Adds dangerous-command detection and blocking for SSH/Telnet with an event log and real-time alerts, an MCP Server so AI tools can help with administration, and forced password changes and password expiry for database accounts.

Adds group-based bulk authorization for users and devices, spreadsheet bulk import for devices, a table view for the device list, and tunable recording quality and storage.

Adds a switch to turn off automatic MP4 conversion and save storage, and fixes an issue where new accounts were not covered by site-wide mandatory two-factor authentication.

Adds BrowserApp isolated browser access, bringing internal web systems under the same controls as remote hosts, with automatic credential filling on connect.

Adds LDAP/AD self-service password changes and access logging, field-level detail in audit records, and semi-automatic LDAP configuration detection; fixes force-disconnect failures, stale connection states, and several permission display issues.