> For the complete documentation index, see [llms.txt](https://docs.dispel.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.dispel.com/changelog/readme.md).

# Changelog

What changed in each release of Dispel.

{% hint style="info" %}
These notes describe **Dispel SaaS** at [app.dispel.com](https://app.dispel.com). Customer Cloud and On-Premise deployments release on their own schedule, and the features available in them may differ.
{% endhint %}

{% updates format="full" %}
{% update date="2026-10-07" %}

## [8.15.0 — 7 October 2026](/changelog/releases/2026-10-07.md)

**Dispel Zero Trust Engine 8.15.0**, including Orchestrator 1.24.0.

**Customer Impact Score: 2**

**New features and improvements**

* The [Topology](https://docs.dispel.com/monitor-and-investigate/topology) Tree and Map views have a minimap in the bottom-right corner showing the whole view and the part on screen. Click or drag it to move around, or press O to show or hide it. On the Map, a group of facilities shows how many it holds and how many are online, degraded or offline. (DIS-24287)
* Sort menus hold one sort, a column and a direction, and Reset returns the list to its default order. Shift-clicking a column header replaces the sort instead of adding a second one. (DIS-24249)
  {% endupdate %}

{% update date="2026-09-23" %}

## [8.14.0 — 23 September 2026](/changelog/releases/2026-09-23.md)

**Dispel Zero Trust Engine 8.14.0**, including Orchestrator 1.23.0.

**Customer Impact Score: 2**

**New features and improvements**

* **Beta Features**, in the account menu, lets you try features before they reach everyone. (DIS-23092)
* The [Topology](https://docs.dispel.com/monitor-and-investigate/topology) list can show any stored device detail as a column, including serial number, firmware, MAC address and source, along with counts and created dates, and sort and search by any of them. (DIS-23982)
* Topology renders faster on sites with 10,000 or more devices. (DIS-24097)
* Opening a recording puts its link in the address bar, so you can copy it directly, and Back closes it. (DIS-24109)
* The Browser Connect [idle timeout and recording idle sensitivity](https://docs.dispel.com/integrate-and-administer/settings/browser-connect) accept 0: no idle timeout, so sessions run until the maximum session duration, or no idle time marked on recordings. (DIS-23821)
  {% endupdate %}

{% update date="2026-09-14" %}

## [8.13.0 — 14 September 2026](/changelog/releases/2026-09-14.md)

**Dispel Zero Trust Engine 8.13.0**, including Orchestrator 1.22.0.

**Customer Impact Score: 2**

**New features and improvements**

* You can now search [Settings](https://docs.dispel.com/integrate-and-administer/settings) from the top of its navigation or with ⌘K. (DIS-23658)
* The sidebar and page have a new card layout. (DIS-23438)
* In organizations that record unique device identifiers, [Topology](https://docs.dispel.com/monitor-and-investigate/topology) shows them as the first column of the list and beneath each device in the tree, and you can sort and search by them. (DIS-23963, DIS-23969)
* A device set up for Browser Connect over RDP can turn off the offscreen graphics cache under its advanced settings, for older Windows hosts whose display arrives corrupted or frozen. (DIS-23734)
* The device in a recording's details panel opens in Topology. (DIS-19690)
* Credential fields on a file transfer have a control to show the password you typed. (DIS-23378)
* The Chinese and Japanese translations have been updated. (DIS-23497, DIS-23611)
  {% endupdate %}

{% update date="2026-08-26" %}

## [8.12.0 — 26 August 2026](/changelog/releases/2026-08-26.md)

**Dispel Zero Trust Engine 8.12.0**, including Orchestrator 1.21.0.

**Customer Impact Score: 2**

**New features and improvements**

* The main sidebar has been reorganized. Every labeled section now collapses and remembers how you left it, Dashboard, Access Windows and Settings sit together under **Control**, and Regions and Facilities under **Sites**. (DIS-23400)
* Documentation now appears inside the console. Help marks beside a control preview the relevant article on hover, the Help panel opens the full article beside your work, and the articles follow the language you have set. (DIS-23364)
* Devices now record where Dispel learned about them. Source is a sortable column on the devices list and a filter in [Topology](https://docs.dispel.com/monitor-and-investigate/topology), so devices discovered by an integration can be told apart from ones added by hand. (DIS-19849)
* Recording playback runs through idle stretches instead of stopping at them, and the timeline stays inside the panel. (DIS-23250)
* File transfers to a target that expects a domain now accept one, including for transfers that do not use the password vault. (DIS-23181, DIS-23179, DIS-23180)
* The recovery codes screen has been redesigned. (DIS-23365)
* A wicket that fails to upgrade now says so, instead of leaving you to notice it had not moved.
* A wicket reports its device inventory again after a reboot, so the list reflects what is actually on it.
* The Japanese, Chinese, French, German, Dutch, Portuguese and Spanish translations have been updated across the console. (DIS-23399)
* An organization can now nominate its own [points of contact](https://docs.dispel.com/integrate-and-administer/settings/points-of-contact), so the lockout notice a user receives names an administrator they can reach instead of an unmonitored address. (DIS-23025)
* Apple devices can now be configured from the device page. (DIS-22509)
  {% endupdate %}

{% update date="2026-08-12" %}

## [8.11.0 — 12 August 2026](/changelog/releases/2026-08-12.md)

**Dispel Zero Trust Engine 8.11.0**, including Orchestrator 1.20.0.

**Customer Impact Score: 2**

**New features and improvements**

* Dates and times throughout the console now show in your own time zone by default, with the UTC value on hover. (DIS-22988)
* File transfers no longer appear in the Topology tree view. They remain in the list view. (DIS-22948)
* The base color palette has been refreshed. (DIS-22779)
* The appearance and color mode picker has moved into the user menu, and is reachable from Quick Actions. (DIS-22745)
* Stacks no longer appear in Topology's tree view. They remain in the list and on the map. (DIS-21812)
* Wickets in a dedicated cloud region use a default MTU that suits the path they actually take. (DIS-20708, DIS-21362)
* A wicket's host firewall is off by default, since access is already governed by the rules Dispel applies to it. (DIS-21354)
* Wicket patching reads the fleet once a day rather than on every sweep, so a large deployment is not kept busy checking itself. (DIS-22826)
  {% endupdate %}

{% update date="2026-07-27" %}

## [8.10.0 — 27 July 2026](/changelog/releases/2026-07-27.md)

**Dispel Zero Trust Engine 8.10.0**, including Orchestrator 1.18.0.

**Customer Impact Score: 2**

**New features and improvements**

* Quick Actions is a command palette: press ⌘K (Ctrl+K on Windows) anywhere in the console, type what you are looking for, and go straight to it. The shortcut works regardless of keyboard layout. (DIS-22343, DIS-22589)
* An organization can set how long a gap in a [recording](https://docs.dispel.com/monitor-and-investigate/logs) counts as idle. (DIS-21697)
* The SFTP download form mirrors the upload form — source folder and file name as separate fields — and the SMB share directory field says what format it expects. (DIS-22160, DIS-22336)
* Module access continues for 30 days after a service period ends, rather than stopping on the day. The account team link on [Billing](https://docs.dispel.com/integrate-and-administer/billing) is now **Your Dispel Team**. (DIS-22710, DIS-22706)
* Browser Connect shows a dedicated notice when a session is being recorded, and an organization can turn that notice on or off. (DIS-21793)
* A Session Forensics event and the baseline it was scored against can be [exported as JSON](https://docs.dispel.com/monitor-and-investigate/data-exports). (DIS-21961)
  {% endupdate %}

{% update date="2026-07-09" %}

## [8.9.0 — 9 July 2026](/changelog/releases/2026-07-09.md)

**Dispel Zero Trust Engine 8.9.0**, including Orchestrator 1.17.0.

**Customer Impact Score: 2**

**New features and improvements**

* An organization can upload its own trusted CA bundle for [Browser Connect](https://docs.dispel.com/integrate-and-administer/settings/browser-connect). The certificates are validated when you add them and are injected into the session, so an HTTPS device signed by your own authority opens cleanly. (DIS-21926, DIS-21855)
* Dispel reads asset inventory from [Claroty xDome](https://docs.dispel.com/integrate-and-administer/integrations/asset-discovery/claroty-xdome). (DIS-21945)
* Dispel reads asset inventory from [Tenable OT Security](https://docs.dispel.com/integrate-and-administer/integrations/asset-discovery/tenable) and [Darktrace](https://docs.dispel.com/integrate-and-administer/integrations/asset-discovery/darktrace), with the vendor's own device detail carried onto the device. (DIS-21614, DIS-21623)
* A device set up for Browser Connect can be given its own screen resolution. (DIS-21557)
* A recording you cannot open now says which facility permission it needs. (DIS-20565)
* Session Forensics reads the authentication factors your identity provider reports and scores the session on what actually happened, rather than assuming. (DIS-20766)
* Adding devices to a facility has a search box in place of the dropdown. (DIS-20904)
* [Topology](https://docs.dispel.com/monitor-and-investigate/topology)'s tree view draws large trees faster: only what is on screen is rendered, and the animation eases off once the tree is big. (DIS-21591)
  {% endupdate %}

{% update date="2026-06-25" %}

## [8.8.0 — 25 June 2026](/changelog/releases/2026-06-25.md)

**Dispel Zero Trust Engine 8.8.0**, including Orchestrator 1.16.0.

**Customer Impact Score: 2**

**New features and improvements**

* [Compliance](https://docs.dispel.com/secure-and-govern/overview/supported-frameworks) adds NIST 800-171 Rev 3, NIST 800-82 Rev 3 and CISA CPG 2.0, records the version of each framework, and includes the evidence for a control — and the period it covers — in the OSCAL and CSV exports. (DIS-20941, DIS-20969, DIS-20967, DIS-21250)
* Recording playback lets you resize the timeline and the side panel, resets either with a double-click, and highlights the activity that is playing. (DIS-21240, DIS-21239, DIS-21241)
* A device's unique identifier can be set from the [bulk CSV upload](https://docs.dispel.com/build-your-environment/infrastructure/device-management/create-a-device), and identifiers are unique within an organization rather than across all of them. (DIS-21256, DIS-19310)
* A facility name can be up to 128 characters. (DIS-21202)
  {% endupdate %}

{% update date="2026-06-10" %}

## [8.7.0 — 10 June 2026](/changelog/releases/2026-06-10.md)

**Dispel Zero Trust Engine 8.7.0**, including Orchestrator 1.15.0.

**Customer Impact Score: 2**

**New features and improvements**

* A [recording](https://docs.dispel.com/monitor-and-investigate/logs) carries an activity timeline beside the player: every event in the session in order, with the idle periods marked. (DIS-20315, DIS-20563)
* The settings navigation collapses to a rail on its own, opens on hover or with a keystroke, and becomes a dropdown on a small screen. (DIS-21017)
* A device set up for Browser Connect over RDP can be configured to connect in administrative console mode, under the device's advanced settings. (DIS-20873, DIS-20852, DIS-20856)
* Building a [stack](https://docs.dispel.com/connect-to-your-systems/connection-methods/virtual-desktops/stacks) uses a single form, whichever page you start from. (DIS-20895)
* Importing devices reports the duplicates and the multiple addresses it found rather than dropping them, and reads ports and protocols from every integration. (DIS-20933)
* [Compliance](https://docs.dispel.com/secure-and-govern/overview) now sits under Security, with the framework views consolidated into one place. (DIS-20797)
* The [Topology](https://docs.dispel.com/monitor-and-investigate/topology) map carries its basemap, perspective and health-legend controls on the canvas. (DIS-20919)
  {% endupdate %}

{% update date="2026-05-28" %}

## [8.6.0 — 28 May 2026](/changelog/releases/2026-05-28.md)

**Dispel Zero Trust Engine 8.6.0**, including Orchestrator 1.13.0 and Session Manager 1.5.0.

**Customer Impact Score: 2**

**New features and improvements**

* [File transfer](https://docs.dispel.com/build-your-environment/infrastructure/device-management/device-file-upload-download) over SFTP accepts a private key as well as a password, and upload and download each carry their own configuration on the device. (DIS-20312, DIS-20116, DIS-20531)
* The SMB and SFTP forms on a [file share](https://docs.dispel.com/build-your-environment/infrastructure/device-management/file-share) have been tidied: the picker reads more clearly, and a username can be up to 64 characters. (DIS-20516, DIS-20705)
* An organization can be [deleted](https://docs.dispel.com/integrate-and-administer/settings/delete-organization). (DIS-20097)
* **Allow group to approve access requests** has been removed from facility groups. Approvers are managed [per facility](https://docs.dispel.com/connect-to-your-systems/access-windows/manage-access-request-approvers). (DIS-20321)
  {% endupdate %}

{% update date="2026-05-14" %}

## [8.5.0 — 14 May 2026](/changelog/releases/2026-05-14.md)

**Dispel Zero Trust Engine 8.5.0**, including Orchestrator 1.12.0.

**Customer Impact Score: 2**

**New features and improvements**

* Uploads and downloads run [inside a Browser Connect session](https://docs.dispel.com/connect-to-your-systems/connection-methods/browser-connect/use-a-browser-connect-session), in a panel beside the screen, and progress as the session continues. (DIS-19754)
* File Transfer is a column on the devices table, so the devices set up for it can be found from the list. (DIS-20076)
* Setting up a [file share](https://docs.dispel.com/build-your-environment/infrastructure/device-management/file-share) has been reworked: the fields are grouped by what they configure, and the form tells you what it needs. (DIS-19753)
* A recording that is still being made is marked **Live** in the recordings list. (DIS-20127)
* An organization can turn [kiosk mode](https://docs.dispel.com/integrate-and-administer/settings/browser-connect) on or off for Browser Connect. (DIS-19621)
* [Compliance](https://docs.dispel.com/secure-and-govern/overview) adds IEC 62443-3-3, and the frameworks it already carries report against a consolidated view. (DIS-20135, DIS-20266)
* Active access sorts ahead of everything else on a device's Remote Access tab, in buckets rather than one alphabetical run. (DIS-20106)
* Notification emails show times in the recipient's own time zone. (DIS-17436)
* An invitation can be sent in any language the console supports. (DIS-20140)
  {% endupdate %}

{% update date="2026-04-29" %}

## [8.4.0 — 29 April 2026](/changelog/releases/2026-04-29.md)

**Dispel Zero Trust Engine 8.4.0**, including Orchestrator 1.11.0.

**Customer Impact Score: 2**

**New features and improvements**

* [Compliance](https://docs.dispel.com/secure-and-govern/overview) is a section of its own. Dispel holds the framework as a catalog of controls, evaluates each one against what the system records, and shows the result per control. NIS2 (Implementing Regulation EU 2024/2690) is included. (DIS-18653, DIS-19930)
* [Billing](https://docs.dispel.com/integrate-and-administer/billing) has a page of its own, showing your plan and what you are using against it. (DIS-19438, DIS-19439)
* The Browser Connect utilization report filters by facility and by date range, and lists the recordings for the period. (DIS-19658)
* Users and virtual desktop users can upload and download files on a device they have access to, and a facility can set how long a transferred file is kept. (DIS-19752, DIS-19755)
* File transfers in progress moved from a floating widget into stacked picture-in-picture panels that sit alongside a session. (DIS-19835, DIS-19995)
* Hovering the Participants column on the Active Connections table shows who is actually in the session. (DIS-19843)
* The session timer reads in a clearer format, and the [maximum session age](https://docs.dispel.com/integrate-and-administer/settings/session-length) can be configured. (DIS-19638)
* [High-contrast and colorblind-assistive themes](https://docs.dispel.com/integrate-and-administer/settings/account/themes) are available. (DIS-19881)
* A third-party system can call the Dispel API with OIDC client credentials, which is how the [ServiceNow](https://docs.dispel.com/integrate-and-administer/integrations/service-now) integration authenticates. (DIS-19006)
  {% endupdate %}

{% update date="2026-04-15" %}

## [8.3.0 — 15 April 2026](/changelog/releases/2026-04-15.md)

**Dispel Zero Trust Engine 8.3.0**, including Orchestrator 1.10.0.

**Customer Impact Score: 2**

**New features and improvements**

* Files can be uploaded to and downloaded from a device [from the device page](https://docs.dispel.com/build-your-environment/infrastructure/device-management/device-file-upload-download). (DIS-17853)
* Browser Connect works on a phone: the toolbar, the timeline and recording playback are all laid out for a small screen. (DIS-19309)
* The Active Connections table refreshes as sessions start and end, rather than when the page is reloaded. (DIS-19229)
* Logs record the device a session connected to, by name, and note the moment an HTTP or HTTPS session first connects. (DIS-19449, DIS-19209)
* Dispel reads asset inventory from TXOne StellarOne and [Armis Centrix](https://docs.dispel.com/integrate-and-administer/integrations/asset-discovery/armis), with a mapping step for sites. (DIS-18973, DIS-18594)
* Administrators and Dispel engineers can cancel a file transfer started by someone else. (DIS-19498)
* The Groups and Users tabs on a facility load faster. (DIS-19301)
* Connecting to a device and reserving a virtual desktop show their progress step by step.
  {% endupdate %}

{% update date="2026-04-01" %}

## [8.2.0 — 1 April 2026](/changelog/releases/2026-04-01.md)

**Dispel Zero Trust Engine 8.2.0**, including Orchestrator 1.9.0.

**Customer Impact Score: 2**

**New features and improvements**

* Organization admins have a dashboard of activity and usage across the organization. (DIS-18507)
* Browser Connect sessions are recorded, and the recordings are listed with thumbnails and played back in the [console](https://docs.dispel.com/monitor-and-investigate/logs) — as a grid, a list, or a timeline with expandable rows and a zoom brush. (DIS-17977, DIS-19523)
* Browser Connect sessions render through a new viewer for RDP, VNC and SSH. (DIS-18984)
* Participants in a session are grouped by who owns it, who is controlling it and who is watching. (DIS-18978)
* Wicket ISO downloads no longer expire after 30 days. (DIS-18668)
  {% endupdate %}

{% update date="2026-03-20" %}

## [8.1.0 — 20 March 2026](/changelog/releases/2026-03-20.md)

**Dispel Zero Trust Engine 8.1.0**, including Orchestrator 1.8.0.

**Customer Impact Score: 2**

**New features and improvements**

* [Browser Connect](https://docs.dispel.com/connect-to-your-systems/connection-methods/browser-connect) reaches HTTP and HTTPS targets, streams the session to everyone watching, and lets the owner hand control to another participant and take it back. (DIS-17790)
* The devices table sorts by Connect, so the devices you can reach can be brought together. (DIS-18234)
* Choosing a facility on an access request is a searchable list rather than a dropdown. (DIS-18557)
* Devices show the manufacturer's logo in the table. (DIS-18297)
  {% endupdate %}

{% update date="2026-03-06" %}

## [8.0.16 — 6 March 2026](/changelog/releases/2026-03-06.md)

**Dispel Zero Trust Engine 8.0.16**, including Orchestrator 1.6.8.

**Customer Impact Score: 2**

**New features and improvements**

* [Integrations](https://docs.dispel.com/integrate-and-administer/integrations/asset-discovery) are a section of their own, and Dispel can read your asset inventory from Nozomi Networks, Dragos and Forescout eyeControl. Devices found that way arrive with the vendor's own detail attached, and each integration syncs on a schedule. (DIS-17804, DIS-17899, DIS-18595)
* The [devices list](https://docs.dispel.com/build-your-environment/infrastructure/device-management) has been rebuilt: filterable columns, a detail panel that opens beside the table, and the fields an integration contributed shown on the device itself. (DIS-17817)
* [Session Forensics](https://docs.dispel.com/monitor-and-investigate/risk-factor-analysis) scores each sign-in on the behavior behind it and keeps a baseline of what is normal for the account, so an unusual session stands out from a routine one. (DIS-17433)
* A Browser Connect utilization [report](https://docs.dispel.com/monitor-and-investigate/reports) covers historical connections and the highest number of concurrent sessions reached each day. (DIS-17455, DIS-17352)
* Facilities appear on a map, with their wickets and health beside them. (DIS-17723)
* A wicket can belong to more than one facility. (DIS-15569)
  {% endupdate %}

{% update date="2026-02-18" %}

## [8.0.14 — 18 February 2026](/changelog/releases/2026-02-18.md)

**Dispel Zero Trust Engine 8.0.14**, including Orchestrator 1.6.6.

**Customer Impact Score: 2**

**New features and improvements**

* The [topology](https://docs.dispel.com/monitor-and-investigate/topology) map says when a wicket last checked in, instead of labeling it a heartbeat. (DIS-17505)
  {% endupdate %}

{% update date="2026-02-09" %}

## [8.0.13 — 9 February 2026](/changelog/releases/2026-02-09.md)

**Dispel Zero Trust Engine 8.0.13**, including Orchestrator 1.6.5.

**Customer Impact Score: 2**

**New features and improvements**

* An account locked for inactivity can be reopened by the person it belongs to, from the [sign-in page](https://docs.dispel.com/troubleshooting/sign-in-and-mfa-troubleshooting). (DIS-17430)
* Live updates hold up better. Session state, reservations and rule status reach the console through a connection that recovers on its own after a drop rather than waiting for a reload. (DIS-17075)
* Light and dark mode now cover the screens that had been left out of the first pass, including the access and permissions pages. Colors that read poorly in one mode or the other have been corrected throughout. (DIS-17104)
  {% endupdate %}

{% update date="2026-01-26" %}

## [8.0.12 — 26 January 2026](/changelog/releases/2026-01-26.md)

**Dispel Zero Trust Engine 8.0.12**, including Orchestrator 1.6.4.

**Customer Impact Score: 2**

**New features and improvements**

* An administrator can [reset a user's multi-factor authentication](https://docs.dispel.com/secure-and-govern/reset-multifactor-authentication) for them.
* [Access windows](https://docs.dispel.com/connect-to-your-systems/access-windows) send email notifications.
* Searching the devices, members, regions and facilities lists returns faster on large organizations. (DIS-15369, DIS-16872, DIS-15370, DIS-15366)
  {% endupdate %}

{% update date="2026-01-08" %}

## [8.0.11 — 8 January 2026](/changelog/releases/2026-01-08.md)

**Dispel Zero Trust Engine 8.0.11**, including Orchestrator 1.6.2.

**Customer Impact Score: 2**

**New features and improvements**

* The console has a light mode and a dark mode, and an organization can set the [colors and logo](https://docs.dispel.com/integrate-and-administer/settings/branding) its members see. Each person chooses the [mode](https://docs.dispel.com/integrate-and-administer/settings/account/themes) they prefer. (DIS-16664)
* [Signing in with SAML](https://docs.dispel.com/secure-and-govern/identity-providers) has been rebuilt. The identity provider is configured on a form with a **Test Connection** button that tells you whether it works before anyone relies on it, the sign-in button reads **Sign in with Single Sign-On**, and Dispel accepts whichever authentication method your provider used rather than requiring a password. Sign-in and the provider's callback are recorded in the logs. (DIS-16195, DIS-16846, DIS-16196, DIS-16984, DIS-16473)
* Onboarding emails carry the organization identifier the recipient needs to sign in. (DIS-16474)
  {% endupdate %}
  {% endupdates %}

{% hint style="info" %}
Releases before 2026 were published on dispel.com. They are kept under [Earlier releases](/changelog/earlier-releases/2025-11-18.md), as written at the time.
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.dispel.com/changelog/readme.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
