Building a better platform, one release at a time.

Switch roles from the header, plus two accuracy fixes to the SuperAdmin dashboard and inactivity emails.

Role switcher

• One click: Your avatar and role in the top-right open a menu with your identity, other roles, and Sign out.
• Always accurate: The role shown matches your access at the enclave you're viewing.

Fixes

• Rejected count: The Rejected card counts every rejected Change Request, including ones returned by the firewall team.
• Inactivity emails say the right thing: Warnings arrive at 30, 15, 5, 2, and 1 days out, and correctly state the 90-day deactivation window.

‍

A new Backups screen lets you monitor, schedule, and manage database backups yourself.

• See your status at a glance: Green/red status names the reason when you're not protected, plus last backup time and next scheduled run.
• Set your own schedule: Daily, weekly, every few hours, or off — takes effect next cycle, every change audit-logged.
• Back up on demand: One click creates an encrypted backup with a checksum you can verify after moving it between servers.
• Restore yourself, safely: A guarded flow requires typing a confirmation phrase, takes an automatic safety backup first, and can even create the database on a brand-new server.
• More reliable: Backups now automatically include tables added after setup — no manual step.

‍

Error pills, badges, and banners — expired flags, error banners, removed-item markers, stale network-path rows — are now easier to read and meet WCAG AA contrast standards.

‍

Reverse a mistaken template provision in-app — the template itself stays intact.

• Draft applications: Removed immediately
• Untouched deployments: Removed immediately, no re-approval needed
• Modified deployments: Sent to your Approver as a "no firewall change" acknowledgment
• Shared IP groups preserved — only what belonged to the un-deployed application is removed
• Own audit entry logged as "Un-Deployed" with reason, who, and when

‍

Removing a non-empty connection now packages the whole cleanup into a single Change Request — cutting a typical delete from multiple Change Requests down to one.

• One click: Delete a non-empty connection → services, IP groups, and IPs packaged as a single Change Request
• Smart scope: IP groups used only here are removed; shared ones are preserved
• Cascade pill: Cascade-originated Change Requests show a red Cascade badge on the Implemented and Awaiting Implementation lists
• Approve requires review: Approvers open Review Changes before Approve is available; Reject stays as-is

‍

Remove empty applications from the Submitter dashboard — no Pylon support ticket required.

• Delete: Application card’s More menu → “Delete application…”
• Empty only: No connections, IP groups, configuration groups, pending approvals, or draft changes
• Audit preserved: Every deletion logs on the Approver’s Recently Implemented tab
• Hide unchanged: Still available for tidying without committing to permanent removal

A focused workspace built around your actual workflow.

• Lands on Awaiting Approval: Your primary task, front and center
• Left-nav between views: Awaiting Approval, Rejected, Awaiting Implementation, Recently Implemented — with counts
• Toolbar everywhere: Search, filter by enclave, sort — your choices are remembered
• Compact view: One row per Change Request with aging badges (green / yellow / red)

Snappier Approve and Reject — no more full reload on large change-impact requests

Three new views designed around your day-to-day.

• Overview: Workload tiles for waiting Change Requests, oldest age, count over 7 days, average age, last-30-days implementations
• Pending Implementation: Searchable queue with age chips (<3d / 3–6d / 7d+)
• Recently Implemented: Last 30 days of completed Change Requests, searchable by IP, port, or rule text
• Rule-level details preserved after implementation, with CSV download
• ServiceNow-style artifact links now work after implementation

Use IPv6 anywhere you use IPv4 — IP Groups, dataflows, compliance scopes.

• Protocol badges: Explicit IPv4 and IPv6 tags on every IP row
• Mixed groups: Per-protocol counts (“3 IPv4, 2 IPv6")
• Specific validation: Clear error messages + “Did you mean…?” suggestions
• Canonical display: Same address always looks the same regardless of how you typed it