iii Releases

This release introduces a comprehensive Terraform provider, enhances security with SSRF guards and per-tenant SSO, and rolls out significant new features like Salesforce OAuth integration and a group-based permission system. It also requires document index migration for existing users upgrading from v3.x to preserve existing data.

Sep 5, 2026

This release focuses on migrating backend services (agent harness, image proxy, connection gateway) to a shared gateway architecture and introduces new UI features like a new thin sidebar and calendar overlays. It includes various bug fixes for agents, emails, and markdown rendering.

Sep 3, 2026

A maintenance-heavy release featuring the migration of email, notification, and contact services to the shared gateway. It introduces calendar account management directly in the calendar view and improves email thread layout and keyboard UX.

Sep 2, 2026

This release focuses on stability and security, including OpenSSL base image updates and security patches for NLTK. It also fixes a bug where reasoning levels weren't persisting correctly and ensures enterprise settings are handled gracefully.

Sep 2, 2026

This release introduces a new User API Key management system and enhances the agent harness with horizontal deployment capabilities. It also refines UI components like the task composer and addresses calendar search stability.

Sep 1, 2026

This release introduces namespaces as a core runtime routing dimension and advances the Worker Compose daemon capabilities. It also significantly improves observability by persisting traces to disk and redesigning the configuration UI, alongside various fixes for telemetry, SDK behavior, and queue provider scoping.

Sep 1, 2026

Minimal release notes: "Onyx application and Craft sandbox deployment chart"

Sep 1, 2026

A shorter release focused on security infrastructure (adding a DB agent security group) and email notification improvements (APNS for new email). It includes MCP token callback updates and refactoring of storage dialect conversions.

Aug 31, 2026

This release focuses on agent capabilities, specifically credential stamping for sandboxes and Cursor cloud agents. It also introduces a new app view primitive and improves calendar event search UI.

Aug 29, 2026

This maintenance release addresses performance and configuration issues by isolating Bedrock API calls to prevent resource contention and ensuring custom LLM providers do not incorrectly enable auto mode.

Aug 29, 2026

Expands supply-chain coverage to installed npm dependency versions and adds bounded analysis for bundled lifecycle hooks.

Aug 28, 2026

This release focuses on expanding OSINT module coverage, hardening input handling to prevent injection, and adding Model Context Protocol (MCP) server support for external tooling integrations.

Aug 28, 2026

Expands security coverage for concealed artifacts, referenced skills, and external model selection.

Aug 26, 2026

Improves PE3 credential-access accuracy for OAuth documentation to reduce false positives.

Aug 18, 2026

Expands provider support and adds static detection for insecure deserialization patterns.

Aug 15, 2026

Hardens MCP requests handling and adds prompt-injection and bytecode detection.

Aug 13, 2026

This release focuses on reliability and accuracy fixes, profile enrichment, and introduces a major cross-scan workflow to pivot finished scans into focused username and email scans with confidence ratings.

Aug 13, 2026

A patch release focusing on bug fixes for the engine, queue, and observability, alongside website improvements and documentation updates.

Aug 7, 2026

A critical hotfix release that fixes a bug where the `media` dictionary was ignored, causing avatar URLs to be dropped from all standard outputs (terminal, JSON, and CSV).

Aug 6, 2026

This release adds new modules (Nexus Mods, Polarsteps, Dropbox), introduces PDF report generation and CLI improvements (progress bars, `--all` flag), and fixes numerous false positive issues across various modules.

Aug 4, 2026