber from 80% and red from 95%
- A link above each detail page goes back to the list you came from
- New icon in the browser tab, in the panel and on the website
Nov 20262026.11.6
The full menu, on mobile too
On mobile, the panel opens the same menu as on desktop from the header, instead of the bottom bar.
- A menu button in the header opens every section, grouped into Deploy, Protect, Watch and Account
- Inside a server, an app or a database, its sections show up in the same menu
- No bottom bar: the page uses the full height of the screen
Nov 20262026.11.5
The panel gets the SecuryBlack design
The panel now uses the same design system as the website: the new logo, the same palette in light and dark themes, and controls that are easier to use on mobile.
- New logo in the panel, sign-in, public status pages and the browser tab icon
- Light and dark themes with the SecuryBlack palette; pick one in Settings → Appearance
- 44 px tall buttons and fields, easier to tap on mobile, and a visible focus ring when navigating with the keyboard
- Public status pages and the monthly report follow the same design
Nov 20262026.11.4
Databases in one click, for your app or standalone
Create PostgreSQL 17 or Redis 7 on your server from Databases: next to a GitHub app, which gets the connection URL, or standalone, with no app. PostgreSQL is backed up daily if the server has TitanVault.
- In Databases → New database → Create, pick the engine and the app that uses it: the app redeploys with DATABASE_URL or REDIS_URL; if you already set that variable, yours wins
- Only your app can reach it: it runs on the app's private network, with no ports open to the internet, and a generated password we store encrypted, and its data survives every deploy and rollback
- No app? Pick “None: standalone on a server”. It only listens on the server itself (127.0.0.1): from your computer you reach it through an SSH tunnel, and the URL with the password is on its page, in Sudo Mode
- All of them in one list, the ones you create and the ones you had already connected; for PostgreSQL you see connections, size and slow queries in Monitor
- If the server has TitanVault with a destination, PostgreSQL is backed up daily
- Don't need it anymore? In its Settings, “Remove from your app” deletes it with its data and redeploys the app without it; a standalone one is deleted the same way. Backups already taken are kept
- Standalone databases and removing a database need CromoForge 0.7.2, which updates itself
Nov 20262026.11.3
Your status page, on your domain
Put your status page on an address of your own, like status.yourcompany.com, with its HTTPS certificate. Free.
- Enter your domain in Status pages → your page → Domain and add the CNAME record we show you
- We issue and renew the HTTPS certificate: there's nothing to install
- “Check now” tells you right away whether it's live; it usually takes a few minutes
- The status.securyblack.com/your-page address keeps working and takes visitors to your domain
Nov 20262026.11.2
Public status pages
Show your customers how your sites and jobs are doing on a public page. Free.
- Create your page in Status pages and share it at status.securyblack.com/your-page
- Pick which sites and scheduled jobs appear and what they're called: the URL we check is never published
- Current status, the last 90 days of each component and recent outages, all automatic
- Post a notice in your own words (Investigating, Identified or Resolved) when something breaks
- With your logo, in English or Spanish, and light or dark to match the visitor's device
Nov 20262026.11.1
Light mode
The panel is no longer black only: pick light, dark or follow your device.
- New option in Settings → Preferences → Appearance: Auto, Light or Dark
- Auto follows your computer's or phone's light or dark mode and switches as soon as you do
- It's saved per device, so your laptop can be light and your phone dark
- Charts, the infrastructure map and status signals use colours chosen to read well on white
Oct 20262026.10.14
One-click templates, your Dockerfile and data that stays
Deploy Umami, Plausible, n8n or Uptime Kuma without a repository, build with your own Dockerfile and keep your apps' data across deploys.
- One-click templates: Umami, Plausible, n8n and Uptime Kuma, with their database alongside, generated passwords and HTTPS on the domain you choose
- Creating a template installs the HTTPS proxy if the server doesn't have it yet, and the app page reminds you how to secure the first account
- Choose how each app is built: with Railpack, with your Dockerfile or automatically (the Dockerfile if there is one)
- Monorepos: build from a folder of the repository and override the install, build or start commands when needed
- Persistent volumes: mark up to five paths per app and their data survives every deploy
- Two apps deploying at the same time on one server no longer clash over the port (CromoForge 0.7.0, updates itself)
- Restore a TitanVault backup from the panel: it lands in a new path on the server and never overwrites anything (TitanVault 0.3.0, updates itself)
Oct 20262026.10.13
A first day with fewer surprises
We went through what a newcomer sees, from signing up to deploying a first app, and removed what got in the way.
- Signing in with your password or a passkey counts as verification: the first sensitive action within 15 minutes won't ask again
- Right after a server connects you see “Receiving the first data…” and the metrics show up on their own, no reload
- A new server's defenses say whether they're installed from the start, instead of “No data yet”
- The home checklist only ticks the server once it actually connects
- A web app without a domain warns that it only opens from the server and takes you to Domains
- Watching a website only needs the URL: the name comes from the domain and you can change it
- A new monitor shows as pending until its first check, not as up
- “Failed services” no longer counts the periodic system jobs that fail and retry on their own (OxiPulse 0.5.2, updates itself)
Oct 20262026.10.12
Choose which agents to install, from anywhere
Adding a server works the same from Servers, from New app or from the server page: tick the agents you want and copy a single command.
- Each agent comes with one line on what it does and a link to its site; all of them start ticked
- On a server that is already connected, “Add agents” builds the command without a token: it reuses the server's own and leaves what is installed alone
- From New app you can install CromoForge on the chosen server without leaving the form, and it warns you if Docker is missing or stopped
- CromoForge installs Docker if the server doesn't have it
- Servers created on Hetzner from the panel come with all four agents
- The same command for Linux and Windows, with the server's system already picked
Oct 20262026.10.11
Truly live logs, for a whole project too
Container logs arrive as they are written, and you can read a whole Docker Compose project or app together.
- Live mode only asks for new lines: they show up within a second or two, without jumps
- Containers are grouped by Compose project or app, with “View group logs” to read them all merged by time
- Search with text or /regex/ and filter by warnings or errors; stderr is marked in red
- JSON lines are summarised on one line and expand with a click
- CPU and memory for each container in the list, refreshed every 15 seconds
- Copy or download what you are looking at, with or without times
Oct 20262026.10.10
Switch servers without leaving the section
The name of the open resource in the sidebar opens a search with the others of the same type.
- Click the name of the open server, app, database or monitor to see and search the rest, each with its status
- Switching keeps you in the same section: from one server's Fail2ban to another's
- Type and press Enter to jump to the first result
Oct 20262026.10.9
Every server, app and monitor gets its own menu in the sidebar
The sections of whatever you have open show up in the sidebar, Azure-style, and each one has its own link.
- Open a server, app, database or monitor and its sections unfold under its sidebar item
- Every section has its own URL: back, reload and sharing a link all work
- The server overview shows every chart at once (CPU, RAM, each disk and network) with a single range selector
- Server security split into Findings, Firewall, Fail2ban and CrowdSec
- Delete, regenerate token and disconnect move to a “Danger zone” at the end of Settings
- On mobile, a picker at the top switches between sections
Oct 20262026.10.8
New infrastructure map and more detail on every deployment
The map shows at a glance what runs on each server, and every deployment tells you how long each stage took.
- Canvas map grouped by provider: each server with its agents, apps and databases, and a side inspector with metrics
- “Assign to…” in the inspector links anything that has no server yet to one
- All / Attention filter: healthy items fold away and what needs a look stays in view
- Quick search with ⌘K (Ctrl+K on Windows and Linux)
- Every deployment shows how long each stage took and who authored the commit
- The total duration no longer counts time spent in the queue, and only the latest deployment shows as current
Oct 20262026.10.7
Several domains per app and www redirect
A web app can now answer on more than one domain, each with its own HTTPS certificate.
- Add extra domains to an app from Settings → Network
- Each extra domain redirects to the main one, keeping path and query (www ↔ apex), or serves the app too
- An LED tells you whether each domain's DNS already points to your server
- If you remove an app's domain, its proxy route goes away on the next deployment
- Needs CromoForge 0.3.0, which arrives through the automatic update
Oct 20262026.10.6
Shorter sign-up: from the confirmation email straight to the panel
Creating an account asks for less and gets you sooner to what matters: connecting your first server.
- The link in the confirmation email signs you in and takes you to the panel, without typing your password again
- Sign-up only asks for name, email and password, and Continue with Google comes first
- The company, country and phone form no longer shows up on your first visit; those details are still in Settings
- With an empty account, the panel tells you where to start: connecting your first server
Oct 20262026.10.5
OxiPulse v0.5.0: the panel shows what happens inside your Linux servers
Each server page gets new System and Services panels with readings you used to need SSH for: whether the machine is starved of resources, whether your provider is stealing CPU, whether the kernel killed processes for lack of memory, or whether services have failed.
- Resource pressure (PSI): how long processes wait for CPU, memory or disk
- CPU stolen by the hypervisor and disk wait (iowait), with a warning when steal goes over 10 %
- Processes killed for lack of memory (OOM) in the last 24 hours
- Failed systemd services, marked in red so they don't go unnoticed
- Inode usage per disk: a disk can fill up with small files while it still has free space
- System threads and the services using the most memory and CPU, counting the memory they really use, not the disk cache the system frees at once (OxiPulse v0.5.1)
- OxiPulse no longer pings 8.8.8.8 and 1.1.1.1 by default; latency is only measured to the targets you configure
- Agents update themselves within 24 hours, or right away with the Update button in the panel
Oct 20262026.10.4
GitHub deploys in early access, CromoForge v0.2.0 and a new panel
Connect a GitHub repository and SecuryBlack builds it and runs it on your own server, with its domain and automatic HTTPS. Every push to the chosen branch triggers a new deploy. It is in early access. The panel also gets a dark design with a new dashboard.
- GitHub connection through the SecuryBlack GitHub App: pick the repository and branch, no keys to copy
- Automatic builds with Railpack, no Dockerfile needed, on a BuildKit with capped CPU and memory so the server is not starved
- Three app types: web (HTTP check before it gets traffic), worker (background process) and cron (scheduled jobs in UTC; a run is skipped while the previous one is still going)
- Deploy on every push, and roll back to a previous version by reusing its image
- Custom domain with a Let's Encrypt certificate issued and renewed automatically, through a Caddy managed by SecuryBlack
- Live build log and the status of each deploy stage
- App secrets reach the container through a temporary 0600 file deleted at startup; they never go on the command line
- When creating an app, only servers with CromoForge installed are offered
- CromoForge v0.2.0: app deploys, cron, Caddy proxy, BuildKit cache pruning sized to the disk and signed commands
- Dark panel with a new dashboard: one LED per server, 30-day uptime, items that need attention and the Deploy, Protect and Watch blocks
Oct 20262026.10.3
Signed agent updates and commands, wider Sudo Mode and hashed tokens
We hardened the chain of trust between the panel and your servers. Agents only install signed releases, installers require the checksum, and the commands the panel sends are signed and expire. Server tokens are no longer stored in plain text.
- ed25519-signed updates: agents reject any release not signed with SecuryBlack's keys. The private keys are kept outside GitHub
- Install scripts abort if the .sha256 file is missing or does not match
- Signed commands: every command the panel sends carries an ed25519 signature bound to the server and the agent, and expires after 15 minutes. During the transition, a command with an invalid signature still runs and leaves a warning in the log
- Sudo Mode also for updating agents, changing their config, allowing remote OS upgrades, editing backup sources, targets and policy, and PostgreSQL actions
- Server tokens stored only as a hash: the token is shown once, when it is created or rotated
- Public security policy (SECURITY.md) explaining how to report vulnerabilities and verify signatures
- Nexus Agent v0.2.17, FerroSentry v0.2.28, OxiPulse v0.4.6, TitanVault v0.2.3 and CromoForge v0.2.0 verify signed commands
Oct 20262026.10.2
OxiPulse v0.4: OpenTelemetry semantic conventions, .deb/.rpm packages and a Docker image
OxiPulse, our open source metrics agent, adopts the standard OpenTelemetry metric names and can be installed in more ways: packages, Docker image, AUR and Ansible.
- Metrics follow the OpenTelemetry semantic conventions, compatible with dashboards for the OTel Collector hostmetrics receiver (metric names change)
- "OxiPulse hosts" Grafana dashboard included in the Docker Compose example
- .deb and .rpm packages for amd64 and arm64, a multi-arch Docker image (about 33 MB, non-root) and an AUR package
- Linux binaries need glibc 2.17 or later: they now start on Ubuntu 22.04, Debian 12 and RHEL 8/9
- Offline buffer fixed: metrics collected while offline are sent with their original time and are not lost
- headers option for backends such as OpenObserve, Uptrace or SigNoz Cloud, with setup guides
- Ansible role and a Proxmox guide
Oct 20262026.10.1
TitanVault v0.2: tiered retention, backup catalog and automatic failure alerts
TitanVault backups get five-level schedules, real retention and a catalog showing where each backup lives. When you turn on alerts, SecuryBlack creates one heartbeat per level for you and tells you when a backup does not arrive.
- Five-level schedules with retention per source and level: old backups are pruned automatically
- Backup catalog with size, status and the real target (local disk, S3, Cloudflare R2 or Hetzner Object Storage)
- One-click failure alerts: SecuryBlack creates a heartbeat per backup level, in the server's time zone and following daylight saving time
- A failed backup no longer sends the success heartbeat, and config errors no longer pass silently
- Command-line recovery to a new destination: file extraction or SQL export, encrypted backups included
- Mobile navigation with four main tabs and a More menu, and a section picker on the server page
- PostgreSQL slow query count consistent with the detail view (backup dumps excluded)
- TitanVault v0.2.1: partial config updates no longer wipe sources and targets
Sep 20262026.9.7
Comprehensive Backup Management with TitanVault v0.1.2, Multi-Cloud Storage & Nexus Agent v0.2.15
Introducing the end-to-end backup and disaster recovery management suite powered by TitanVault, our new native Rust backup agent. Configure storage targets (Cloudflare R2, Hetzner Object Storage, any S3, or local storage), schedule backup sources for PostgreSQL databases, Docker volumes, or file paths, and trigger on-demand snapshots. Restores are done from the CLI to a new path.
- PostgreSQL and file backups with no temporary files on disk, with zstd compression and source-level ChaCha20-Poly1305 encryption to remote targets
- Multi-Cloud Storage Targets: intuitive UI modal to configure and validate credentials for Cloudflare R2, Hetzner Object Storage, any S3, or local paths with automatic connection health checks
- Modular Backup Sources: define targets to safeguard (PostgreSQL databases, Docker container volumes, and host directories) with custom retention policies
- On-Demand Snapshots: inspect full snapshot history across targets with exact file sizes and status indicators, or trigger manual backups directly from server details
- Nexus Agent v0.2.15: automatic local discovery, lifecycle management, and unattended 1-click installation for both TitanVault and CromoForge
- Expanded Remote Agent Updates: on-demand manual update triggers now extended to TitanVault and CupraFlow from the dashboard
- Mobile-Optimized Backups & Databases: horizontally scrollable tab bars, responsive server resource cards, and fluid modals tailored for mobile screens
Sep 20262026.9.6
PostgreSQL Administration & Performance Suite, Lock Buster & CromoForge v0.1.4
Introducing the new PostgreSQL database administration and performance suite for host servers and Docker containers with zero ports exposed to the internet. Monitor and terminate blocking queries with Lock Buster, recover storage with 1-click Vacuum and Reindex, audit obsolete indexes with Index Doctor, and tune memory allocation with the Hardware-aware PGTune Advisor.
- Zero-Port PostgreSQL Administration: 100% internal telemetry and command execution via persistent gRPC tunnel and CromoForge, keeping database ports unexposed to public networks
- Lock Buster & Live Query Monitor: real-time inspection of pg_stat_activity with live duration tracking, client IPs, transaction states, and wait events
- Process Termination Actions: cancel long-running queries (pg_cancel_backend) or terminate locked connections (pg_terminate_backend) with a single click
- Table Bloat & Maintenance: detect table bloat with one-click actions to run VACUUM (ANALYZE) and concurrent REINDEX without write downtime
- Unused Index Doctor: automatically detect indexes over 1 MB with zero scans (idx_scan = 0) wasting memory and disk I/O, with copyable DROP INDEX CONCURRENTLY commands
- Database Tuning Advisor (PGTune): calculate optimal postgresql.conf memory parameters (shared_buffers, effective_cache_size, work_mem, maintenance_work_mem, wal_buffers) based on host RAM compared to current settings
- 1-Click Extension Manager: discover, inspect version compatibility, and install popular extensions (pg_stat_statements, pgcrypto, vector, timescaledb, citext, etc.) without manual SSH
- CromoForge v0.1.4: new agent release delivering database metrics collection and safe maintenance task execution
- Full Mobile Support: dedicated Databases navigation tab on the mobile bottom bar to manage and unblock database instances on the go
Sep 20262026.9.5
Comprehensive Fail2ban & CrowdSec Management, Attack Insights & Remote Log Streaming
Expanded edge defense capabilities with dedicated management panels for Fail2ban and CrowdSec. Control IP bans, monitor live attack insights and service logs, and tune security configurations directly from the SecuryBlack dashboard.
- Interactive Fail2ban Dashboard: inspect service status, active jails, total banned IPs counter, and trusted whitelists at a glance
- 1-Click IP Ban & Whitelist Actions: ban or unban IPs manually and keep trusted ranges synchronized without logging into SSH
- Fail2ban Log Streaming & Attack Ranking: analyze real-time service logs and identify top targeted jails and aggressive attacker IPs with quick-action ban buttons
- Dynamic Fail2ban Configuration: view and update bantime, findtime, and maxretry with instant reload on the server
- CrowdSec Management Suite: brand-new management dashboard supporting active decisions, installed bouncers, and perimeter security metrics
- CrowdSec Scenario Alerts: stream blocked attacks, triggered security scenarios, and attacker reputation in real time
- Unattended Installation & Collections: install Fail2ban or CrowdSec and deploy additional security collections with a single click
- FerroSentry v0.2.25: new security agent release with complete command intake and secure streaming handlers for Fail2ban and CrowdSec
Sep 20262026.9.4
Active Docker Manager, CromoForge v0.1.1 and Real-Time Live Log Viewer
Introducing active Docker container management directly from the SecuryBlack dashboard. Start, stop, and restart containers with Sudo Mode biometric elevation, and troubleshoot incidents instantly with the all-new real-time Live Log Viewer.
- Container Lifecycle Management: Start, stop, or restart any Docker container directly from the server dashboard with clear impact confirmation dialogs
- Sudo Mode & Passkey Protection: Container stop and restart operations require FIDO2 biometric authentication to prevent accidental downtime or unauthorized disruption
- Real-Time Live Log Viewer: Brand-new monospace dark terminal drawer with continuous streaming (3s auto-refresh) to diagnose service crashes without SSH
- Tail Lines & Timestamps Selector: Choose between 100, 200, 500, or 1000 lines and toggle ISO timestamps column to match your inspection preference
- Interactive Search & Log Download: Filter log lines by keyword in real time, copy output to clipboard, or download full .log files with a single click
- CromoForge v0.1.1: New release of the deployment & container agent with optimized execution and chronological interleaving of stdout and stderr
- 1-Second Edge Gateway: Accelerated command poller delivering container operations and log queries through the persistent gRPC tunnel in sub-second time
Sep 20262026.9.3
Full Server Hardware Specifications, OxiPulse v0.3.13 & One-Click Security Remediation
Expanded system monitoring with full hardware specification discovery for each server (vCPUs, CPU model, total RAM, storage, OS distribution, kernel version, and uptime). In addition, introduced one-click automated security remediations backed by biometric Passkey Sudo Mode for SSH hardening, unattended upgrades, and intrusion prevention.
- Real-time server hardware specifications: new technical overview card showcasing processor (model & vCPUs), RAM & Swap, total storage, OS, kernel version, and uptime
- Dynamic server header subtitle: instant glance of OS distribution, vCPUs, total RAM, and total disk storage right in the server header
- Detailed resource metrics: CPU and RAM resource bars enhanced with exact CPU model and Gigabytes usage breakdown (used / total)
- OxiPulse v0.3.13: new Rust agent release automatically discovering and streaming host hardware attributes to the OTLP gateway
- One-click security remediation: resolve security findings directly from the dashboard (SSH hardening, unattended upgrades, and fail2ban setup)
- Instant port blocking: automatically add DENY firewall rules to UFW with a single click from exposed port findings
- Biometric protection with Sudo Mode: critical server remediations require step-up biometric Passkey authentication with assisted onboarding
Sep 20262026.9.2
Interactive Changelog Notifications in Sidebar & Integrated Updates Modal
Introduced an in-app product updates notification system directly inside the dashboard. Discover what is new without leaving your workspace, dismiss notifications per-version across all your devices, and configure badge visibility from account preferences.
- Sidebar updates badge: dynamic notification card above the account menu that lights up automatically with every new release
- In-app Changelog modal: read full release notes, features and security fixes without navigating away
- Permanent account menu shortcut: quick access to Product Updates from your user profile dropdown
- Cross-device database sync: dismissing an update notification persists across all your browsers and devices
- User preference toggle: easily enable or disable sidebar update notifications in Account Settings
- Public Changelog API: edge-cached public API endpoint delivering releases data in real time
Sep 20262026.9.1
Passkeys (WebAuthn/FIDO2), UFW firewall management and Docker containers with CromoForge
Added next-generation biometric authentication with Passkeys for seamless passwordless login and hardened account protection. Shipped remote UFW firewall management with anti-lockout protection and Docker bypass detection, alongside a brand new Docker containers tab powered by CromoForge.
- Passkeys (WebAuthn / FIDO2): biometric credentials support (Face ID, Touch ID, Windows Hello, physical hardware keys) and passwordless login
- Sudo Mode (Step-Up Authentication): secure elevation with biometric Passkey or password (15-minute grace window) protecting UFW firewall modifications and sensitive infrastructure actions
- Passkeys management: dedicated settings section to review, label, register and delete linked WebAuthn authenticators
- Remote UFW firewall management: inspect active firewall rules, create new rules (port, protocol, allow/deny, source IP) and delete existing rules remotely
- Anti-lockout protection: safeguards against accidental disconnection or blocking of active SSH administrative access
- Docker UFW bypass detection: automated audit detection and warning when Docker bindings circumvent UFW rules
- Docker containers: new dedicated tab in server details to monitor containers, inspect mapped ports and trigger container restarts with CromoForge
- Database caching for Firewall and Containers: instant loading (< 20 ms) via Stale-While-Revalidate pattern, background synchronization and reactive PostgreSQL triggers
- Mobile & UX enhancements: responsive tab navigation on small viewports and hardened internal proxy redirect handling
Sep 20262026.9.0
One-click remote agent updates, process auto-resolution and tunnel resilience
Expanded remote agent management with one-click updates directly from the dashboard and visual badge alerts. FerroSentry v0.2.15 brings executable-based finding consolidation to prevent duplicate alerts and automated resolution for terminated processes. In addition, the bidirectional gRPC tunnel is hardened with active HTTP/2 keep-alives and persistent retry queues across reconnections.
- Agent updates: one-click update button next to each agent with update indicator badges in Config and Security tabs
- FerroSentry v0.2.15: smart finding consolidation by executable path in Process Sentinel, scan cache reset, and elimination of test mock events
- FerroSentry: instant auto-resolution when a suspicious or flagged process terminates on the server
- Hardened gRPC tunnel: active HTTP/2 keep-alive pings in Nexus Agent and Edge Gateway preventing 60-second idle timeouts
- Persistent bridging: Nexus Agent queues command responses and progress across stream reconnections without losing messages
- Windows Server 2019 compatibility: updated PowerShell installers with forced TLS 1.2+ and static CRT runtime on Windows
Aug 20262026.8.2
Infrastructure map: per-type agent cards and a tighter layout
The infrastructure map now shows different information depending on agent type instead of the same generic charts for everyone: FerroSentry shows open vulnerabilities and pending OS updates, and Nexus Agent shows whether it's communicating with SecuryBlack and with the server. We also tightened the layout to remove empty space between servers and services, added a zoom indicator with a one-click reset, and fixed an intermittent error when loading the map.
- Infrastructure map: agent cards now adapt to agent type — FerroSentry shows vulnerabilities and pending updates, Nexus Agent shows connectivity with SecuryBlack and with the server
- Infrastructure map: servers now size their width to the number of services they contain, and spacing between cards and servers was reduced
- Infrastructure map: new zoom indicator, defaulting to 100% on load with a one-click reset
- Fixed: intermittent error loading the infrastructure map and other authenticated views
Aug 20262026.8.1
Remote OS updates, an SSL certificate watchdog, and agent reliability
Added a button to update your servers' operating system remotely, showing the real list of pending packages and live progress. FerroSentry now auto-closes findings once the condition that triggered them clears, and we launched an SSL certificate watchdog that warns before certs expire or if they become invalid. We also improved agent installation, notification read-state, and several views across the app.
- Servers: button to update the operating system remotely, with the real list of pending packages and live progress
- Agents: manual "Update now" button next to each agent's version, extended to OxiPulse and Nexus Agent
- Agent install: resumable flow for servers that never finished connecting
- FerroSentry: security findings now auto-close as soon as the condition that raised them clears
- New: SSL certificate watchdog on web monitors, warning 30/7/1 days before expiry and on any invalid certificate
- Web monitor: latency on each monitor's detail page (checked from Nuremberg), and settings now editable directly in the Settings tab
- Notifications: read/unread state is now persisted server-side instead of only in the browser, plus a redesigned Notifications page
- Navigation: collapsible sidebar with an icon-only mode
- Infrastructure map: resource charts redesigned as bars, a live status indicator, and layout overlap fixes
Aug 20262026.8.0
Hetzner Providers, Cost Optimization, and a Full Visual Redesign
We launched the Providers section to connect your Hetzner Cloud account, discover and import existing servers or provision new ones without leaving SecuryBlack. We also shipped the public savings calculator, a complete visual redesign of the app, and an overhaul of notifications and mobile navigation.
- Providers: connect your Hetzner Cloud account, discover existing servers and import or link them to one you already monitor
- Providers: provision a brand-new server directly on Hetzner from SecuryBlack, no need to leave the app
- Providers: syncing now removes servers from the list once you've deleted them on the provider's side
- Cost Optimization: public savings calculator (/ahorro)
- Cost Optimization: assign each server's provider and plan to calculate its potential savings
- Visual Redesign: new flatter, more minimal design language applied across the whole app
- Notifications: replaced the bell with an unread-count badge, and added mark-as-read (individually or all at once)
- Mobile Navigation: bottom tab bar as the sole navigation menu, with direct access to Providers
- Reliability: automatic retry for session refresh on transient network failures
Jul 20262026.7.0
FerroSentry Security Posture, Outage Charts in Latency, and Access Audit
We launched the Security Posture (FerroSentry) section in server details, interactive outage visualization directly on network latency charts, user last activity tracking, and enhanced agent installer compatibility.
- Security Posture Suite (FerroSentry v0.2.0): complete suite of 7 security sensors (SSH Auditor, File Integrity Monitor FIM with SHA-256 hashes, Permission Auditor SUID/SGID, Persistence Hunter for crons, Process Sentinel for /tmp executions, Firewall Auditor, and SSL/TLS Auditor)
- Security Posture (FerroSentry): new server details section with findings table and security audits
- Outage & Downtime Visualization: graphical representation of downtime periods directly on network latency charts
- Uptime Threshold Tuning: status palette refinement and accuracy adjustments in availability history
- User Access Audit (last_used_at): tracking and display of last user activity in profile settings
- Agent Compatibility: PowerShell 5.1 installers with forced TLS 1.2 for OxiPulse and FerroSentry
- Agent Auto-Update: reduced initial update check delay to 1 minute in OxiPulse
- Version Metadata: integrated autogenerated build version metadata in footer and about app page
Jun 20262026.6.0
Google Sign-In, Simplified Onboarding, Network Metrics, and Interactive Showcases
We introduced Google Sign-In and simplified signup friction, launched an interactive onboarding wizard, and added a network latency metric card. On the homepage, we featured interactive showcases of our Rust agents with real-time simulated terminals, and made Pro and Team plans free during the beta phase.
- Google Sign-In: integrated Google Sign-In SDK on login and registration screens
- Simplified Registration: removed redundant inputs (country, company, phone) to reduce signup friction
- Onboarding Wizard: post-login setup assistant unified into 2 simple steps
- Account Settings: new linked accounts (Google) section in the settings tab
- 60-Day Uptime History: new daily status tracking component and unified tracker UI
- Network Latency Metric: visual card to monitor server response times in real time on the dashboard
- Interactive Showcases: dedicated homepage sections for OxiPulse, FerroSentry, and CupraFlow with animated terminals
- Free Beta Subscriptions: Pro and Team plans marked as free with highlighted badges and crossed-out pricing
- UI Consistency: unified all buttons to pill shapes (rounded-full) per the design system guidelines
May 20262026.5.0
Server Redesign, Dynamic Metrics, and Port Scanner
We launched a deep overhaul of the server interface in Railway style, integrating support for dynamic multi-disk metrics and real-time telemetry with OxiPulse. Additionally, FerroSentry debuts its cross-platform port scanning engine, and the control panel is restructured into a high-impact grid.
- Server Redesign: new server card interface inspired by Railway.app
- Dynamic Metrics: multi-disk support and graphs with per-disk capacity bars
- Full Renaming: unified migration from the concept of 'Agents' to 'Servers' across the entire UI
- Telemetry Optimization: precise dynamic summation and scaling of storage and network rates in real time
- OxiPulse v0.3.0: support for mount-point primary disk labels and short Linux device names
- FerroSentry: active Phase 1 cross-platform port scanner (Windows netstat and Linux /proc/net/tcp)
- Uptimes & Heartbeats: added pagination to ping history on detail pages
- Dashboard: new 2x2 grid layout for enhanced clarity and resource visualization
- App Version Page: new /about section with auto-generated build version information
Apr 20262026.4.0
Internationalization, unified notifications, and UX improvements
We launched full Spanish and English support across the entire app. Redesigned the notification system with unified channels, improved the experience with cron presets in heartbeats, and added an interactive infrastructure map. OxiPulse receives more frequent automatic updates and better Windows support.
- Full internationalization: interface available in Spanish and English
- Unified notification channels: email, Discord, Telegram, and Slack in one place
- Cron expressions in heartbeats with presets (every hour, every day, etc.)
- 90-day uptime history visualized in monitor detail
- Improved identity verification flow in breaches
- Interactive infrastructure map with deletable edges
- Agent version visible on details page
- OxiPulse: update check every 5 minutes
- OxiPulse: better auto-update support on Windows
- Opt-in telemetry in OxiPulse with remote configuration
Mar 20262026.3.2
Server monitoring & OxiPulse
We launched server monitoring and with it OxiPulse was born, our open source agent written in Rust. OxiPulse installs with a single command on any Linux server and starts sending CPU, RAM, disk, and network metrics to the SecuryBlack dashboard in real time. No vendor lock-in.
- OxiPulse: open source monitoring agent written in Rust
- One-command installation for any Linux server
- Real-time metrics: CPU, RAM, disk usage, and network traffic
- View of all servers on the main dashboard
- Email alerts when a server stops reporting
- Public repository available on GitHub
Mar 20262026.3.1
Heartbeats
We added the heartbeats system to verify that your cronjobs, backups, and scheduled scripts run correctly. A heartbeat is an HTTP signal that your script sends to SecuryBlack when finished; if that signal doesn't arrive within the configured interval, you receive an immediate alert.
- Heartbeats with configurable time window (minutes, hours, or days)
- Email alerts when the pulse doesn't arrive within the expected time
- Integration with cronjobs and scripts via a single curl line
- Status of all heartbeats visible on the main dashboard
- Execution history to detect failure patterns
Feb 20262026.2.0
Uptime monitoring
We launched the availability monitoring system for HTTP and TCP services. We automatically check every minute (every 15 on Hobby) if your service responds correctly, record historical latency, and send immediate alerts when something goes down.
- Automatic HTTP and TCP checks every minute (every 15 on Hobby)
- Latency history for the last 50 checks per monitor
- Main dashboard with status view of all monitors
- Email alerts on downtime and service recovery
- Uptime percentage calculated for 24h, 7d, and 30d periods
Jan 20262026.1.0
MVP — Breach scanner
First functional version of SecuryBlack. The breach scanner periodically checks if your email addresses appear in known data breach databases. When it detects a match, it sends an immediate alert with breach details.
- Email scanning against known data breach databases
- Immediate email alerts when new data breaches are detected
- Email verification by confirmation to prevent abuse
- Full detail of each breach: exposed data, date, and severity
- Free registration without credit card