Pangea

No entries match these filters. Clear filters

1. Product Updates - May 1st, 2025 May 1, 2025 · release notes

   Pangea GA releases AI Guard/Prompt Guard, new Multipass integrations, ABACABACAttribute-based access control, where rules evaluate facts about the user, resource and request. Access can depend on conditions such as department, data sensitivity or device status./Expiring Tuples in AuthZ, and Groups/OAuth scopes in AuthN.

   • Open-sources a test harness for Prompt Guard supporting JSON, CSV, and text inputs to evaluate detection accuracy metrics.
   • Releases AI Guard and Prompt Guard as Generally Available (GA) services for securing AI applications against malicious content and injection attacks.
   • Adds Pangea Multipass support for Google Drive, Confluence, Slack, and Github to normalize authorization interfaces across systems.
   • Introduces ABAC capabilities in AuthZ, enabling fine-grained access policies based on user, resource, and environment attributes evaluated at runtime.
   • Enables inheritance of parent resource permissions to child resources in AuthZ to reduce permission management overhead.

   +5 more show less

   • Adds expires_at property support in AuthZ for expiring tuples, allowing time-limited actor access to resources.
   • Integrates Groups into AuthN to allow managing user permissions collectively at the authentication layer.
   • Allows creation of custom OAuth scopes and claims in AuthN clients for specific permission grants.
   • Adds impossible travel settings in AuthN to block logins from physically distant locations within short timeframes.
   • Releases an early-access alpha of Pangea Private Cloud for hosting control and data planes within customer environments.

   10 details in Everything

2. Product Updates - Aug 13, 2024 Aug 13, 2024 · release notes

   Pangea adds non-email usernames, password expiration APIs, custom profile fields, Vault FPEFPEFormat-Preserving Encryption, a cipher mode that encrypts data into ciphertext of the same format and length as the plaintext, letting tools tokenize sensitive fields without changing downstream schema or validation logic., Vercel sync CLI subcommand, and Redact unredaction endpoint

   • Adds non-email username registration capability to allow alphanumeric usernames instead of requiring email addresses.
   • Adds the ability for Admins to expire passwords individually or at scale via the Pangea User Console or AuthN User API, forcing a new password at next login.
   • Adds Custom Profile Fields to user profiles, allowing specification of optional/required fields and registration presentation with automatic detection during Import Users.
   • Adds Format Preserving Encryption (FPE) support in Vault using 128-bit and 256-bit FF3-1 NIST approved algorithms to preserve character formatting of encrypted data.
   • Adds pangea sync vercel CLI subcommand to sync environment variables from local .env files to Vercel, supporting flags like --branch, --project, --target, and --token.

   +1 more show less

   • Adds FPE as a redaction method in Redact service and introduces the new unredact endpoint to recover original text using FPE context for Redact and Secure Audit Log records.

   6 details in Everything

3. Product Updates - May 30, 2024 May 30, 2024 · release notes

   Pangea May 30 updates add AuthZ GA, Remember My Device, Audit Log export/config cloning, GitHub Copilot extension, and Postman collections.

   • Adds @pangea-cyber GitHub Copilot extension in limited beta for secure app development assistance
   • Makes Pangea AuthZ service Generally Available to centralize authorization policies via API with RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. and Relationship-based Access Control support
   • Adds Remember My Device capability to skip secondary MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. factors, with IP binding option to mitigate cookie theft
   • Adds Config Cloning feature in Secure Audit Log for creating new configurations based on existing ones
   • Adds async export API for Secure Audit Log records with download_results API for retrieval

   +1 more show less

   • Makes Pangea Public Collection browsable on Postman, generated from OpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth. definitions

   6 details in Everything

4. Product Updates - March 26th, 2024 Mar 26, 2024 · release notes

   Pangea introduces Secure Share Beta with API-driven file sharing, Vault-managed encryption, and optional malware scanning integration.

   • Adds Secure Share beta service enabling encrypted file sharing via API
   • Introduces Vault-managed keys support for custom key management in Secure Share
   • Enables password-only encryption for individual files where the password is never stored server-side
   • Adds capability to create share-links authenticated via email, SMSSMSShort Message Service, the protocol built into cellular networks for sending text messages between phones; cyber tools use it for alerting, two-factor authentication delivery, or phishing simulation over mobile channels. OTPOTPOne-time password: a short-lived numeric or alphanumeric code valid for a single authentication attempt, generated via TOTP or HOTP standards, giving cyber tools phishing-resistant second-factor verification without stored shared secrets., or password
   • Adds optional file type and size restriction controls for uploaded content

   +1 more show less

   • Integrates Secure Share with File Scan to block storage of malware-detected files

   6 details in Everything

5. Product Updates - February 29th, 2024 Feb 29, 2024 · release notes

   Pangea adds passkeyspasskeysPhishing-resistant sign-in credentials built on FIDO2/WebAuthn: the device holds a private key and proves possession instead of the user typing a password. They sync across a user's devices. GA, hashed password user import, and integrated audit logging for AuthN and Vault services

   • Enables general availability of WebAuthnWebAuthnA web standard that lets a browser prove possession of a passkey or hardware key to a website. It is the browser-facing part of FIDO2 sign-in. / Passkeys for all accounts
   • Adds Hashed Password Import capability to import users with existing passwords for seamless onboarding
   • Extends AuthN service with integrated service auditing via Secure Audit Service to log login attempts, MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. options, and results
   • Extends Vault service with integrated service auditing via Secure Audit Service to log configuration changes, secret/key rotations, and deletions

   4 details in Everything

6. Product Updates - February 14th, 2024 Feb 14, 2024 · release notes

   Pangea adds SAML SSOSAML SSOAn authentication protocol that lets a user log in once with an identity provider and access multiple services without re-entering credentials, by passing signed XML assertions between parties. authentication, automatic IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. configuration via metadata URL, and CSV user import capabilities.

   • Adds SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. as an authentication option for Single Sign-On (SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management.) with enterprise Identity Providers
   • Adds automatic configuration capability using the Identity Provider's SAML Metadata Interoperability URL to retrieve connection details and generate settings
   • Adds User Import capabilities via Pangea Console (AuthN > Users > New) and the AuthN User Import API for migrating users from external stores via CSV files (up to 10MB)
   • Adds column mapping functionality in the User Import flow to map CSV fields to Pangea profile fields

   4 details in Everything

7. Product Updates - January 09, 2024 Jan 9, 2024 · release notes

   Pangea Vault adds quantum-safequantum-safeCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. signing algorithms, Encrypt-Structured API, and Intelligence bulk queries

   • Adds ED25519-DILITHIUM2-BETA, ED448-DILITHIUM3-BETA, and ten SPHINCSPLUS algorithms to Vault for quantum-safe cryptographic signing.

   1 detail in Everything

8. Product Updates - November 16, 2023 Nov 16, 2023 · release notes

   Pangea adds GA Whois API, Vault folder-level settings inheritance, and active users widget.

   • Adds the /whois endpoint to extract historical domain information for detecting new or short-lived domains associated with scams, malware, or phishing
   • Enables folder-level settings inheritance in Vault so rotation policies and other configurations apply recursively to all items within a folder
   • Extends the Vault POST /update endpoint to accept the inherited keyword for settings and adds the inherited_settings map to GET /get responses to indicate setting sources
   • Adds an active users widget on the Authentication service landing page in the console with a time picker to filter MAU data

   4 details in Everything

9. Product Updates - Oct 25, 2023 Oct 25, 2023 · release notes

   Pangea GA's AuthN service with flow APIs and new Domain Intel Whois API

   • AuthN service reaches General Availability, enabling production multi-factor authenticationmulti-factor authenticationMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. (MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone.), hosted login pages, custom domains, social auth, and customizable branding.
   • Introduces Login Flow Builder UI to define and prioritize MFA combinations based on method strength.
   • Exposes Login Flow APIs allowing developers to build custom, stateful authentication experiences in any tech stack.
   • Adds Agreements and Disclaimers section in AuthN General Settings to require EULA or Privacy Policy acceptance with versioning support.
   • Implements Domain Access List in AuthN Security Controls to permit or deny registrations based on the user's email domain.

   +1 more show less

   • Introduces Whois endpoint in Domain Intel service to extract historical domain information via a new API.

   6 details in Everything

10. Product Updates - Sep 15, 2023 Sep 15, 2023 · release notes

    File Scan beta, Secure Audit Log forward to Splunk, Redact ruleset UI/API behavior updates

    • File Scan service enters Beta, enabling malware scanning via CrowdStrike or ReversingLabs providers
    • Secure Audit Log service supports forwarding logs to Splunk as the first external data store destination
    • Redact API accepts incremental rules and rulesets parameters to extend baseline configuration from the console
    • Redact Ruleset interface adds a View Enabled Rules view to list enabled rules without expanding individual sets

    4 details in Everything

11. Product Updates - July 7, 2023 Jul 7, 2023 · release notes

    Pangea Secure Audit Log introduces custom schemas, configurable standard redact rules, and SDK v2 with breaking API changes

    • Adds Custom Schemas support to Secure Audit Log, allowing users to add or remove fields and adjust field settings (required/optional, visibility) for compliance use cases.
    • Enables modification of redact method (replace, mask, partial mask, detect only, or hash) and replacement value on standard redact rules, such as the SSN rule.

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !SDK v2 introduces breaking changes; users must update their code to support the new required parameters for the /log call if they install v2 of the SDK.
12. Product Updates - June 23, 2023 Jun 23, 2023 · release notes

    Pangea adds redaction hashing via new hash parameter, multi-config audit logs, Team CYMRU IP Intel GA, and Java SDK

    • Adds hash generation to Redact API for creating salted hashes of redacted text stored in Vault
    • Adds support for multiple Secure Audit Log configurations within a single Project via config ID parameter
    • Makes Team CYMRU IP Intel data source generally available with 10-category reputation and risk scoring
    • Releases Java SDK with full support for all Pangea services

    4 details in Everything

13. Product Updates - June 2, 2023 Jun 2, 2023 · release notes

    Pangea adds Team CYMRU IP Intel support, User Intel GA, tag-based vault listing, AuthN IP allow lists, and Redact rule testing.54 characters

    • Adds Team CYMRU as a provider for the IP Intel reputation endpoint to access threat intelligence data.
    • Promotes the User Intel service to General Availability (GA) for production usage.
    • Adds tag-based search capability to the /v1/list endpoint in the Vault service.
    • Enables IP allow lists in the AuthN service to restrict login access by IP addresses or subnets.
    • Adds a rule testing feature in the Redact console UI to validate custom rules against sample input.

    +1 more show less

    • Adds insight metrics for detections and redactions directly on service dashboards.

    6 details in Everything

14. Product Updates - May 18, 2023 May 2023 · release notes

    Pangea IP Intel sub-services GA, Vault adds new encryption algorithms, console onboarding and dashboard rework

    • IP Intel Geolocate, Proxy, VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection., and Domain sub-services are Generally Available for production use
    • Vault service adds AES256-GCM symmetric encryption, EC_SIGN_P256_SHA256/EC_SIGN_P384_SHA384/EC_SIGN_SECP256K1_SHA256 asymmetric signing, RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it.-PSS signing variants, and multiple RSA-OAEP/RSA-PPS asymmetric encryption options
    • Console introduces a new onboarding flow for first-time organizations to quickly execute APIs
    • Console dashboard is reorganized and simplified for easier navigation
    • AuthN OTPOTPOne-time password: a short-lived numeric or alphanumeric code valid for a single authentication attempt, generated via TOTP or HOTP standards, giving cyber tools phishing-resistant second-factor verification without stored shared secrets. submission now auto-submits the code after the last digit is entered

    +1 more show less

    • Secure Audit Log viewer displays signature verification status when log signing is enabled

    6 details in Everything

15. AuthN is available in Beta Apr 21, 2023 · release notes

    Pangea introduces AuthN service in beta with social login, MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone., hosted pages, user pool APIs, and Python/Node SDKs.

    • Adds Support for multiple authentication methods including Social (OAuth) providers Google and Github, and email/password auth with password complexity options
    • Adds Multi-factor authenticationMulti-factor authenticationMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. (MFA) support via Authenticator app, Email code (6 digit), and SMSSMSShort Message Service, the protocol built into cellular networks for sending text messages between phones; cyber tools use it for alerting, two-factor authentication delivery, or phishing simulation over mobile channels. code (6 digit)
    • Adds Hosted login pages feature requiring only a redirect URL for post-auth return
    • Adds Customized branding controls in the console for Logo image, Logo size, Favicon, Background image, and Support email
    • Adds Advanced AuthN settings including selection between opaque session tokens (default) or JSON web tokens (JWTsJWTsJSON Web Tokens — an open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object. Cyber tools use them for stateless authentication without server-side session storage.), adjustable token lifetimes, signup enable/disable, CAPTCHA verification, and Email verification

    +4 more show less

    • Adds Customized Messaging for flows including email verification, email invitation, password reset, and MFA email
    • Adds User pool management via the Users section of the console and API operations (create user, delete user, changing passwords, invitations)
    • Adds Invitation management via console and API to view target user email, inviter, status, creation time, and expiration time, and to revoke invitations
    • Adds SDK Support for Python and NodeJS

    9 details in Everything