Releases
What changed in the platform, its plugins, analyses, and module packages.
Dethereal0.4.19
Controls on data elements
Dethereal can apply a control to a Data element, matching platform 0.14.0.
New featuresPlatform0.14.0
Signed installer and in-place upgrades
Each release now publishes a signed installer, and ./byodt upgrade moves a deployment to a newer release in place. The compose bundle can reach the internet through an outbound HTTPS proxy, and a control can be applied to a Data element. A 0.13.0 deployment cannot upgrade itself, so read the notes first.
Platform0.13.0
Neo4j 5 support
The platform runs on Neo4j 5 as well as Memgraph, which stays the default. The web interface now loads a module's frontend the first time it is needed. Run the stack through byodt only: a bare docker compose up no longer starts it.
Risk Assessment1.2.5
Ready for platform 0.13.0
Carries the frontend manifest that platform 0.13.0 requires, and still runs on 0.12.x platforms.
FixesThreat Patterns0.1.7
Ready for platform 0.13.0
Carries the frontend manifest that platform 0.13.0 requires, and still runs on 0.12.x platforms.
FixesPlatform0.12.1
Modules ship their class vectors
Modules now ship their class vectors for the default embedding profile, so installing a module no longer embeds its classes. Patch release, with no API or schema change.
FixesFull notesPlatform0.12.0
Embedding moves into the platform
The platform now embeds in process, and the bundle no longer includes the Ollama service. The first start after upgrading downloads the model and embeds every class once, so read the upgrade steps first.
Platform0.11.1
Faster first search and clearer readiness
The embedding server keeps its model loaded, so the first search after a quiet period no longer waits for it. The embedder reports ready only once its endpoint answers, and model updates tolerate a class the platform does not have. Patch release.
FixesFull notesModule packages
Agentic AI package, and AI agents for AWS and Azure
A new package covers AI agents, their tools, models, and controls. The AWS and Azure packages gain AI agents modules, and every package now includes the Threat Patterns engine.
New featuresPlatform0.11.0
Data items record origin and credentials
A data item can record who can write its content and whether it is a credential. Search by meaning is now an exact search in the database and runs on Neo4j as well as Memgraph.
New featuresFull notesThreat Patterns0.1.0
First release
A new analysis that reads the whole model and finds threats no single element shows. It needs platform 0.11.0 or later for full results.
New featuresPlatform0.10.1
Search by meaning repairs itself
Search by meaning could stop finding classes and techniques written after a database restart. Deployments now repair their vector indexes themselves.
FixesFull notesPlatform0.10.0
MITRE ATLAS joins the reference data
MITRE ATLAS joins ATT&CK and D3FEND in the reference data, readable through the API and shown on findings that link to it. A technique the platform cannot link is now recorded on the finding instead of being dropped.
New featuresFull notesModule packages
Azure package
The catalog gains an Azure package with eleven modules.
New featuresPlatform0.9.2
Expired sign-ins
A person whose sign-in has expired is now signed in again, instead of being told the deployment does not admit them.
FixesFull notesPlatform0.9.1
Choose who may sign in from the team
An administrator can now choose who may sign in to a connected deployment from the team itself, without disconnecting it. A person the list does not admit is now told so.
New featuresFull notesPlatform0.9.0
Two people can edit one model
A save now carries only what the user edited, so two people can edit one model without overwriting each other. The reference data moves to ATT&CK v19.2.
New featuresFull notes