Twingate

No entries match these filters. Clear filters

1. announced Nov 3, 2026 · issue 130

   Twingate adds AI Usage Overview to Secure DNS analytics, showing which AI tools employees access across DNS-filtered devices⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ HOW TO FIND IT
   Discover which AI services employees are accessing across DNS-filtered devices and check for unfamiliar tools.
   📍In the Twingate Admin Console, go to Secure DNS › AI Usage Overview. Select a time window and profile, then review the Top AI Services list. Switch between Devices and Queries views to rank services by reach or volume.
   Investigate device-level activity for an unfamiliar AI service flagged in the overview by exporting a CSV for team follow-up.
   📍In the Twingate Admin Console, go to Secure DNS › AI Usage Overview. Expand the row for the service under investigation, then export device-level activity as a CSV.
   • Export device-level AI service activity as a CSV for follow-up investigation of unfamiliar or high-risk services.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Twingate adds an AI Usage Overview view inside Secure DNS analytics in the Admin Console, available to all DNS Filtering customers at no extra charge, showing which AI tools (including ChatGPT, Claude, Cursor, and Granola) employees access via DNS lookups.
   • The AI Usage Overview includes an AI Usage by Date chart showing daily AI service activity, an AI Exposure metric showing AI requests as a share of all DNS requests or the share of covered devices making AI requests, and a Top AI Services list rankable by Devices or Queries.
   • Expand any service row in the Top AI Services list to see the matched domains and per-domain request counts, and use the Days Active column to distinguish one-off access from recurring patterns.

   4 details in Everything

2. changelog Oct 20, 2026 · issue 114

   Twingate Privileged Access for Web Apps now supports HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate., eliminating browser warnings and second sign-ins for internal web apps.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Extends Privileged Access for Web Apps to support HTTPS, covering every leg of the user path to internal web apps — including public and private CAs — without per-app certificate management.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 detail in Everything

3. Privileged Access for Web Apps: HTTPS Oct 15, 2026 · issue 111

   Twingate Privileged Access for Web Apps now supports HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate., enabling end-to-end encrypted access to internal web apps without certificate warnings.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢
   • Extends Privileged Access for Web Apps to support HTTPS-served internal web apps, covering every leg of the user's path including the final hop to the origin.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Eliminates browser Not Secure warnings and secondary sign-in prompts for internal HTTPS web apps accessed through the Twingate tunnel.
   • Supports both public and private CAs for internal HTTPS web apps, with group-driven access control and no per-app certificate management required.
   • Extends Privileged Access for Web Apps to support HTTPS-served internal web apps, covering every leg of the user's path including the final hop to the origin.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   2 more in Everything

4. docs update Oct 8, 2026 · issue 097

   Twingate adds granular admin roles including Internet Security, Access Requests, and Billing-scoped permissions in the Admin Console.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢ ⤢ ⤢
5. Internet Security role Oct 7, 2026 · issue 098

   Twingate adds an Internet Security role for scoped DNS filtering and Exit Network management without full admin access.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢
6. changelog Sep 26, 2026 · issue 086

   Twingate: Expands each AI service entry in the AI Usage Overview to show matched domains and indicate whether activity is widespread or concentrated on specific devices.

   └──▷ HOW TO FIND IT
   Identify shadow AI tool usage across your fleet and export per-device data to drive policy discussions or license reviews.
   📍In the Twingate admin console, go to DNS Filtering › AI Usage Overview, review which AI services appear in DNS activity, expand a service to see its matched domains, then select Export CSV to download per-device activity data.
7. changelog Sep 25, 2026 · issue 085

   Twingate: Adds a per-device CSV export from the AI Usage Overview to support policy discussions and license reviews.

8. AI Usage Overview Sep 15, 2026 · issue 085

   Twingate DNS filtering gains an AI Usage Overview section to track AI service activity across devices, with per-device CSV export.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢
   └──▷ HOW TO FIND IT
   Identify which AI services employees are accessing and export a per-device breakdown to CSV for license review or policy discussions.
   📍In the Twingate console, go to DNS Filtering › AI Usage Overview, expand any AI service to view its matched domains, then select Export CSV to download the per-device activity report.
   • Adds an AI Usage Overview section to DNS filtering that surfaces which AI services appear in device DNS activity, with per-device CSV export for policy and license review follow-up.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 detail in Everything

9. AI Usage Overview Sep 15, 2026 · release notes

   New AI Usage Overview section in DNS filtering tracks AI service activity and exports per-device CSV

   • Adds an AI Usage Overview section to DNS filtering to show which AI services appear in device DNS activity

   1 detail in Everything

10. changelog Aug 16, 2026 · issue 047

    Twingate adds HTTP web app protection with JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store./header injection and a new Helpdesk admin role for scoped support access.

    • Twingate injects a JWT identifying the user plus custom headers carrying user and group attributes into requests to protected web apps, enabling integration with both legacy and modern apps without requiring re-authentication at the app layer.
    • Adds a Helpdesk role assignable to support staff, granting read-only access to select Admin Console areas plus scoped support actions: resetting MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone., verifying and unverifying devices, and managing trusted serial numbers.

    2 details in Everything

11. Privileged Access for Web Apps seen Aug 15, 2026 · issue 046

    Twingate Identity Firewall gains HTTP web app support with JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. and custom header injection for internal app protection.

    ⤢
    • Twingate Identity Firewall now supports HTTP web apps, enabling protection of internal web apps, data portals, CI/CD infrastructure, and AI-coded business apps.
    • Authenticates users at the Twingate layer — supporting MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone., JITJITA runtime compilation strategy where code is translated from an intermediate form to native machine instructions at execution time, giving tools the speed of compiled code without sacrificing dynamic flexibility. access, security policies, and access logging — so users reach internal web apps already authenticated.

    2 details in Everything

12. docs update Aug 14, 2026 · issue 045

    Twingate adds six distinct admin roles with scoped console access and a visible role badge in the Admin Console.

    ⤢ ⤢ ⤢ ⤢
    • Introduces six admin roles — DevOps, Helpdesk, Support, Access Reviewer, Billing, and (implied full) admin — each with scoped access to specific Admin Console pages and actions.
    • DevOps admins get access to the Network tab only, covering Resources, Connectors, Remote Networks, Group-to-Resource assignments, and Access Requests.
    • Support admins have access to all pages except Internet Security > Secure DNS and Internet Security > Client Configuration.
    • Billing admins are restricted to the Settings > Billing page only, covering plan changes and payment details.
    • DevOps, Helpdesk, Support, Access Reviewer, and Billing admins see a role badge next to the Twingate logo in the Admin Console; hovering over the badge surfaces details about their access level.

    +1 more show less

    • Restricted admins attempting to edit settings outside their role's scope are blocked and shown an inline error message.

    6 details in Everything

13. Helpdesk Admin Role seen Aug 14, 2026 · issue 045

    Twingate adds a Helpdesk Admin role giving support staff scoped read-only access and targeted user/device actions.

    ⤢
    • New Helpdesk role lets admins delegate support tasks — resetting MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone., verifying/unverifying devices, and managing trusted serial numbers — without granting full administrative access.
    • Helpdesk role holders receive read-only access to selected Admin Console areas, scoping their visibility to what is needed for troubleshooting.

    2 details in Everything

14. Privileged Access for Web Apps Aug 14, 2026 · release notes

    Twingate Identity Firewall now supports HTTP web apps with JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. and custom headers for privileged access.

15. Helpdesk Admin Role Aug 13, 2026 · release notes

    Twingate 2026-08-13 introduces a new Helpdesk Admin role for limited support access.

16. changelog Aug 8, 2026 · issue 039

    Twingate Admin Console gains resizable table columns with per-user persistence.

    • Admins can resize table column widths in the Admin Console by hovering over a column edge and dragging, with sizing saved per-user and a reset-to-default option available.

    1 detail in Everything

17. Admin Console Adjustable Column Widths Aug 5, 2026 · release notes

    Admin Console table columns are now resizable

    • Enables adjustable column widths in Admin Console tables via drag-and-drop

    1 detail in Everything

18. API key modification seen Jul 13, 2026 · issue 014

    Twingate API keys can now be renamed, have permissions modified, and be disabled/re-enabled after creation.

    ⤢
    └──▷ HOW TO FIND IT
    Temporarily pause an API key during an incident response without rotating credentials — re-enable it once the situation is resolved.
    📍In the Twingate Admin Console, go to Settings › API › API Keys, select the key, and toggle Disable/Enable or update its permissions.
    • Enables editing of existing API keys to rename them, update their permissions, or disable/enable them without generating new keys.

    1 detail in Everything

19. Authentication Audit Logs seen Jul 13, 2026 · issue 014

    Twingate adds Authentication Audit Logs with exportable success/failure events for logins, resource access, and MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone..

    ⤢
    • New Authentication Audit Logs surface per-event success and failure data for Client logins, Resource access attempts, and MFA setup.
    • Enables export and sync of authentication event data for SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. ingestion, compliance auditing, and troubleshooting workflows.

    2 details in Everything

20. Billing Admin Role seen Jul 13, 2026 · issue 014

    Twingate adds a Billing Admin role that scopes users to plan and payment management only.

    ⤢
    └──▷ HOW TO FIND IT
    Restrict a finance team member to billing management only, keeping them out of network and access settings.
    📍In the Admin Console, go to Team › Users, select the user, and assign the Billing Admin role under their role settings.
    • New Billing Admin role lets admins grant billing-only access to users who need to manage plans and payments without exposing the rest of the Admin Console.

    1 detail in Everything

21. Connector Deployment Page Improvements seen Jul 13, 2026 · issue 014

    Twingate Admin Console adds Connector deployment guides for Ubiquiti, ZimaOS, and CasaOS.

    ⤢
    └──▷ HOW TO FIND IT
    Deploy a Twingate Connector into a ZimaOS or CasaOS homelab environment using the new guided workflow.
    📍In the Admin Console, go to the Connector Deployment page, select your target environment (Ubiquiti, ZimaOS, or CasaOS), and follow the step-by-step deployment guide.
    • Adds step-by-step Connector deployment guides for Ubiquiti, ZimaOS, and CasaOS environments in the Admin Console.
    • Improves Connector Deployment page UX to make it easier to find the right deployment method for your environment.

    2 details in Everything

22. Connector Health Metrics seen Jul 13, 2026 · issue 014

    Twingate Connectors now export real-time health metrics in Prometheus format for integration with existing monitoring stacks.

    • New Connector Health Metrics provide admins visibility into network traffic patterns and connection efficiency via real-time data.

    1 detail in Everything

23. Granular Admin Console search seen Jul 13, 2026 · issue 014

    Twingate Admin Console gains multi-term and exact-phrase search across users, Resources, and devices.

    ⤢
    └──▷ HOW TO FIND IT
    Quickly locate a specific resource by its full name when a broad search returns too many results.
    📍In the Admin Console, navigate to Resources and enter Grafana Dashboard (with double quotes) in the search bar to return only exact matches.
    • Supports multi-term search across users, Resources, and devices in the Admin Console.
    • Enables exact-phrase matching by wrapping search terms in double quotation marks (e.g., Grafana Dashboard).

    2 details in Everything

24. JIT Access Requests seen Jul 13, 2026 · issue 014

    Twingate adds Just-in-Time access requests with time-limited grants and optional admin approval workflows.

    ⤢
    └──▷ HOW TO FIND IT
    Enable a JITJITA runtime compilation strategy where code is translated from an intermediate form to native machine instructions at execution time, giving tools the speed of compiled code without sacrificing dynamic flexibility. workflow requiring admin approval for a sensitive Resource — ideal for production databases or critical infrastructure in incident response scenarios.
    📍In the Admin Console, go to the target Resource › Access › Enable Just-in-Time Access, set approval mode to Require Admin Approval, and configure the maximum access duration (e.g., 4 hours).
    Configure auto-approved JIT access for a Resource where access needs to be audited but not gated — useful for low-risk Resources where logging is the primary goal.
    📍In the Admin Console, go to the target Resource › Access › Enable Just-in-Time Access, set approval mode to Auto-Approve, and set the maximum access duration (e.g., 1 day).
    • New JIT Access Request workflows let admins grant users on-demand, time-limited access to Resources (1 hour to 7 days).
    • Supports two approval modes: require explicit admin approval or auto-approve for audit-only tracking.
    • Enables break glass incident response protocols by controlling and logging access to sensitive Resources.

    3 details in Everything

25. Multi-Account Support seen Jul 13, 2026 · issue 014

    Twingate Clients now support simultaneous sign-in to multiple accounts across different networks on macOS, iOS, and Windows.

    ⤢
    └──▷ HOW TO FIND IT
    Switch between a personal and a corporate Twingate account simultaneously without logging out — useful for admins managing multiple tenant networks.
    📍In the Twingate client (macOS, iOS, or Windows), open the account menu and select Add Account, then sign in with a second set of credentials. Both accounts appear in the client and can be individually paused or activated.
    • Enables simultaneous sign-in to multiple Twingate accounts (e.g., home, work, or multiple admin accounts) from a single client session.
    • Supports per-account connection pausing without requiring logout or quitting the client.
    • Multi-account support available on macOS, iOS, and Windows clients, with Android and Linux coming soon.

    3 details in Everything

26. Network Health Summaries seen Jul 13, 2026 · issue 014

    Twingate adds downloadable Network Health Summary reports with per-user metrics for proactive monitoring and troubleshooting.

    ⤢
    └──▷ HOW TO FIND IT
    Download a network health summary to review error rates and data transfer volumes across your Twingate network for a given period.
    📍In the Admin Console, go to Reports › Network Health Summaries, select your desired timeframe, and click Download to export the report.
    • New downloadable Network Health Summary reports surface metrics such as data transferred and errors across configurable timeframes.
    • Extends existing active user reports with per-user network health data points, enabling admin-level visibility into individual user connectivity.

    2 details in Everything

27. Privileged Access for SSH seen Jul 13, 2026 · issue 014

    Twingate adds Privileged Access for SSH: register servers as SSH Resources with IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. auth, cert-based authN, and session recording.

    ⤢
    └──▷ HOW TO FIND IT
    Enable SSH Resource session recording output for forwarding to a SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. — navigate in the Twingate Admin Console to configure the SSH Resource.
    📍In the Admin Console, go to Resources › Add Resource, select SSH as the resource type, specify your server address, and enable session recording to capture asciicast output for SIEM forwarding.
    • Adds SSH Resources: register servers and VMs in Twingate and let users connect via existing SSH tools without managing or distributing SSH keys.
    • Enables identity-provider authentication for SSH sessions through the Twingate Identity Firewall, eliminating credential sprawl and bastion hosts.
    • Gateway handles certificate-based authentication to target servers on behalf of users, removing the need for per-user SSH key management.
    • Records every SSH session to stdout in asciicast format, ready to forward to a SIEM or replay for audit review.

    4 details in Everything

28. Resource Approvers seen Jul 13, 2026 · issue 014

    Twingate adds per-Resource Approver Groups so non-Admin teams can review and approve JITJITA runtime compilation strategy where code is translated from an intermediate form to native machine instructions at execution time, giving tools the speed of compiled code without sacrificing dynamic flexibility. access requests.

    ⤢
    └──▷ HOW TO FIND IT
    Delegate JIT access approvals for a sensitive resource to its owning team so Admins aren't a bottleneck.
    📍In the Admin Console, go to Resources › select a Resource › Access › Resource Approvers, then add one or more Groups whose members should review and approve Access Requests for that Resource.
    • Enables delegation of JIT Access Request approvals to designated Groups on a per-Resource basis, without granting full Admin privileges.
    • Supports configuring one or more Groups as Resource Approvers, letting resource-owning teams manage their own access requests.

    2 details in Everything

29. Resource Exclusions seen Jul 13, 2026 · issue 014

    Twingate adds Resource Exclusions to route specific addresses around Twingate infrastructure while keeping audit-log traceability.

    ⤢
    • Enables per-address bypass routing so specific addresses within a broader Resource scope (e.g., a public subdomain under a wildcarded corporate domain) go directly via the local OS, skipping Twingate Connectors and Relay.
    • Audit-logs every routing-mode change on a Resource, making bypass decisions explicit and traceable rather than invisible gaps.

    2 details in Everything

30. Userspace Networking seen Jul 13, 2026 · issue 014

    Twingate Linux Client adds userspace networking via HTTP Proxy Mode — no root or elevated privileges required.

    • New userspace networking mode for the Twingate Linux Client eliminates the need for root or elevated privileges.
    • New HTTP Proxy Mode enables secure access to Twingate-protected resources over standard HTTP/HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. connections.
    • Supports headless and restricted environments, enabling use in CI/CD pipelines, Docker containers, and developer workstations without admin access.

    3 details in Everything

31. Billing Admin Role Jul 1, 2026 · release notes

    New Billing Admin role allows managing billing without full Admin Console access

    • Adds a dedicated Billing Admin role for users who need to manage plan and payment details
    • Restricts Billing admins to the Billing page, preventing access to other Admin Console settings

    2 details in Everything

32. Connector Deployment Page Improvements Jun 17, 2026 · release notes

    Adds step-by-step deployment guides for Ubiquity, ZimaOS, and CasaOS to the Connector Deployment page.

    • Makes general UX improvements to the Connector Deployment page in the Admin Console

    1 detail in Everything

33. Windows Connector Waitlist Jun 17, 2026 · release notes

    Admins can now join the waitlist for native Windows Connector support via the web console.

    └──▷ HOW TO FIND IT
    Request access to native Windows Connector support for a Windows-centric environment.
    📍In the console, go to Settings › Connector Deployment and join the Windows Connector waitlist.
    • Adds Windows Connector waitlist join capability to the Connector Deployment page in the Twingate admin UI.

    1 detail in Everything

34. Privileged Access for SSH May 5, 2026 · release notes

    Privileged Access for SSH lets admins register servers as SSH Resources with identity-based auth and session recording in Twingate

35. Authentication Audit Logs Mar 10, 2026 · release notes

    New Authentication Audit Logs export to sync login and MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. event data

    • Adds Authentication Audit Logs for Client logins, Resource access attempts, and MFA setups

    1 detail in Everything

36. API key modification Dec 17, 2025 · release notes

    Adds in-place API key editing (rename, permissions, enable/disable) for Twingate

    • Adds the ability to modify existing API keys: rename them, change their associated permissions, and disable/enable them without regeneration.
    • Enables temporary pausing of API keys via in-place disabling, streamlining post-creation management workflows.

    2 details in Everything

37. Granular Admin Console search Dec 16, 2025 · release notes

    Admin Console supports complex search with multiple terms and double-quoted exact matches for users, resources, and devices

    • Adds support for multiple search terms in Admin Console searches across users, Resources, and devices
    • Adds support for double-quoted phrases (e.g., Grafana Dashboard) to perform exact-match searches in the Admin Console

    2 details in Everything

38. Network Health Summaries Dec 15, 2025 · release notes

    Twingate adds downloadable Network Health Summaries and expanded per-user metrics for proactive monitoring

    • Adds downloadable Network Health Summaries report containing metrics like data transferred and errors over specified timeframes.
    • Extends existing active user reports to provide similar network health data points on a per-user level.

    2 details in Everything

39. Userspace Networking Dec 11, 2025 · release notes

    New userspace networking mode for the Linux client allows deployment in restricted environments without root privileges.

40. Resource Approvers Dec 3, 2025 · release notes

    Resource Approvers allow delegation of JITJITA runtime compilation strategy where code is translated from an intermediate form to native machine instructions at execution time, giving tools the speed of compiled code without sacrificing dynamic flexibility. access approvals to designated Groups on a per-Resource basis.

    • Adds the ability to configure one or more Groups as Resource Approvers for any Resource, enabling non-Admin users to review and approve JIT Access Requests.

    1 detail in Everything

41. JIT Access Requests Oct 22, 2025 · release notes

    Twingate adds Just-in-Time access requests with configurable duration and approval workflows.

    • Enables configuring just-in-time (JITJITA runtime compilation strategy where code is translated from an intermediate form to native machine instructions at execution time, giving tools the speed of compiled code without sacrificing dynamic flexibility.) access request workflows for on-demand Resource access
    • Allows setting time-limited access windows between 1 hour and 7 days via JIT configuration
    • Supports admin-approval or auto-approved audit-mode for JIT resource requests

    3 details in Everything

42. Multi-Account Support Sep 1, 2025 · release notes

    Twingate clients now support multi-account sign-in and pausing connections across networks on macOS, iOS, and Windows.

    • Adds simultaneous multi-account sign-in to Twingate Clients on macOS, iOS, and Windows
    • Adds ability to pause connections for specific accounts without logging out or quitting

    2 details in Everything

43. Event Feed Filtering Aug 15, 2025 · release notes

    Admin Console event feed now supports filtering by date, resource, user, and activity type

44. Multiple identity providers Jul 22, 2025 · release notes

    Adds support for configuring multiple identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. on the Twingate Network

    • Allows configuring multiple identity providers and sign-in options for the Twingate Network.
    • Enables mixing social logins and supported IdPs to handle complex environments like migrations or acquisitions.

    2 details in Everything

45. Resource tags Apr 2, 2025 · release notes

    Twingate adds Resource tags as key-value metadata and supports filtering by tags in the Admin Console and API.

46. Automatic approval for usage-based auto-lock Mar 14, 2025 · release notes

    Twingate adds automatic approval of user access requests for resources locked due to inactivity.

    • Extends usage-based auto-lock to automatically approve user access requests for auto-locked resources
    • Sends admin notifications about when and why users accessed sensitive auto-locked resources

    2 details in Everything

47. Quick access to help in the Admin Console Mar 11, 2025 · release notes

    Quick access to help resources in the Admin Console

48. Geoblocking Jan 3, 2025 · release notes

    Twingate adds geoblocking to Resource policies, allowing access restriction based on device country location.

49. Twingate Browser Security Dec 20, 2024 · release notes

    Twingate Browser Security enters beta, allowing admins to restrict browsers and control user actions on sensitive resources.

    • Browser Security is now in beta, enabling administrators to limit which browsers can access sensitive Resources.
    • Admins can now apply enterprise application controls to restrict end-user actions on sensitive Resources.
    • Initial support includes Chrome browsers on macOS and Windows.

    3 details in Everything

50. Exit Networks group selection Dec 18, 2024 · release notes

    Allows admins to select which Groups may route traffic through Exit Networks.

51. Signed out device names for DNS Filtering Dec 16, 2024 · release notes

    Signed-out devices now send hostname and device info to enable DNS filtering log correlation.

    • Signed out devices using DNS filtering now transmit hostname and device information to Twingate logs
    • DNS filtering logs now correlate signed out devices with previously signed in devices or surface the device's hostname when no match exists

    2 details in Everything

52. Route all traffic through Twingate with Exit Networks Oct 30, 2024 · release notes

    Introduces Exit Networks for Enterprise plans to route all user traffic through Twingate Connectors.

53. 1Password integration Oct 24, 2024 · release notes

    Twingate integrates with 1Password Device Trust to verify device compliance via Trusted Profiles.

    • Adds 1Password as a verification method for creating Trusted Profiles in the Twingate Admin Console
    • Automatically syncs device verification status every five minutes for Windows, macOS, and Linux devices

    2 details in Everything

54. Access Graph Oct 22, 2024 · release notes

    Twingate Access Graph release: new visual view of user/resource permissions and applied policies to aid least-privilege analysis.

    • Adds a graphical Access Graph for viewing detailed permission paths and applied policies for users or resources

    1 detail in Everything

55. DNS Filtering Block Pages Jul 23, 2024 · release notes

    Adds DNS filtering block pages to clarify why domains are blocked

    • Shows a block page when a site is blocked by DNS filtering, identifying the reason for the block

    1 detail in Everything

56. Connector deployment with CloudFormation Jun 18, 2024 · release notes

    Adds CloudFormationCloudFormationAn AWS service that lets you describe and provision cloud infrastructure as declarative YAML or JSON templates, so a cyber tool can reproducibly spin up or tear down its entire AWS environment with a single API call. template support for deploying Twingate Connectors in AWS.

57. Pulumi and OpenTofu support Jun 10, 2024 · release notes

    Twingate adds official Pulumi provider and OpenTofu support (via Terraform provider v3.0.4+)

    • Adds an official Twingate Pulumi provider with feature parity to the existing Terraform provider
    • Enables Twingate resource management via OpenTofu, supported starting from Terraform provider version 3.0.4

    2 details in Everything

58. Kubernetes Operator v0.10.0 Apr 24, 2024 · release notes

    Twingate Kubernetes Operator v0.10.0 adds automatic Resource creation via Service annotation and external Resource import by ID

    • Allows Kubernetes Service objects to be exposed as Twingate Resources by annotating them instead of manually creating a TwingateResource.
    • Enables importing existing Twingate Resources into the operator by specifying their external ID, allowing management of resources created outside the operator.

    2 details in Everything

59. Enrolled Groups for DNS Filtering Apr 22, 2024 · release notes

    Enables progressive rollout of DNS filtering to specific groups.

    • Admins can now enable DNS filtering for specific Groups to progressively roll out the feature.

    1 detail in Everything

60. Request Access Apr 17, 2024 · release notes

    Adds Request Access feature with webhook support for auto-locked resources in Twingate

    • Enables users who attempt to access locked Resources to request and obtain access directly through the Twingate interface

    1 detail in Everything

61. Delete Customer Networks in MSP Portal Apr 9, 2024 · release notes

    MSPsMSPsA managed service provider, a company that operates IT services for customers. It may manage systems, networks, backups or other ongoing technology needs. can now delete Customer Networks directly from the MSPMSPA managed service provider, a company that operates IT services for customers. It may manage systems, networks, backups or other ongoing technology needs. Portal.

    • Adds the ability to delete Customer Networks via the MSP Portal UI for Managed Service Providers.

    1 detail in Everything

62. Kubernetes Operator v0.7.0 Mar 28, 2024 · release notes

    Kubernetes Operator v0.7.0 adds mutable pod/container extras, annotations, env vars, and name-based principal references.

    • Enables mutation of podExtra and containerExtra fields in the connector configuration
    • Adds support for customer-defined pod annotations via the podAnnotation field
    • Allows defining extra pod environment variables through the containerExtra field
    • Adds stricter validation when using imagePolicy with the google provider
    • Updates TwingateResourceAccess to allow referencing a Group or ServiceAccount principal by name.

    5 details in Everything

63. Export Network Events to AWS S3 Mar 5, 2024 · release notes

    Extends Twingate’s AWS S3 integration to export Network Events as JSON every five minutes.

    • Adds support for sending Network Events to an AWS S3 bucket.

    1 detail in Everything

64. Crowdstrike Integration for Linux Feb 16, 2024 · release notes

    Twingate now supports configuring security policies to enforce CrowdStrike Falcon management for Linux devices

65. Internet Security Client Configuration Feb 12, 2024 · release notes

    Internet Security Client Configuration allows enforcing features like DNS filtering for signed-out users via Machine Keys.

    • Adds Machine Key generation and distribution to enforce Internet Security features (e.g., DNS filtering) when users are signed out.

    1 detail in Everything

66. Usage-based auto-lock Feb 2, 2024 · release notes

    Adds usage-based auto-locking to Twingate Security Policies for automated least-privilege access management.

    • Adds usage-based auto-lock to Security Policies: if a user does not access a Resource within the configured period, access is locked until an admin unlocks it.

    1 detail in Everything

67. Kubernetes Operator v0.2.0 Jan 26, 2024 · release notes

    Twingate Kubernetes Operator v0.2.0 now deploys Connectors and manages their updates automatically.

    • Adds ability to deploy Twingate Connectors via the Kubernetes Operator in version v0.2.0.
    • Enables automatic update management for deployed Connectors within the Kubernetes cluster.

    2 details in Everything

68. A New Billing Experience Dec 1, 2023 · release notes

    Updated billing model based on Users and Service Accounts with automated renewal billing.

    • Adds a new billing experience where license usage is calculated based on the total number of Users and Service Accounts.
    • Automates billing at each renewal date based on licenses used at the end of the previous billing cycle.

    2 details in Everything

69. Export Audit Logs to AWS S3 Nov 13, 2023 · release notes

    Adds AWS S3 export for audit logs in JSON format every 5 minutes

70. Network Overview Page Nov 1, 2023 · release notes

    Adds an Overview tab to the Network page with a snapshot of network status and recent activity.

71. Updated Billing Page Oct 30, 2023 · release notes

    Billing page now shows license usage counts and billing model change warnings

    • Adds display of current and upcoming license counts (users and service accounts) to the Billing page in the Admin Console

    1 detail in Everything

72. Ephemeral access Oct 11, 2023 · release notes

    Adds expiration time configuration to Groups in Twingate Security Policies for ephemeral access.

73. macOS device posture check updates Sep 13, 2023 · release notes

    Expands macOS posture checks to require an enabled firewall and, for users of the standalone macOS Client, hard-drive encryption.

74. Standalone macOS Client Sep 4, 2023 · release notes

    Twingate now offers a standalone macOS client for direct download and MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. rollout

75. Auto-archiving devices Jul 26, 2023 · release notes

    Twingate auto-archives devices inactive for 90 days

    • Adds automatic archival of devices with no sign-in or resource access for 90 consecutive days.
    • Enables manual unarchiving of devices via the Admin Console or API.

    2 details in Everything

76. WebAuthn support on the Admin Console Apr 24, 2023 · release notes

    Admin Console now supports WebAuthnWebAuthnA web standard that lets a browser prove possession of a passkey or hardware key to a website. It is the browser-facing part of FIDO2 sign-in. (biometrics/security key) for two-factor authentication login.

    • Enables biometric or security key (WebAuthn) authentication for logging into the Admin Console.

    1 detail in Everything

77. Add Identity Provider and Social Login Users Mar 20, 2023 · release notes

    Allows identity-provider user sync alongside manually added social-login users in the same Twingate account.

    • Enables syncing users from an identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. directory while simultaneously allowing admins to manually add social login users (e.g., Google, LinkedIn)

    1 detail in Everything

78. Kandji Integration Feb 28, 2023 · release notes

    Twingate adds Kandji integration to enforce device verification policies.

    • Adds Kandji as a verified Device Security integration provider.

    1 detail in Everything

79. WebAuthn support for Two-Factor Authentication Feb 13, 2023 · release notes

    Twingate adds WebAuthnWebAuthnA web standard that lets a browser prove possession of a passkey or hardware key to a website. It is the browser-facing part of FIDO2 sign-in. support for two-factor authentication via biometrics and security keys

    • Enables device-based two-factor authentication methods such as Touch ID or YubiKeys in addition to time-based one-time passwords.

    1 detail in Everything

80. Archiving and Blocking Devices Jan 3, 2023 · release notes

    Twingate adds device archiving and blocking capabilities to hide decommissioned devices and revoke access for lost ones.

    • Adds ability to archive devices, hiding them from the Admin Console for decommissioned hardware

    1 detail in Everything

81. Client Resource Visibility Dec 5, 2022 · release notes

    Allows admins to hide Resources in end-user Clients and disable the Open in Browser shortcut.

    • Hides specific Resources from the main list in end user Clients by moving them into a Background Resources sub-menu

    1 detail in Everything

82. Display Protocol Restrictions Nov 22, 2022 · release notes

    Admin Console now displays protocol restrictions (TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it., UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery., ICMP) directly on Resource views.

83. Team Page Refresh Nov 10, 2022 · release notes

    New Team page refresh in Admin Console with search, sort, and filter capabilities for users, groups, and service accounts.

84. Manage Billing Plans Nov 3, 2022 · release notes

    Admin Console gains self-serve billing plan modification via the Billing page

85. Intune Integration Nov 3, 2022 · release notes

    New Intune integration enables automated device compliance checks within Twingate Security Policies.

86. NextDNS integration Oct 11, 2022 · release notes

    Twingate adds NextDNS integration for DNS filtering via the Admin Console

    • Adds NextDNS integration to extend DNS security protections to all Twingate users on desktop platforms

    1 detail in Everything

87. Jamf Integration Oct 3, 2022 · release notes

    Twingate adds Jamf integration to enforce Trusted Device policies for sign-in and resource access.

    • Adds support for configuring Twingate Security Policies to restrict access to devices managed in a Jamf tenant.

    1 detail in Everything

88. Linux ARM Sep 30, 2022 · release notes

    Twingate Linux Client v1.0.68 adds ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead. and Apple Silicon virtualized support.

    • Adds Linux Client v1.0.68 with native ARM64 architecture support for Raspberry Pi and IoTIoTA collective label for internet-connected physical devices — sensors, cameras, routers, appliances — that tools target because they run embedded firmware with limited patching and broad network exposure. devices
    • Adds support for Virtualized Linux environments on ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware.-based Apple Silicon devices

    2 details in Everything

89. Resource authentication states in clients Sep 30, 2022 · release notes

    Clients now display Resource authentication state and allow manual auth before access

    • Adds Resource Authentication State view in the client showing current auth status and time-to-expiry for each resource
    • Enables manual authentication trigger for a specific resource directly from the client interface

    2 details in Everything

90. Connected state for devices Sep 30, 2022 · release notes

    Admin Console now shows connected device status on Device and User pages.

    • Adds visible device connectivity state across Device and User pages in the Admin Console
    • Displays total count of currently connected devices on the Devices page

    2 details in Everything

91. Network Events in Admin Console Sep 12, 2022 · release notes

    Network Events added to Admin Console for user and resource investigation

    • Enables viewing network traffic details directly in the Admin Console for individual users and protected resources

    1 detail in Everything

92. User Activity Report Aug 25, 2022 · release notes

    Adds User Activity Report to the admin console for exporting active user lists and last access times.

93. DNS Security & DoH Jul 28, 2022 · release notes

    Adds automatic DNS-over-HTTPSDNS-over-HTTPSA protocol that tunnels DNS queries inside encrypted HTTPS requests, hiding lookups from network observers. Cyber tools use it to evade DNS-based monitoring or filtering. (DoHDoHDNS over HTTPS, an IETF standard (RFC 8484) that tunnels DNS queries inside encrypted HTTPS traffic, making resolution indistinguishable from web traffic and bypassing traditional DNS-based monitoring.) encryption and configurable resolver selection via the Admin Console.

    • Enables transparent DNS proxy in the Twingate Client to automatically encrypt all foreground and background DNS traffic
    • Adds DNS Security section in the Admin Console Settings page to toggle DoH for macOS, Windows, and Linux users
    • Allows selection of trusted DoH resolvers or configuration of a custom DoH provider via the new settings

    3 details in Everything

94. CrowdStrike Integration Jul 19, 2022 · release notes

    Twingate adds integration to enforce CrowdStrike device posture for resource access

    • Adds ability to configure Twingate Security Policies to require devices managed in CrowdStrike Falcon for sign-in and resource access

    1 detail in Everything

95. Terraform Provider Updates Jun 8, 2022 · release notes

    Terraform Provider v0.1.7 adds twingate_group resource and DENY_ALL restriction

    • Adds twingate_group resource to import existing and create Twingate Groups via Terraform
    • Adds DENY_ALL shorthand for port restrictions in twingate_resource

    2 details in Everything

96. Service Account API Apr 20, 2022 · release notes

    Programmatic creation and management of Twingate Service Accounts via GraphQL Admin APIAdmin APIA dedicated HTTP interface that exposes management and configuration operations separately from the data plane, letting cyber tools automate provisioning, policy changes, or monitoring without touching the main user-facing service.

    • The public GraphQL Admin API now includes create, update, and management actions for Service Accounts
    • Service Accounts can be created programmatically to enable automation

    2 details in Everything

97. JumpCloud integration Feb 9, 2022 · release notes

    Adds JumpCloud integration for authentication and user/group sync

98. Peer-to-peer Transport via NAT Traversal Jan 13, 2022 · release notes

    Twingate introduces peer-to-peer NAT traversal and QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking. transport to reduce latency for clients and connectors.

    • Adds direct peer-to-peer connection negotiation between Clients and Connectors via NAT Traversal, prioritizing it over Relay infrastructure
    • Integrates QUIC protocol at the network transport level to maximize throughput and reduce startup time

    2 details in Everything

99. Connector Downtime Notifications Dec 6, 2021 · release notes

    New email notifications for Connector availability status changes

    • Adds email notifications to alert admins when Connectors go offline or come back online.
    • Allows admins to mute status emails if Connector availability changes are expected.

    2 details in Everything

100. Devices Page Refresh Nov 30, 2021 · release notes

     Refreshed Devices page in Admin Console with performance optimizations for faster overview of organization devices.

     • Provides an optimized version of the Devices page in the Admin Console to improve performance and speed up the viewing of organization details.

     1 detail in Everything

101. Device Requirements in Resource Policies Nov 19, 2021 · release notes

     Resource Policies now enforce OS and trusted device state requirements.

     • Adds device requirements to Resource Policies, allowing resources to be restricted by operating system or Trusted Device status.
     • Enables configuration of Resource Policies to allow access only from devices marked as Trusted Devices or running specific platforms.

     2 details in Everything

102. Google Workspace Updates Nov 8, 2021 · release notes

     Twingate Google Workspace integration gains Organizational Unit syncing, webhook-based updates, and multi-domain support

     • Adds Organizational Unit (OU) sync capability to the Google Workspace integration, allowing OUs to be mapped to Twingate groups alongside existing Google Groups.
     • Uses webhook-based triggers to identify Google Workspace user changes and significantly reduce sync times.
     • Extends Google Workspace identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. support to allow syncing users from multiple secondary domains within a single Google Workspace account.

     3 details in Everything

103. MacOS pre-configuration updates Oct 31, 2021 · release notes

     Twingate MacOS client adds login-start setting and /Library/Managed Preferences support in v1.0.16

     • Adds the ability to pre-configure the MacOS Twingate client to start at login via a .plist setting.
     • Expands supported locations for pre-configuration .plist files from /Library/Preferences/ to also include /Library/Managed Preferences/.

     2 details in Everything

104. Service Accounts & Headless Clients Sep 22, 2021 · release notes

     Twingate adds Service Accounts and headless client mode for automated CI/CD access.

     • Adds Service accounts to the Admin console for creating identities used in CI/CD pipelines
     • Enables headless mode in Windows and Linux clients (v1.0.30+ connectors required) to authorize access via service keys
     • Adds device support to the Admin APIAdmin APIA dedicated HTTP interface that exposes management and configuration operations separately from the data plane, letting cyber tools automate provisioning, policy changes, or monitoring without touching the main user-facing service., including updating device trusted status

     3 details in Everything

105. Connector Real-time Logs & Metadata Sep 3, 2021 · release notes

     Twingate Connector now supports real-time JSON logs for SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. integration and enhanced metadata display in Admin console.

     • Adds Connector Real-time Connection Logs outputting identity-indexed network data in JSON format for SIEM ingestion
     • Augments the Admin console Connector detail page to display current version, available update status, and custom metadata

     2 details in Everything

106. Twingate Terraform Provider May 21, 2021 · release notes

     Twingate Terraform Provider 0.1.0 initial release adds zero-trust IaCIaCInfrastructure as Code: the practice of defining and provisioning compute infrastructure through machine-readable config files rather than manual processes, giving cyber tools repeatable, version-controlled environment setup. capabilities.

     • First release of the Twingate Terraform Provider (version 0.1.0) available in Terraform's Provider Registry, enabling automated management of secure zero trust access via Infrastructure-as-Code.

     1 detail in Everything

107. Security Policies Apr 15, 2021 · release notes

     Twingate introduces Security Policies (Resource, Network Sign In, Admin Console Sign In) and SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria. Type 2 report availability.

     • Adds three new Security Policy types: Resource Policies, Network Sign In, and Admin Console Sign In for granular access management
     • Enables Universal 2FA support for non-IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. configurations in the Admin console
     • Allows disabling group sync for Google Workspace in the Admin console

     3 details in Everything

108. Universal 2FA & Identity-indexed network flow logs Feb 24, 2021 · release notes

     Native Universal 2FA deployment and identity-indexed network flow logs for private network access

     • Enables Universal 2FA as a native feature to apply discretionary security levels independent of the identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems..
     • Provides Identity-indexed network flow logs associating private traffic with user identity, authorization rules, and port details.
     • Adds support for specifying ports and ranges in resource definitions, with pre-routing enforcement logic.

     3 details in Everything