Changelog

Notable changes in every public release. We summarize what shipped, why it matters, and any security-relevant detail.

Latest: v1.0.0 — General Availability

Pre-launch. Date confirmed at GA cut.

Highlights

• Four-tier pricing. Community (free) / Professional ($29) / Team ($99) / Enterprise / MSSP ($499). Every paid tier ships with public Stripe self-checkout under Intreys standard Terms of Use. Pricing live at intreys.com.
• Live capture available to all tiers — previously gated to paid tiers.
• Brand polish. Cyan #00e5ff is the canonical brand colour. Tagline: Look deeper. Find everything.
• Worker-backed licensing. Cloudflare Worker for activation, validation, and Stripe-driven seat management across all paid tiers, including Enterprise / MSSP. Contact-sales remains an optional secondary funnel for buyers who need volume pricing, procurement / PO, MSA / DPA / BAA, custom SLA, 24×7 support, on-prem, BYOK / CMEK, government, or MSSP / reseller terms layered on top of standard ToU.
• OIDC SSO + SCIM 2.0 provisioning for Team and Enterprise / MSSP. SAML 2.0 SSO is available on Enterprise / MSSP as a controlled preview — contact sales to enable it for your tenant.
• Multi-platform packaging — signed installers for macOS, Windows, Debian, RPM, Docker.
• Documentation site at intreys.com/docs (this site).
• Vulnerability disclosure policy published; /.well-known/security.txt live.

Added

• 67 protocol dissectors across IT, ICS/SCADA, IoT, infrastructure
• Multi-stage analysis pipeline with re-run-from-stage
• Automated threat hunts: beacons, DNS tunneling, scans, exfil, lateral movement, credential theft, covert channels
• MITRE ATT&CK overlay with Navigator export (Pro+)
• STIX 2.1, MISP, TAXII 2.1, Sigma export (Pro+)
• YARA rule scanning (Pro+)
• Local AI (llama.cpp, MLX) and remote AI (Claude, OpenAI, Grok, Azure) with privacy classifier
• Suricata rule engine integration
• Real-time collaboration via SSE (Team)
• SIEM forwarders: Splunk HEC, ELK ECS, Syslog (Team)
• OIDC SSO and SCIM 2.0 provisioning (Team and Enterprise / MSSP)
• Multi-tenant case management (Enterprise / MSSP)
• Compliance mapping: NIST, PCI-DSS, HIPAA (Enterprise / MSSP)
• Tamper-evident audit logging, customer-managed keys (BYOK / CMEK), air-gapped deployment (Enterprise / MSSP)
• SAML 2.0 SSO available as a controlled preview on Enterprise / MSSP (contact sales)
• Cmd/Ctrl+K command palette across all views
• 40+ ARIA labels for accessibility
• In-app help panel with deep-linkable sections

Changed

• Live capture is now Community-tier (was Pro-only)
• Default brand accent moved from green to cyan #00e5ff
• Pricing model: four-tier — Community (free), Professional ($29 / mo), Team ($99 / mo), Enterprise / MSSP ($499 / mo). All paid tiers self-checkout under Intreys standard Terms of Use. Volume discounts and other custom contract terms available on request.

Security

• Ed25519 license token signatures
• PBKDF2-SHA256 password hashing (600,000 iterations, OWASP 2025 guidance)
• Persistent token blacklist for revocation
• CSP headers on all responses
• Rate-limited auth endpoints (5/min, 20/hour per IP)
• Encrypted at-rest API key storage

Versioning policy

Intreys follows Semantic Versioning 2.0.0. The version surface includes:

• Public REST API
• STIX/MISP/Sigma export schema
• Plugin SDK (when shipped)
• License token format

Refinements that don’t affect those surfaces — UI polish, new detection rules, performance work — do not bump major versions.

Subscribe to release notes

Email [email protected] with subject subscribe — you’ll get one email per minor/major release. Or watch the releases site.