Releasesby GlyphFGA Logging API Now Generally Available
__FGA Logging API Now Generally Available__ The Auth0 FGA Logging API is now Generally Available (GA). This dedicated endpoint provides a comprehensive audit trail for every interaction with the FGA system. You can now programmatically retrieve detailed logs for auditing, debugging, and monitoring.
Also shipped Oct 17, 2025Okta in October 2025 →
What's new in Sigma
Admin IP Allowlist for UI/Application (GA) You can configure an IP allowlist for the Sigma UI. After enabling the allowlist, you can add individual IP addresses or ranges of addresses in CIDR notation. Only users in the allowlist are able to access the Sigma application through the user interface. For more information, see Restrict access to Sigma by IP .
Security Center - New Application Security reports (Closed Beta)
Cloudflare's new Application Security report , currently in Closed Beta, is now available in the dashboard. Go to Security reports ↗ The reports are generated monthly and provide cyber security insights trends for all of the Enterprise zones in your Cloudflare account.
WAF - New detections released for WAF managed rulesets
This week we introduced several new detections across Cloudflare Managed Rulesets, expanding coverage for high-impact vulnerability classes such as SSRF, SQLi, SSTI, Reverse Shell attempts, and Prototype Pollution.
Repo-aware settings, Secure DB queries, IPv4 Private Networks
Last week, [we merged a PR from a hot air balloon in Mexico City](https://railway.com/changelog/2025-10-10-retreat-v8) (yes, really). This week, we're back on the ground and back to shipping.
Console improvements, infrastructure updates, and E2E testing guides release - Oct 17, 2025
Configure scale to zero in the console. Scale plan users can now adjust their scale to zero timeout directly in the Neon Console. Simply select Edit compute fro...
Email security - On-Demand Security Report
You can now generate on-demand security reports directly from the Cloudflare dashboard. This new feature provides a comprehensive overview of your email security posture, making it easier than ever to demonstrate the value of Cloudflare’s Email security to executives and other decision makers.
More from Auth0Every Auth0 release →
Auth0 Nuxt SDK Beta
The first public beta of the Auth0 Nuxt SDK is now available for developers building web apps on the __Nuxt__ framework! ### Key Highlights __Idiomatic Nuxt 3 Experience:__ Simple, composable functions (useAuth0) that feel native to Nuxt developers, dramatically reducing time-to-first-login.
Audience Validation for Private Key JWT Client Authentication
When validating [JWT assertions used for client application authentication](https://auth0.com/docs/get-started/authentication-and-authorization-flow/authenticate-with-private-key-jwt), **Auth0 will impose stricter requirements and accept only a tenant's issuer identifier as a single JSON string value in the "aud" (audience) claim**.
Easily Update Your Firewall with the New IP Allow List
We are excited to announce an improvement that makes it faster and easier for you to keep your firewall configurations up-to-date. Our __IP allow list for Auth0's Public Cloud regions__ is now available in a standardized, machine-readable format.
Akamai Supplemental Signals is Now in Early Access
We’re excited to announce the Early Access release of **Akamai Supplemental Signals**. This feature allows **Auth0 Enterprise customers who have Akamai configured as a reverse proxy** in front of Auth0 to forward signals from [**Akamai Bot Manager**](https://www.akamai.com/products/bot-manager) and [**Akamai Account...
Auth0 Events Catalog Explorer Now Available
As part of the [Early Access launch of Event Streams](https://auth0.com/changelog#4SmjmcbmVZgt1Zsn7JYF1V), there is now an Events Catalog explorer available in Auth0 Docs to better guide you on the details of each Event -- including examples. The Event Streams feature allows you to discover completed changes to Auth0 Users and Organizations as they happen.
Enhanced Signup Bot Detection for Stronger Security and Seamless User Experience
We’ve improved our **machine learning (ML) model for signup** to deliver stronger protection against automated account creation while keeping friction low for legitimate users. > **Note:** This update applies **only to the signup flow**. There are **no changes** to the ML models used for bot detection in login or password reset flows.
Upcoming Changes when using Non-Verifiable Callback URIs
To enhance security and mitigate risks of application impersonation and phishing attacks, we are **recommending the transition to HTTPS-based callbacks using [Android App Links](https://developer.android.com/training/app-links#android-app-links) and [Apple Universal...
New Sign in with Shop Social Connection
Auth0 now supports Sign in with Shop, a new social login integration designed for Shopify merchants. This feature allows merchants to offer customers a familiar authentication option using their existing Shop accounts.