Product Updates

Changes to Security

Everything we have shipped to Security, release by release.

  • 6 changes
  • 4 releases
  • since September 2026
Latest release

Release notes · 3 changes

New features
2
Improvements
1

Highlights

New

Firewall: choose who can reach your environments

Add your IP address once for your company, a website, one environment or just for yourself, with Add my IP on the environment's page. It opens SSH, and on CoreStack and CoreCluster it also lets you past HTTP authentication and maintenance mode.

New

Redirects, HTTP authentication, domains and Cloudflare in the API

The API now reads and saves an environment's redirects, HTTP authentication (revealing a login's password to the token's own user) and domains, checks and points DNS, changes the main domain, attaches a domain to go live and manages the Cloudflare connection, zone, SSL mode and cache purge, with the same checks and answers as the control panel.

Improved

Uploaded releases are checked for known malicious files before they are built

Every deployment from an uploaded archive now checks the unpacked release against a list of files known to be malicious, and stops before anything is built or changed if it finds one, naming the files to remove. Magento 2 releases also get a warning when they hold PHP files under pub/ that are not Magento's own.

Earlier releases

Release notes · 1 change

  • 1 fixed

On the order page the currency switch now always changes the currency before Billing, and says why if it cannot. A buyer who was signed in before ordering now gets their email code without pressing Resend, a verified mobile number can be used for sign-in codes in one step, and the authenticator set-up shows its code field in full.

Release notes · 1 change

  • 1 improved

When you change your password on your profile, or reset it from the sign-in page, the panel no longer accepts the password you are already using. You are asked to choose a different one and your password is left as it was.

Release notes · 1 change

  • 1 improved

Passwords have to meet stricter rules when you create an account or change your password, rather than only being eight characters long.

{  Contact us  }

Let's Talk

Tell us about your platform and goals. Our engineers will help you find the right performance setup, no sales pressure, just expert advice.

By sending this message you agree to our Privacy Policy .