Release Notes 4.17.0

Overview

This document outlines the updates, improvements, and fixes introduced between versions 4.16.0 (released on Dec 15, 2025) and 4.17.0 (released on Jan 26, 2026) of the Excalibur v4 software.

New Features

Country-Based Polygon Geofencing Support

• Geofencing has been enhanced to support country-level targeting. When Type = Polygon is selected and a country name (e.g., Slovakia) is entered in the search bar, the system now recognizes the input as a country and automatically switches from radius-based geofencing to border-based polygon mode.

In this mode:

• The full country outline is rendered on the map instead of a circular radius.
• The radius input is hidden, as it is not applicable to country polygons.
• If polygon data for the selected country is unavailable, the system automatically falls back to the circular radius behavior to ensure uninterrupted functionality.

Requirements:

• A valid Google Places API key is required for country detection and search functionality to work correctly.
• Please refer to the following documentation for setup instructions: Google Places API configuration

Figure 1. Country Border

Smart App Update Notifications

• The app now detects when a new version is available and notifies you immediately, so you never miss important updates.

When an update is available, the app will show a dedicated page displaying:

• Your current version and the latest available version
• Highlights of what’s new in this release
• Easy options to update immediately or be reminded later
• Tapping “Update Now” or “Go to Store” takes you directly to the app store to update quickly and easily.

For important security updates, the app will clearly indicate their significance and encourage immediate updating to keep your experience safe and secure.

You can dismiss or postpone updates while continuing to use the app, and the system will remind you again after a reasonable interval.

Figure 2. Notification Icon 1

Figure 3. Notifications Icon 2

Figure 4. Notifications Detail

Enhanced Peer Verification Security

We’ve strengthened the peer verification process to keep your organization more secure.

• Approvers must now verify their identity using PIN, biometrics, location, and secure digital signatures before approving or rejecting verification requests.
• This ensures that only authorized users can approve requests and that all actions are fully auditable.
• Security policies are strictly enforced, protecting your workflows from unauthorized actions.

Tenant Deletion via API

Administrators now have the ability to fully remove a tenant and all associated data when necessary.

• Using the tenant deletion API, a tenant and all tenant-specific resources can be permanently deleted.
• This helps organizations comply with legal, regulatory, or internal data retention policies.
• Ensures that all data is securely and completely removed, giving full control over tenant lifecycle management.

Flexible Session Input Recording & Target Alerts

We’ve added improvements to how session data is handled and target creation notifications:

• Controlled Session Recording:

  • When session recording is disabled, user input from sessions is no longer stored.
  • When session recording is enabled, user input—including typed input and copy/paste actions—is saved securely, giving administrators control over what is recorded.

• Target Creation Alerts:

  • A warning alert is now displayed when creating targets, helping you avoid potential configuration issues before they happen.

Figure 5. Input Recording

Enhanced Tenant Provisioning & PAM Target Management via API

We’ve improved the API experience to enable fully automated tenant setup and management for organizations:

• Automated Tenant Provisioning:

  • Administrators can now automate tenant creation, including inviting users, using our public API with OAuth2 authentication.
  • The system now supports retrieving dynamic user-group IDs in tenant scope, enabling automated user invitations without manual intervention.

• Automated PAM Target Assignment:

  • PAM targets can now be assigned to the correct PAM groups automatically via API.
  • The system now supports retrieving dynamic PAM group IDs in tenant scope with OAuth2, removing the need for manual login.

This enhancement is particularly useful for large organizations or government agencies, enabling faster, more secure, and fully automated onboarding of tenants, users, and PAM resources.

Enhanced Large File Uploads in PAM Sessions

We’ve upgraded the file upload experience in PAM sessions to better support enterprise workflows:

• Near Real-Time Uploads:

  • Large files—including those over 5 GB—can now be uploaded efficiently, with minimal delay.

• Reliable and Scalable:

  • The upload pipeline has been optimized to handle large transfers smoothly without timeouts, ensuring a responsive experience.

• Secure and Efficient:

  • Files are uploaded securely while minimizing overhead, balancing speed and protection.

This enhancement ensures that even the largest files can be transferred quickly and reliably during PAM sessions, supporting high-demand enterprise use cases.