https://cybertoolchain.io/tools/pangea New releases and features in Pangea, tracked by The Cyber Toolchain. en Thu, 01 May 2025 16:00:00 GMT https://pangea.cloud/docs/changelog/product-updates-05-01-2025 https://pangea.cloud/docs/changelog/product-updates-05-01-2025 Thu, 01 May 2025 16:00:00 GMT Pangea GA releases AI Guard/Prompt Guard, new Multipass integrations, ABAC/Expiring Tuples in AuthZ, and Groups/OAuth scopes in AuthN. • Open-sources a test harness for Prompt Guard supporting JSON, CSV, and text inputs to evaluate detection accuracy metrics. • Releases AI Guard and Prompt Guard as Generally Available (GA) services for securing AI applications against malicious content and injection attacks. • Adds Pangea Multipass support for Google Drive, Confluence, Slack, and Github to normalize authorization interfaces across systems. • Introduces ABAC capabilities in AuthZ, enabling fine-grained access policies based on user, resource, and environment attributes evaluated at runtime. • Enables inheritance of parent resource permissions to child resources in AuthZ to reduce permission management overhead. • Adds `expires_at` property support in AuthZ for expiring tuples, allowing time-limited actor access to resources. • Integrates Groups into AuthN to allow managing user permissions collectively at the authentication layer. • Allows creation of custom OAuth scopes and claims in AuthN clients for specific permission grants. • Adds `impossible travel` settings in AuthN to block logins from physically distant locations within short timeframes. • Releases an early-access alpha of Pangea Private Cloud for hosting control and data planes within customer environments. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pangea https://pangea.cloud/docs/changelog/product-updates-08-13-2024 https://pangea.cloud/docs/changelog/product-updates-08-13-2024 Tue, 13 Aug 2024 16:00:00 GMT Pangea adds non-email usernames, password expiration APIs, custom profile fields, Vault FPE, Vercel sync CLI subcommand, and Redact unredaction endpoint • Adds `non-email username` registration capability to allow alphanumeric usernames instead of requiring email addresses. • Adds the ability for Admins to expire passwords individually or at scale via the Pangea User Console or AuthN User API, forcing a new password at next login. • Adds Custom Profile Fields to user profiles, allowing specification of optional/required fields and registration presentation with automatic detection during Import Users. • Adds Format Preserving Encryption (FPE) support in Vault using 128-bit and 256-bit FF3-1 NIST approved algorithms to preserve character formatting of encrypted data. • Adds `pangea sync vercel` CLI subcommand to sync environment variables from local .env files to Vercel, supporting flags like `--branch`, `--project`, `--target`, and `--token`. • Adds FPE as a redaction method in Redact service and introduces the new `unredact` endpoint to recover original text using FPE context for Redact and Secure Audit Log records. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pangea https://pangea.cloud/docs/changelog/product-updates-05-30-2024 https://pangea.cloud/docs/changelog/product-updates-05-30-2024 Thu, 30 May 2024 16:00:00 GMT Pangea May 30 updates add AuthZ GA, Remember My Device, Audit Log export/config cloning, GitHub Copilot extension, and Postman collections. • Adds `@pangea-cyber` GitHub Copilot extension in limited beta for secure app development assistance • Makes Pangea AuthZ service Generally Available to centralize authorization policies via API with RBAC and Relationship-based Access Control support • Adds "Remember My Device" capability to skip secondary MFA factors, with IP binding option to mitigate cookie theft • Adds Config Cloning feature in Secure Audit Log for creating new configurations based on existing ones • Adds async export API for Secure Audit Log records with `download_results` API for retrieval • Makes Pangea Public Collection browsable on Postman, generated from OpenAPI definitions Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pangea https://pangea.cloud/docs/changelog/product-updates-03-26-2024 https://pangea.cloud/docs/changelog/product-updates-03-26-2024 Tue, 26 Mar 2024 16:00:00 GMT Pangea introduces Secure Share Beta with API-driven file sharing, Vault-managed encryption, and optional malware scanning integration. • Adds `Secure Share` beta service enabling encrypted file sharing via API • Introduces `Vault-managed keys` support for custom key management in Secure Share • Enables password-only encryption for individual files where the password is never stored server-side • Adds capability to create share-links authenticated via email, SMS OTP, or password • Adds optional file type and size restriction controls for uploaded content • Integrates `Secure Share` with `File Scan` to block storage of malware-detected files Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pangea https://pangea.cloud/docs/changelog/product-updates-02-29-2024 https://pangea.cloud/docs/changelog/product-updates-02-29-2024 Thu, 29 Feb 2024 16:00:00 GMT Pangea adds passkeys GA, hashed password user import, and integrated audit logging for AuthN and Vault services • Enables general availability of WebAuthn / Passkeys for all accounts • Adds `Hashed Password Import` capability to import users with existing passwords for seamless onboarding • Extends AuthN service with integrated service auditing via Secure Audit Service to log login attempts, MFA options, and results • Extends Vault service with integrated service auditing via Secure Audit Service to log configuration changes, secret/key rotations, and deletions Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pangea https://pangea.cloud/docs/changelog/product-updates-02-14-2024 https://pangea.cloud/docs/changelog/product-updates-02-14-2024 Wed, 14 Feb 2024 16:00:00 GMT Pangea adds SAML SSO authentication, automatic IDP configuration via metadata URL, and CSV user import capabilities. • Adds `SAML` as an authentication option for Single Sign-On (SSO) with enterprise Identity Providers • Adds automatic configuration capability using the Identity Provider's SAML Metadata Interoperability URL to retrieve connection details and generate settings • Adds User Import capabilities via Pangea Console (`AuthN > Users > New`) and the AuthN User Import API for migrating users from external stores via CSV files (up to 10MB) • Adds column mapping functionality in the User Import flow to map CSV fields to Pangea profile fields Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pangea https://pangea.cloud/docs/changelog/product-updates-01-09-2024 https://pangea.cloud/docs/changelog/product-updates-01-09-2024 Tue, 09 Jan 2024 16:00:00 GMT Pangea Vault adds quantum-safe signing algorithms, Encrypt-Structured API, and Intelligence bulk queries • Adds `ED25519-DILITHIUM2-BETA`, `ED448-DILITHIUM3-BETA`, and ten `SPHINCSPLUS` algorithms to Vault for quantum-safe cryptographic signing. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pangea https://pangea.cloud/docs/changelog/product-updates-11-16-2023 https://pangea.cloud/docs/changelog/product-updates-11-16-2023 Thu, 16 Nov 2023 16:00:00 GMT Pangea adds GA Whois API, Vault folder-level settings inheritance, and active users widget. • Adds the `/whois` endpoint to extract historical domain information for detecting new or short-lived domains associated with scams, malware, or phishing • Enables folder-level settings inheritance in Vault so rotation policies and other configurations apply recursively to all items within a folder • Extends the Vault `POST /update` endpoint to accept the `inherited` keyword for settings and adds the `inherited_settings` map to `GET /get` responses to indicate setting sources • Adds an active users widget on the Authentication service landing page in the console with a time picker to filter MAU data Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pangea https://pangea.cloud/docs/changelog/product-updates-10-25-2023 https://pangea.cloud/docs/changelog/product-updates-10-25-2023 Wed, 25 Oct 2023 16:00:00 GMT Pangea GA's AuthN service with flow APIs and new Domain Intel Whois API • AuthN service reaches General Availability, enabling production multi-factor authentication (MFA), hosted login pages, custom domains, social auth, and customizable branding. • Introduces Login Flow Builder UI to define and prioritize MFA combinations based on method strength. • Exposes Login Flow APIs allowing developers to build custom, stateful authentication experiences in any tech stack. • Adds 'Agreements and Disclaimers' section in AuthN General Settings to require EULA or Privacy Policy acceptance with versioning support. • Implements Domain Access List in AuthN Security Controls to permit or deny registrations based on the user's email domain. • Introduces Whois endpoint in Domain Intel service to extract historical domain information via a new API. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pangea https://pangea.cloud/docs/changelog/product-updates-09-15-2023 https://pangea.cloud/docs/changelog/product-updates-09-15-2023 Fri, 15 Sep 2023 16:00:00 GMT File Scan beta, Secure Audit Log forward to Splunk, Redact ruleset UI/API behavior updates • File Scan service enters Beta, enabling malware scanning via CrowdStrike or ReversingLabs providers • Secure Audit Log service supports forwarding logs to Splunk as the first external data store destination • Redact API accepts incremental `rules` and `rulesets` parameters to extend baseline configuration from the console • Redact Ruleset interface adds a 'View Enabled Rules' view to list enabled rules without expanding individual sets Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pangea https://pangea.cloud/docs/changelog/product-updates-07-07-2023 https://pangea.cloud/docs/changelog/product-updates-07-07-2023 Fri, 07 Jul 2023 16:00:00 GMT Pangea Secure Audit Log introduces custom schemas, configurable standard redact rules, and SDK v2 with breaking API changes • Adds `Custom Schemas` support to Secure Audit Log, allowing users to add or remove fields and adjust field settings (required/optional, visibility) for compliance use cases. • Enables modification of redact method (replace, mask, partial mask, detect only, or hash) and replacement value on standard redact rules, such as the SSN rule. Breaking changes: • SDK v2 introduces breaking changes; users must update their code to support the new required parameters for the `/log` call if they install v2 of the SDK. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pangea https://pangea.cloud/docs/changelog/product-updates-06-23-2023 https://pangea.cloud/docs/changelog/product-updates-06-23-2023 Fri, 23 Jun 2023 16:00:00 GMT Pangea adds redaction hashing via new hash parameter, multi-config audit logs, Team CYMRU IP Intel GA, and Java SDK • Adds `hash` generation to Redact API for creating salted hashes of redacted text stored in Vault • Adds support for multiple Secure Audit Log configurations within a single Project via config ID parameter • Makes Team CYMRU IP Intel data source generally available with 10-category reputation and risk scoring • Releases Java SDK with full support for all Pangea services Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pangea https://pangea.cloud/docs/changelog/product-updates-06-02-2023 https://pangea.cloud/docs/changelog/product-updates-06-02-2023 Fri, 02 Jun 2023 16:00:00 GMT Pangea adds Team CYMRU IP Intel support, User Intel GA, tag-based vault listing, AuthN IP allow lists, and Redact rule testing.54 characters • Adds `Team CYMRU` as a provider for the IP Intel reputation endpoint to access threat intelligence data. • Promotes the User Intel service to General Availability (GA) for production usage. • Adds tag-based search capability to the `/v1/list` endpoint in the Vault service. • Enables `IP allow lists` in the AuthN service to restrict login access by IP addresses or subnets. • Adds a rule testing feature in the Redact console UI to validate custom rules against sample input. • Adds insight metrics for detections and redactions directly on service dashboards. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pangea https://pangea.cloud/docs/changelog/product-updates-05-17-2023 https://pangea.cloud/docs/changelog/product-updates-05-17-2023 Mon, 01 May 2023 00:00:00 GMT Pangea IP Intel sub-services GA, Vault adds new encryption algorithms, console onboarding and dashboard rework • IP Intel Geolocate, Proxy, VPN, and Domain sub-services are Generally Available for production use • Vault service adds AES256-GCM symmetric encryption, EC_SIGN_P256_SHA256/EC_SIGN_P384_SHA384/EC_SIGN_SECP256K1_SHA256 asymmetric signing, RSA-PSS signing variants, and multiple RSA-OAEP/RSA-PPS asymmetric encryption options • Console introduces a new onboarding flow for first-time organizations to quickly execute APIs • Console dashboard is reorganized and simplified for easier navigation • AuthN OTP submission now auto-submits the code after the last digit is entered • Secure Audit Log viewer displays signature verification status when log signing is enabled Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pangea https://pangea.cloud/docs/changelog/authn-beta https://pangea.cloud/docs/changelog/authn-beta Fri, 21 Apr 2023 00:00:00 GMT Pangea introduces AuthN service in beta with social login, MFA, hosted pages, user pool APIs, and Python/Node SDKs. • Adds `Support for multiple authentication methods` including Social (OAuth) providers Google and Github, and email/password auth with password complexity options • Adds Multi-factor authentication (MFA) support via Authenticator app, Email code (6 digit), and SMS code (6 digit) • Adds `Hosted login pages` feature requiring only a redirect URL for post-auth return • Adds `Customized branding` controls in the console for Logo image, Logo size, Favicon, Background image, and Support email • Adds `Advanced AuthN settings` including selection between opaque session tokens (default) or JSON web tokens (JWTs), adjustable token lifetimes, signup enable/disable, CAPTCHA verification, and Email verification • Adds `Customized Messaging` for flows including email verification, email invitation, password reset, and MFA email • Adds `User pool management` via the Users section of the console and API operations (create user, delete user, changing passwords, invitations) • Adds `Invitation management` via console and API to view target user email, inviter, status, creation time, and expiration time, and to revoke invitations • Adds SDK Support for Python and NodeJS Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pangea