Releasesby GlyphSecurity Center: Unleash Deeper Insights with New Filtering & Pre-defined Groupings
We're excited to announce a significant update to the Security Center, marking the first major enhancement since last year's introduction of Thresholds and Alerts! These new capabilities drastically improve your ability to monitor, analyze, and respond to security threats with greater precision and speed.
Also shipped Dec 18, 2025Okta in December 2025 →
Response Healing: Reduce JSON Defects by 80%+
Response Healing is a new feature that automatically corrects malformed JSON responses from LLMs before they reach the application.
WAF Release - 2025-12-18
This week's release focuses on improvements to existing detections to enhance coverage. Key Findings Existing rule enhancements have been deployed to improve detection resilience against broad classes of web attacks and strengthen behavioral coverage.
Process large-scale inference workloads asynchronously with the new Batch API and Files API
Process large-scale inference workloads asynchronously with the new Batch API and Files API. Submit up to 50,000 requests in a single batch job and get 50% cost savings. Learn more in our Batch guide.
December Release Spotlight
OpenRouter released updates including Response Healing for structured outputs, chatroom notifications, and long-context model rankings.
AI Crawl Control - New AI Crawl Control Overview tab
The Overview tab is now the default view in AI Crawl Control. The previous default view with controls for individual AI crawlers is available in the Crawlers tab. What's new Executive summary , Monitor total requests, volume change, most common status code, most popular path, and high-volume activity Operator grouping , Track crawlers by their operating...
More from Auth0Every Auth0 release →
Custom Token Exchange now available in Open Early Access
We’re excited to announce the __Open Early Access (EA) of Custom Token Exchange__. OAuth 2.0 Token Exchange allows to trade one security token for another (typically an Access Token).
MyAccount API Explorer Experience Updated
The MyAccount API Explorer now has an updated experience! Using MyAccount API, customers can build self-service management experiences at scale, powered directly from their applications. To learn more about the MyAccount API feature, [click here](https://auth0.com/docs/manage-users/my-account-api).
Forms - Flows Auth0 Send Email Action
We’re excited to announce that we added __Flows Auth0 Send Email Action__! This new feature allows you to send emails from Flows using the customized Email Provider at your Auth0 Tenant.
Deprecation of Weak TLS 1.2 Cipher Suites
To ensure the highest security standards for your identity infrastructure, we are retiring specific weak TLS 1.2 cipher suites. This change affects all connections to Auth0 service endpoints and web applications, specifically: __Tenant Domains__: All default (e.g., [tenant].auth0.com) and Custom Domains for both Public and Private Cloud.
Auth0 Private Cloud Now Available on Azure 30x & 30x Burst Tiers
We are pleased to announce the expanded availability of __Auth0 Private Cloud on Microsoft Azure__, now supporting the __30x and 30x Burst__ performance tiers. This update enables enterprise organizations to leverage high-scale, dedicated identity infrastructure while maintaining their commitment to the Azure ecosystem.
Advanced Customizations for Universal Login has reached General Availability
We are excited to announce that __Advanced Customizations for Universal Login (ACUL)__ is now generally available. ACUL enables developers to create custom, client-rendered user interfaces for Universal Login using their preferred frontend technologies.
Google Workspace User Directory Sync - Now in Early Access
We’re excited to announce that Google Workspace User Directory Sync is now available in Limited Early Access (EA) with major enhancements to configuration, usability, and performance.
Requesting App for Cross App Access (XAA) is now available in Beta
This new Token Vault capability allows Client Applications to obtain access tokens from third-party APIs (resource servers), through an authorization flow that is coordinated by a common Identity Provider implementing the [Identity Assertion Authorisation Grant](https://datatracker.ietf.org/doc/draft-ietf-oauth-identity-assertion-authz-grant/) standard.