Changelog

What's new in ClearSOC

Product updates, new features, and improvements — shipped continuously.

AllFeaturesPerformanceFixes

v0.10July 2026Platform

ARGUS incident analysis engine migrated to Anthropic Claude (claude-sonnet-5)

Prompt caching on the tool-call loop cuts per-incident analysis cost

Deterministic rule-based fallback preserved — analysis never hard-fails

v0.9May 2026Features

ARGUS autonomous agent — Hunter, Investigator, Responder pipeline

Governance control attestation with expiry tracking and email reminders

Dark web breach monitoring with credential exposure scanning

NIST CSF 2.0 compliance scoring with real-time posture dashboard

PDF compliance report export with executive summary

v0.8April 2026Features

AI-powered incident analysis via Azure OpenAI with full evidence trace

Response action approvals workflow — high-risk actions require human sign-off

Helpdesk ticket auto-creation for phishing and suspicious login events

Autonomy levels (Conservative, Balanced, Aggressive) set which incidents the AI may act on without approval

Fix Pack recommendations generated per incident with one-click execution

v0.7April 2026Features

Google Workspace integration — Admin SDK audit logs, Drive, Identity alerts

AWS CloudTrail integration — management events

Email security event ingestion for M365 and Google Workspace

Sequence detection rules for multi-stage ordered attack pattern tracking

Asset inventory with risk scoring, owner tracking, and lifecycle status

v0.6March 2026Performance

Elasticsearch event store — time-series ingestion replaces in-memory store

Bulk ingestion smoke-tested at ~450 events/sec with p95 15ms and zero errors (1 VU, rate limiter on). A full load test is still outstanding.

Hangfire background job queue for durable async processing

Redis SignalR backplane for multi-instance real-time notifications

ComplianceScoreService: projection-only queries, 10k cap + accurate COUNT

v0.5March 2026Features

Microsoft 365 integration via OAuth — Azure AD sign-ins and Defender alerts

Threshold detection rules with group_by source_ip or actor

Real-time incident push via SignalR WebSocket — no polling required

Rate limiting: 10 req/min per IP on auth endpoints

OWASP security headers on all responses — HSTS, CSP, X-Frame-Options

v0.4February 2026Fixes

Multi-tenant isolation enforced at ORM level — TenantId on every entity

JWT httpOnly cookie auth — 15-min access token + 7-day rotating refresh

Role-based access control: Admin, Analyst, Viewer

Onboarding wizard with company setup and integration connect flow

Transactional email via Brevo API with SPF/DKIM/DMARC alignment

Stay in the loop

ClearSOC ships fast. Get notified when something big lands.