---
title: "security | Changelog"
description: "Posts tagged with \"security\" in the Phase changelog."
url: https://phase.dev/changelog/tag/security/
---

[Changelog](https://phase.dev/changelog/)

# #security

Changelog posts tagged **security**.

Timeline9 releases

2026.09.01

2026.09.01

## [Account Management, Log Streams & more](https://phase.dev/changelog/account-management-log-streams/)

[security](https://phase.dev/changelog/tag/security/)[console](https://phase.dev/changelog/tag/console/)[cli](https://phase.dev/changelog/tag/cli/)[authentication](https://phase.dev/changelog/tag/authentication/)[logs](https://phase.dev/changelog/tag/logs/)[kubernetes](https://phase.dev/changelog/tag/kubernetes/)[self-hosting](https://phase.dev/changelog/tag/self-hosting/)

[This update gives your Phase account a home of its own, with two-factor authentication, multiple sign-in methods, and self-service email changes. It also brings Log Streams for shipping audit logs to Datadog, a mobile-friendly Console, a secrets Filter menu with GitHub-style search qualifiers, an AI deployment skill for Azure AKS, published egress IPs for Phase Cloud, and a round of CLI fixes. Read more](https://phase.dev/changelog/account-management-log-streams/)

2026.07.02

2026.07.02

## [Rotated secrets, Tailscale integration & Kubernetes Operator v2.0](https://phase.dev/changelog/automated-secret-rotation/)

[console](https://phase.dev/changelog/tag/console/)[secrets](https://phase.dev/changelog/tag/secrets/)[rotation](https://phase.dev/changelog/tag/rotation/)[kubernetes](https://phase.dev/changelog/tag/kubernetes/)[cli](https://phase.dev/changelog/tag/cli/)[sdk](https://phase.dev/changelog/tag/sdk/)[security](https://phase.dev/changelog/tag/security/)

[We've added support for automated secret rotation, along with several other platform updates and improvements. We also rewrote the Kubernetes Secrets Operator in Go (2.0), overhauled the secret deployment pipeline so references stay in sync across apps, added self-hosting on Tailscale, and shipped rotation support across the CLI, SDK, and REST API. Read more](https://phase.dev/changelog/automated-secret-rotation/)

2026.06.04

2026.06.04

## [Teams, SCIM, Platform APIs & Audit Logs](https://phase.dev/changelog/teams-scim-apis-audit-logs/)

[console](https://phase.dev/changelog/tag/console/)[access-control](https://phase.dev/changelog/tag/access-control/)[teams](https://phase.dev/changelog/tag/teams/)[scim](https://phase.dev/changelog/tag/scim/)[sso](https://phase.dev/changelog/tag/sso/)[api](https://phase.dev/changelog/tag/api/)[audit](https://phase.dev/changelog/tag/audit/)[security](https://phase.dev/changelog/tag/security/)

[A wave of access control and platform upgrades — **Teams** with team-owned service accounts and role overrides, **SCIM v2 provisioning** to drive the user lifecycle from your identity provider, the full **management REST API** for Apps, Environments, Roles, Service Accounts, and Members, and a new **org-wide audit log** that captures every management action across your organization. Here's the full recap. Read more](https://phase.dev/changelog/teams-scim-apis-audit-logs/)

2026.04.30

2026.04.30

## [April 2026](https://phase.dev/changelog/april-2026/)

[console](https://phase.dev/changelog/tag/console/)[cli](https://phase.dev/changelog/tag/cli/)[sdk](https://phase.dev/changelog/tag/sdk/)[security](https://phase.dev/changelog/tag/security/)[sso](https://phase.dev/changelog/tag/sso/)[authentication](https://phase.dev/changelog/tag/authentication/)[azure](https://phase.dev/changelog/tag/azure/)

[April brought Azure authentication and offline mode to the CLI and Go SDK, inline autocomplete and validation for secret references in the Console, email + password sign-in, and self-serve organization SSO. Here's the full recap. Read more](https://phase.dev/changelog/april-2026/)

2026.03.31

2026.03.31

## [March 2026](https://phase.dev/changelog/march-2026/)

[console](https://phase.dev/changelog/tag/console/)[cli](https://phase.dev/changelog/tag/cli/)[sdk](https://phase.dev/changelog/tag/sdk/)[azure](https://phase.dev/changelog/tag/azure/)[security](https://phase.dev/changelog/tag/security/)[sso](https://phase.dev/changelog/tag/sso/)[performance](https://phase.dev/changelog/tag/performance/)

[March was a major release month. We rewrote the CLI from Python to Go — shipping a single binary across 16 platform targets that's 75-90% smaller. We introduced Secret Types with sealed write-only secrets, added Azure as a second external identity provider, launched Azure Key Vault sync, released Go SDK 2.0 with pure-Go cryptography, and shipped native AI agent integration. Here's everything. Read more](https://phase.dev/changelog/march-2026/)

2026.02.28

2026.02.28

## [February 2026](https://phase.dev/changelog/february-2026/)

[console](https://phase.dev/changelog/tag/console/)[cli](https://phase.dev/changelog/tag/cli/)[kubernetes](https://phase.dev/changelog/tag/kubernetes/)[helm](https://phase.dev/changelog/tag/helm/)[compliance](https://phase.dev/changelog/tag/compliance/)[security](https://phase.dev/changelog/tag/security/)

[February brought organization ownership transfer, the official Phase Console Helm Chart 1.0 for Kubernetes self-hosting, SOC 2 Type II certification, and a series of UI/UX improvements and bug fixes. Here's the full recap. Read more](https://phase.dev/changelog/february-2026/)

2026.01.31

2026.01.31

## [January 2026](https://phase.dev/changelog/january-2026/)

[console](https://phase.dev/changelog/tag/console/)[cli](https://phase.dev/changelog/tag/cli/)[kubernetes](https://phase.dev/changelog/tag/kubernetes/)[github](https://phase.dev/changelog/tag/github/)[api](https://phase.dev/changelog/tag/api/)[security](https://phase.dev/changelog/tag/security/)

[January brought API rate limiting to the REST API, GitHub Dependabot secret sync, a major architectural improvement to the Kubernetes Operator, and a wave of security hardening. Here's the full recap. Read more](https://phase.dev/changelog/january-2026/)

2025

2025

2025.11.30

2025.11.30

## [November 2025](https://phase.dev/changelog/november-2025/)

[console](https://phase.dev/changelog/tag/console/)[security](https://phase.dev/changelog/tag/security/)[okta](https://phase.dev/changelog/tag/okta/)[sso](https://phase.dev/changelog/tag/sso/)[compliance](https://phase.dev/changelog/tag/compliance/)[pentest](https://phase.dev/changelog/tag/pentest/)

[November was a security-focused month at Phase. We completed our external penetration test with Oneleet and remediated all findings, achieved SOC 2 Type II compliance, shipped Okta OIDC SSO, and hardened the platform across the board. Here's a full recap. Read more](https://phase.dev/changelog/november-2025/)

2025.01.23

2025.01.23

## [Improved Cross-Environment Secret Management & More](https://phase.dev/changelog/cross-env-ux-and-more/)

[console](https://phase.dev/changelog/tag/console/)[cli](https://phase.dev/changelog/tag/cli/)[dx](https://phase.dev/changelog/tag/dx/)[performance](https://phase.dev/changelog/tag/performance/)[security](https://phase.dev/changelog/tag/security/)

[The Console has been updated with new features and UX improvements to make managing secrets across environments easier and more intuitive. We've also shipped several performance optimizations, bugfixes, and improved secret handling for self-hosted users. Read more](https://phase.dev/changelog/cross-env-ux-and-more/)

DeploymentSelf-hosted / Cloud

Get started

## Keep your secrets

Self-host or start on fully managed Cloud in under a minute.

Self-hosted

Run Phase on your own infrastructure. Free and open source.

AI agent deployment skill

[![Docker Compose logo](https://phase.dev/assets/images/docker.svg)](https://docs.phase.dev/self-hosting/docker-compose)[![Kubernetes logo](https://phase.dev/assets/images/kubernetes.svg)](https://docs.phase.dev/self-hosting/kubernetes)[![AWS logo](https://phase.dev/assets/images/aws.svg)](https://docs.phase.dev/self-hosting/aws-eks)[![GCP logo](https://phase.dev/assets/images/gcp.svg)](https://docs.phase.dev/self-hosting/gcp)[![Azure logo](https://phase.dev/assets/images/azure.svg)](https://docs.phase.dev/self-hosting/azure)[![Railway logo](https://phase.dev/assets/images/railway.svg)](https://docs.phase.dev/self-hosting/railway)[![Raspberry Pi logo](https://phase.dev/assets/images/raspberry.svg)](https://docs.phase.dev/self-hosting/raspberrypi)

[Self-hosting guide](https://docs.phase.dev/self-hosting)

Cloud

Fully managed. From signup to your first secret in 60 seconds.

Sign up with

[Google](https://console.phase.dev/login?provider=google)[GitHub](https://console.phase.dev/login?provider=github)[GitLab](https://console.phase.dev/login?provider=gitlab)