Changelog
What reached production, and when.
Each entry is a release that reached production, dated by the day it went live. Only what customers can see is listed; work still in review is not.
- Latest release
Steadier audit launches and workspace deletion
Audits start the same way from every entry point, and owners can now remove a workspace.
- AuditsEvery way of starting an audit honours the same cooldown, and rate-limit messages say when you can try again.
- AuditsRepository ZIP uploads start audits again without a GitHub connection.
- WorkspaceOwners can delete a workspace after confirming, and pending invitations can be withdrawn.
Guided audit setup
New workspaces are guided to their first audit, and finding reviews are clearer about what was checked.
- AuditsA guided setup takes a new workspace from its first source to its first audit.
- FindingsFinding reviews say what was reviewed and what still needs a decision.
- WebsiteThe guided demo numbers its evidence consistently and names each item's owner.
Queued audits and explained matches
Audits in the same workspace wait their turn, and findings explain why they matched.
- AuditsAn audit started while another runs in the same workspace is queued rather than rejected.
- FindingsEach finding explains the evidence that matched it.
Architecture intent
Record what the system is meant to be, then review releases and audits against it.
- Architecture intentVersioned architecture intent: draft it, ratify it by name and compare it with observed evidence.
- Architecture intentRelease gates review changes against intent, with scoped and recorded exceptions.
- Architecture intentFrozen intent assessments appear in reports and the Control Room.
Separate site and platform hosts
The public site and the signed-in platform now run on separate hosts.
- SecurityPublic pages and the platform are served from separate hosts, and each routes only its own pages.
Steadier remediation retries
Remediation retries are more reliable, and profile images are stored privately.
- FindingsRemediation retries are more reliable.
- WorkspaceProfile images are stored privately.
Platform foundations
Multi-factor sign-in, architecture checks on pull requests, and drift from declared intent.
- SecurityMulti-factor authentication, with a notification whenever security settings change.
- IntegrationsArchitecture checks published on GitHub pull requests.
- Architecture intentDrift from declared intent is detected and explained.
- AuditsReleases can be gated by the consequence of a change.
- FindingsPersonal and shared views for findings.
- IntegrationsWebhook subscriptions with managed delivery.
Invitation email fixes
Workspace invitation emails come from Veriom's security mail domain.
- WorkspaceInvitation emails are sent from security.veriom.ai.
See what the current release finds in your system.
A short call covers your environment and what Veriom would collect first.