https://cybertoolchain.io/tools/netskope New releases and features in Netskope, tracked by The Cyber Toolchain. en Mon, 05 Oct 2026 00:00:00 GMT https://community.netskope.com/product-updates/netskope-cloud-142-0-0-documentation-available-now-9033 https://community.netskope.com/product-updates/netskope-cloud-142-0-0-documentation-available-now-9033 Mon, 05 Oct 2026 00:00:00 GMT Netskope R142.0.0 introduces a new Client Steering capability and a redesigned Netskope Client UI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces a redesigned Netskope Client UI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://community.netskope.com/product-updates/netskope-cloud-141-0-0-documentation-available-now-8963 https://community.netskope.com/product-updates/netskope-cloud-141-0-0-documentation-available-now-8963 Tue, 01 Sep 2026 00:00:00 GMT Netskope R141 adds per-app-instance visibility controls for SSPM findings. • Adds the ability to control visibility of SSPM findings scoped to individual app instances, enabling teams to restrict or expose findings by specific SaaS app deployments. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://community.netskope.com/product-updates/netskope-cloud-119-0-0-documentation-available-now-6991 https://community.netskope.com/product-updates/netskope-cloud-119-0-0-documentation-available-now-6991 Tue, 04 Aug 2026 17:15:24 GMT Netskope R119 brings GA for Box, Cisco Webex, ServiceNow, and Slack Enterprise in Next-Gen API Data Protection, plus HTTP/2 RBI and a new URL Lookup API. • Adds `Transaction Events Field - Format 4` (Beta) for Netskope Secure Web Gateway transaction event logging. • Adds `Netskope URL Lookup API` (Controlled GA) enabling programmatic URL classification queries. • General Availability of Next Generation API Data Protection for Box, Cisco Webex, ServiceNow, and Slack Enterprise. • Adds Automatic Classification of Files using Box Labels in Next Generation API Data Protection. • General Availability of Microsoft Purview Information Protection Write Capability Action in Next Generation API Data Protection. • Adds NGWeb migration for Netskope Private Access (NPA) Publishers. • Adds Private Access Tunnel Browser Access with URI Auth Bypass (Controlled GA) for NPA. • Adds support for Multiple IDPs with Browser Access (Beta) in NPA. • Adds HTTP/2 Enabled Tenant Compatibility with RBI (Beta) in Netskope Secure Web Gateway. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://community.netskope.com/product-updates/netskope-cloud-121-0-0-documentation-available-now-7154 https://community.netskope.com/product-updates/netskope-cloud-121-0-0-documentation-available-now-7154 Tue, 04 Aug 2026 17:15:24 GMT Netskope R121 brings Cloud TAP to general availability and adds multiple IdP support for NPA Browser Access. • Promotes Cloud TAP to general availability (GA). • Adds multiple IdP support for Netskope Private Access (NPA) Browser Access, enabling more than one identity provider per deployment. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://community.netskope.com/product-updates/netskope-cloud-122-0-0-documentation-available-now-7238 https://community.netskope.com/product-updates/netskope-cloud-122-0-0-documentation-available-now-7238 Tue, 04 Aug 2026 17:15:24 GMT Netskope Cloud 122 adds Google Badged Label write support, ChatGPT Enterprise NPA, browser access, new SWG file constraints, and RBI SKU scope isolation. • Adds Browser Access for RUH1 in Netskope Private Access. • Adds new Inline File Constraints to the Netskope Secure Web Gateway (NG SWG). • Adds XRBI SKU Scope and isolation of third-party auth flows in Remote Browser Isolation (RBI). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://community.netskope.com/product-updates/netskope-cloud-exchange-ce-v5-1-is-now-ga-7156 https://community.netskope.com/product-updates/netskope-cloud-exchange-ce-v5-1-is-now-ga-7156 Tue, 04 Aug 2026 17:15:24 GMT Netskope CE v5.1 adds Unified Cloud Risk Exchange, IoC labeling/retraction, full ticket lifecycle management, and endpoint event visibility. • Adds Unified Cloud Risk Exchange (CRE) providing user and application risk context for adaptive zero trust policy enforcement, with integrations for Microsoft Entra, CrowdStrike Identity Protect, CrowdStrike Cloud Security (CNAPP), Okta, and Wiz. • Adds IoC Source Labeling in Cloud Threat Exchange (CTE) to identify the origin of IoCs shared between Netskope and third-party Threat Intel Providers (TIPs) including CrowdStrike, SentinelOne, MISP, and Anomali. • Adds IoC Retraction in Cloud Threat Exchange (CTE) to remove or roll back IoCs shared between Netskope and third-party TIPs such as CrowdStrike, SentinelOne, MISP, and Anomali. • Upgrades Cloud Ticket Orchestrator (CTO) to support complete ticket/incident lifecycle management between Netskope and third-party ITSM tools including ServiceNow and Jira (Ticket Orchestrator v2.0.0 Plugin). • Adds Endpoint (Device & Content) Events & Alerts visibility to Cloud Log Shipper (CLS) (Log Shipper v2.0.0 Plugin). • Introduces new Netskope Tenant Plugin for Cloud Exchange. • Introduces new WebTX v2.0.0 Plugin for Cloud Log Shipper. • CE v5.1 GA images are now available on AWS Marketplace (AMI), Azure Marketplace (VHDX), VMware OVA, and GitHub. Breaking changes: • CE v5.1 GA does NOT support the CE "Small" stack sizing; deployments using the Small stack must meet the new minimum system requirements before upgrading. • Migration from CE v5.0.x (HA) to CE v5.1 (Standalone) deployment is NOT supported. • CE v3.x reached EOL/EOS on 31 January 2024; CE v4.0.x and CE v4.1 reached EOL/EOS on 31 July 2024; CE v4.2 and CE v5.0.0 will reach EOL/EOS on 31 January 2025. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://community.netskope.com/product-updates/netskope-cloud-140-0-0-documentation-available-now-8895 https://community.netskope.com/product-updates/netskope-cloud-140-0-0-documentation-available-now-8895 Tue, 04 Aug 2026 10:51:55 GMT Netskope R140 adds an AI agent for automatically generating NPA app segments and policies. • Introduces an AI agent within Netskope Private Access (NPA) that automatically generates app segments and policies. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://community.netskope.com/product-updates/netskope-cloud-131-0-0-documentation-available-now-8216 https://community.netskope.com/product-updates/netskope-cloud-131-0-0-documentation-available-now-8216 Mon, 13 Jul 2026 10:06:50 GMT Netskope R131 adds Next-Gen SSPM onboarding for M365/Salesforce, on-demand deep scanning, on-prem detection, and macOS/iOS 26 client support. • Adds pre-built Ubuntu 22.04 VM image for Hyper-V to simplify Netskope Private Access publisher deployments. • Supports onboarding Microsoft 365 in Next-Gen SSPM for SaaS security posture visibility. • Supports onboarding Salesforce in Next-Gen SSPM for SaaS security posture visibility. • New Deepscan On Demand capability for Threat Protection API enables targeted deep file inspection outside of inline policy. • New On-Prem Detection for Traffic Steering identifies and steers on-premises traffic. • New Web UI Modification option for Traffic Steering configuration. • Adds Windows 64-bit client support for SWG Tunnel mode. • Netskope Client now supports macOS 26 and iOS 26. • New Terminate Netskope Client Debug Mode control for managing client diagnostic sessions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://community.netskope.com/product-updates/netskope-cloud-132-0-0-documentation-available-now-8281 https://community.netskope.com/product-updates/netskope-cloud-132-0-0-documentation-available-now-8281 Mon, 13 Jul 2026 10:06:50 GMT Netskope R132 adds Universal Reverse Proxy for CASB, Transaction Event visibility in Skope IT, and enhanced SSPM Findings UI. • Adds Universal Reverse Proxy support under CASB Real-time Protection. • New Transaction Event support in Skope IT for SaaS visibility. • Enhanced Findings UI in SaaS Security Posture Management (SSPM). • New visibility for Modified and Deleted Rules in the SSPM Rules UI. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://community.netskope.com/product-updates/netskope-cloud-133-0-0-documentation-available-now-8357 https://community.netskope.com/product-updates/netskope-cloud-133-0-0-documentation-available-now-8357 Mon, 13 Jul 2026 10:06:50 GMT Netskope R133 adds AI Red Teaming, AI Security Guardrails, an AI Gateway, expanded ChatGPT Enterprise protection, and NPA source-IP egress controls. • New AI Red Teaming capability to test and evaluate AI model resilience against adversarial prompts and attacks. • New AI Security Guardrails to enforce policy-based controls on AI application usage and outputs. • New Netskope AI Gateway to provide a centralized security enforcement point for AI service traffic. • Expanded Next Generation API Data Protection for ChatGPT Enterprise, covering fine-tuning data and memory data. • Controlled GA of Windows 64-bit Client Support Mandate for the Netskope Client. • New Mandate Enrollment feature to enforce enrollment into the Netskope Client via steering policy. • New NPA Source IP Egress Criteria for Client, enabling source-IP-based routing decisions in Netskope Private Access. • Updated NPA Tunnel Re-auth Behavior with Periodic Authentication support in the Real-time Policy Framework. • New SSPM visibility into connectivity between SaaS app instances and the SSPM service. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://community.netskope.com/product-updates/netskope-cloud-134-0-0-documentation-available-now-8475 https://community.netskope.com/product-updates/netskope-cloud-134-0-0-documentation-available-now-8475 Mon, 13 Jul 2026 10:06:50 GMT Netskope R134 adds Enterprise Browser–NPA integration, GitHub 3rd-party app risk scoring, and a new Threat Hunting Module. • New Next Generation API Data Protection deferred policy action capability. • New Enterprise Browser and NPA (Network Private Access) integration. • New SSPM capability to discover and risk-score third-party apps in GitHub. • New deep visibility into SaaS users within SaaS Security Posture Management. • New Threat Hunting Module added to Threat Protection. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://community.netskope.com/product-updates/netskope-cloud-135-0-0-documentation-available-now-8525 https://community.netskope.com/product-updates/netskope-cloud-135-0-0-documentation-available-now-8525 Mon, 13 Jul 2026 10:06:50 GMT Netskope R135 adds AI Guardrails, AI Red Teaming, Agentic Broker, and new CASB/SSPM integrations. • New AI Prompt and Response Guardrails for content moderation and protection from AI-based threats. • New AI Red Team product for adversarial testing of AI systems. • New Agentic Broker capability in CASB Real-time Protection. • General Availability of Smartsheet support in Next Generation API Data Protection. • New GitHub Activity Alerts and Dashboard support in Next Generation API Data Protection. • New SSPM capability to discover and risk-score third-party apps connected to Zoom. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://community.netskope.com/product-updates/netskope-cloud-138-0-0-documentation-available-now-8766 https://community.netskope.com/product-updates/netskope-cloud-138-0-0-documentation-available-now-8766 Mon, 13 Jul 2026 10:06:50 GMT Netskope R138.0.0 adds enhanced selection controls for Golden Monthly Releases in Client Steering. • Adds enhanced selection options for Golden Monthly Releases within Netskope Client Steering configuration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://community.netskope.com/product-updates/netskope-cloud-139-0-0-documentation-available-now-8829 https://community.netskope.com/product-updates/netskope-cloud-139-0-0-documentation-available-now-8829 Mon, 13 Jul 2026 10:06:50 GMT Netskope R139 adds FIPS-140-3 client steering, device deletion, and GA of AI Command Center. • Adds FIPS-140-3 compliance support for Netskope Client Steering traffic. • New ability to delete devices from the Netskope management console. • AI Command Center (AICC) reaches General Availability (GA). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://community.netskope.com/product-updates/the-netskope-cloud-platform-r137-0-0-documentation-is-here-8682 https://community.netskope.com/product-updates/the-netskope-cloud-platform-r137-0-0-documentation-is-here-8682 Mon, 13 Jul 2026 10:06:50 GMT Netskope R137 adds SSPM Privileged User Visibility enhancements and a self-service UI for NPA AI Agent App Audit. • Adds Privileged User Visibility enhancements to SaaS Security Posture Management (SSPM), surfacing elevated-access account risk in SaaS environments. • Introduces a self-service UI for the NPA AI Agent App Audit, enabling administrators to review and manage AI agent application access without requiring support intervention. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/netskope-private-access-release-notes-version-138-0 https://docs.netskope.com/en/netskope-private-access-release-notes-version-138-0 Tue, 16 Jun 2026 00:00:00 GMT Netskope Private Access 138 adds auto-reconnect publisher via GSLB latency threshold and KVM QCOW2 support • Adds `Auto Reconnect Publisher` feature that uses a Resolution Loop to monitor network latency and automatically shift connections to optimal PoPs when thresholds are exceeded (Beta) • Enables deployment of the NPA Publisher on KVM-based virtual environments using the new QCOW2 image format • Adds OVA, VHDX, and QCOW2 hosting for the Netskope Private Access Publisher on AliCloud Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/new-features-and-enhancements-june-12-2026 https://docs.netskope.com/en/new-features-and-enhancements-june-12-2026 Fri, 12 Jun 2026 00:00:00 GMT New MCP Security Dashboard and 22 new data attributes for monitoring AI-agent activity • Adds the `MCP Security Dashboard` under `Advanced Analytics → Netskope Library` for monitoring AI-agent activity • Makes 22 new `MCP` data attributes available in application events and alerts schemas for custom dashboards and widgets Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/netskope-release-notes-version-138-0-0 https://docs.netskope.com/en/netskope-release-notes-version-138-0-0 Mon, 08 Jun 2026 00:00:00 GMT Netskope 138 adds AI Guardrails On Demand VM, Enterprise Browser Screen Share Guard, and granular Access Methods for NG SWG. • Adds the `AI Guardrails On Demand` VM deployment option to scan AI prompts and responses via existing AI Gateways or Agents using an API. • Introduces `Screen Share Guard` in Enterprise Browser to detect sensitive content in real-time and apply an opaque gray privacy overlay during virtual meetings. • Replaces the generic `Explicit Proxy` label with granular `Access Methods` (PXC, CEP HTTP Trusted/Roaming, Isolation) in traffic events and security policies. • Adds a new transaction event field `x-cs-access-proxy` to capture Access Proxy object matches for auditability in NPA/SWG contexts. • Expands Next Generation API Data Protection to Anthropic Claude Enterprise with Skope IT audit events, threat protection scanning, and retroactive scans (90-day default window). • Adds a `delete` remediation action for Next Generation API Data Protection policies on ChatGPT Enterprise files and Microsoft Viva Engage chat messages. • Introduces `Created By` attribute on the Next Generation API Data Protection Inventory page to show ownership of content objects (e.g., file, email, wiki). • Adds `Netskope Private Access Publisher.qcow2` image support for deploying NPA Publishers on KVM-based virtual environments like Nutanix AHV and OpenStack. • Enables Dynamic URL Classification by default for all new tenants via a backend feature flag in NG SWG. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/netskope-digital-experience-management-release-notes-for-june-2026 https://docs.netskope.com/en/netskope-digital-experience-management-release-notes-for-june-2026 Mon, 01 Jun 2026 00:00:00 GMT Netskope DEM adds Aggregated Traceroute with three new views for unified network path and latency analysis. • `Aggregated Traceroute` gives a unified view of the network path between a user’s device and the Netskope cloud across time, aggregating probe data over a selected window to show path and latency evolution, identify consistently problematic hops, and correlate issues with user location • New `End-to-End Underlay Latency` view provides a time-series chart of round-trip time from client to POP • New `Hop-by-Hop Path View` displays an aggregated network graph showing every hop, link latency, and probe distribution • New `Time Slider with Location Awareness` contextual filter ties network behavior to where the user was Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/netskope-release-notes-hotfix-version-137-1-0 https://docs.netskope.com/en/netskope-release-notes-hotfix-version-137-1-0 Mon, 18 May 2026 00:00:00 GMT Netskope v137.1.0 adds Anthropic Claude Enterprise support and API Data Protection to Compliance Logs • Adds Next Generation API Data Protection support for Anthropic Claude Enterprise, enabling policy creation, DLP, ongoing scan, and alerts. • Migrates Next Generation API Data Protection for ChatGPT Enterprise to the Compliance Logs Platform. • Deprecates the `GET /api/v2/nsbrowser/configpolicies` and related `/configpolicies` endpoints effective May 5, 2026. Breaking changes: • The `GET /api/v2/nsbrowser/configpolicies`, `POST /api/v2/nsbrowser/configpolicies`, `GET /api/v2/nsbrowser/configpolicies/{id}`, `PUT /api/v2/nsbrowser/configpolicies/{id}`, and `DELETE /api/v2/nsbrowser/configpolicies/{id}` endpoints are deprecated effective May 5, 2026, and will be removed by November 5, 2026. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/netskope-private-access-release-notes-version-137-0 https://docs.netskope.com/en/netskope-private-access-release-notes-version-137-0 Thu, 14 May 2026 00:00:00 GMT Netskope Private Access 137.0 adds AIOps App Audit UI, policy schedules, dual-stack DNS interception, steering exception bypasses, and URL rewrites for redirects. • Adds a `Private Access AIOps Agent` self-service UI to audit existing Private App Segments and create new segments and Real-time Policies • Adds `Policy Schedules` to Real-time Protection policies for Private App Segments to restrict access by day, date, and time • Enables dual-stack (IPv4 + IPv6) DNS interception on NPA Client for Windows and macOS without disabling IPv6 • Supports URL rewriting for HTTP 30X Redirects in NPA Browser Access using public or custom hostnames • Adds `Service & Destination Profile` exception type under `Settings > Security Cloud Platform > Traffic Steering > Steering Configuration` to bypass NPA tunneling for specific destinations Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/streaming-client-release-notes-may-7-2026 https://docs.netskope.com/en/streaming-client-release-notes-may-7-2026 Thu, 07 May 2026 00:00:00 GMT Netskope Streaming Client C.2026.5.1 adds Syslog TLS support without certificate validation • Adds `Syslog TLS` protocol support to the Event Streaming Client without requiring certificate validation Breaking changes: • Event Streaming Client version C.2026.5.1 is mandatory if Syslog TLS is configured; any older version will fail to send events. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://community.netskope.com/product-updates/the-netskope-cloud-platform-r137-0-0-documentation-is-here-8682 https://community.netskope.com/product-updates/the-netskope-cloud-platform-r137-0-0-documentation-is-here-8682 Tue, 05 May 2026 00:00:00 GMT R137.0.0 adds NPA AI Agent for App Audit self-service UI and SSPM privileged user visibility enhancements. • Enhances SaaS Security Posture Management (SSPM) with increased visibility into privileged users Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/netskope-release-notes-version-137-0-0 https://docs.netskope.com/en/netskope-release-notes-version-137-0-0 Mon, 04 May 2026 00:00:00 GMT Netskope R137 adds AI Gateway dashboard, NPA steering bypasses, PQC key exchange, deepfake API, and SSPM privileged user visibility. • Adds the `AI Gateway Dashboard` in Advanced Analytics to monitor traffic for AI agents and LLMs through deployed AI Gateways. • Provides a `Deepfake Detection On-Demand API` to submit audio, video, or image files for deepfake detection based on voice and facial features. • Enables NPA Steering Configuration exceptions via the new `Service & Destination Profile` exception type under `Settings > Security Cloud Platform > Traffic Steering > Steering Configuration`. • Adds `X25519MLKEM768` post-quantum key-exchange support in NG SWG, managed via feature flags `ssl-server-pqc-key-exchange-alg` and `ssl-client-pqc-key-exchange-alg`. • Introduces privileged user identification in SSPM with new filters on the Users page and updated metrics on the Apps page. • Supports multi-file and folder uploads in Remote Browser Isolation (RBI) with a real-time progress `File Transfer Info Bar`. • Adds Enterprise Browser Sandboxed Clipboard mode selection (`Full Sandbox`, `Read System Clipboard`, `Write System Clipboard`) via UI controls and API. • Adds tenant-level Enterprise Browser version management via the `ReleaseChannel` browser configuration policy. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/netskope-release-notes-hotfix-version-137-0-1 https://docs.netskope.com/en/netskope-release-notes-hotfix-version-137-0-1 Mon, 04 May 2026 00:00:00 GMT Netskope Hotfix 137.0.1 adds external browser auth on Windows, iOS log collection, Device Tags for macOS/Linux/Android, ChromeOS 147 support, DEMAgent service with BETA flag, • Adds `External Browser` authentication option in Netskope Client for Windows to use the default system browser instead of WebView2 • Adds iOS log collection feature letting administrators export diagnostic logs directly from the app during enrollment failures or config delays • Adds User Coaching notifications on Netskope Client for iOS, allowing real-time policy actions (Allow/Block/Report) via in-app prompts • Extends `Device Tags` support to macOS, Linux, and Android platforms, enabling tag-based steering policies and device classification rules • Adds ChromeOS 147 support in Netskope Client version 137.0.1 • Installs the `DEMAgent` service on Windows when the `DEMAgent` BETA flag is active • Introduces the `stAgentSvcMon` service monitor to automatically restart the `stAgentSVC` agent service every 60 seconds if it stops Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/netskope-digital-experience-management-release-notes-for-may-2026 https://docs.netskope.com/en/netskope-digital-experience-management-release-notes-for-may-2026 Fri, 01 May 2026 00:00:00 GMT DEM adds User Experience RCA for any score from 0-100 and fixes zoom on collapsed sections • Users can now run User Experience RCA for any score from 0–100, improving analysis flexibility in the User Details experience. • The zoom in feature now correctly expands and renders all sections regardless of their collapsed state in the DEM User Details page. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/netskope-cloud-exchange-release-notes-version-6-1-0 https://docs.netskope.com/en/netskope-cloud-exchange-release-notes-version-6-1-0 Tue, 28 Apr 2026 00:00:00 GMT Netskope Cloud Exchange 6.1 adds Azure Key Vault support, CTE Destination Profiles, risk stats, and EDM IoC filtering. • Adds `Azure Key Vault` as a supported secrets manager alongside HashiCorp Key Vault for connector credential storage • Adds `Destination Profile` support to the Netskope Cloud Threat Exchange (CTE) plugin for managing configurable network targets • Adds Normalization options in the Risk Exchange Schema Editor to control field value transformation during ingestion • Adds risk score/context statistics display in the Risk Exchange Dashboard • Adds bi-directional ticket creation and update workflows in the Netskope CTO plugin with incident resolution back to the Netskope tenant • Adds relative format filtering (days, hours, minutes) for expired IoCs in the CTE Module • Adds support for custom delimiters (comma, pipe, semi-colon) in the EDM Module • Adds a retry mechanism for 429 errors in EDM hash upload with up to 5 retries and 5-second delays • Adds UI functionality to regenerate expired SSL certificates • Adds ability to generate and download diagnostic logs from the Cloud Exchange UI • Adds `Type` field to diagnostic file Cloud Exchange Platform logs Breaking changes: • Removed support for RHEL 8.x operating systems, making RHEL 9.5 the minimum supported version for Cloud Exchange deployments. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/new-features-and-enhancements-april-23-2026 https://docs.netskope.com/en/new-features-and-enhancements-april-23-2026 Thu, 23 Apr 2026 00:00:00 GMT Netskope adds AI Gateway Analytics dashboard and AI Gateway Events data collection for governing LLM traffic. • Adds the `AI Gateway Dashboard` under `Advanced Analytics` to provide visibility into traffic to AI agents and LLMs through deployed AI Gateways. • Makes `AI Gateway Events` data collection available for building and customizing dashboards via `Advanced Analytics > Netskope Library`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/netskope-release-notes-version-136-1-0 https://docs.netskope.com/en/netskope-release-notes-version-136-1-0 Mon, 20 Apr 2026 00:00:00 GMT Netskope v136.1.0 introduces AI Security Ops Agent, Next Gen API DLP Owner support for Jira/GitHub, and NewEdge Express Connect. • Adds Netskope AI Security Ops Agent to automate case creation, investigation, and response workflows for DLP incidents • Enables Owner attribute policy definition for Atlassian Jira and GitHub in Next Generation API Data Protection • Releases NewEdge Express Connect as a licensed capability to steer up to 10 Gbps over dedicated physical circuits Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/netskope-private-access-release-notes-version-136-0 https://docs.netskope.com/en/netskope-private-access-release-notes-version-136-0 Fri, 17 Apr 2026 00:00:00 GMT Netskope Private Access 136.0 adds threat protection, DLP, geo-fencing, multi-CA prelogon, and real-time policy updates • Adds support for applying Intrusion Prevention System (IPS) and Threat Protection Service (TSS) profiles to NPA policies for web traffic on ports 80 and 443 • Enables Data Loss Prevention (DLP) profile application directly to NPA policies for web applications accessed via the Netskope Client • Introduces source country as a policy criteria for NPA, allowing access restriction based on user geolocation resolved from Egress IP • Supports uploading multiple Certificate Authorities within a single client configuration for NPA Prelogon tunnels Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/new-features-and-enhancements-april-17-2026 https://docs.netskope.com/en/new-features-and-enhancements-april-17-2026 Fri, 17 Apr 2026 00:00:00 GMT Netskope Advanced Analytics adds 'AI Guardrails' dashboard and new alert schema fields for generative AI monitoring • Adds the 'AI Guardrails' out-of-the-box dashboard to the Advanced Analytics library for monitoring generative AI activity, policy enforcement, and threat detection. • Adds new data attributes to the AI Guardrails alert schema in Advanced Analytics: `Profile Name`, `Matched Category Name`, `Matched Category Level`, `Matched Prompt/Response`, `Matched Prompt/Response Level`, `Matched Keyword`, `OWASP Top 10 LLM`, `MITRE ATLAS`, and `Matched Content`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/virtual-appliance-release-notes-version-135-0-0 https://docs.netskope.com/en/virtual-appliance-release-notes-version-135-0-0 Tue, 31 Mar 2026 00:00:00 GMT Netskope Virtual Appliance 135.0.0 adds HTTP redirect policy action and increases syslog/swap limits • Adds `redirect` policy action to automatically forward users via standard HTTP 307 headers with dynamic URL construction. • Increases the maximum concurrent Syslog connections for OPLP to 1,024. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/dlp-on-demand-appliance-release-notes-version-135 https://docs.netskope.com/en/dlp-on-demand-appliance-release-notes-version-135 Mon, 30 Mar 2026 00:00:00 GMT DLP On Demand Appliance 135 adds authenticated explicit proxy support for DRM and GCP Image Sharing via UI. • Adds authenticated explicit proxy support for DRM requests, allowing them to pass through an authenticated explicit proxy • Adds GCP Machine Image assignment capability to the management UI Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/new-features-and-enhancements-march-19-2026 https://docs.netskope.com/en/new-features-and-enhancements-march-19-2026 Thu, 19 Mar 2026 00:00:00 GMT New Enterprise Browser usage dashboards and enhanced Device Client data collection with steering/config fields • Adds 'Enterprise Browser Usage Monitoring' dashboard to Netskope Library for visibility into user onboarding, app count, and traffic volume • Adds 'Enterprise Browser Usage Monitoring – Risk & Control' dashboard to Netskope Library for DLP alerts, cloud threats, and suspicious behavior in Enterprise Browser • Adds 'Steering Configuration' field to the Device Client Overview dashboard widget showing how traffic is steered to Netskope • Adds 'Client Configuration' field to the Device Client Overview dashboard widget showing operational parameters for the Steering Client Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/netskope-private-access-release-notes-version-135-0 https://docs.netskope.com/en/netskope-private-access-release-notes-version-135-0 Wed, 11 Mar 2026 00:00:00 GMT Netskope Private Access v135 adds Steering Exception Bypasses and improves Local Broker selection. • Adds `Steering Exception Bypasses` for Private Apps to configure granular routing exceptions for specific IPs, subnets, domains, and hostnames • Improves `Local Broker Selection` with optimal low-latency auto-reconnection support Breaking changes: • The Publisher wizard no longer automatically executes after SSH login for newly deployed Publishers; administrators must run `sudo ./npa_publisher_wizard` manually • The change to manual Publisher wizard execution also applies to all existing publishers in v135 that are below v133 Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/new-features-and-enhancements-march-5-2026 https://docs.netskope.com/en/new-features-and-enhancements-march-5-2026 Thu, 05 Mar 2026 00:00:00 GMT Netskope REST API v2 adds Service Account auth, Library access for new users, and default row limits. • Adds Service Account token support to REST API v2 endpoints for Advanced Analytics and Enhanced Reports • Allows users with no prior Netskope Advanced Analytics or Enhanced Reports usage to fetch data from the Netskope Library or group folders via REST API v2 • Sets the `customer number of rows` parameter default to 5000 and maximum to 10000 for REST API v2 Reporting Endpoints Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/netskope-release-notes-version-135-0-0 https://docs.netskope.com/en/netskope-release-notes-version-135-0-0 Mon, 02 Mar 2026 00:00:00 GMT New Netskope 135.0 features: Agentic Broker (MCP), AI Guardrails/Red Teaming, Dest Profiles API, RBI v2 API, Owner attrs, Steganography DLP • Agentic Broker delivers visibility, audit logs, and header-based detection/blocking for Model Context Protocol (MCP) communications. • AI Guardrails provides prompt and response content moderation and protection against AI threats like prompt injection and jailbreaking. • New 'AI Red Teaming' product enables adversarial attack simulation against LLMs to identify safety gaps. • Behavior Analytics adds Insider Threat detections for command-and-control callbacks using the Advanced UEBA ML engine. • Adds new REST API v2 GET endpoints for Application Instances (`/api/v2/profiles/app-instances`) and Constraint Profiles (`/api/v2/profiles/constraint-profiles`). • Generative AI risk attributes are now computed in the Cloud Confidence Index (CCI) score for cloud apps. • Introduces Steganography detection via ML classification to identify images containing hidden payloads in DLP. • Adds India TAN, UAN, and Voter ID as new predefined entities for Data Loss Prevention. • Enterprise Browser supports granular site-specific configuration for 8 features with up to 128 URL pattern exceptions per setting. • Enterprise Browser Security Configuration Policies support targeting by User, User Groups, or Organizational Units (OUs) via `Move Tool` priority logic. • New API v2 endpoints for Enterprise Browser policy management: `/configurationpolicies` and `/api/v2/nsbrowser/configurationpolicies`. • Netskope Client Steering supports real-time protection policies using 'Enterprise Browser' as an access method with Device Classification criteria. • Endpoint DLP (EPDLP) can force Microsoft Edge/Google Chrome PrintPreview by default, configurable via tenant settings `ForceChromePrintPreview` and `ForceEdgePrintPreview`. • Forensics adds a Manager Approval Workflow for out-of-band DLP incidents with instant email notifications. • Log Streaming introduces granular data collection type filters to selectively stream Alerts, Events, or Incidents. • New 'Destination Profile Object' replaces URL Lists in NG SWG/CFW policies with flexible matching options. • Adds SSL Do Not Decrypt (DND) policy evaluation for UCI scores using the feature flag `ssl_dnd_evaluate_uci`. • Next Generation API Data Protection adds support for Smartsheet, dedicated GitHub activity alerts/dashboard, and Purview Data Classification Insights in the M365 Copilot dashboard. • Next Gen API Data Protection 'Owner' attribute policy support extends to Atlassian Confluence, Box, Cisco Webex, Dropbox, Microsoft Copilot, M365 Teams, Slack Enterprise, Smartsheet, Workday, and Zoom. • Netskope Client Steering supports Zone Selection based on User Identity for the China Elite zone. • NG SWG adds support for PQC key-exchange algorithms including `X25519MLKEM768` for quantum-resistant encrypted traffic. • Remote Browser Isolation (RBI) introduces v2 REST API templates, enhanced clipboard with image copy/paste support, and HTML-based branded notifications using dynamic variables like `{{USER_URL}}`. • SSPM adds discovery and risk scoring for third-party apps in Zoom. • Threat Protection introduces network traffic-based beacon detection for new/unknown malware without signatures. • User Management UI revamp consolidates user management into a unified page with customizable columns and direct group membership management. Breaking changes: • The `addonman` SCIM API endpoints are deprecated starting in release 135.0; requests to these v1 endpoints will return error code 500. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/netskope-digital-experience-management-release-notes-for-march-2026 https://docs.netskope.com/en/netskope-digital-experience-management-release-notes-for-march-2026 Sun, 01 Mar 2026 00:00:00 GMT New DEM Insights page, DEM Data Intelligence Agent with conversational AI, BETA Enterprise API, and expanded alert configurations. • Adds the new `DEM Data Intelligence Agent` which integrates LLMs to transform telemetry into actionable insights via a conversational interface • Introduces the new `Insights` page providing a unified 360-degree view of digital health with a `Global Insights Map`, `Comprehensive Filtering`, and targeted widgets • Enables `RBAC Support` for the `Insights` page, configurable under `Settings > Administration > Roles` within Digital Experience Management • Adds new `TTFB` alert options (`2000ms`, `2500ms`, `3000ms`, `3500ms`, `4000ms`) for site-based application performance alerts • Increases the `site selection limit` for DEM site-based alert configurations from 10 to 100 sites • Launches DEM Enterprise API (BETA) providing programmatic access to critical DEM data • Expands `User Experience Score` alert conditions to support additional configuration options for score, number of impacted users, and time duration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/ai-security-ops-dlp-agent-release-notes-version-136-1 https://docs.netskope.com/en/ai-security-ops-dlp-agent-release-notes-version-136-1 Sun, 01 Mar 2026 00:00:00 GMT Launch of Netskope AI Security Ops Agent for automated DLP incident triaging and response • New 'Netskope AI Security Ops Agent' service that automates creation of high-priority Cases and grouped Views from DLP incidents to shift focus to investigation • Assisted Investigation capability that automatically gathers, enriches, and ties together context from the Netskope platform and external systems to provide verdicts and recommendations • End-to-End Response Workflows with Triage, Investigate, and Respond stages, including agent-triggered response actions to reduce Mean Time to Resolution Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/ai-gateway-release-notes-version-1-2 https://docs.netskope.com/en/ai-gateway-release-notes-version-1-2 Sun, 01 Mar 2026 00:00:00 GMT Netskope AI Gateway v1.2 introduces custom rate limit API responses and multi-tenant license enforcement. • Allows defining specific response behaviors when a rate limit threshold is reached via the AI Gateway MP API • Introduces License Management that enforces maximum gateway count based on purchased licenses • Sets default capacity of 10,000 API calls per gateway; exceeding this disables policy evaluation and bypasses traffic Breaking changes: • Netskope no longer supports 36-CPU / 72GB appliance deployments • Renamed 'Configure AI Services' to 'Configure Content Inspection Services' in the Configuration Wizard UI • Renamed 'LLM Guardrails Service' to 'AI Guardrails Service' in the Configuration Wizard UI Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/netskope-adapter-release-notes-215-254-18-1 https://docs.netskope.com/en/netskope-adapter-release-notes-215-254-18-1 Wed, 25 Feb 2026 00:00:00 GMT Netskope Adapter 215.254.18.1 adds AD invocationID verification and `0x4` flag for stale membership correction • Adds verification of the invocationID in the Active Directory importer with logging on failure to ensure correct incremental sync state • Introduces the `0x4` flag to remove stale group references from `datastore_v2.json` detected during AD V2 incremental queries • Changes default log level for a subset of ADImporterV2 logs to WARNING, reducing verbosity without requiring Debug mode Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/netskope-release-notes-hotfix-version-134-0-5 https://docs.netskope.com/en/netskope-release-notes-hotfix-version-134-0-5 Sun, 15 Feb 2026 00:00:00 GMT Netskope Hotfix 134.0.5 adds device tag-based steering/config rules and x86_64 ChromeOS client support • Adds device tags to steering policies and device classification rules for Windows and iOS clients. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://community.netskope.com/product-updates/netskope-cloud-134-0-0-documentation-available-now-8475 https://community.netskope.com/product-updates/netskope-cloud-134-0-0-documentation-available-now-8475 Wed, 04 Feb 2026 00:00:00 GMT Netskope R134 adds SSPM Discover & Risk Score for 3rd-party apps, deferred policy actions, and a threat hunting module. • Adds `SSPM Discover` with `Risk Score` capability to evaluate third-party apps in GitHub • Introduces `Deferred Policy Action` feature within Next Generation API Data Protection for Enterprise Browser • Includes new `Threat Hunting Module` for SaaS Threat Protection Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/virtual-appliance-release-notes-version-132-0-1 https://docs.netskope.com/en/virtual-appliance-release-notes-version-132-0-1 Wed, 04 Feb 2026 00:00:00 GMT Version 132.0.1 of Netskope Virtual Appliance introduces a new CLI command for DNS cache configuration and deprecates EDR support while fixing several upgrade and status reporting issues. • Version 132.0.1 of Netskope Virtual Appliance introduces a new CLI command for DNS cache configuration and deprecates EDR support while fixing several upgrade and status reporting issues. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/netskope-release-notes-version-134-0-0 https://docs.netskope.com/en/netskope-release-notes-version-134-0-0 Mon, 02 Feb 2026 00:00:00 GMT Netskope 134.0.0 adds API v2, RBI Cloud Storage APIs, CFW Service Objects, SSPM rules, and more • Adds `x-netskope-generate-incidents` and `x-netskope-generate-alerts` request headers to `/inspections/jobs` and `/inspections` APIs to control incident generation for DLP On Demand. • Adds `GET /cloudstorage`, `PATCH /cloudstorage`, `POST /cloudstorage/default`, and `POST /cloudstorage/invalidate` REST endpoints for programmatic management of RBI Cloud Storage. • Introduces `Service Objects` and `Destination Profiles` as the new model for Cloud Firewall policy configuration, decoupling protocols/ports from destinations. • Adds 41 new SSPM predefined rules covering AzureAD, GitHub, Microsoft 365, Salesforce, MITRE ATT&CK, and Security Domains categories. • Adds `{{cs-host}}` and `{{x-cs-uri-path}}` dynamic variables for constructing native HTTP 307 redirect destination URLs in NG SWG policies. • Enables `Owner` attribute support in Next Generation API Data Protection policy definitions for Microsoft 365 OneDrive files. • Adds `--azure-log-level` CLI option to Cloud TAP Stitcher for controlling Azure SDK log verbosity. • Enables discovery and risk scoring of 3rd Party Apps in monitored GitHub instances within SSPM. Breaking changes: • Existing API v1 endpoints for Custom Categories are blocked for new tenants and existing tenants that completed the migration, returning an error instead. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/netskope-digital-experience-management-release-notes-for-february-2026 https://docs.netskope.com/en/netskope-digital-experience-management-release-notes-for-february-2026 Sun, 01 Feb 2026 00:00:00 GMT DEM Alerting adds Google Chat webhook support; alerting workflow UI moves to contextual side panels. • Adds Google Chat as a Webhook receiver for Alert notifications in DEM Alerting. • Moves resource configuration workflows (Create and Edit) from standalone pages to contextual side panels. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/ai-gateway-release-notes-version-1-1 https://docs.netskope.com/en/ai-gateway-release-notes-version-1-1 Sun, 01 Feb 2026 00:00:00 GMT AI Gateway v1.1 drops mandatory tenant ID header, adds custom rate limit responses via MP API and hides advanced TUI options post-enrollment. • Removes the mandatory `x-ns-tenant-id` HTTP header requirement; requests now only need `x-ns-aig-apikey` • Adds customizable rate-limited response status codes and messages via the AI Gateway Management Plane (MP) API • Dynamically hides advanced configuration sections in the AIG-CLI TUI until enrollment is complete Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/netskope-release-notes-hotfix-version-133-1-0 https://docs.netskope.com/en/netskope-release-notes-hotfix-version-133-1-0 Thu, 15 Jan 2026 00:00:00 GMT Enterprise Browser disables Google AI by default; Patient Zero notifications add multilingual support • Sets the default Enterprise Browser policy to disable Google AI features, tightening privacy and security out-of-the-box. • Adds German, Spanish, French, Italian, Japanese, Chinese, Korean, Portuguese, and Brazilian language support for Patient Zero user notifications in Netskope Secure Web Gateway. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/new-features-and-enhancements-december-18-2025 https://docs.netskope.com/en/new-features-and-enhancements-december-18-2025 Thu, 18 Dec 2025 00:00:00 GMT Adds 'Malsite Severity' attribute to Alerts data collection for Advanced Analytics consistency • Adds the `Malsite Severity` attribute to Alert data collection for consistent severity reporting across Advanced Analytics and Skope IT alerts. Breaking changes: • The previous alert attribute is renamed to Malsite Severity (Deprecated) and will be retired, requiring manual replacement in Personal or Group dashboards. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope https://docs.netskope.com/en/netskope-private-access-release-notes-version-133-0 https://docs.netskope.com/en/netskope-private-access-release-notes-version-133-0 Wed, 10 Dec 2025 00:00:00 GMT NPA 133 adds source IP egress policy criteria, per-app periodic re-auth, and mixed content handling in Enterprise Browser • `pop_name` field now appears in Network Events generated from Local Broker to identify the Point of Presence. • Private App settings gain a per-application control for Mixed Content rendering in Enterprise Browser. • Policy engine now accepts Source IP (Egress IP) as a criteria for NPA applications steered via the Client access method. • New `Per-App Authentication` capability allows defining timer-based re-authentication requirements based on source and destination criteria. Breaking changes: • The tenant user interface now restricts changes to the Local Broker name after the initial configuration save. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/netskope