May 20, 2026
Mandatory Two-Factor Authentication
Improvement
Two-factor authentication (2FA) is now required for all Nebula accounts. If you haven't set it up yet, you'll be prompted to do so before you can sign in. This extra layer of security helps keep accounts safe from unauthorized access, credential-based attacks, account takeover, data exposure, and other security incidents by requiring an additional verification step before access is granted.
Features and Improvements
- No features this release.
Issues Fixed
No fixes this release.
May 19, 2026
Discovery & Deployment Tool Bug Fix
Bug Fix
Resolved an issue with the Discovery & Deployment tool on non-English operating system versions.
Features and Improvements
- No features this release.
Issues Fixed
EAP-1571: Resolved an issue where the Discovery and Deployment tool failed on devices running non-English operating systems.
May 6, 2026
Two-Factor Authentication - Passive Enrollment Now in Effect
Improvement
Two-factor authentication (2FA) is now required for all Nebula accounts. Starting today, if you don’t already have 2FA or SSO configured, you'll see a prompt to set up 2FA each time you log in to Nebula.
During this transition window (May 7–19), the prompt can be skipped — but 2FA becomes fully mandatory on May 20. After that date, any user who hasn't completed enrollment will be required to do so before accessing the console. For more information, check the Features and Improvements section below.
Features and Improvements
Set up 2FA from your profile settings — it takes less than a minute
Super Admins can enforce 2FA early for all users on their account from the Users page
Organizations using Okta, Azure AD, or other SAML 2.0 Identity Providers can configure SSO, which satisfies the 2FA requirement
Issues Fixed
No fixes this release.
May 4, 2026
Identity Threat Detection & Response
Product
Identity Threat Detection and Response is a new solution that monitors identity providers to detect suspicious activity, misconfigurations, and active attacks targeting user accounts and privileges. With native integrations for Microsoft Entra ID, Okta, and Active Directory, security teams gain unified visibility across hybrid identity environments without deploying additional agents.
Email Security in the Admin App
Improvement
Stay on top of email threats wherever you are. The Admin App now surfaces Email Security incidents from the "Needs Attention" section, so Nebula Administrators can monitor and act on critical issues without logging into Nebula from a workstation.
Features and Improvements
- ITDR allows admins to:
- Detect identity-based threats such as account compromise, privilege abuse, multi-factor Authentication fatigue, and persistence techniques.
- Continuously assess identity posture and surface misconfigurations before they are exploited.
- Investigate identity incidents with enriched context across identity providers and directory services.
- Respond faster to suspicious activity affecting users, sessions, and access.
- Email Security in the Admin App
- Email Security visibility on the go — see Email Security incidents directly in the Admin App's "Needs Attention" tab
- Incident details — capability to review key information for each incident without switching tools
- Faster triage — categorize incidents from the Needs Attention tab on the go to keep your queue clean
- Quicker response to critical issues — reduce time-to-action by surfacing high-priority email threats alongside other security signals already in the app
- Built for admins on the move — ideal for Admins who rely on the Admin App for quick health checks across modules.
Issues Fixed
No fixes this release.