Security Hardening & Fleet Management
New Features
- Two-tier widget security — Public and secure chat endpoints with widget tokens and JWT sessions
- Fleet agent management — Deploy, manage, and monitor agents with full lifecycle controls
- Cortex runtime — LLM routing with Azure OpenAI, RAG knowledge retrieval, and conversation logging
- Guard UI — Kill switch controls, policy creation, and on-demand security scanning
- 26 integration adapters — OAuth and API-key based integrations across CRM, email, calendar, and more
Security
- 56 security findings identified and remediated across 3 platform reviews
- HKDF per-type key derivation for token isolation
- Fernet encryption with PBKDF2 key stretching for secrets at rest
- PII tokenization on all LLM pathways
- GDPR right-to-erasure with cryptographic proof
- Widget origin allowlisting and rate limiting
Platform
- Zero-downtime cluster deployment architecture (4 SBC nodes)
- Cloudflare R2 encrypted off-site backups
- Azure OpenAI integration for platform-hosted LLM inference
- Full vault hash-chain verification