Ubiq Security

No entries match these filters. Clear filters

1. docs update Oct 4, 2026 · issue 094

   Ubiq Security adds MaxCompute integration for encrypting data in Alibaba Cloud's big-data platform.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢ ⤢
2. changelog Sep 26, 2026 · issue 086

   Ubiq Security: Adds Ubiq encrypt and decrypt operators for Apache AirflowApache AirflowAn open-source workflow orchestration platform maintained by the Apache Software Foundation that lets developers schedule, monitor, and chain tasks as directed acyclic graphs, making it useful for automating data pipelines. DAGs to protect data in pipeline tasks.

   └──▷ USE IT
   Inspect the key number behind a ciphertext in Go without performing a full decryption — useful for key rotation audits.
   go copy

   keyNum, err := ubiq.GetKeyNumber(ciphertext)
   if err != nil {
       log.Fatal(err)
   }
   fmt.Printf("Key number: %d\n", keyNum)

   Add the Ubiq Rust SDK to a new project to start encrypting structured data with key zeroization on drop.
   Cargo.toml copy

   # Cargo.toml
   [dependencies]
   ubiq-rust = "1.0.0"

   Enable Grafana Loki as a SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. destination to stream Ubiq activity events into your existing Loki stack.
   📍In the Ubiq console, go to Settings › Integrations › SIEM and add a new Grafana Loki connection. Contact Ubiq support to enable the Loki destination for your enterprise account.
   • Adds dataset creation wizard support for advanced structured dataset configuration in the C 2.3.0.0 library.

   1 more in Everything

3. changelog Sep 26, 2026 · issue 086

   Ubiq Security: Access Graph now includes IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. groups and filters related nodes in both directions, enabling access tracing from either an identity or a dataset.

   └──▷ USE IT
   Add the Ubiq Rust SDK to a project to encrypt structured data without decrypting to retrieve the key number.
   Cargo.toml copy

   # Cargo.toml
   [dependencies]
   ubiq-rust = "1.0.0"

   Inspect the key number behind a Go ciphertext for key-rotation auditing without performing a full decryption.
   go copy

   keyNum, err := ubiq.GetKeyNumber(ciphertext)
   if err != nil {
       log.Fatal(err)
   }
   fmt.Printf("Key number: %d\n", keyNum)

   Enable Grafana Loki as a SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. destination for Ubiq activity events alongside an existing Splunk integration.
   📍In the Ubiq console, go to Integrations › SIEM, add a new Grafana Loki connection, enter your Loki push endpoint and credentials, then save. Contact Ubiq support to enable the feature for your enterprise account.
   • Go library now validates input against the dataset character set before encryption, returning a clear error instead of failing silently.
   • Security History events are now attributed to the IDP identity that performed them, and event details show the Access Group field in place of the retired Dataset Group field.

   2 more in Everything

4. docs update Sep 26, 2026 · issue 086

   Ubiq Security: Adds \Ubiq\encryptInteger() and \Ubiq\decryptInteger() for datasets configured with data_type = 'integer' (size 32 or 64), bridging values correctly through the underlying FF1 cipher.

   └──▷ USE IT
   Prefetch keys for a known set of datasets at startup to eliminate per-call API round-trips during bulk encryption.
   php copy

   \Ubiq\loadCache($credentials, ['SSN', 'FIRST_NAME', 'LAST_NAME']);
   $cipher = \Ubiq\encrypt($credentials, '123-45-6789', 'SSN'); // served from cache

   Encrypt a 64-bit integer dataset value (e.g. a customer ID) and recover the original via decryption.
   php copy

   $cipher_int = \Ubiq\encryptInteger($credentials, -493356814481025, 'integer64');
   $plain_int  = \Ubiq\decryptInteger($credentials, $cipher_int, 'integer64');

   Generate all key-rotation ciphertexts for a date field so a database query can match records encrypted under any active key.
   php copy

   $plain_date   = new \DateTimeImmutable('1530-09-21T00:00:00Z');
   $cipher_dates = \Ubiq\encryptDateForSearch($credentials, $plain_date, 'date_2keys');
   // $cipher_dates contains one entry per active key rotation

   • Adds \Ubiq\encryptDate() / \Ubiq\decryptDate() and \Ubiq\encryptDateTime() / \Ubiq\decryptDateTime() for datasets with data_type = 'date' or 'datetime', requiring UTC DateTimeImmutable inputs.
   • Adds \Ubiq\encryptIntegerForSearch(), \Ubiq\encryptDateForSearch(), and \Ubiq\encryptDateTimeForSearch() to return all key-rotation ciphertexts for typed datasets, enabling searchable encryption across rotated keys.

   2 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !\Ubiq\primeKeyCache() is removed in 2.1.0 — callers must replace all uses with \Ubiq\loadCache().
5. docs update Sep 26, 2026 · issue 086

   Ubiq Security: Adds Token dataset support (64-character and 128-character variants) via EncryptAsync, DecryptAsync, and encryptForSearchAsync — 64-char tokens accept inputs under 40 chars and output base62 (A-Za-z0-9); 128-char tokens accept inputs under 80 chars.

   └──▷ USE IT
   Encrypt a 32-bit integer stored in a database column so its value is protected while remaining searchable across encrypted records.
   javascript copy

   const credentials = ubiq.UbiqFactory.readCredentialsFromFile('./credentials', 'default');
   const configuration = ubiq.UbiqFactory.defaultConfiguration();
   const ubiqEncryptDecrypt = await (new ubiq.CryptographyBuilder())
     .withCredentialsObject(credentials)
     .withConfigurationObject(configuration)
     .buildStructuredAsync();
   
   const int32 = await ubiqEncryptDecrypt.EncryptNumberAsync('int32', 9, []);
   const search32 = await ubiqEncryptDecrypt.encryptNumberForSearchAsync('int32', 9, []);

   Encrypt a DateTime field (e.g. a transaction timestamp) and generate all search-compatible ciphertexts so encrypted records remain queryable.
   javascript copy

   const credentials = ubiq.UbiqFactory.readCredentialsFromFile('./credentials', 'default');
   const configuration = ubiq.UbiqFactory.defaultConfiguration();
   const ubiqEncryptDecrypt = await (new ubiq.CryptographyBuilder())
     .withCredentialsObject(credentials)
     .withConfigurationObject(configuration)
     .buildStructuredAsync();
   
   const plainDateTime = new Date(new Date().setUTCMilliseconds(0));
   const ct = await ubiqEncryptDecrypt.EncryptDateTimeAsync('datetime', plainDateTime, []);
   const search = await ubiqEncryptDecrypt.encryptDateTimeForSearchAsync('datetime', plainDateTime, []);

   Tag usage records with structured metadata (e.g. tenant ID and environment) so analysts can filter billing or audit data by application context.
   javascript copy

   const ubiqEncryptDecrypt = await (new ubiq.CryptographyBuilder())
     .withCredentialsObject(credentials)
     .withConfigurationObject(configuration)
     .buildStructuredAsync();
   
   ubiqEncryptDecrypt.addReportingUserDefinedMetadata('{"tenant":"acme","env":"prod"}');

   • Adds createCredentialsWithIdp factory method (ubiq.UbiqFactory.createCredentialsWithIdp(<username>, <password>, <host>)) to authenticate using an identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems..
   • Adds buildStructuredAsync builder method on ubiq.CryptographyBuilder to construct structured encryption/decryption objects alongside the existing buildEncryptionAsync and buildDecryptionAsync.
   • Documents multithreaded environment behavior: Ubiq objects must be created and destroyed within each worker thread because Node.js workers serialize/copy objects rather than sharing them.

   3 details in Everything

6. docs update Sep 26, 2026 · issue 086

   Ubiq Security: Adds encryptInt / decryptInt / encryptIntForSearch and encryptLong / decryptLong / encryptLongForSearch methods for Format-Preserving Encryption of 32-bit integers (range -99,999,999 to 99,999,999) and 64-bit longs (range -9,999,999,999,999,999 to 9,999,999,999,999,999) using pre-configured Int32/Int64 datasets.

   └──▷ USE IT
   Pre-warm the key cache for specific datasets at startup to eliminate first-use latency in latency-sensitive pipelines.
   java copy

   String[] datasets = {"dataset1", "dataset2"};
   ubiqEncryptDecrypt.loadCache(datasets);
   // Or load every dataset for the active API key:
   ubiqEncryptDecrypt.loadCache(new String[0]);

   Encrypt and search-index a 32-bit integer field (e.g. an account number) while preserving format for database storage.
   java copy

   String int32DatasetName = "Int32";
   int intVal = 9;
   int int32 = ubiqEncryptDecrypt.encryptInt(int32DatasetName, intVal, null);
   int[] search32 = ubiqEncryptDecrypt.encryptIntForSearch(int32DatasetName, intVal, null);

   Force all library exceptions to surface immediately rather than returning null, so application error-handling catches them explicitly.
   json copy

   {
     "java_options": {
       "always_bubble_exceptions": true
     }
   }

7. docs update Sep 26, 2026 · issue 086

   Ubiq Security: Adds LoadCache([]string{...}) on both encryption and decryption objects to pre-populate the dataset cache and reset TTLs for already-cached datasets.

   └──▷ USE IT
   Detect records encrypted with a rotated-out key so you can re-encrypt them with the current key — without decrypting or reporting usage events.
   go copy

   enc, _ := ubiq.NewStructuredEncryption(creds)
   dec, _ := ubiq.NewStructuredDecryption(creds)
   
   currentKey, _ := enc.GetCurrentKeyNumber("SSN")
   recordKey, _ := dec.GetKeyNumber("SSN", cipherText)
   if recordKey != currentKey {
       // re-encrypt: decipher then CipherAndKeyNumber
       plain, _ := dec.Decipher("SSN", cipherText, nil)
       newCipher, newKey, _ := enc.CipherAndKeyNumber("SSN", plain, nil)
       fmt.Printf("re-encrypted with key %d: %s\n", newKey, newCipher)
   }

   Encrypt a native Go int64 (e.g. birth year) and date against typed datasets, preserving the original type through the encryption round-trip.
   go copy

   enc, _ := ubiq.NewStructuredEncryption(creds)
   defer enc.Close()
   
   cipherInt, _ := enc.CipherInt64("BIRTH_YEAR", int64(1985), nil)
   cipherDate, _ := enc.CipherDate("BIRTH_DATE", time.Date(1985, 6, 15, 0, 0, 0, 0, time.UTC), nil)
   
   dec, _ := ubiq.NewStructuredDecryption(creds)
   plainInt, _ := dec.DecipherInt64("BIRTH_YEAR", cipherInt, nil)
   plainDate, _ := dec.DecipherDate("BIRTH_DATE", cipherDate, nil)

   Pre-warm the dataset cache at startup to avoid latency on the first request and keep long-running service caches fresh.
   go copy

   enc, _ := ubiq.NewStructuredEncryption(creds)
   defer enc.Close()
   
   // Pre-load specific datasets
   enc.LoadCache([]string{"SSN", "BIRTH_DATE", "BIRTH_YEAR"})
   
   // Alternatively, pre-load all datasets on the decryption side
   dec, _ := ubiq.NewStructuredDecryption(creds)
   dec.LoadCache([]string{})

   • Releases v2 of the Go library (import "gitlab.com/ubiqsecurity/ubiq-go/v2") with Structured Encryption support; v1 (without /v2) does not include Structured Encryption.

   1 detail in Everything

8. docs update Sep 26, 2026 · issue 086
   └──▷ TRY IT
   Authenticate to Ubiq via Okta instead of API keys — useful when your org mandates SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. and you want to avoid embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. static API credentials.
   copy

   $ export UBIQ_IDP_USERNAME=user@example.com
   export UBIQ_IDP_PASSWORD=s3cr3t

   Configure the Okta IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. provider parameters in your credentials/config file so the library can exchange user credentials for a platform token.
   json copy

   {
     "idp": {
       "provider": "okta",
       "ubiq_customer_id": "f6f.....08c5",
       "idp_token_endpoint_url": "https://dev-<domain>.okta.com/oauth2/v1/token",
       "idp_tenant_id": "0o....d7",
       "idp_client_secret": "yro.....2Db"
     }
   }

   Use the builder pattern (C++) to construct both structured encryption and decryption objects from a single credential/config pair — eliminating repetitive object setup.
   c++ copy

   ubiq::platform::builder builder;
   ubiq::platform::credentials creds;
   ubiq::platform::configuration config;
   
   ubiq::platform::structured::encryption e = builder.with(creds).with(config).buildStructuredEncryption();
   ubiq::platform::structured::decryption d = builder.with(creds).with(config).buildStructuredDecryption();

9. docs update Sep 26, 2026 · issue 086

   Ubiq Security adds Apache AirflowApache AirflowAn open-source workflow orchestration platform maintained by the Apache Software Foundation that lets developers schedule, monitor, and chain tasks as directed acyclic graphs, making it useful for automating data pipelines. integration with UbiqEncryptOperator and UbiqDecryptOperator for DAGDAGA directed acyclic graph — a data structure of nodes connected by one-way edges with no cycles — used by tools to model task pipelines or data flows where execution order and dependencies must be enforced without loops.-native structured encryption⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ USE IT
   Encrypt specific columns (SSN, Birthdate) from a BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data. pull inside an Airflow DAG, then decrypt them in a downstream task — leaving other columns untouched.
   python copy

   from operators.ubiq_encrypt_operator import UbiqEncryptOperator
   from operators.ubiq_decrypt_operator import UbiqDecryptOperator
   import ubiq_security as ubiq
   
   creds = ubiq.configCredentials(config_file="ubiq-credentials", profile="default")
   
   get_data = BigQueryGetDataOperator(
       task_id="get_data",
       dataset_id=DATASET_NAME,
       table_id=TABLE_NAME,
       max_results=10,
       selected_fields="name,email,ssn,birthday",
   )
   
   enc_task = UbiqEncryptOperator(
       task_id="enc_task",
       credentials=creds,
       data_task=get_data.task_id,
       dataset_names=["", "", "SSN", "Birthdate"]
   )
   
   dec_task = UbiqDecryptOperator(
       task_id="ubiq_dec_task",
       credentials=creds,
       data_task=enc_task.task_id,
       dataset_names=["", "", "SSN", "Birthdate"]
   )
   
   get_data >> enc_task >> dec_task

   • Adds UbiqEncryptOperator and UbiqDecryptOperator Airflow operators (installed via pip install ubiq_security, placed in plugins/operators/) for performing structured encrypt and decrypt operations directly inside DAGs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds credentials, data_task, and dataset_names parameters to both operators, enabling column-level encryption control over tabular data passed as a list of lists — compatible with BigQueryGetDataOperator output format.
   • Supports per-column dataset mapping via dataset_names — pass an empty string for columns that should pass through unencrypted, with array length required to match row width.

   3 details in Everything

10. docs update Sep 26, 2026 · issue 086

    Ubiq Security: Adds CREATE OR REPLACE FUNCTION ... ubiq_idp_auth(dataset_names STRING) RETURNS JSON REMOTE WITH CONNECTION BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data. SQL function so queries authenticate via IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. session instead of API keys.

    └──▷ TRY IT
    Deploy the IDP broker function so BigQuery can authenticate via SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave./SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. without requiring Ubiq API keys.
    copy

    $ cd ubiq-broker/ubiq_idp_auth && gcloud functions deploy ubiq_idp_auth --gen2 --runtime=nodejs20 --source=. --entry-point=ubiq_idp_auth --trigger-http

    Start a keyless BigQuery session using your IDP identity instead of an API key, then run encrypt/decrypt queries as normal.
    copy

    $ CALL BQ_DATASET.begin_idp_session('my_dataset');

    Configure the IDP broker Cloud RunCloud RunGoogle's managed container runtime that executes stateless workloads on demand, scaling to zero when idle, so tools can deploy without managing servers or paying for idle capacity. function with the customer ID and the path to the Secret Manager-mounted private key.
    env copy

    IDP_CUSTOMER_ID=<your-ubiq-customer-id>
    IDP_PRIVATE_KEY_PATH=/idp/idp_private_key

    • Adds CREATE OR REPLACE PROCEDURE ... ubiq_begin_idp_session(datasetNames STRING) as a keyless alternative to begin_ubiq_session, using the existing BigQuery user session for authentication.
    • Adds idp_setup.sh shell script to automate provisioning of IDP-related SQL and broker functions for enterprise IDP customers.
    • Supports mounting the IDP Private Key as a Google Secret Manager volume in Cloud Run (rather than as an environment variable) for more secure key lifecycle management.

    3 details in Everything

11. docs update Sep 26, 2026 · issue 086

    Ubiq datasets now support Integer, Date, and Date & Time structured types that encrypt to the same native column type⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    ⤢ ⤢ ⤢ ⤢
    └──▷ USE IT
    Encrypt a 64-bit integer field in place using the Go library — the result stays an integer, so no schema changes are needed.
    go copy

    encrypted, err := client.CipherInt64(plaintextInt64)

    Encrypt a Java long (64-bit) value with the typed dataset method so the ciphertext remains a valid long in your existing database column.
    java copy

    long encrypted = ubiqEncrypt.encryptLong(plaintextLong);

    • Adds Integer structured dataset type for whole numbers, encrypting 32-bit (-99,999,999 to 99,999,999) or 64-bit (-9,999,999,999,999,999 to 9,999,999,999,999,999) values to an integer of the same type — no column-type changes or conversion code required.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds Date structured dataset type for calendar dates (01/01/0001 to 11/28/2738), encrypting dates back to a date value with no time component.
    • Adds Date & Time structured dataset type for timestamps to the second (1653-02-10 06:13:21 to 2286-11-20 17:46:39 UTC), encrypting to a timestamp value in the same column.
    • Adds Token structured dataset sub-type producing fixed-length base62 tokens (A-Z, a-z, 0-9) of 64 characters (strings under 40 chars) or 128 characters (strings under 80 chars).
    • Adds Generic String structured dataset sub-type for strings of unknown length or format, with optional Input Encoding (Base32 or Base64) and Input Padding Character to handle short or non-standard-charset values.

    +1 more show less

    • Exposes typed encryption methods for Integer, Date, and Date & Time datasets — encryptInt / encryptLong / encryptDate in Java and CipherInt64 / CipherDate / CipherDateTime in Go — available from C/C++ 2.3.0.0, .NET 2.4.0, Go 2.3.0, Java 2.3.0, Node.js 2.4.0, PHP 2.1.0, and Python 2.4.0.

    6 details in Everything

12. changelog Sep 25, 2026 · issue 085

    Ubiq Security: Adds new Ubiq encrypt and decrypt operators for Apache AirflowApache AirflowAn open-source workflow orchestration platform maintained by the Apache Software Foundation that lets developers schedule, monitor, and chain tasks as directed acyclic graphs, making it useful for automating data pipelines. DAGs to protect data in pipeline tasks.

    └──▷ USE IT
    Inspect which encryption key version was used to produce a ciphertext — without decrypting — to audit key rotation coverage across a dataset.
    go copy

    keyNum, err := ubiq.GetKeyNumber(ciphertext)
    if err != nil {
        log.Fatal(err)
    }
    fmt.Printf("Key number: %d\n", keyNum)

    Add the ubiq-rust crate to a Rust project to start encrypting data with the new beta SDK, including search-compatible encryption.
    Cargo.toml copy

    ubiq-rust = "1.0.0"

    Enable Grafana Loki as a SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. destination so Ubiq activity events flow into your existing Loki stack alongside Splunk.
    📍In the Ubiq console, go to Settings › Integrations, select Grafana Loki, enter your Loki endpoint and credentials, then save. Contact Ubiq support to enable the feature flag for your enterprise account.
    • Consolidates IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. and SIEM connections onto a single Integrations page, adding support for self-signed IDPs, direct IDP-group-to-Access-Group mapping, and new Apache Airflow and Self-Signed IDP authentication library guides.
    • Adds bulk prefetch of dataset configuration and encryption keys in a single call in the PHP 2.1.0 library, reducing first-use latency.
    • Publishes a new structured dataset type reference covering Date & Time, Date, Integer, Token, Formatted String, and Generic String types with options and supported ranges.
    • Publishes a new structured dataset type reference covering Date & Time, Date, Integer, Token, Formatted String, and Generic String types with options and supported ranges.

    2 more in Everything

13. changelog Sep 25, 2026 · issue 085

    Ubiq adds Rust SDK, Kong gateway plugin, Airflow operators, Grafana Loki SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents., and new dataset types across C, Node.js, Python, PHP, .NET, and Go libraries.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ USE IT
    Inspect the key number used to produce a ciphertext in Go without performing a full decryption — useful for key rotation audits.
    go copy

    keyNum, err := ubiq.GetKeyNumber(ciphertext)
    if err != nil {
        log.Fatal(err)
    }
    fmt.Printf("Encrypted with key number: %d\n", keyNum)

    Bootstrap a new Go project using the Rust SDK to encrypt a sensitive field with encrypt_for_search, enabling ciphertext lookups across a dataset.
    Cargo.toml copy

    # Cargo.toml
    [dependencies]
    ubiq-rust = "1.0.0"

    Enable Grafana Loki as a SIEM destination for Ubiq activity events so SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. dashboards receive tokenization audit trails alongside other log streams.
    📍1. Contact Ubiq support to enable Grafana Loki for your enterprise account. 2. In the Ubiq dashboard, go to Settings › Integrations. 3. Add a new Grafana Loki connection and supply your Loki endpoint and credentials. 4. Save and verify events appear in your Loki data source.
    • Adds CipherAndKeyNumber, GetCurrentKeyNumber, and GetKeyNumber functions to the Go library to retrieve the key number behind a ciphertext without decrypting it.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds new Ubiq Rust SDK (Beta), available on crates.io as ubiq-rust, supporting structured and unstructured encryption, integer and date/time datasets, encrypt_for_search, and key zeroization.
    • Adds a new Ubiq plugin for the Kong API gateway providing field-level tokenization and detokenization of JSON request and response bodies with no application code changes.
    • Adds Grafana Loki as a SIEM destination for Ubiq activity and usage events (enterprise customers; previously Splunk only).
    • Expands dataset type support in the C 2.3.0.0 library to include int32, int64, date, datetime, token (64/128-byte), and generic strings with Base32, Base64, or no encoding, including support for the dataset creation wizard.

    +11 more show less

    • Expands dataset type support in the Node.js 2.4.0 library to include int32, int64, date, datetime, token (64/128-byte), and generic strings with Base32, Base64, or no encoding.
    • Expands dataset type support in the Python 2.4.0 library to include int32, int64, date, datetime, token (64/128-byte), and generic strings with Base32, Base64, or no encoding.
    • Expands dataset type support in the PHP 2.1.0 library to include int32, int64, date, datetime, token (64/128-byte), and generic strings with Base32, Base64, or no encoding; also prefetches dataset configuration and encryption keys for many datasets in a single call to reduce first-use latency.
    • Expands dataset type support in the .NET 2.4.2 library to include int32, int64, date, datetime, token (64/128-byte), and generic strings with Base32, Base64, or no encoding, with a clear error when a string method is called on an integer, date, or datetime dataset.
    • Enables date and datetime datasets to work with input character sets other than 0-9 in the C library and platform.
    • Updates structured encryption in the .NET library to use the BITLEN function in place of LOG per NIST FF1 updated recommendations.
    • Adds IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. group-to-Access-Group mapping, SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. provisioning, and self-signed IDP support, all configurable from a unified Integrations page.
    • Extends the Access Graph to include IDP groups and enables bidirectional filtering so access can be traced from either an identity or a dataset.
    • Adds attribution of Security History events to the IDP identity that performed them, and records SCIM sync and attribute-mapping failures as events.
    • Adds search and multi-select to the Dataset Association dropdown in Dataset Management; generic string datasets now display their maximum input length.
    • Adds new library guides for Apache AirflowApache AirflowAn open-source workflow orchestration platform maintained by the Apache Software Foundation that lets developers schedule, monitor, and chain tasks as directed acyclic graphs, making it useful for automating data pipelines. and Self-Signed IDP authentication alongside updated guides for Go, Java, Node.js, PHP, C/C++, BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data., and Snowflake.
    • Adds CipherAndKeyNumber, GetCurrentKeyNumber, and GetKeyNumber functions to the Go library to retrieve the key number behind a ciphertext without decrypting it.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds new Ubiq Rust SDK (Beta), available on crates.io as ubiq-rust, supporting structured and unstructured encryption, integer and date/time datasets, encrypt_for_search, and key zeroization.
    • Adds a new Ubiq plugin for the Kong API gateway providing field-level tokenization and detokenization of JSON request and response bodies with no application code changes.
    • Adds Grafana Loki as a SIEM destination for Ubiq activity and usage events (enterprise customers; previously Splunk only).
    • Adds new library guides for Apache AirflowApache AirflowAn open-source workflow orchestration platform maintained by the Apache Software Foundation that lets developers schedule, monitor, and chain tasks as directed acyclic graphs, making it useful for automating data pipelines. and Self-Signed IDP authentication alongside updated guides for Go, Java, Node.js, PHP, C/C++, BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data., and Snowflake.

    11 more in Everything

14. docs update Sep 25, 2026 · issue 085

    Ubiq PHP library adds typed dataset encryption, bulk key caching, and typed search helpers for integers and dates.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ USE IT
    Warm the key cache once at startup to avoid per-dataset API calls across a batch encrypt job over SSN, FIRST_NAME, and LAST_NAME fields.
    php copy

    \Ubiq\loadCache($credentials, ["SSN", "FIRST_NAME", "LAST_NAME"]);

    Encrypt and decrypt a 64-bit integer dataset value (e.g. a numeric account ID) using the new typed entry points.
    php copy

    $cipher_int = \Ubiq\encryptInteger($credentials, -493356814481025, "integer64");
    $plain_int  = \Ubiq\decryptInteger($credentials, $cipher_int, "integer64");

    Generate all ciphertext variants of a date value across key rotations to support encrypted-field search on a date dataset.
    php copy

    $plain_date   = new \DateTimeImmutable('1530-09-21T00:00:00Z');
    $cipher_dates = \Ubiq\encryptDateForSearch($credentials, $plain_date, "date_2keys");
    // $cipher_dates is an array — query WHERE encrypted_col IN ($cipher_dates)

    • Adds \Ubiq\loadCache($credentials, $datasets) to prefetch all dataset configs and encryption keys in a single /api/v0/fpe/def_keys API call, avoiding per-dataset network round-trips on subsequent encrypt/decrypt operations.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds \Ubiq\encryptInteger / \Ubiq\decryptInteger entry points for integer datasets (data_type = 'integer', size 32 or 64) with range validation against data_type_config min/max before the FF1 cipher call.
    • Adds \Ubiq\encryptDate / \Ubiq\decryptDate entry points for date datasets (data_type = 'date'), requiring UTC DateTimeImmutable inputs and enforcing range validation.
    • Adds \Ubiq\encryptDateTime / \Ubiq\decryptDateTime entry points for datetime datasets (data_type = 'datetime'), rejecting non-UTC inputs with InvalidArgumentException.
    • Adds \Ubiq\encryptIntegerForSearch, \Ubiq\encryptDateForSearch, and \Ubiq\encryptDateTimeForSearch typed search helpers that return arrays of ciphertext values across all active key rotations.

    +1 more show less

    • Transparently applies input_encoding (base64 or base32) and input_pad_character dataset config fields on encrypt/decrypt with no caller-side changes required.

    6 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !\Ubiq\primeKeyCache() is removed in 2.1.0 — callers must switch to \Ubiq\loadCache().
15. docs update Sep 25, 2026 · issue 085

    Ubiq JavaScript library adds structured encryption for Numbers, DateTime, Date, Tokens, and generic strings with IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. credential support⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ USE IT
    Encrypt and search over an integer field in a database without revealing plaintext values — useful for encrypted PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. lookups on numeric identifiers.
    text copy

    const credentials = ubiq.UbiqFactory.readCredentialsFromFile('./credentials', 'default');
    const configuration = ubiq.UbiqFactory.defaultConfiguration();
    const ubiqEncryptDecrypt = await (new ubiq.CryptographyBuilder()).withCredentialsObject(credentials).withConfigurationObject(configuration).buildStructuredAsync();
    const intVal = 12345678;
    const encrypted = await ubiqEncryptDecrypt.EncryptNumberAsync('int32', intVal, []);
    const searchValues = await ubiqEncryptDecrypt.encryptNumberForSearchAsync('int32', intVal, []);

    Authenticate using an Identity Provider instead of static API keys, for orgs managing credentials through SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management./IDP.
    text copy

    const credentials = ubiq.UbiqFactory.createCredentialsWithIdp(<username>, <password>, <host>);
    const ubiqEncryptDecrypt = await (new ubiq.CryptographyBuilder()).withCredentialsObject(credentials).buildStructuredAsync();

    Tag usage records with environment or team metadata for audit and billing attribution.
    text copy

    const ubiqEncryptDecrypt = await (new ubiq.CryptographyBuilder()).withCredentialsObject(credentials).withConfigurationObject(configuration).buildStructuredAsync();
    ubiqEncryptDecrypt.addReportingUserDefinedMetadata('{"team": "security", "env": "prod"}');

    • Adds UbiqFactory.createCredentialsWithIdp(<username>, <password>, <host>) for Identity Provider (IDP)-based credential creation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds EncryptNumberAsync and DecryptNumberAsync on CryptographyBuilder-built structured objects for 32-bit (range -99,999,999 to 99,999,999) and 64-bit (range -9,999,999,999,999,999 to 9,999,999,999,999,999) integer datasets.
    • Adds encryptNumberForSearchAsync for structured search over encrypted integer datasets (int32 and int64).
    • Adds EncryptDateTimeAsync, DecryptDateTimeAsync, and encryptDateTimeForSearchAsync for structured encryption of DateTime values (supported plaintext range: 1653-02-10 to 2286-11-20 UTC).
    • Adds EncryptDateAsync, DecryptDateAsync, and encryptDateForSearchAsync for structured encryption of Date-only values.

    +5 more show less

    • Adds EncryptAsync, DecryptAsync, and encryptForSearchAsync on structured objects for Token datasets of 64 or 128 characters (base62, A-Za-z0-9 output).
    • Adds EncryptAsync, DecryptAsync, and encryptForSearchAsync on structured objects for generic string datasets with base32 or base64 encoding and configurable padding.
    • Adds addReportingUserDefinedMetadata method to attach a JSON string (max 1024 characters) to usage records stored in the database.
    • Adds buildStructuredAsync to CryptographyBuilder to construct structured encrypt/decrypt objects via withCredentialsObject and withConfigurationObject.
    • Adds UbiqFactory.readConfigurationFromFile(configurationFile) for loading configuration from an explicit file path.

    10 details in Everything

16. docs update Sep 25, 2026 · issue 085

    Ubiq Java library adds integer, long, datetime, date, token, and generic-string structured encryption plus proxy support and thread-safe session API⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ USE IT
    Pre-warm the dataset and key cache at startup to eliminate first-call latency for high-throughput encryption pipelines.
    java copy

    // Load cache for specific datasets at startup
    String[] datasets = {"dataset1", "dataset2"};
    ubiqEncryptDecrypt.loadCache(datasets);
    
    // Or load all datasets associated with the credentials
    ubiqEncryptDecrypt.loadCache(new String[0]);

    Enable always-bubble-exceptions mode so integration tests and CI pipelines see real errors instead of silent nulls.
    json copy

    {
      "java_options": {
        "always_bubble_exceptions": true
      }
    }

    Route all Ubiq API calls through a local mitmproxy instance to inspect or audit traffic during development.
    copy

    $ docker run --rm -it -p 8080:8080 mitmproxy/mitmproxy mitmproxy --mode regular --listen-port 8080

    • Adds initSession() method returning UbiqUnstructuredEncryptSession / UbiqUnstructuredDecryptSession to manage state across begin, update, and end calls in a thread-safe way.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds encryptInt(), decryptInt(), and encryptIntForSearch() methods for 32-bit integer datasets (plaintext range -99,999,999 to 99,999,999).
    • Adds encryptLong(), decryptLong(), and encryptLongForSearch() methods for 64-bit long datasets (plaintext range -9,999,999,999,999,999 to 9,999,999,999,999,999).
    • Adds encryptDateTime(), decryptDateTime(), and encryptDateTimeForSearch() methods for OffsetDateTime datetime datasets.
    • Adds encryptDate(), decryptDate(), and encryptDateForSearch() methods for OffsetDateTime date-only datasets.

    +5 more show less

    • Adds Token dataset support (64- or 128-character base62 output) via the existing encrypt(), decrypt(), and encryptForSearch() methods.
    • Adds Generic string dataset support (base32 or base64 encoded, UTF-8 input) via encrypt(), decrypt(), and encryptForSearch().
    • Adds loadCache(dataset_name) and loadCache(String[]) methods to pre-populate or refresh the dataset and data-encryption-key cache; passing an empty array loads all datasets for the API key.
    • Adds always_bubble_exceptions boolean key under java_options in the configuration file to force exceptions to surface rather than returning empty or null (default: false).
    • Adds proxy support for Ubiq Java library API calls via an optional proxy section in the configuration file, compatible with mitmproxy on port 8080.

    10 details in Everything

17. docs update Sep 25, 2026 · issue 085

    Ubiq Go v2 adds typed structured encryption for integers, dates, and datetimes, plus key-number introspection and cache pre-loading.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ USE IT
    Detect stale encrypted records after a key rotation so you can re-encrypt only the rows that used an old key.
    go copy

    enc, _ := ubiq.NewStructuredEncryption(creds)
    dec, _ := ubiq.NewStructuredDecryption(creds)
    
    currentKey, _ := enc.GetCurrentKeyNumber("SSN")
    cipherKey, _ := dec.GetKeyNumber("SSN", storedCipherText)
    if cipherKey != currentKey {
        // re-encrypt storedCipherText with the current key
    }

    Encrypt a native Go int64 (e.g. a birth year) and decrypt it back, preserving the integer type throughout.
    go copy

    enc, _ := ubiq.NewStructuredEncryption(creds)
    defer enc.Close()
    cipherInt, err := enc.CipherInt64("BIRTH_YEAR", int64(1985), nil)
    
    dec, _ := ubiq.NewStructuredDecryption(creds)
    plainInt, err := dec.DecipherInt64("BIRTH_YEAR", cipherInt, nil)

    Cap the in-process structured-encryption cache to 256 MB to prevent runaway memory use in long-lived services.
    json copy

    {
      "golang": {
        "cache_hard_max_size_mb": 256
      }
    }

    • Adds CipherInt32, CipherInt64, CipherInt32ForSearch, and CipherInt64ForSearch methods on StructuredEncryption to encrypt native Go int32/int64 values against datasets configured with data_type: integer (and size: 32 or size: 64).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds CipherDate and CipherDateTime methods on StructuredEncryption to encrypt time.Time values against datasets configured with data_type: date or data_type: datetime, with *ForSearch variants for multi-key lookups.
    • Adds DecipherDate and DecipherDateTime methods on StructuredDecryption to decrypt date/datetime ciphertexts back to time.Time values.
    • Adds CipherAndKeyNumber method on StructuredEncryption to return both the ciphertext and the key version number used to encrypt it.
    • Adds GetCurrentKeyNumber method on StructuredEncryption to fetch the live current key number for a dataset from the server without encrypting anything, and cache the result locally.

    +4 more show less

    • Adds GetKeyNumberInt32, GetKeyNumberInt64, GetKeyNumberDate, and GetKeyNumberDateTime typed variants on StructuredDecryption for datasets with non-string native types.
    • Adds cache_hard_max_size_mb Golang-specific config key (wrapping BigCache) to set a hard memory cap in MB for the structured-encryption cache; 0 means no limit (default: 0).
    • Supports data_type: generic_string and data_type: token datasets via the standard Cipher/CipherForSearch APIs on StructuredEncryption and StructuredDecryption with no additional code changes.
    • Publishes Go v2 of the library at gitlab.com/ubiqsecurity/ubiq-go/v2, required for Structured Encryption support.

    9 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Importing gitlab.com/ubiqsecurity/ubiq-go (without /v2) returns the v1 library, which does not support Structured Encryption; all imports must be updated to gitlab.com/ubiqsecurity/ubiq-go/v2 to access any structured-encryption features.
18. docs update Sep 25, 2026 · issue 085

    Ubiq C libraries gain Okta/Entra IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. authentication and a builder-pattern API for encryption objects⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ TRY IT
    Authenticate to Ubiq via Okta SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. credentials instead of API keys — useful when your org mandates centralized identity management.
    copy

    $ export UBIQ_IDP_USERNAME=user@example.com
    export UBIQ_IDP_PASSWORD=s3cr3t

    Declare Okta IDP parameters in a config file so the C/C++ library picks them up without hardcoding credentials in code.
    json copy

    {
      "idp": {
        "provider": "okta",
        "ubiq_customer_id": "f6f.....08c5",
        "idp_token_endpoint_url": "https://dev-<domain>.okta.com/oauth2/v1/token",
        "idp_tenant_id": "0o....d7",
        "idp_client_secret": "yro.....2Db"
      }
    }

    Use the builder pattern to construct both a structured encryptor and decryptor from shared credentials and config — cleaner than separate init calls.
    cpp copy

    ubiq::platform::builder builder;
    ubiq::platform::credentials creds;
    ubiq::platform::configuration config;
    ubiq::platform::structured::encryption e = builder.with(creds).with(config).buildStructuredEncryption();
    ubiq::platform::structured::decryption d = builder.with(creds).with(config).buildStructuredDecryption();

    • Adds IDP integration support for Okta and Entra, allowing authentication via username/password instead of API keys, configured through UBIQ_IDP_USERNAME and UBIQ_IDP_PASSWORD environment variables.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds ubiq_platform_credentials_set_idp() (C) and credentials.set_idp_parameters() (C++) to supply IDP username, password, and host at runtime.
    • Adds ubiq_platform_configuration_set_idp() (C) and configuration.set_idp_parameters() (C++) to configure IDP provider parameters including provider (okta or entra), ubiq_customer_id, idp_token_endpoint_url, idp_tenant_id, and idp_client_secret.
    • Adds an idp configuration block (JSON) supporting fields provider, ubiq_customer_id, idp_token_endpoint_url, idp_tenant_id, and idp_client_secret for declarative IDP setup.
    • Adds a builder design pattern API (ubiq_platform_builder_create, ubiq_platform_builder_set_credentials, ubiq_platform_builder_set_configuration, ubiq_platform_builder_build_unstructured_encrypt, ubiq_platform_builder_build_unstructured_decrypt) for constructing unstructured encryption and decryption objects in C.

    +2 more show less

    • Adds ubiq_platform_builder_build_structured() (C) and builder.buildStructuredEncryption() / builder.buildStructuredDecryption() (C++) for constructing structured encryption/decryption objects via the builder pattern.
    • Adds session-based unstructured encryption and decryption APIs (ubiq_platform_encryption_init_session, ubiq_platform_encryption_begin, ubiq_platform_encryption_update, ubiq_platform_encryption_end, ubiq_platform_encryption_destroy_session and decryption equivalents) to support encrypting multiple plaintexts with a single key under one session.

    7 details in Everything

19. docs update Sep 25, 2026 · issue 085
    └──▷ USE IT
    Encrypt sensitive columns (SSN, Birthdate) pulled from BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data. in a DAGDAGA directed acyclic graph — a data structure of nodes connected by one-way edges with no cycles — used by tools to model task pipelines or data flows where execution order and dependencies must be enforced without loops., then decrypt them in a downstream task — without touching non-sensitive columns.
    python copy

    import ubiq_security as ubiq
    from operators.ubiq_encrypt_operator import UbiqEncryptOperator
    from operators.ubiq_decrypt_operator import UbiqDecryptOperator
    
    creds = ubiq.configCredentials(config_file='ubiq-credentials', profile='default')
    
    get_data = BigQueryGetDataOperator(
        task_id='get_data',
        dataset_id=DATASET_NAME,
        table_id=TABLE_NAME,
        max_results=10,
        selected_fields='name,email,ssn,birthday',
    )
    
    enc_task = UbiqEncryptOperator(
        task_id='enc_task',
        credentials=creds,
        data_task=get_data.task_id,
        dataset_names=['', '', 'SSN', 'Birthdate'],
    )
    
    dec_task = UbiqDecryptOperator(
        task_id='ubiq_dec_task',
        credentials=creds,
        data_task=enc_task.task_id,
        dataset_names=['', '', 'SSN', 'Birthdate'],
    )
    
    get_data >> enc_task >> dec_task

20. docs update Sep 25, 2026 · issue 085

    Ubiq Security BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data. integration gains IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. authentication support, letting enterprise users encrypt/decrypt without API keys.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ TRY IT
    Deploy the IDP broker function that handles the SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave.-based Ubiq/BigQuery handshake for keyless authentication.
    copy

    $ cd ubiq-broker/ubiq_idp_auth && gcloud functions deploy ubiq_idp_auth --gen2 --runtime=nodejs20 --source=. --entry-point=ubiq_idp_auth --trigger-http

    Start a keyless BigQuery session using IDP auth instead of passing API key credentials.
    copy

    $ CALL BQ_DATASET.begin_idp_session('dataset_names');

    • Adds IDP authentication for BigQuery enterprise customers, enabling encrypt/decrypt using existing BigQuery user sessions instead of API keys, configured via IDP_CUSTOMER_ID and IDP_PRIVATE_KEY_PATH environment variables.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Introduces ubiq_idp_auth Cloud Function (deployed via gcloud functions deploy ubiq_idp_auth) to handle the SCIM-based handshake between Ubiq and BigQuery.
    • Adds ubiq_idp_auth BigQuery remote function and ubiq_begin_idp_session procedure as IDP-aware replacements for begin_ubiq_session, requiring no API keys.

    3 details in Everything

21. changelog Sep 24, 2026 · issue 084

    Ubiq Security: date and datetime datasets now work with input character sets other than 0-9.

    └──▷ USE IT
    Inspect which key number protects a ciphertext in Go — useful for key-rotation audits — without triggering a full decrypt.
    go copy

    keyNum, err := ubiq.GetKeyNumber(ciphertext)
    if err != nil {
        log.Fatal(err)
    }
    fmt.Printf("Protected by key number: %d\n", keyNum)

    Enable Grafana Loki as a SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. destination for Ubiq activity events — navigate the console to reach the new unified Integrations page.
    📍In the Ubiq console, go to Settings › Integrations, select Grafana Loki under SIEM, and follow the prompts to supply your Loki endpoint and credentials.
22. changelog Sep 24, 2026 · issue 084
    └──▷ USE IT
    Inspect the key number behind an existing ciphertext in Go without decrypting it — useful for key rotation audits.
    go copy

    keyNum, err := ubiq.GetKeyNumber(ciphertext)
    if err != nil {
        log.Fatal(err)
    }
    fmt.Println('Key number:', keyNum)

23. docs update Sep 24, 2026 · issue 084
    └──▷ USE IT
    Warm all dataset key caches before a high-volume encrypt loop to eliminate per-dataset API calls at runtime.
    php copy

    \Ubiq\loadCache($credentials, ["SSN", "FIRST_NAME", "LAST_NAME"]);
    $cipher = \Ubiq\encrypt($credentials, $plaintext, "SSN");

    Encrypt a 64-bit integer field (e.g. a numeric account ID) using a dataset configured with data_type = 'integer'.
    php copy

    $cipher_int = \Ubiq\encryptInteger($credentials, -493356814481025, "integer64");
    $plain_int  = \Ubiq\decryptInteger($credentials, $cipher_int, "integer64");

    Generate all ciphertext variants of an encrypted date field across key rotations so it can be searched in a database.
    php copy

    $plain_date   = new \DateTimeImmutable('1530-09-21T00:00:00Z');
    $cipher_dates = \Ubiq\encryptDateForSearch($credentials, $plain_date, "date_2keys");
    // $cipher_dates contains one entry per active key rotation

    └──▷ BREAKING ON UPGRADE

    • !\Ubiq\primeKeyCache() is removed in 2.1.0 — callers must switch to \Ubiq\loadCache().
24. docs update Sep 24, 2026 · issue 084
    └──▷ USE IT
    Encrypt an integer field (e.g. a customer ID) using a pre-configured 32-bit dataset so it remains searchable in the database.
    javascript copy

    const credentials = ubiq.UbiqFactory.readCredentialsFromFile('./credentials', 'default');
    const configuration = ubiq.UbiqFactory.defaultConfiguration();
    const ubiqEncryptDecrypt = await (new ubiq.CryptographyBuilder())
      .withCredentialsObject(credentials)
      .withConfigurationObject(configuration)
      .buildStructuredAsync();
    
    const tweakFF1 = [];
    const int32 = await ubiqEncryptDecrypt.EncryptNumberAsync('int32', 9, tweakFF1);
    const searchValues = await ubiqEncryptDecrypt.encryptNumberForSearchAsync('int32', 9, tweakFF1);
    // searchValues contains all ciphertexts needed for an encrypted search

    Authenticate using an identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. instead of static API keys when deploying in an SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management.-managed environment.
    javascript copy

    const credentials = ubiq.UbiqFactory.createCredentialsWithIdp(<username>, <password>, <host>);
    const ubiqEncryptDecrypt = await (new ubiq.CryptographyBuilder())
      .withCredentialsObject(credentials)
      .withConfigurationObject(ubiq.UbiqFactory.defaultConfiguration())
      .buildStructuredAsync();

    Tag usage records with incident or pipeline context so the audit log can be correlated with external systems.
    javascript copy

    const ubiqEncryptDecrypt = await (new ubiq.CryptographyBuilder())
      .withCredentialsObject(credentials)
      .withConfigurationObject(configuration)
      .buildStructuredAsync();
    
    ubiqEncryptDecrypt.addReportingUserDefinedMetadata('{"pipeline": "ingest", "team": "data-eng"}');
    const ct = await ubiqEncryptDecrypt.EncryptAsync('token64', 'abc', []);

25. docs update Sep 24, 2026 · issue 084

    Ubiq Security: Adds proxy support for API calls via an optional proxy section in the configuration file, with instructions for running mitmproxy via Docker (docker run mitmproxy/mitmproxy) or directly (mitmproxy --mode regular --listen-port 8080).

    └──▷ USE IT
    Warm the dataset cache at startup for specific datasets so first-use latency is eliminated in a high-throughput pipeline.
    java copy

    String[] datasets = {"dataset1", "dataset2"};
    ubiqEncryptDecrypt.loadCache(datasets);
    
    // Or load all datasets for the active API key:
    ubiqEncryptDecrypt.loadCache(new String[0]);

    Enforce that all encryption errors surface as thrown exceptions instead of silent nulls, to make error handling explicit in production code.
    json copy

    {
      "java_options": {
        "always_bubble_exceptions": true
      }
    }

    Inspect Ubiq API traffic through a local mitmproxy instance to audit or debug encrypted payloads during development.
    copy

    $ mitmproxy --mode regular --listen-port 8080

26. docs update Sep 24, 2026 · issue 084

    Ubiq Security: Adds CipherInt32, CipherInt64, CipherInt32ForSearch, and CipherInt64ForSearch methods on StructuredEncryption — and matching DecipherInt32/DecipherInt64 on StructuredDecryption — to encrypt and decrypt native Go integer types against datasets configured with data_type: integer (size: 32 or size: 64).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ USE IT
    Detect stale-key ciphertexts and re-encrypt them with the current key — useful in a data-migration job after a server-side key rotation.
    go copy

    enc, _ := ubiq.NewStructuredEncryption(creds)
    dec, _ := ubiq.NewStructuredDecryption(creds)
    
    currentKey, _ := enc.GetCurrentKeyNumber("SSN")
    usedKey, _ := dec.GetKeyNumber("SSN", existingCipherText)
    
    if usedKey != currentKey {
        plain, _ := dec.Cipher("SSN", existingCipherText, nil)
        newCipher, _, _ := enc.CipherAndKeyNumber("SSN", plain, nil)
        // persist newCipher
    }

    Encrypt a native int64 birth year and a date of birth in one pass — preserving the dataset's expected native types end-to-end.
    go copy

    enc, _ := ubiq.NewStructuredEncryption(creds)
    defer enc.Close()
    
    cipherYear, err := enc.CipherInt64("BIRTH_YEAR", int64(1985), nil)
    cipherDate, err := enc.CipherDate("BIRTH_DATE", time.Date(1985, 6, 15, 0, 0, 0, 0, time.UTC), nil)
    
    dec, _ := ubiq.NewStructuredDecryption(creds)
    plainYear, _ := dec.DecipherInt64("BIRTH_YEAR", cipherYear, nil)
    plainDate, _ := dec.DecipherDate("BIRTH_DATE", cipherDate, nil)

    Pre-warm the dataset cache at startup to eliminate first-use latency in a high-throughput service, and cap memory usage with cache_hard_max_size_mb.
    yaml copy

    cache_hard_max_size_mb: 256

    • Adds GetKeyNumber, GetKeyNumberInt32, GetKeyNumberInt64, GetKeyNumberDate, and GetKeyNumberDateTime on StructuredDecryption to inspect which key version a ciphertext was encrypted with, without decrypting it or logging a usage event.
    • Adds LoadCache() on both StructuredEncryption and StructuredDecryption objects to pre-populate (or refresh the TTLTTLTime to live, a limit on how long data remains valid or how far a packet can travel. Caches use a time limit; IP packets use a hop limit. of) specific datasets by name — pass an empty slice to load all datasets.
    • Migrates the canonical Go library import path to gitlab.com/ubiqsecurity/ubiq-go/v2; the /v2 suffix is required to access Structured Encryption — importing without it selects the v1 library.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Importing gitlab.com/ubiqsecurity/ubiq-go without the /v2 suffix now resolves to the v1 library, which does not support Structured Encryption — existing code that relied on v1 behaviour must explicitly pin v1 or update imports to /v2.
27. docs update Sep 24, 2026 · issue 084
    └──▷ TRY IT
    Authenticate to the Ubiq platform via Okta SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. instead of API keys by setting IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. credentials as environment variables.
    copy

    $ export UBIQ_IDP_USERNAME='alice@example.com'
    export UBIQ_IDP_PASSWORD='s3cr3t'

    Configure Okta IDP parameters in the Ubiq credentials file so the library can exchange user credentials for a platform token.
    json copy

    {
      "idp": {
        "provider": "okta",
        "ubiq_customer_id": "f6f.....08c5",
        "idp_token_endpoint_url": "https://dev-<domain>.okta.com/oauth2/v1/token",
        "idp_tenant_id": "0o....d7",
        "idp_client_secret": "yro.....2Db"
      }
    }

    Use the builder pattern (C++) to construct both a structured encryptor and decryptor from the same credentials and configuration object.
    cpp copy

    ubiq::platform::builder builder;
    ubiq::platform::credentials creds;
    ubiq::platform::configuration config;
    ubiq::platform::structured::encryption e = builder.with(creds).with(config).buildStructuredEncryption();
    ubiq::platform::structured::decryption d = builder.with(creds).with(config).buildStructuredDecryption();

28. docs update Sep 24, 2026 · issue 084

    Ubiq Security: Operators accept a credentials parameter (Ubiq credentials object), a data_task parameter (task ID of the upstream data task), and a dataset_names list mapping columns to Ubiq dataset names, enabling column-level encryption on tabular data such as BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data. results.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ USE IT
    Encrypt sensitive columns (SSN, Birthdate) pulled from BigQuery before storing or forwarding them, then decrypt in the same DAGDAGA directed acyclic graph — a data structure of nodes connected by one-way edges with no cycles — used by tools to model task pipelines or data flows where execution order and dependencies must be enforced without loops. to verify round-trip correctness.
    python copy

    import ubiq_security as ubiq
    from operators.ubiq_encrypt_operator import UbiqEncryptOperator
    from operators.ubiq_decrypt_operator import UbiqDecryptOperator
    
    creds = ubiq.configCredentials(config_file='ubiq-credentials', profile='default')
    
    get_data = BigQueryGetDataOperator(
        task_id='get_data',
        dataset_id=DATASET_NAME,
        table_id=TABLE_NAME,
        max_results=10,
        selected_fields='name,email,ssn,birthday',
    )
    
    enc_task = UbiqEncryptOperator(
        task_id='enc_task',
        credentials=creds,
        data_task=get_data.task_id,
        dataset_names=['', '', 'SSN', 'Birthdate'],
    )
    
    dec_task = UbiqDecryptOperator(
        task_id='dec_task',
        credentials=creds,
        data_task=enc_task.task_id,
        dataset_names=['', '', 'SSN', 'Birthdate'],
    )
    
    get_data >> enc_task >> dec_task

    • Install via pip install ubiq_security; operators are loaded automatically when placed under plugins/operators/ in the Airflow home directory.

    1 detail in Everything

29. docs update Sep 24, 2026 · issue 084

    Ubiq Security: Adds IDP_CUSTOMER_ID and IDP_PRIVATE_KEY_PATH environment variables to configure SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. customer identity and the path to a Secret Manager-mounted private key for the Cloud Function.

    └──▷ TRY IT
    Deploy the IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. broker function to handle SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave.-based authentication between your identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. and BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data., replacing API-key-based session setup.
    copy

    $ cd ubiq-broker/ubiq_idp_auth && gcloud functions deploy ubiq_idp_auth --gen2 --runtime=nodejs20 --source=. --entry-point=ubiq_idp_auth --trigger-http

    Start an IDP-authenticated BigQuery session without API keys — use this in place of begin_ubiq_session once IDP provisioning is complete.
    copy

    $ CALL BQ_DATASET.begin_idp_session('dataset_names');

    Configure the Cloud Function with the IDP customer ID and the Secret Manager volume path for the private key, so the function authenticates via SSO on every invocation.
    env copy

    IDP_CUSTOMER_ID=<your-ubiq-customer-id>
    IDP_PRIVATE_KEY_PATH=/idp/idp_private_key

30. changelog Sep 23, 2026 · issue 083

    Ubiq Security: date and datetime datasets now work with input character sets other than 0-9.

    └──▷ USE IT
    Retrieve the key number behind a ciphertext in Go without performing a full decryption — useful for key-rotation auditing or ciphertext provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build. checks.
    go copy

    keyNum, err := ubiq.GetKeyNumber(ciphertext)
    if err != nil {
        log.Fatal(err)
    }
    fmt.Printf('Key number: %d\n', keyNum)

    Add the Ubiq Rust SDK to a new project to encrypt structured or unstructured data, including date/time fields and search-optimised ciphertext.
    Cargo.toml copy

    # Cargo.toml
    [dependencies]
    ubiq-rust = '*'

31. docs update Sep 23, 2026 · issue 083

    Ubiq Security: Adds \Ubiq\encryptDate() / \Ubiq\decryptDate() and \Ubiq\encryptDateTime() / \Ubiq\decryptDateTime() for data_type = 'date' and data_type = 'datetime' datasets, with UTC enforcement and data_type_config min/max range validation before the cipher call.

    └──▷ USE IT
    Warm the full key and dataset cache before a bulk encrypt loop to avoid one API call per dataset.
    php copy

    // Prefetch every dataset the API key can access:
    \Ubiq\loadCache($credentials);
    
    // Or scope to just the datasets you need:
    \Ubiq\loadCache($credentials, ['SSN', 'FIRST_NAME', 'LAST_NAME']);
    
    // Subsequent calls hit the cache — no per-dataset network round-trip:
    $cipher = \Ubiq\encrypt($credentials, '123-45-6789', 'SSN');

    Encrypt a 64-bit integer dataset value (e.g. a numeric account ID) and later recover all searchable ciphertexts across key rotations.
    php copy

    $cipher_int = \Ubiq\encryptInteger($credentials, -493356814481025, 'integer64');
    $plain_int   = \Ubiq\decryptInteger($credentials, $cipher_int, 'integer64');
    
    // Search across all active key rotations:
    $cipher_ints = \Ubiq\encryptIntegerForSearch($credentials, -493356814481025, 'integer64');

    Encrypt a date or datetime field and retrieve all rotation variants needed to query an encrypted column.
    php copy

    $plain_date   = new \DateTimeImmutable('1530-09-21T00:00:00Z');
    $cipher_date  = \Ubiq\encryptDate($credentials, $plain_date, 'date_2keys');
    $cipher_dates = \Ubiq\encryptDateForSearch($credentials, $plain_date, 'date_2keys');
    
    $plain_dt   = new \DateTimeImmutable('2092-11-22T22:38:20Z');
    $cipher_dt  = \Ubiq\encryptDateTime($credentials, $plain_dt, 'datetime');
    $cipher_dts = \Ubiq\encryptDateTimeForSearch($credentials, $plain_dt, 'datetime');

    └──▷ BREAKING ON UPGRADE

    • !\Ubiq\primeKeyCache() is removed in 2.1.0; callers must switch to \Ubiq\loadCache().
32. docs update Sep 23, 2026 · issue 083

    Ubiq Security: Adds encryptNumberForSearchAsync for searchable encryption over integer datasets (32-bit and 64-bit).

    └──▷ USE IT
    Encrypt and search an integer field (e.g. a customer ID) stored in a database without revealing the plaintext — requires a pre-configured int32 dataset.
    javascript copy

    const credentials = ubiq.UbiqFactory.readCredentialsFromFile('./credentials', 'default');
    const configuration = ubiq.UbiqFactory.defaultConfiguration();
    const ubiqEncryptDecrypt = await (new ubiq.CryptographyBuilder())
      .withCredentialsObject(credentials)
      .withConfigurationObject(configuration)
      .buildStructuredAsync();
    
    const tweakFF1 = [];
    const encrypted = await ubiqEncryptDecrypt.EncryptNumberAsync('int32', 12345, tweakFF1);
    const searchTokens = await ubiqEncryptDecrypt.encryptNumberForSearchAsync('int32', 12345, tweakFF1);
    // Use searchTokens to query the database for all matching encrypted values

    Authenticate via an IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. instead of static API keys when running in environments with SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. or federated identity.
    javascript copy

    const credentials = ubiq.UbiqFactory.createCredentialsWithIdp('<username>', '<password>', '<host>');
    const ubiqEncryptDecrypt = await (new ubiq.CryptographyBuilder())
      .withCredentialsObject(credentials)
      .withConfigurationObject(ubiq.UbiqFactory.defaultConfiguration())
      .buildStructuredAsync();

    Tag all encryption usage records with a tenant or job identifier for audit and billing attribution.
    javascript copy

    const ubiqEncryptDecrypt = await (new ubiq.CryptographyBuilder())
      .withCredentialsObject(credentials)
      .withConfigurationObject(configuration)
      .buildStructuredAsync();
    
    ubiqEncryptDecrypt.addReportingUserDefinedMetadata('{"tenant": "acme-corp", "job": "nightly-batch"}');

    • Adds buildStructuredAsync() on CryptographyBuilder to construct a structured encryption/decryption object supporting all structured dataset types.
    • Documents multithreaded-environment behavior: Ubiq objects must be created and destroyed per worker thread because NodeJS workers serialize/copy objects rather than sharing them.

    2 details in Everything

33. docs update Sep 23, 2026 · issue 083

    Ubiq Security: Adds initSession() on UbiqEncrypt and UbiqDecrypt returning UbiqUnstructuredEncryptSession / UbiqUnstructuredDecryptSession to provide thread-safe stateful unstructured encrypt/decrypt sessions reusable across multiple objects.

    └──▷ USE IT
    Pre-warm the dataset and key cache at startup so first-call latency is eliminated for high-throughput encryption workloads.
    java copy

    // Load cache for two specific datasets at application startup
    String[] datasets = {"Int32", "datetime"};
    ubiqEncryptDecrypt.loadCache(datasets);
    
    // Or load all datasets associated with the active API key
    ubiqEncryptDecrypt.loadCache(new String[0]);

    Force the library to surface errors immediately rather than silently swallowing them — useful in CI pipelines or strict production environments.
    json copy

    {
      "java_options": {
        "always_bubble_exceptions": true
      }
    }

    Intercept and inspect Ubiq API calls locally during integration testing using a mitmproxy container.
    copy

    $ docker run --rm -it -p 8080:8080 mitmproxy/mitmproxy mitmproxy --mode regular --listen-port 8080

34. docs update Sep 23, 2026 · issue 083

    Ubiq Security: Go library v2 is now importable via gitlab.com/ubiqsecurity/ubiq-go/v2 with Structured Encryption support; the v1 path (gitlab.com/ubiqsecurity/ubiq-go) does not support Structured Encryption.

    └──▷ USE IT
    Detect records encrypted with a stale key so you can re-encrypt them with the current one — without decrypting the data.
    go copy

    cipherKeyNum, err := dec.GetKeyNumber(datasetName, cipherText)
    currentKeyNum, err := enc.GetCurrentKeyNumber(datasetName)
    if cipherKeyNum != currentKeyNum {
        // re-encrypt with current key
    }

    Encrypt a native Go int64 (e.g. a birth year) with format-preserving encryption so the stored value stays an integer.
    go copy

    enc, _ := ubiq.NewStructuredEncryption(creds)
    defer enc.Close()
    cipherInt, err := enc.CipherInt64("BIRTH_YEAR", int64(1985), nil)
    
    dec, _ := ubiq.NewStructuredDecryption(creds)
    plainInt, err := dec.DecipherInt64("BIRTH_YEAR", cipherInt, nil)

    Pre-warm the dataset cache at startup so the first encryption call has no server round-trip latency.
    go copy

    enc, _ := ubiq.NewStructuredEncryption(creds)
    enc.LoadCache([]string{"SSN", "BIRTH_DATE", "BIRTH_YEAR"})
    
    dec, _ := ubiq.NewStructuredDecryption(creds)
    dec.LoadCache([]string{}) // empty slice loads ALL datasets

35. docs update Sep 23, 2026 · issue 083
    └──▷ TRY IT
    Authenticate to the Ubiq platform via Okta instead of an API key — useful when your organisation mandates SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. for all platform access.
    copy

    $ export UBIQ_IDP_USERNAME=user@example.com
    export UBIQ_IDP_PASSWORD=s3cr3t

    Wire up full Okta IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. parameters in the Ubiq configuration file so that every call to the library authenticates through your Okta tenant.
    json copy

    {
      "idp": {
        "provider": "okta",
        "ubiq_customer_id": "f6f.....08c5",
        "idp_token_endpoint_url": "https://dev-<domain>.okta.com/oauth2/v1/token",
        "idp_tenant_id": "0o....d7",
        "idp_client_secret": "yro.....2Db"
      }
    }

    Use the C++ builder pattern to construct both structured and unstructured encryption objects from a single credentials and configuration pair.
    c++ copy

    ubiq::platform::builder builder;
    ubiq::platform::credentials creds;
    ubiq::platform::configuration config;
    
    // Unstructured
    ubiq::platform::encryption e = builder.with(creds).with(config).buildUnstructuredEncryption();
    ubiq::platform::decryption d = builder.with(creds).with(config).buildUnstructuredDecryption();
    
    // Structured
    ubiq::platform::structured::encryption se = builder.with(creds).with(config).buildStructuredEncryption();
    ubiq::platform::structured::decryption sd = builder.with(creds).with(config).buildStructuredDecryption();

36. docs update Sep 23, 2026 · issue 083

    Ubiq Security: Adds UbiqEncryptOperator and UbiqDecryptOperator Airflow Operators (importable from plugins/operators/) for performing structured encrypt and decrypt operations inside DAGs, accepting tabular data as a list of lists.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ USE IT
    Encrypt sensitive columns (SSN, Birthdate) from a BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data. table pull inside an Airflow DAGDAGA directed acyclic graph — a data structure of nodes connected by one-way edges with no cycles — used by tools to model task pipelines or data flows where execution order and dependencies must be enforced without loops., then decrypt in a follow-on task — leaving non-sensitive columns untouched.
    python copy

    import ubiq_security as ubiq
    from operators.ubiq_encrypt_operator import UbiqEncryptOperator
    from operators.ubiq_decrypt_operator import UbiqDecryptOperator
    
    creds = ubiq.configCredentials(config_file='ubiq-credentials', profile='default')
    
    enc_task = UbiqEncryptOperator(
        task_id='enc_task',
        credentials=creds,
        data_task=get_data.task_id,
        dataset_names=['', '', 'SSN', 'Birthdate']
    )
    
    dec_task = UbiqDecryptOperator(
        task_id='dec_task',
        credentials=creds,
        data_task=enc_task.task_id,
        dataset_names=['', '', 'SSN', 'Birthdate']
    )
    
    get_data >> enc_task >> dec_task

    • Supports per-column dataset mapping via the dataset_names parameter, allowing selective encryption of specific columns while leaving others untouched within the same Airflow task.
    • Integrates with Ubiq credentials via ubiq.configCredentials(config_file=..., profile=...), scoping each DAG to specific datasets and permissions.

    2 details in Everything

37. docs update Sep 23, 2026 · issue 083

    Ubiq Security: Adds IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. (Identity Provider) authentication for BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data. encryption/decryption, allowing enterprise customers to authenticate via SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. instead of API keys using IDP_CUSTOMER_ID and IDP_PRIVATE_KEY_PATH environment variables.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ TRY IT
    Deploy the IDP broker function so BigQuery can authenticate via your SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave.-configured identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. instead of static API keys.
    copy

    $ cd ubiq-broker/ubiq_idp_auth && gcloud functions deploy ubiq_idp_auth --gen2 --runtime=nodejs20 --source=. --entry-point=ubiq_idp_auth --trigger-http

    Register the IDP remote function and session procedure in BigQuery so queries can encrypt/decrypt without embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. API keys.
    copy

    $ CREATE OR REPLACE FUNCTION PROJECT_ID.BQ_DATASET.ubiq_idp_auth(dataset_names STRING) RETURNS JSON
    REMOTE WITH CONNECTION PROJECT_ID.CONNECTION_ID
    options (
      endpoint = 'URL TO UBIQ_IDP_AUTH'
    );
    
    CREATE OR REPLACE PROCEDURE PROJECT_ID.BQ_DATASET.ubiq_begin_idp_session(datasetNames STRING)
    BEGIN
      SELECT PROJECT_ID.BQ_DATASET.ubiq_idp_auth(datasetNames);
    END;

    Start an IDP-authenticated session before running encrypt/decrypt queries — no API key arguments needed.
    copy

    $ CALL BQ_DATASET.begin_idp_session('dataset_names');

    • Includes idp_setup.sh shell script to automate setup of SQL and Broker functions for IDP-based BigQuery integration.
    • Supports mounting the IDP private key as a Google Cloud Secret Manager volume in the ubiq-idp-auth Cloud RunCloud RunGoogle's managed container runtime that executes stateless workloads on demand, scaling to zero when idle, so tools can deploy without managing servers or paying for idle capacity. function, using IDP_PRIVATE_KEY_PATH to reference the mounted path (e.g. /idp/idp_private_key).

    2 details in Everything

38. docs update Sep 23, 2026 · issue 083

    Ubiq adds Integer, Date, and Date & Time structured dataset types so encrypted values stay in their original column type⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    ⤢ ⤢ ⤢ ⤢
    └──▷ USE IT
    Encrypt a 64-bit integer column in place without changing its column type — useful for protecting numeric IDs or financial figures in an existing schema.
    java copy

    // Java: encrypt a long value using a 64-bit Integer dataset
    long encrypted = ubiqEncrypt.encryptLong("my-integer-dataset", 1234567890L);
    long decrypted = ubiqDecrypt.encryptLong("my-integer-dataset", encrypted);

    Encrypt a timestamp field in Go while keeping the value as a native date-time type, so no schema changes are needed.
    go copy

    // Go: encrypt a time.Time value using a Date & Time dataset
    encrypted, err := ubiqEncrypt.CipherDateTime("my-datetime-dataset", originalTimestamp)
    decrypted, err := ubiqDecrypt.CipherDateTime("my-datetime-dataset", encrypted)

    Create a Token dataset in the Dataset Creation Wizard when you need fixed-length, base62-safe tokenized values — for example, replacing PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. in a database with 64-character tokens for values under 40 characters.
    📍In the Ubiq console, go to Datasets › Create Dataset, select Structured › Token, and set Token length to 64 or 128 characters.
    • Adds Integer structured dataset type supporting 32-bit (-99,999,999 to 99,999,999) and 64-bit (-9,999,999,999,999,999 to 9,999,999,999,999,999) whole numbers, with encrypted output staying within integer ranges compatible with existing column types.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds Date structured dataset type for calendar dates (01/01/0001 to 11/28/2738) with no time component, requiring no custom conversion code in your application.
    • Adds Date & Time structured dataset type for timestamps to the second (1653-02-10 06:13:21 to 2286-11-20 17:46:39 UTC), with encrypted values falling between 0018-01-16 11:01:21 and 3921-12-16 12:58:39 UTC.
    • Adds Token structured dataset type producing fixed-length base62 tokens (A-Z, a-z, 0-9) in 64-character (strings under 40 chars) or 128-character (strings under 80 chars) sizes.
    • Exposes typed library methods for Integer, Date, and Date & Time datasets — including encryptInt / encryptLong / encryptDate in Java and CipherInt64 / CipherDate / CipherDateTime in Go — supported from C/C++ 2.3.0.0, .NET 2.4.0, Go 2.3.0, Java 2.3.0, Node.js 2.4.0, PHP 2.1.0, and Python 2.4.0.

    5 details in Everything

39. docs update Sep 22, 2026 · issue 082

    Ubiq PHP library gains typed dataset encryption, bulk key caching via loadCache, and typed search helpers for integer/date/datetime⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ USE IT
    Warm the key and dataset cache once at startup to avoid per-call API round-trips when encrypting across many FPEFPEFormat-Preserving Encryption, a cipher mode that encrypts data into ciphertext of the same format and length as the plaintext, letting tools tokenize sensitive fields without changing downstream schema or validation logic. datasets.
    php copy

    \Ubiq\loadCache($credentials, ['SSN', 'FIRST_NAME', 'LAST_NAME']);
    // subsequent calls hit the cache — no per-dataset network call
    $cipher = \Ubiq\encrypt($credentials, '123-45-6789', 'SSN');

    Encrypt and decrypt a 64-bit integer dataset (e.g. account IDs) using the typed entry points to avoid FF1 cipher mismatches.
    php copy

    $cipher_int = \Ubiq\encryptInteger($credentials, -493356814481025, 'integer64');
    $plain_int  = \Ubiq\decryptInteger($credentials, $cipher_int, 'integer64');

    Generate all rotation-era ciphertexts for a date value so a database index search matches records encrypted under any active key rotation.
    php copy

    $plain_date   = new \DateTimeImmutable('1530-09-21T00:00:00Z');
    $cipher_dates = \Ubiq\encryptDateForSearch($credentials, $plain_date, 'date_2keys');
    // $cipher_dates is an array — use it in a WHERE IN (...) query

    • Adds \Ubiq\loadCache($credentials, $datasets) to prefetch all dataset configs and encryption keys in a single call to /api/v0/fpe/def_keys, eliminating per-dataset API round-trips on subsequent encrypt/decrypt calls.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds \Ubiq\encryptInteger and \Ubiq\decryptInteger entry points for datasets configured with data_type = 'integer' (size 32 or 64), bridging values through the FF1 cipher correctly.
    • Adds \Ubiq\encryptDate and \Ubiq\decryptDate entry points for datasets configured with data_type = 'date', enforcing UTC-only DateTimeImmutable input.
    • Adds \Ubiq\encryptDateTime and \Ubiq\decryptDateTime entry points for datasets configured with data_type = 'datetime', enforcing UTC-only DateTimeImmutable input.
    • Adds \Ubiq\encryptIntegerForSearch, \Ubiq\encryptDateForSearch, and \Ubiq\encryptDateTimeForSearch typed search helpers that return arrays of ciphertexts across all active key rotations.

    +1 more show less

    • Transparently applies input_encoding (base64 or base32) and input_pad_character dataset config options on encrypt/decrypt with no caller-side changes required.

    6 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !\Ubiq\primeKeyCache() is removed in 2.1.0 — callers must replace all uses with \Ubiq\loadCache().
40. docs update Sep 22, 2026 · issue 082

    Ubiq JS library gains structured encryption for integers, datetimes, dates, tokens, and generic strings via new async methods⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ USE IT
    Encrypt a 32-bit integer field (e.g. an account ID) so it remains searchable in a database without exposing plaintext values.
    text copy

    const credentials = ubiq.UbiqFactory.readCredentialsFromFile('./credentials', 'default');
    const configuration = ubiq.UbiqFactory.defaultConfiguration();
    const ubiqEncryptDecrypt = await (new ubiq.CryptographyBuilder())
      .withCredentialsObject(credentials)
      .withConfigurationObject(configuration)
      .buildStructuredAsync();
    
    const tweakFF1 = [];
    const int32 = await ubiqEncryptDecrypt.EncryptNumberAsync('int32', 9, tweakFF1);
    const searchValues = await ubiqEncryptDecrypt.encryptNumberForSearchAsync('int32', 9, tweakFF1);
    // use searchValues to query encrypted column

    Attach custom audit metadata to usage records so SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. teams can correlate encryption activity with a specific application or tenant.
    text copy

    const ubiqEncryptDecrypt = await (new ubiq.CryptographyBuilder())
      .withCredentialsObject(credentials)
      .withConfigurationObject(configuration)
      .buildStructuredAsync();
    
    ubiqEncryptDecrypt.addReportingUserDefinedMetadata('{"app":"payments-service","tenant":"acme-corp"}');

    Authenticate via an identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. instead of static API keys, useful in SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management.-enforced enterprise environments.
    text copy

    const credentials = ubiq.UbiqFactory.createCredentialsWithIdp(<username>, <password>, <host>);
    const ubiqEncryptDecrypt = await (new ubiq.CryptographyBuilder())
      .withCredentialsObject(credentials)
      .withConfigurationObject(ubiq.UbiqFactory.defaultConfiguration())
      .buildStructuredAsync();

    • Adds EncryptNumberAsync and DecryptNumberAsync on CryptographyBuilder-built structured objects for 32-bit (values −99,999,999 to 99,999,999) and 64-bit (values −9,999,999,999,999,999 to 9,999,999,999,999,999) integer datasets, plus encryptNumberForSearchAsync for searchable encryption across both sizes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds EncryptDateTimeAsync, DecryptDateTimeAsync, and encryptDateTimeForSearchAsync for structured encryption of DateTime values (supported range 1653-02-10 to 2286-11-20 UTC) against a pre-configured DateTime dataset.
    • Adds EncryptDateAsync, DecryptDateAsync, and encryptDateForSearchAsync for structured encryption of Date-only values against a pre-configured Date dataset.
    • Adds structured encryption support for Token datasets of 64 characters (input up to 40 chars, base62 output) and 128 characters (input up to 80 chars, base62 output) via EncryptAsync, DecryptAsync, and encryptForSearchAsync.
    • Adds structured encryption support for generic string datasets with base32 or base64 encoding and configurable padding via EncryptAsync, DecryptAsync, and encryptForSearchAsync.

    +4 more show less

    • Adds addReportingUserDefinedMetadata method accepting a JSON string (max 1,024 characters) to attach custom metadata to usage records on structured and conventional encryption objects.
    • Adds UbiqFactory.createCredentialsWithIdp for creating credentials using an identity provider (IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems.) via <username>, <password>, and <host>.
    • Adds buildStructuredAsync on CryptographyBuilder to construct a structured encrypt/decrypt object alongside the existing buildEncryptionAsync and buildDecryptionAsync.
    • Documents multithreaded-environment behavior: CryptographyBuilder objects are serialized and copied between Node.js worker threads rather than shared, requiring separate create/destroy cycles per thread.

    9 details in Everything

41. docs update Sep 22, 2026 · issue 082

    Ubiq Java library adds integer, long, datetime, date, token, and generic-string FPEFPEFormat-Preserving Encryption, a cipher mode that encrypts data into ciphertext of the same format and length as the plaintext, letting tools tokenize sensitive fields without changing downstream schema or validation logic. types plus thread-safe sessions, proxy support, and cache preloading.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ USE IT
    Pre-warm the dataset and key cache for two specific datasets at startup to avoid first-use latency in latency-sensitive paths.
    java copy

    String[] datasets = {"dataset1", "dataset2"};
    ubiqEncryptDecrypt.loadCache(datasets);

    Force all exceptions to surface immediately rather than silently returning null, useful in strict error-handling pipelines.
    json copy

    {
      "java_options": {
        "always_bubble_exceptions": true
      }
    }

    Run a local mitmproxy instance to inspect Ubiq API traffic during development or integration testing.
    copy

    $ mitmproxy --mode regular --listen-port 8080

    • Adds initSession() on UbiqUnstructuredEncryptSession and UbiqUnstructuredDecryptSession to manage state across begin, update, and end calls in a thread-safe way, enabling concurrent unstructured encrypt/decrypt operations.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds encryptInt(), decryptInt(), and encryptIntForSearch() methods for 32-bit integer datasets (values between -99,999,999 and 99,999,999; encrypted range -1,470,375,551 to 1,470,375,551).
    • Adds encryptLong(), decryptLong(), and encryptLongForSearch() methods for 64-bit integer datasets (values between -9,999,999,999,999,999 and 9,999,999,999,999,999).
    • Adds encryptDateTime(), decryptDateTime(), and encryptDateTimeForSearch() methods for OffsetDateTime datasets (unencrypted range 1653-02-10 to 2286-11-20 UTC).
    • Adds encryptDate(), decryptDate(), and encryptDateForSearch() methods for date-only OffsetDateTime datasets (range 0001-01-01 to 2738-11-26).

    +5 more show less

    • Adds structured encrypt/decrypt/search support for 64-character and 128-character Token datasets (base62 output, A-Za-z0-9) via the existing encrypt(), decrypt(), and encryptForSearch() methods.
    • Adds structured encrypt/decrypt/search support for Generic string datasets encoded as base32 or base64, accepting arbitrary UTF-8 input (e.g., 'Ñáñ') via the existing encrypt(), decrypt(), and encryptForSearch() methods.
    • Adds loadCache(dataset_name) and loadCache(String[]) on UbiqStructuredEncryptDecrypt to explicitly pre-populate or refresh the dataset and data-encryption-key cache; passing an empty array loads all datasets for the active API key.
    • Adds always_bubble_exceptions Java-specific option under java_options in the configuration file (default: false); when true, exceptions are always propagated rather than trapped as null/empty returns.
    • Adds proxy support for the Ubiq Java library via an optional proxy section in the configuration file, routing API calls through a proxy server.

    10 details in Everything

42. docs update Sep 22, 2026 · issue 082

    Ubiq Go v2 library adds typed structured encryption (int32/int64/date/datetime), key-number inspection methods, and cache preloading⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ USE IT
    Detect records encrypted with a rotated-out key so you can re-encrypt them with the current key — without decrypting the data.
    go copy

    // Check whether a stored ciphertext is behind the current key
    currentKey, err := enc.GetCurrentKeyNumber(datasetName)
    recordKey, err := dec.GetKeyNumber(datasetName, cipherText)
    if recordKey != currentKey {
        // re-encrypt: decipher with old key, cipher with current key
    }

    Encrypt a native Go int64 (e.g. a birth year) with format-preserving encryption, then decrypt it back to the original integer type.
    go copy

    enc, _ := ubiq.NewStructuredEncryption(creds)
    defer enc.Close()
    cipherInt, err := enc.CipherInt64("BIRTH_YEAR", int64(1985), nil)
    
    dec, _ := ubiq.NewStructuredDecryption(creds)
    plainInt, err := dec.DecipherInt64("BIRTH_YEAR", cipherInt, nil)

    Pre-warm the dataset cache at startup to eliminate first-use latency in high-throughput services.
    go copy

    enc, _ := ubiq.NewStructuredEncryption(creds)
    enc.LoadCache([]string{"SSN", "BIRTH_DATE", "EVENT_TS"})
    
    dec, _ := ubiq.NewStructuredDecryption(creds)
    dec.LoadCache([]string{}) // empty slice loads all datasets

    • Adds CipherAndKeyNumber method to return both the structured ciphertext and the key version used to encrypt it in a single call.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds GetCurrentKeyNumber method to fetch the active key number for a dataset from the server without encrypting anything, with automatic local cache update.
    • Adds GetKeyNumber (on both StructuredEncryption and StructuredDecryption) to extract the key number embedded in an existing ciphertext without decrypting it or reporting a usage event.
    • Adds typed GetKeyNumber variants — GetKeyNumberInt32, GetKeyNumberInt64, GetKeyNumberDate, and GetKeyNumberDateTime — for datasets whose data_type is not a string.
    • Adds CipherInt32 and CipherInt64 methods on StructuredEncryption and DecipherInt32/DecipherInt64 on StructuredDecryption to encrypt/decrypt native Go integer types end-to-end, with *ForSearch variants for multi-key lookups.

    +6 more show less

    • Adds CipherDate and CipherDateTime methods on StructuredEncryption and mirroring DecipherDate/DecipherDateTime on StructuredDecryption for time.Time values, with *ForSearch variants.
    • Adds LoadCache() on encryption and decryption objects to pre-populate the dataset cache and reset TTLs for already-cached datasets before first use.
    • Adds Go-specific cache_hard_max_size_mb configuration key (from BigCache) to cap total cache memory in MB; defaults to 0 (no limit).
    • Adds support for datasets configured with data_type generic_string or token, usable through the existing Cipher/CipherForSearch API without code changes.
    • Introduces v2 of the Go library (import "gitlab.com/ubiqsecurity/ubiq-go/v2") required for Structured Encryption support; v1 import path does not include Structured Encryption.
    • Adds thread-safe NewEncryptionTS and NewDecryptionTS constructors with session-based Begin/Update/End API for concurrent encryption and decryption workloads.

    11 details in Everything

43. docs update Sep 22, 2026 · issue 082

    Ubiq C libraries gain Okta/Entra IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. authentication and a builder-pattern API for encryption objects⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ TRY IT
    Authenticate to Ubiq via Okta SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. instead of API keys, so enterprise users never handle long-lived API credentials.
    copy

    $ export UBIQ_IDP_USERNAME='alice@example.com'
    export UBIQ_IDP_PASSWORD='s3cr3t'
    # Then in C, configure the IDP provider details:
    ubiq_platform_credentials_set_idp(credentials, "alice@example.com", "s3cr3t", "<host>");
    ubiq_platform_configuration_set_idp(configuration, "okta", "f6f.....08c5", "https://dev-<domain>.okta.com/oauth2/v1/token", "0o....d7", "yro.....2Db");

    Use the builder pattern in C++ to create both structured encryption and decryption objects from a shared credentials and configuration in one fluent chain.
    copy

    $ ubiq::platform::builder builder;
    ubiq::platform::credentials creds;
    ubiq::platform::configuration config;
    ubiq::platform::structured::encryption e = builder.with(creds).with(config).buildStructuredEncryption();
    ubiq::platform::structured::decryption d = builder.with(creds).with(config).buildStructuredDecryption();

    Encrypt multiple independent messages in one session (e.g. batch processing) without re-initializing the encryption object each time.
    copy

    $ struct ubiq_platform_encryption_session * session = NULL;
    ubiq_platform_encryption_init_session(enc, &session);
    // First message
    ubiq_platform_encryption_begin(enc, session, &buf, &len);
    ubiq_platform_encryption_update(enc, session, ptbuf1, ptsize1, &buf, &len);
    ubiq_platform_encryption_end(enc, session, &buf, &len);
    // Second message — reuse session
    ubiq_platform_encryption_begin(enc, session, &buf, &len);
    ubiq_platform_encryption_update(enc, session, ptbuf2, ptsize2, &buf, &len);
    ubiq_platform_encryption_end(enc, session, &buf, &len);
    ubiq_platform_encryption_destroy_session(session);

    • Adds IDP integration supporting Okta and Entra as identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems., with credentials set via UBIQ_IDP_USERNAME and UBIQ_IDP_PASSWORD environment variables instead of API keys.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds ubiq_platform_credentials_set_idp() (C) and credentials.set_idp_parameters() (C++) to configure IDP username, password, and host on a credentials object.
    • Adds ubiq_platform_configuration_set_idp() (C) and configuration.set_idp_parameters() (C++) to configure IDP provider type (okta or entra), ubiq_customer_id, idp_token_endpoint_url, idp_tenant_id, and idp_client_secret on a configuration object.
    • Adds a builder design pattern via ubiq_platform_builder_create(), ubiq_platform_builder_set_credentials(), ubiq_platform_builder_set_configuration(), ubiq_platform_builder_build_unstructured_encrypt(), ubiq_platform_builder_build_unstructured_decrypt(), and ubiq_platform_builder_build_structured() for constructing encryption and decryption objects in C.
    • Adds C++ builder interface via builder.with(creds).with(config).buildUnstructuredEncryption(), buildUnstructuredDecryption(), buildStructuredEncryption(), and buildStructuredDecryption() methods.

    +1 more show less

    • Adds session-based encryption and decryption API via ubiq_platform_encryption_init_session(), ubiq_platform_encryption_destroy_session(), ubiq_platform_decryption_init_session(), and ubiq_platform_decryption_destroy_session(), enabling multiple encrypt/decrypt passes per session.

    6 details in Everything

44. docs update Sep 22, 2026 · issue 082

    Ubiq Security adds Apache AirflowApache AirflowAn open-source workflow orchestration platform maintained by the Apache Software Foundation that lets developers schedule, monitor, and chain tasks as directed acyclic graphs, making it useful for automating data pipelines. integration with UbiqEncryptOperator and UbiqDecryptOperator for DAGDAGA directed acyclic graph — a data structure of nodes connected by one-way edges with no cycles — used by tools to model task pipelines or data flows where execution order and dependencies must be enforced without loops.-based structured encryption.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ USE IT
    Encrypt specific columns (SSN, Birthdate) pulled from BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data. in a DAG, then decrypt them in a downstream task — leaving other columns untouched.
    python copy

    from operators.ubiq_encrypt_operator import UbiqEncryptOperator
    from operators.ubiq_decrypt_operator import UbiqDecryptOperator
    import ubiq_security as ubiq
    
    creds = ubiq.configCredentials(config_file='ubiq-credentials', profile='default')
    
    get_data = BigQueryGetDataOperator(
        task_id='get_data',
        dataset_id=DATASET_NAME,
        table_id=TABLE_NAME,
        max_results=10,
        selected_fields='name,email,ssn,birthday',
    )
    
    enc_task = UbiqEncryptOperator(
        task_id='enc_task',
        credentials=creds,
        data_task=get_data.task_id,
        dataset_names=['', '', 'SSN', 'Birthdate'],
    )
    
    dec_task = UbiqDecryptOperator(
        task_id='ubiq_dec_task',
        credentials=creds,
        data_task=enc_task.task_id,
        dataset_names=['', '', 'SSN', 'Birthdate'],
    )
    
    get_data >> enc_task >> dec_task

    • Accepts a credentials parameter (Ubiq credentials object via ubiq.configCredentials()), a data_task parameter referencing a prior task's task_id, and a dataset_names list mapping column positions to Ubiq dataset names — with empty strings passed for columns to leave unencrypted.

    1 detail in Everything

45. docs update Sep 22, 2026 · issue 082

    Ubiq Security BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data. integration adds IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. authentication support, enabling SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management.-based encrypt/decrypt without API keys.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ TRY IT
    Deploy the IDP broker function and start an encrypted BigQuery session using SSO instead of API keys.
    copy

    $ # Deploy the IDP auth broker
    (cd ubiq-broker/ubiq_idp_auth && gcloud functions deploy ubiq_idp_auth --gen2 --runtime=nodejs20 --source=. --entry-point=ubiq_idp_auth --trigger-http)
    
    # Then in BigQuery, start a session without API keys
    CALL BQ_DATASET.begin_idp_session('my_dataset');

    Set the required environment variables for IDP authentication when configuring the Cloud RunCloud RunGoogle's managed container runtime that executes stateless workloads on demand, scaling to zero when idle, so tools can deploy without managing servers or paying for idle capacity. function revision.
    copy

    $ IDP_CUSTOMER_ID=<customer_id_from_ubiq>
    IDP_PRIVATE_KEY_PATH=/idp/idp_private_key

    • Adds IDP authentication for BigQuery integration via idp_setup.sh, IDP_CUSTOMER_ID, and IDP_PRIVATE_KEY_PATH env variables, enabling enterprise SSO users to encrypt/decrypt data without API keys.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds ubiq_idp_auth Cloud Function (deployed via gcloud functions deploy ubiq_idp_auth) to handle the SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave.-based handshake between Ubiq and BigQuery.
    • Adds ubiq_idp_auth BigQuery remote function and ubiq_begin_idp_session procedure as IDP-aware replacements for begin_ubiq_session, requiring no API key arguments.
    • Supports mounting the IDP private key as a Google Secret Manager volume into Cloud Run functions rather than as a plain environment variable, ensuring live secret rotation without redeployment.
    • Adds IDP keypair generation in the Ubiq Dashboard under Profile => IDP Integration => Generate Keypair.

    5 details in Everything

46. updated seen Sep 22, 2026 · issue 082

    Ubiq adds a Rust SDK, Kong gateway plugin, Airflow operators, Grafana Loki integration, and expanded dataset types across all client libraries.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ USE IT
    Use the new Rust SDK to encrypt a sensitive field with structured encryption in a Rust service — install the crate then call encrypt on a dataset.
    Cargo.toml copy

    [dependencies]
    ubiq-rust = "1.0.0"

    Warm up all dataset keys at PHP application startup with loadCache to eliminate per-request key-fetch latency when encrypting across many datasets.
    php copy

    $ubiq->loadCache($datasetNames);

    Inspect the key number behind a ciphertext in Go without decrypting, useful for key rotation auditing.
    go copy

    keyNum, err := ubiq.GetKeyNumber(ciphertext)

    • Adds new loadCache function to the PHP library to prefetch dataset configuration and encryption keys for many datasets in a single call, reducing first-use latency.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds new CipherAndKeyNumber, GetCurrentKeyNumber, and GetKeyNumber functions to the Go library to return the key number behind a ciphertext without decrypting it.
    • Adds new Ubiq Rust SDK (Beta) — available on crates.io as ubiq-rust — supporting structured and unstructured encryption, integer and date/time datasets, encrypt_for_search, and key zeroization.
    • Adds a new Ubiq plugin for the Kong API gateway providing field-level tokenization and detokenization of JSON request and response bodies with no application changes.
    • Adds new Ubiq encrypt and decrypt operators for Apache AirflowApache AirflowAn open-source workflow orchestration platform maintained by the Apache Software Foundation that lets developers schedule, monitor, and chain tasks as directed acyclic graphs, making it useful for automating data pipelines. to protect data inside Airflow DAGs.

    +10 more show less

    • Adds Grafana Loki as a SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. destination for Ubiq activity and usage events (Enterprise customers; alongside existing Splunk support).
    • Expands dataset type support across C, Node.js, Python, PHP, .NET, and Go libraries to include int32, int64, date, datetime, token (64/128-byte), and generic strings with Base32, Base64, or no encoding.
    • Adds improved input validation to the Go library — input is checked against the dataset character set before encryption, returning a clear error on mismatch.
    • Updates .NET structured encryption to use the BITLEN function in place of LOG, per NIST's updated FF1 recommendation.
    • Updates the Dashboard Integrations page to configure IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. and SIEM connections in a single location, with support for self-signed IDPs, IDP group-to-Access Group mapping, and SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. provisioning.
    • Expands the Access Graph to include IDP groups and filter related nodes in both directions, enabling access tracing from either an identity or a dataset.
    • Adds IDP identity attribution to Security History events, records SCIM sync and attribute-mapping failures, and shows Access Group in event details.
    • Adds search and multi-select to the Dataset Association dropdown, and displays maximum input length for generic string datasets.
    • Adds new reference documentation for each structured dataset type: Date & Time, Date, Integer, Token, Formatted String, and Generic String.
    • Adds new integration guides for Apache Airflow and Self-Signed IDP authentication.
    • Adds new loadCache function to the PHP library to prefetch dataset configuration and encryption keys for many datasets in a single call, reducing first-use latency.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds new CipherAndKeyNumber, GetCurrentKeyNumber, and GetKeyNumber functions to the Go library to return the key number behind a ciphertext without decrypting it.
    • Adds new Ubiq Rust SDK (Beta) — available on crates.io as ubiq-rust — supporting structured and unstructured encryption, integer and date/time datasets, encrypt_for_search, and key zeroization.
    • Adds a new Ubiq plugin for the Kong API gateway providing field-level tokenization and detokenization of JSON request and response bodies with no application changes.
    • Adds new Ubiq encrypt and decrypt operators for Apache AirflowApache AirflowAn open-source workflow orchestration platform maintained by the Apache Software Foundation that lets developers schedule, monitor, and chain tasks as directed acyclic graphs, making it useful for automating data pipelines. to protect data inside Airflow DAGs.

    +3 more show less

    • Adds Grafana Loki as a SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. destination for Ubiq activity and usage events (Enterprise customers; alongside existing Splunk support).
    • Adds new reference documentation for each structured dataset type: Date & Time, Date, Integer, Token, Formatted String, and Generic String.
    • Adds new integration guides for Apache Airflow and Self-Signed IDP authentication.

    7 more in Everything

47. docs update Sep 14, 2026 · issue 074

    Ubiq adds Okta IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. integration via SCIM 2.0SCIM 2.0A standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. and OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user., enabling enterprise SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. and auto-provisioned identities in Ubiq SDKs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    ⤢ ⤢ ⤢
    └──▷ USE IT
    Configure a Ubiq SDK to authenticate users via Okta OIDC — add the idp block to your Ubiq config file so the library fetches tokens from Okta before calling Ubiq APIs.
    json copy

    {
      "idp": {
        "type": "okta",
        "customer_id": "<ubiq-customer-id-from-scim-url>",
        "token_endpoint_url": "https://<your-okta-domain>/oauth2/v1/token",
        "tenant_id": "<okta-oidc-client-id>",
        "client_secret": "<okta-oidc-client-secret>"
      }
    }

    Supply Okta end-user credentials in the Ubiq credentials file so the library logs in as a specific Okta user when making encrypted data requests.
    ini copy

    [idp]
    SERVER=https://api.ubiqsecurity.com
    IDP_USERNAME=alice@example.com
    IDP_PASSWORD=<okta-password>

    Set up the SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. 2.0 push from Okta to Ubiq and verify connectivity — enter the Ubiq SCIM URL and Secret Token into Okta, then confirm auto-provisioned identities appear in Ubiq.
    📍1. In Ubiq, go to Integrations › IDP Settings and copy the SCIM URL and SCIM Secret Token. 2. In Okta, open Applications › Applications › Browse App Catalog, search for SCIM 2.0 Test App (OAuth Bearer Token), and click Add Integration. 3. On the Provisioning tab, click Configure API Integration and paste the Ubiq SCIM URL into SCIM 2.0 Base Uri and the Secret Token into OAuth Bearer Token. 4. Click Test API Credentials to verify connectivity. 5. Under Assignments, add users and groups; use Push Groups › By name to manually push groups. 6. Confirm synced identities appear in Ubiq under API Identities.
    • Adds idp block to the Ubiq configuration file with keys type, customer_id, token_endpoint_url, tenant_id, and client_secret to configure Okta OIDC authentication for Ubiq client libraries/SDKs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds [idp] credential section with SERVER, IDP_USERNAME, and IDP_PASSWORD fields so Ubiq libraries authenticate end-users via their Okta username and password.
    • New IDP Integration setup UI on the Integrations page (enterprise plan) exposes the Ubiq SCIM URL and SCIM Secret Token needed to configure SCIM 2.0 push from Okta to Ubiq.
    • Supports SCIM 2.0 provisioning from Okta, auto-syncing Okta Users and Groups into Ubiq API Identities with permissions derived from Okta group membership.
    • Supports Okta OIDC (OpenID ConnectOpenID ConnectOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user.) as an identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems., requiring the OpenID Connect Discovery URL, IDP Token Issuer, and IDP Token Audience to be entered in the Ubiq IDP Settings window.

    5 details in Everything

48. docs update Sep 14, 2026 · issue 074

    Ubiq Security adds Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. (Azure AD) IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. integration with SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. provisioning and JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store.-based dataset authorization for enterprise users.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    ⤢ ⤢ ⤢
    └──▷ USE IT
    When configuring SCIM provisioning in Entra, set the Tenant URL to the Ubiq SCIM endpoint with the required query parameter so Entra can push users and groups into Ubiq.
    text copy

    Tenant URL: https://api.ubiqsecurity.com/<YOUR_UBIQ_GUID>/api/v3/scim/?aadOptscim062020
    Secret Token: <Ubiq SCIM Secret Token from Ubiq IDP Integration screen>

    When setting up the Entra App Registration to support JWT-based protect/unprotect calls, navigate to the OpenID ConnectOpenID ConnectOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. metadata document endpoint to retrieve the discovery URL needed by Ubiq.
    📍In the Microsoft Entra ID Dashboard, go to App registrations › All Applications › Your Application › Endpoints › OpenID Connect metadata document and copy the URL into the Ubiq IDP Integration screen as the OpenID Connect Discovery URL.
    • Adds JWT/token-based authorization support via Entra App Registrations, requiring configuration of Access Tokens, a Client Secret, group Token Claims, an API Scope named Custom.Read, and Microsoft GraphMicrosoft GraphMicrosoft's unified REST API for accessing data and services across Microsoft 365, Azure AD, and related cloud products, giving cyber tools a single authenticated endpoint to query users, emails, files, and sign-in logs. delegated permissions (offline_access, openid, profile).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds IDP Integration setup UI on the Integrations page for all enterprise plan users, enabling configuration of the OpenIDOpenIDAn open standard for decentralized authentication that lets a user prove their identity to a site via a trusted third-party provider, so tools can delegate login without managing credentials themselves. Connect Discovery URL, IDP Token Issuer (https://sts.windows.net/TENANT_ID/), and IDP Token Audience fields.

    2 details in Everything

49. updated seen Sep 7, 2026 · issue 067

    Ubiq adds native Postgres/Greenplum integration for on-database column-level encryption and Partial Encryption across six SDKs.

    └──▷ HOW TO FIND IT
    Enable Partial Encryption for a Structured Dataset so sensitive columns are masked for unauthorized readers while remaining searchable.
    📍In the Dashboard, navigate to Datasets › select your Structured Dataset › Edit › enable the Partial Encryption option, then save.
    • Adds native integration for Postgres and Greenplum enabling on-database column-level encrypt/decrypt directly from SQL.
    • Adds EncryptforSearch support to the Go Client Library.
    • Adds Partial Encryption support for C/C++, Go, Python, Java, C#.NET, and NodeJS Client Libraries (version 2.0.0+) to mask or partially encrypt Structured Data.
    • Adds a Partial Encryption option for Structured Datasets in the Dashboard.
    • Adds a wrapper capability for the Python Client Library enabling customer-defined metadata in billing records.

    +3 more show less

    • Adds a Failed Key Retrieval Attempt error to the security history log to surface failed Partial Encryption attempts from unsupported Client Library versions (< 2.2.0).
    • Adds rate limit event logging to the Security History log, visible to the affected user.
    • Adds security history logging for billing contact and account name change events.
    • Adds native integration for Postgres and Greenplum enabling on-database column-level encrypt/decrypt directly from SQL.
    • Adds EncryptforSearch support to the Go Client Library.
    • Adds Partial Encryption support for C/C++, Go, Python, Java, C#.NET, and NodeJS Client Libraries (version 2.0.0+) to mask or partially encrypt Structured Data.
    • Adds a Partial Encryption option for Structured Datasets in the Dashboard.
    • Adds a wrapper capability for the Python Client Library enabling customer-defined metadata in billing records.

    +1 more show less

    • Adds a Failed Key Retrieval Attempt error to the security history log to surface failed Partial Encryption attempts from unsupported Client Library versions (< 2.2.0).

    2 more in Everything

50. September 2026 Sep 1, 2026 · release notes

    New Rust SDK beta, Ubiq plugin for Kong API gateway, and Airflow operators for data encryption in DAGs

    • Introduces the ubiq-rust SDK (Beta) on crates.io with structured/unstructured encryption, integer/date-time datasets, key zeroization, and encrypt_for_search
    • Adds a Ubiq plugin for the Kong API gateway providing field-level tokenization and detetokenization of JSON request/response bodies without application code changes
    • Provides new Ubiq encrypt and decrypt operators to protect data inside Apache AirflowApache AirflowAn open-source workflow orchestration platform maintained by the Apache Software Foundation that lets developers schedule, monitor, and chain tasks as directed acyclic graphs, making it useful for automating data pipelines. DAGs
    • Enables Grafana Loki Enterprise customers to receive Ubiq activity and usage events (via support contact)
    • Adds loadCache function in the PHP SDK 2.1.0 to prefetch dataset configuration and encryption keys for many datasets in a single call

    5 details in Everything

51. api-docs-fd9ef30414b8 Aug 28, 2026 · issue 058

    Ubiq adds Access Intelligence for mapping effective human and non-human identitynon-human identityA non-human identity, an account or credential used by software or a device rather than a person. Service accounts, workload identities and automation tokens need their own permissions and lifecycle controls.-to-resource access across enterprise systems.

    ⤢ ⤢
    • Surfaces privileged, broad, excessive, or otherwise risky access relationships where supported by source data, including coverage of non-human identitiesnon-human identitiesA non-human identity, an account or credential used by software or a device rather than a person. Service accounts, workload identities and automation tokens need their own permissions and lifecycle controls. such as service accounts, workloads, applications, and AI agents.

    1 detail in Everything

52. docs update Aug 28, 2026 · issue 058
    ⤢ ⤢
    • Investigations can start from either an identity or a resource and trace the full authorization path in either direction — answering what an identity can access, who can access a resource, and why that access exists.
    • Access Intelligence surfaces privileged, broad, excessive, or otherwise risky access where supported by source data.
    • Runtime Data Protection now evaluates requester identity, group membership, dataset policy, requested operation, and available runtime context to deliver per-identity data representations — cleartext, masked, tokenized, encrypted, or otherwise protected — without sitting inline between requester and application.
53. docs update Aug 28, 2026 · issue 058
    ⤢ ⤢
    • New Access Intelligence capability ingests and normalizes authorization metadata from identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems., IGAIGAIdentity Governance and Administration: a framework for managing user access rights, roles, and lifecycle across systems, giving cyber tools a structured data source for detecting privilege abuse or access anomalies. platforms, cloud environments, databases, data warehouses, and applications to resolve effective access for human and non-human identitiesnon-human identitiesA non-human identity, an account or credential used by software or a device rather than a person. Service accounts, workload identities and automation tokens need their own permissions and lifecycle controls..
    • Extends identity modeling to non-human identities including service accounts, workloads, applications, and AI agents for access analysis.
54. api-docs-285b141a9825 Aug 28, 2026 · issue 058

    Ubiq adds Access Intelligence: identity-to-data access graph resolving effective access across enterprise IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access., IGAIGAIdentity Governance and Administration: a framework for managing user access rights, roles, and lifecycle across systems, giving cyber tools a structured data source for detecting privilege abuse or access anomalies., cloud, and database systems.

    ⤢ ⤢
    • Adds Access Intelligence, a new capability that ingests and normalizes authorization metadata from identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems., IGA platforms, cloud environments, databases, data warehouses, and applications to build an identity-to-resource access graph.
    • Surfaces privileged, broad, excessive, or otherwise risky access relationships where supported by connected source data, and exposes the full authorization path explaining why access exists.
    • When combined with Sensitive Data Discovery, overlays sensitivity and classification context onto the access graph to identify which human and non-human identitiesnon-human identitiesA non-human identity, an account or credential used by software or a device rather than a person. Service accounts, workload identities and automation tokens need their own permissions and lifecycle controls. can reach sensitive data.
    • Runtime protection activity can now be reviewed alongside identity, dataset, policy, and access context for audit and security analysis.
    • Supports non-human identities — including service accounts, workloads, applications, and AI agents — in addition to human identities within the access graph.

    5 details in Everything

55. updated seen Jul 23, 2026 · issue 023

    Ubiq overhauls dataset access control with Access Groups, adds SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. streaming, SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management., and expands SDK type support.

    └──▷ HOW TO FIND IT
    Enable SSO for the Ubiq Dashboard using an existing enterprise SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider./OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. provider so users authenticate without separate Ubiq credentials.
    📍In the Ubiq Dashboard, go to Account Administration › SSO and configure your SAML or OpenID provider (Google Workspace, Microsoft Entra, or Okta). See SSO for the Ubiq Dashboard for the full setup guide.
    Warm the SDK key cache on startup to eliminate first-use latency in latency-sensitive Java services.
    java copy

    ubiqClient.loadCache();

    • Introduces Access Groups to replace Dataset Groups for identity-to-dataset access control, separating organization from access management.
    • Adds Dataset Tagging as a flexible, non-hierarchical replacement for Dataset Groups, supporting grouping by environment, application area, or custom structure.
    • Adds advanced Dataset Configuration wizard enabling policy-level definition of encryption behavior for dates, numerics, short fields, and large character sets without custom code.
    • Updates Identities section to consolidate API Keys and IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems.-managed users with an access graph for at-a-glance visibility.
    • Enables Event Streaming (SIEM Log Forwarding) for Enterprise customers to push activity and usage events to Splunk.

    +17 more show less

    • Adds Dashboard SSO support via any enterprise SAML or OpenIDOpenIDAn open standard for decentralized authentication that lets a user prove their identity to a site via a trusted third-party provider, so tools can delegate login without managing credentials themselves. provider, including Google Workspace, Microsoft Entra, and Okta.
    • Adds Prometheus healthcheck endpoint for customers to monitor Ubiq availability within internal observability platforms.
    • Adds API Key Expiration, allowing users to set expiration dates on newly created API keys.
    • Adds custom IDP integration support for MSSQL authentication, enabling Ubiq Libraries and Dashboard to manage non-SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave., non-standard IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. integrations.
    • New MaxCompute native integration enables Ubiq encrypt/decrypt capabilities within MaxCompute SQL via User-Defined Functions.
    • Requires MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. revalidation before users can remove MFA from their account.
    • Java 2.3.1 adds support for int32, int64, date, datetime, token (64/128-byte), and generic strings with Base32, Base64, or no encoding.
    • Java 2.3.1 adds loadCache function for on-demand cache hydration and refresh to reduce first-use latency.
    • Java 2.3.1 encryption and decryption calls are verified thread-safe for concurrent workloads.
    • Go 2.3.0 adds support for int32, int64, date, datetime, token (64/128-byte), and generic strings with Base32, Base64, or no encoding.
    • C 2.2.4.0 introduces new thread-safe methods for encrypting and decrypting data across multiple threads using shared resources.
    • Go 2.2.5 adds configurable max cache size for strict memory management of the internal key cache.
    • Adds API Key Cloning to quickly create additional API keys sharing the same permissions.
    • Adds Primary Key Naming during dataset wizard creation, eliminating the need to rename keys post-creation.
    • Enables dataset creation via the wizard without requiring simultaneous API key creation.
    • Platform resiliency upgrades enable core system changes with zero downtime to APIs and encryption services.
    • Enhanced data retention with long-term event storage and automatic rollups, extending historical visibility to years while preserving high-granularity recent data.

    22 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Dataset access is now managed through Access Groups instead of Dataset Groups; the identity-to-dataset relationship has changed from Dataset → Dataset Group → Identity to Identity → Access Group → Dataset.
    • !Existing Dataset Groups have been converted to Tags; workflows relying on Dataset Groups as an access control mechanism must be updated to use Access Groups.
56. updated seen Jul 15, 2026 · issue 015

    Ubiq overhauls dataset access controls with Access Groups and tagging, adds advanced structured encryption config, and expands library support.

    └──▷ HOW TO FIND IT
    Enable automatic IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. role-based dataset access by creating an Access Group whose name matches an IDP role — members gain dataset access without manual assignment.
    📍In the Ubiq Dashboard, go to Identities › Access Groups › Create Access Group, name the group to match your IDP role, assign the target Datasets, and save. IDP users with that role will be granted access automatically.
    Pre-warm the key cache on startup to eliminate first-use latency in latency-sensitive Java services before any encrypt/decrypt calls.
    java copy

    ubiqSession.loadCache();

    • Introduces Access Groups to replace the Dataset Group → Identity model, granting dataset access to API Keys or IDP users independently of dataset organization.
    • Advanced Dataset Configuration for Structured Encryption now lets operators define encryption behavior for dates, numerics, short fields, and large character sets at the dataset policy level — no custom code required.
    • Unified Identities section consolidates API Keys and IDP-managed users, with a new per-identity access graph for at-a-glance visibility into access groups and datasets.
    • Platform resiliency upgrade enables zero-downtime deployment of core system changes to APIs and encryption services.

    4 details in Everything

57. updated seen Jul 13, 2026 · issue 014

    Ubiq adds Access Groups, dataset tagging, advanced structured encryption config, SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. streaming, and expanded SDK capabilities.

    └──▷ HOW TO FIND IT
    Stream Ubiq encryption activity events to Splunk for real-time SIEM monitoring of data access.
    📍In the Ubiq Dashboard, go to Administration › Observability Integration Setup and configure your Splunk endpoint to enable Event Streaming.
    Enable SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. for the Ubiq Dashboard using your existing enterprise identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. to centralize access control.
    📍In the Ubiq Dashboard, go to Administration › SSO for the Ubiq Dashboard and configure your SAML or OpenID Connect provider (Google Workspace, Microsoft Entra, or Okta).
    Monitor Ubiq platform availability within your internal observability stack using the Prometheus healthcheck endpoint.
    copy

    $ curl -H "Authorization: Bearer <auth_token>" https://<ubiq-prometheus-endpoint>/healthcheck

    • Introduces Access Groups to manage dataset access for identities (API Keys and IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. users), replacing the previous Dataset Group → Identity hierarchy.
    • Adds dataset tagging as a flexible, non-hierarchical replacement for Dataset Groups, allowing grouping by environment, application, or any custom structure.
    • Enables advanced structured Dataset configuration in the dashboard UI, allowing encryption behavior for dates, numerics, short fields, and large character sets to be defined at policy level without custom code.
    • Adds long-term event storage with automatic rollups, preserving high-granularity recent data while extending historical visibility to years.
    • Deploys core system changes with zero downtime to APIs and encryption services.

    +18 more show less

    • Adds Event Streaming (SIEM Log Forwarding) for Enterprise customers to push activity and usage events to Splunk.
    • Adds Dashboard SSO support via SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. or OpenID ConnectOpenID ConnectOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user., including Google Workspace, Microsoft Entra, and Okta.
    • Adds Prometheus healthcheck endpoint for customers to monitor Ubiq availability in internal observability platforms.
    • Adds API Key Expiration, allowing users to set expiration dates on newly created API keys.
    • Adds support for custom IDP integrations (non-SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave., non-standard IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access.) within Ubiq Libraries and Dashboard, including MSSQL built-in authentication.
    • Java 2.3.1: Adds support for int32, int64, date, datetime, token (64/128-byte), and generic strings with Base32, Base64, or no encoding in structured datasets.
    • Java 2.3.1: Adds loadCache function for on-demand cache hydration and refresh, reducing first-use latency and minimizing unexpected network traffic.
    • Java 2.3.1: Verifies encryption and decryption calls as thread-safe for concurrent workloads.
    • Go 2.3.0: Adds support for int32, int64, date, datetime, token (64/128-byte), and generic strings with Base32, Base64, or no encoding in structured datasets.
    • Go 2.3.0: Improves error handling with clearer, more actionable error messages for edge cases.
    • C 2.2.4.0: Adds new thread-safe methods for encrypting and decrypting data in multi-threaded environments using shared resources.
    • Go 2.2.5: Adds configurable max cache size for strict memory management of the internal key cache.
    • Adds API Key Cloning to quickly create additional API keys sharing the same permissions.
    • Adds MaxCompute native integration, enabling Ubiq encrypt/decrypt capabilities within MaxCompute SQL via User-Defined Functions.
    • Requires MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. revalidation before users can remove MFA from their account.
    • Adds Identities section in the dashboard consolidating API Keys and IDP-managed users, with an access graph for at-a-glance visibility.
    • Allows naming primary keys during dataset creation in the dataset wizard.
    • Allows creation of a dataset without requiring simultaneous API key creation in the dataset wizard.

    23 details in Everything

58. April 2026 Apr 1, 2026 · release notes

    Ubiq April 2026 adds structured dataset types, loadCache API, access groups, and zero-downtime platform upgrades.

    • Replaces Dataset Groups with non-hierarchical Dataset Tags for flexible dataset organization

    1 detail in Everything

59. October 2025 Oct 1, 2025 · release notes

    Ubiq Dashboard gains SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. via SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider./OpenIDOpenIDAn open standard for decentralized authentication that lets a user prove their identity to a site via a trusted third-party provider, so tools can delegate login without managing credentials themselves. and Prometheus healthcheck endpoints

    • Adds Ubiq Dashboard SSO support for enterprise SAML or OpenID sources such as Google Workspace, Microsoft Entra, and Okta
    • Adds a Prometheus healthcheck endpoint for internal observability platforms (requires Ubiq-generated auth token)

    2 details in Everything

60. August 2025 Aug 1, 2025 · release notes

    Ubiq adds custom IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. integration support for MSSQL and .NET libs via dashboard

    └──▷ HOW TO FIND IT
    Set an expiration date when creating a new API key to enforce automated rotation policies.
    📍In the Ubiq Dashboard, create a new API key and specify the desired expiration date in the API Key Expiration field.
    • Adds API Key Expiration capability allowing users to set expiration dates on newly created API keys in the Dashboard
    • Adds new UI configuration for managing custom IDP integrations in the Ubiq Dashboard, supporting MSSQL without SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave.

    2 details in Everything

61. July 2025 Jul 1, 2025 · release notes

    Ubiq July 2025 adds MaxCompute SQL UDF integration, API key cloning, and primary key naming in dataset wizard

    • Adds MaxCacheSize option to Go client library for internal key cache memory management
    • Adds native MaxCompute integration enabling encryption/decryption via User-Defined Functions in MaxCompute SQL
    • Adds ability to name primary keys during dataset creation in the Dashboard wizard
    • Adds API key cloning feature in the Dashboard wizard
    • Allows dataset creation without generating an API key in the Dashboard wizard

    5 details in Everything

62. June 2025 Jun 1, 2025 · release notes

    Ubiq Java SDK 2.2.7 adds local proxy support and improves thread safety

    └──▷ USE IT
    Route Ubiq SDK client traffic through an internal corporate proxy.
    json copy

    {
      "type": "local",
      "proxy_host": "proxy.internal.corp",
      "proxy_port": 8080
    }

    • Adds local proxy configuration to the Ubiq Java SDK for outbound traffic routing

    1 detail in Everything

63. March 2025 Mar 1, 2025 · release notes

    Ubiq adds Okta/Entra IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. support, BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data. Okta auth, and structured cache controls across libraries and dashboards

    └──▷ USE IT
    Configure cache TTLTTLTime to live, a limit on how long data remains valid or how far a packet can travel. Caches use a time limit; IP packets use a hop limit. and encryption for structured keys in .NET
    code copy

    var options = new UbiqOptions() {
      EncryptKeysInCache = true,
      CacheTtl = TimeSpan.FromHours(1),
      EnableCachingForStructuredKeys = true
    };

    Set a custom color profile for an account in the dashboard
    📍In the dashboard, go to Account Settings › Profile and select a color from the Color Profiles picker.
    • Adds support for authentication with Okta and Entra user tokens to C/C++ (.NET, Go, Java, Node.js, Python) client libraries
    • Introduces .net library built-in cryptography for structured encryption, replacing external dependencies
    • Adds cache configuration options (encrypt keys in cache, set cache TTL, enable/disable caching for structured keys) to .NET and Node.js libraries
    • Enables Native SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. integration support for Okta and Entra identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems.
    • Adds BigQuery integration with Okta-based authentication via integrated login flows, eliminating API key requirements

    5 details in Everything

64. January 2025 Jan 1, 2025 · release notes

    Ubiq Security Jan 2025: PHP 2.0 & Go 2.2 libraries, Okta SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. sync, community Java samples

    └──▷ TRY IT
    Install the new PHP library via Composer.
    copy

    $ composer require ubiq/php-client-lib:^2.0

    • Released version 2.0 of the PHP Client Library with structured data encryption, key caching with TTLTTLTime to live, a limit on how long data remains valid or how far a packet can travel. Caches use a time limit; IP packets use a hop limit. management, and Composer support
    • Released version 2.2.0 of the Go Client Library adding runtime configuration override for key caching/logging and custom config file path support
    • Enabled SCIM-based identity auto-provisioning for Okta IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. to sync identities seamlessly

    3 details in Everything

65. May 2024 May 1, 2024 · release notes

    Ubiq Security May 2024 adds Partial Encryption for Structured Data across client libraries, integrations, and dashboard.

    • Adds Partial Encryption support in Client Libraries (C/C++, Go, Python, Java, C#.NET, NodeJS) for masking Structured Data
    • Adds a Partial Encryption option in the Dashboard for Structured Datasets
    • Adds Partial Encryption support for Apigee, BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data. and Snowflake integrations
    • Adds wrapper capability in Python Client Library to enable customer-defined metadata in billing records
    • Adds Failed Key Retrieval Attempt error logging in security history for unsupported client library versions

    5 details in Everything

66. April 2024 Apr 1, 2024 · release notes

    Ubiq adds account administration panel guide, customer-level API throttling, WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server., and Auth0 identity enhancements.

    └──▷ HOW TO FIND IT
    Monitor API usage limits to ensure requests per second stay within the new customer-level throttling bounds to avoid service impact.
    📍N/A (Throttling is enforced by the platform)
    • Added Account Administration Panel documentation to manage account controls, options, and settings
    • Implemented flexible customer-level throttling limits (requests/sec) for Dashboard and Client Library API endpoints
    • Implemented Web Application Firewall (WAF) to monitor, filter, and block unauthorized HTTP traffic including XSSXSSCross-site scripting, an attack that runs malicious script in another user's browser through a trusted site. It can steal data or perform actions using the user's session., SQLiSQLiAn attack that makes an application treat untrusted input as part of a database command. It can expose or modify data by changing what the query does., and CSRFCSRFCross-site request forgery, an attack that makes a signed-in browser send an unwanted request to a site. The site may accept the request using the victim's existing session.
    • Improved Dashboard security with enhanced Auth0 access/identity management and brute force detection

    4 details in Everything

67. March 2024 Mar 1, 2024 · release notes

    New MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. requirement for admins, dark mode UI, customizable grid views, and SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. endpoints prep

    └──▷ HOW TO FIND IT
    Force MFA for all users via the admin console settings.
    📍In the account settings, enable Require MFA for all users.
    Switch the dashboard to dark mode to reduce eye strain.
    📍Click the user menu on the dashboard and select Dark Mode.
    Customize which columns are visible in data tables.
    📍Use the column picker icon on table headers to select desired columns.
    • Adds the ability for account administrators to require all account users to use Multi-Factor-Authentication (MFA)
    • Added user selectable dashboard dark-mode to improve aesthetics and help reduce glare, eye strain and blue-light exposure
    • Improved user experience on all pages with tables by allowing for customization of grid views with column selection and other features

    3 details in Everything

68. February 2024 Feb 1, 2024 · release notes

    Ubiq Feb 2024 adds native BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data. integration, custom billing metadata in C library, and UI logout warnings.

    • Adds a pop-up warning for impending UI auto log-out in the Dashboard
    • General Availability release of native BigQuery integration to enable encrypting/decrypting data without leaving BigQuery
    • Adds custom metadata support in C Client Library (v2.1.1.1) for correlation with own environment/processes

    3 details in Everything

69. January 2024 Jan 1, 2024 · release notes

    Ubiq Security January 2024: Java/Node client libraries add metadata support and billing granularity control

    • Adds ability to attach customer metadata to event reporting in the Java Client Library for custom metrics tracking.
    • Adds ability to attach metadata to usage/billing records in Node.JS Client Library.

    2 details in Everything

70. December 2023 Dec 1, 2023 · release notes

    Go client adds EncryptForSearch for exact-match queries on structured data.

71. November 2023 Nov 1, 2023 · release notes

    Ubiq Security adds custom key rotation intervals, Apigee client libraries, and enhanced dashboard metrics in November 2023.

    └──▷ HOW TO FIND IT
    Monitor MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. adoption across the organization to ensure compliance.
    📍In the dashboard, navigate to Teams to view MFA status for each member.
    • dashboard now shows number of days between rotations and allows custom intervals up to 10 years
    • teams page displays MFA status for all team members
    • Client libraries GA release of Apigee integration

    3 details in Everything

72. October 2023 Oct 1, 2023 · release notes

    Ubiq adds EncryptForSearch for Snowflake exact-match searches, TS/ESM Node.js client, and MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. warning emails

    • Adds EncryptForSearch capability to the Snowflake library for exact-match searches
    • Adds Typescript/ESM support to the Node.js Client Library

    2 details in Everything

73. September 2023 Sep 1, 2023 · release notes

    Ubiq Security September 2023 adds persistent column customization for reports, wildcard table search in Security History, and Dataset fields to Events logs.

    • Added ability to add or remove columns, customize them, and persist customizations for CSV reports to find data with fewer clicks
    • Added Dataset and Dataset Group fields to the Events log details screen

    2 details in Everything

74. August 2023 Aug 1, 2023 · release notes

    Ubiq adds EncryptForSearch for ciphertext searching, multiple CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network. support for API keys, and key management features.

    • Adds EncryptForSearch capability to the .NET Client Library allowing users to get possible ciphertext values for structured dataset values to assist in doing database-type searching
    • Adds support for multiple CIDR ranges when IP-restricting API keys by allowing several allowed entries/values
    • Adds ability to rename Primary Keys and delete Primary Keys not associated with any datasets

    3 details in Everything

75. July 2023 Jul 1, 2023 · release notes

    Ubiq adds Snowflake on AWS support, EncryptForSearch in Python/C/C++, dashboard usage views, API key editing, and expired key visibility.

    └──▷ USE IT
    Retrieve encrypted ciphertext from a Snowflake dataset for external search indexing using the new Python client library method.
    python copy

    from ubiq import Ubiq
    ciphertext = Ubiq.encrypt_for_search('my_dataset', sensitive_value)

    View current dataset usage metrics directly in the web dashboard to monitor capacity.
    📍In the Dashboard, open the Usage chart and select By Dataset or By Dataset Group from the filter dropdown.
    Modify an existing API key to switch its permission scope without losing history or associated secrets.
    📍In the Dashboard, navigate to Settings › API Keys, select the target key, and edit permissions directly instead of deleting and recreating it.
    • client_library now supports EncryptForSearch in Python, C, and C++ to retrieve ciphertext for structured dataset values
    • Dashboard chart added: view usage by Dataset and Dataset Group (requires Client Libraries v2.0+)
    • API Key permissions can now be edited on existing keys without deleting and recreating them

    3 details in Everything

76. June 2023 Jun 1, 2023 · release notes

    Ubiq June 2023 adds CSV export for table data and Java/Node EncryptForSearch support.

    • Adds EncryptForSearch method in Java and NodeJS client libraries to provide all possible ciphertexts for a Structured Field Format Specification (FFS).
    • Adds the ability to export up to 100K rows of table data to CSV for Datasets, Dataset Groups, API Keys, Primary Keys, Team, Events, and Security History via the dashboard.

    2 details in Everything

77. May 2023 May 1, 2023 · release notes

    Ubiq May 2023: Dashboard updates for account naming, API key warnings, and dataset visibility; library multithreading improvements

    • Adds the ability for an account administrator to set a custom account name in the dashboard
    • Adds warning messages about API key impact when modifying dataset or group associations in the dashboard

    2 details in Everything

78. April 2023 Apr 1, 2023 · release notes

    Ubiq April 2023 adds developer docs link to nav, MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. OTPOTPOne-time password: a short-lived numeric or alphanumeric code valid for a single authentication attempt, generated via TOTP or HOTP standards, giving cyber tools phishing-resistant second-factor verification without stored shared secrets. resolution for non-MFA accounts, and structured dataset space support.

    └──▷ HOW TO FIND IT
    Navigate to developer docs directly from the app interface.
    📍Click Developer Docs in the navigation bar.
    Create a structured dataset with spaces without validation errors or invisible chars.
    📍In the Dataset wizard, define a string field with a space and complete the creation.
    • Added a link to developer documentation on the navigation bar
    • Added a visible ASCII space for output characters when using the wizard to create a structured Dataset that includes a space

    2 details in Everything

79. November 2022 Nov 1, 2022 · release notes

    Ubiq November 2022 introduces Datasets (Structured/Unstructured), Primary Keys, new UI wizard, and non-admin user support.

    └──▷ HOW TO FIND IT
    Guide new users through the structured data encryption setup process using the new wizard interface.
    📍Navigate to Datasets › Create New › Select Structured Data › Follow the Dataset Creation Wizard prompts
    Manage team access by granting non-admin privileges to additional users on your account.
    📍Navigate to Team Management › Add User › Set role to Non-Administrator
    • Adds Dataset Creation Wizard to simplify onboarding for Structured and Unstructured data encryption
    • Enables adding non-administrator Users to accounts for improved Team Management
    • Introduces Primary Keys to replace Master Encryption Keys, allowing reuse when creating new Datasets
    • Implements a new Dashboard UI with enhanced navigation and flexible filtering for usage information, graphs, and logs

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Previous Registered Applications are transitioned to Structured Datasets (with FFS) or Unstructured Datasets (without FFS)
80. June 2022 Jun 1, 2022 · release notes

    Ubiq adds eFPE capability and docs to the Node.js client library

81. May 2022 May 1, 2022 · release notes

    Ubiq May 2022 adds eFPE capabilities across the platform, client libraries (C/C++/C#/Java), and dashboard documentation

    • Introduces Ubiq Format Preserving Encryption (eFPE) capabilities with associated inputs, actions, and indicators in the Dashboard
    • Adds Ubiq Format Preserving Encryption (eFPE) Client Library, Sample Application, and Ubiq Dashboard documentation

    2 details in Everything

82. March 2021 Mar 1, 2021 · release notes

    Ubiq adds PHP client library and allows dashboard sign-up without MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. in March 2021.

    • Adds PHP Client Library and a sample application for server-side encryption development.
    • Removes authenticator app MFA requirement for new user registration on the Ubiq Dashboard.

    2 details in Everything

83. February 2021 Feb 1, 2021 · release notes

    Ubiq adds Dockerized C/C++ samples, video tours for dashboard monitoring, and improved API event logging.

    • Added Video Tours for Monitoring, Tracking and Reporting of your Ubiq Platform activity
    • Improved API Events logs, filtering and export

    2 details in Everything

84. December 2020 Dec 1, 2020 · release notes

    Ubiq adds date-range reset for encryption graphs and improves Security History logging.

    └──▷ HOW TO FIND IT
    Reset the encryption graph date range to analyze past periods.
    📍In the Dashboard, navigate to the encryption/decryption graph and click the reset button for the date-range filter.
    • Added dashboard encryption/decryption graph date-range reset feature
    • Added information about password changes in the Security History log

    2 details in Everything