Changelog

New billing portal section in the admin dashboard. Displays billing summary with current plan details, invoice history with downloadable PDF receipts, plan usage visualization with token consumption and request volume breakdowns, and payment method management.

Organization-level settings management in the admin portal. Administrators can configure default timezone, session timeout duration, MFA enforcement policy (off, encouraged, required), and IP allowlist for admin portal access. Settings apply organization-wide with per-user override capabilities.

Hybrid Outpost DLP pipeline now uses priority-aware entity deduplication matching the cloud platform behavior. When multiple detection tiers identify the same entity span, the highest-confidence detection is retained. Eliminates duplicate findings in audit logs and reduces noise in enforcement decisions for air-gap deployments.

API reference documentation for the billing API (invoice retrieval, usage queries, plan details), org settings API (timezone, session, MFA, IP allowlist CRUD), and portal compliance API (framework status, bundle activation, audit export scheduling). All endpoints include request and response schemas, error codes, and authentication requirements.

New feature page documenting Arbitex Gateway's measured DLP accuracy. Per-entity-type accuracy scores, comprehensive validation dataset methodology, confidence calibration curves, and CI regression gates that block merges on accuracy degradation. Transparency — accuracy is measured, not claimed.

New comparison page examining Palo Alto Networks and Arbitex Gateway side by side. Fair assessment of Palo Alto's strengths in enterprise network security and NGFW integration alongside Arbitex differentiators in prompt-level DLP, content categories, measured accuracy, and air-gap Outpost deployment.

DLP confidence scores are now calibrated against held-out test data so reported confidence values match observed accuracy. Security teams can set per-entity-type confidence thresholds — tighter for financial data, more permissive for general PII — without writing custom rules.

Full pattern rule set now delivered to Outpost deployments in every signed bundle update. Air-gap environments receive the same detection coverage as cloud-connected deployments with cryptographically signed bundles ensuring bundle integrity.

ML entity recognizers now produce identical detection results across cloud and Outpost deployments. Model versioning ensures the same recognition weights run in both environments, eliminating detection coverage gaps between deployment modes.

The admin portal now surfaces real-time notifications for policy configuration changes, DLP detection threshold modifications, compliance framework activation events, and system health status changes. Notifications are scoped by admin role permissions.

Audit logs, DLP detection events, and usage analytics are now exportable in structured CSV and JSON formats from the admin portal. Exports respect role-based access controls and include cryptographic signatures for evidence chain integrity.

New industry page for studios, networks, and streaming platforms. Covers pre-release content protection, DMCA copyright compliance, royalty and licensing data DLP, talent PII detection aligned with SAG-AFTRA obligations, competitive intelligence controls for MNPI, and content category classification at the gateway.

Updated comparison page examining how Zscaler ZIA/ZPA and Arbitex Gateway approach AI governance differently. Fair assessment of Zscaler's strengths in network security and CASB alongside Arbitex differentiators in prompt-level DLP, content categories, air-gap Outpost deployment, and tamper-proof audit integrity.

Validation pass for DLP detection patterns used in media industry deployments. Pre-release content detection refined to reduce false positives from published content references and marketing materials. Talent PII patterns tuned for entertainment industry naming conventions and compensation formats.

Outpost deployments now receive the full DLP pattern set at bundle delivery time, including media-specific detection rules. Cryptographically signed bundles ensure pattern parity between cloud and air-gap environments without requiring persistent network connectivity.