Updates to the Burrow, the platform, and the SDKs.
Machines hear about changes the moment they're saved, apps can keep their identity in memory, your Burrow answers HTTP on your own network and can open your router in one click, runs on Docker and starts at boot, and you can log out every other session in one step.
Sign in through your company's identity provider with SAML or OIDC, provision members and roles with SCIM, and share a secret by link with view and time limits.
Export your audit log as CSV, JSON or plain text, choose how long it keeps events, and see which tool and version read each secret.
Sign in with GitHub, confirm it's you before turning on two-factor, crop your profile picture and switch between your recent uploads, and set up a new burrow in the same tab. Plus security improvements across sign-in, sessions, two-factor and member management.
Authenticate CI workflows like GitHub Actions with OIDC, choose how each machine trusts its connection to your burrow, and enrol whether the burrow is reached directly, on a custom domain, or behind a proxy or tunnel. Plus real client IPs in the audit trail and IP allowlist behind a tunnel.
Canary secrets that disable any machine that reads them, and breadcrumb navigation across your projects and environments.
Invite your team into a burrow with roles and permissions, and restore a burrow from one of its backups.
Machine token permissions, master key rotation coverage, backup snapshots and verification, PostgreSQL 16.15, and relay connection limits.
