Skip to main content

Release notes

This page tracks notable changes across Ticketra releases. Newest first.

Keeping this current

Add an entry here with each release. When you cut a documentation version (npm run docusaurus docs:version <x.y>), this page is snapshotted alongside the rest of the docs.

1.0.0​

The first release of Ticketra — an observable-centric, multi-tenant SOC case management platform.

Highlights

  • Cases with a full lifecycle (OPEN → IN_PROGRESS → RESOLVED → CLOSED, plus reopen), tasks, comments, tags, attachments, and sequence steps.
  • Observable registry with sightings, tagging, and human-reviewed correlation.
  • CTI enrichment across six providers (VirusTotal, AbuseIPDB, MISP, Shodan, GreyNoise, OTX AlienVault) with auto-tagging and private-IP suppression.
  • Event schemas as first-class entities with a draft/active/deprecated lifecycle and versioning.
  • Multi-tenancy with isolated workspaces and cross-tenant system users.
  • Real-time collaboration via Server-Sent Events (live case updates + analyst presence).
  • Custom roles with granular, action-level permissions on top of the built-in SUPER_ADMIN / ADMIN / USER roles.
  • LDAP / Active Directory authentication with group-to-role mapping and JIT provisioning.
  • Notifications to email, Microsoft Teams, and Discord.
  • Playbooks of ACTION/DECISION steps applied to cases.
  • Reports (summary/detailed, PDF/DOCX) with branding.
  • Backups & restore with checksummed, verifiable archives and scheduling.
  • Append-only audit log across all significant actions.
  • Hardened by default: CSRF, strict CSP, HSTS, encrypted secrets, tenant isolation, and a read-only, capability-dropped container posture.
  • Air-gap compatible — no runtime external dependencies.

Template for future entries:

## x.y.z — YYYY-MM-DD
### Added
### Changed
### Fixed
### Security
### Upgrade notes