Releasesby GlyphWhat's new in Sigma
Admin IP Allowlist for UI/Application (GA) You can configure an IP allowlist for the Sigma UI. After enabling the allowlist, you can add individual IP addresses or ranges of addresses in CIDR notation. Only users in the allowlist are able to access the Sigma application through the user interface. For more information, see Restrict access to Sigma by IP .
Also shipped Oct 17, 2025Sigma Computing in October 2025 →
Security Center - New Application Security reports (Closed Beta)
Cloudflare's new Application Security report , currently in Closed Beta, is now available in the dashboard. Go to Security reports ↗ The reports are generated monthly and provide cyber security insights trends for all of the Enterprise zones in your Cloudflare account.
WAF - New detections released for WAF managed rulesets
This week we introduced several new detections across Cloudflare Managed Rulesets, expanding coverage for high-impact vulnerability classes such as SSRF, SQLi, SSTI, Reverse Shell attempts, and Prototype Pollution.
Repo-aware settings, Secure DB queries, IPv4 Private Networks
Last week, [we merged a PR from a hot air balloon in Mexico City](https://railway.com/changelog/2025-10-10-retreat-v8) (yes, really). This week, we're back on the ground and back to shipping.
FGA Logging API Now Generally Available
__FGA Logging API Now Generally Available__ The Auth0 FGA Logging API is now Generally Available (GA). This dedicated endpoint provides a comprehensive audit trail for every interaction with the FGA system. You can now programmatically retrieve detailed logs for auditing, debugging, and monitoring.
Console improvements, infrastructure updates, and E2E testing guides release - Oct 17, 2025
Configure scale to zero in the console. Scale plan users can now adjust their scale to zero timeout directly in the Neon Console. Simply select Edit compute fro...
Email security - On-Demand Security Report
You can now generate on-demand security reports directly from the Cloudflare dashboard. This new feature provides a comprehensive overview of your email security posture, making it easier than ever to demonstrate the value of Cloudflare’s Email security to executives and other decision makers.
More from SigmaEvery Sigma release →
What's new in Sigma
API Impersonate a user in API calls (Beta) A user assigned the Admin account type can impersonate other users in API calls, for example to retrieve and display the contents of their My Documents folder in embedded content. For more details and an example test Python script, see Impersonate users .
What's new in Sigma
Admin Support for specific OAuth scopes for Snowflake connections You can now define specific scopes by role for OAuth authentication to your Snowflake data warehouse, enabling you to use separate connections for fixed roles, instead of just your default role. See Connect to Snowflake with OAuth .
What's new in Sigma
Admin Enable a unique SAML SP entity ID (Beta) When setting up SAML-based authentication for a Sigma organization, you can now assign a unique service provider (SP) entity ID for the SAML configuration. With the unique entity ID for Sigma as an SP, you can configure your IdP to allow SAML authentication to multiple Sigma organizations.
What's new in Sigma
Admin New account type permissions for exports, user attributes, and branding settings The following admin feature permissions are now available for the Build account type and can be granted to custom account types: Manage users Manage user attributes Manage teams Manage export integrations The Branding settings permission is now the Manage email branding...
What's new in Sigma
Data apps If/else control flow in action sequences (GA) If/else control flow is now generally available. Use if/else statements to create dynamic workflows within action sequences. If/else control flow adds flexibility to a sequence by allowing it to check one or more conditions and execute actions for the first condition that evaluates to true.
What's new in Sigma
Admin Audit logging events for app-based two-factor authentication (Beta) You can now view app-based two-factor authentication login events in the audit logs. OAuth redirect URI on connection forms Sigma now displays the redirect URI on your connection forms that OAuth providers should use when redirecting users back to Sigma after authentication.
What's new in Sigma
Admin Audit log support for GCP KSA region Sigma now supports audit log events for organizations hosted in the GCP KSA (ME Central 2) region. For a list of all supported regions, see Enable or disable audit logging .
What's new in Sigma
Admin Add a key file for Snowflake key pair connections When configuring a Snowflake connection, you can add a PKCS#8-formatted key file ( .p8 ) instead of pasting your private key when setting up key pair authentication for the connection or an OAuth service account. For more details, see Connect to Snowflake .