Release Name: v2026.08
Latest Hotfix Name: N/A
Release Date: 2026-08-31
Latest Hotfix Date: N/A
These are the release notes of Monopam v2026.08
Monopam is a Privileged Access/Account Management solution for enterprise-level organizations. Monopam has enterprise grade features, and these features help companies to secure their privileged account and access critical environments.
These release notes contains following information.
New Features
Improvement
Bug Fixes
New Features
In this release 29 New Features published.
Key | Version | Type Name | Release Notes |
|---|---|---|---|
MPAM-691 | v2026.08 | New Feature | The Windows and Linux EPM agents execute Flow v2 graphs, including an MFA gate, approval showing the command line, a JIT window and audit branches. |
MPAM-697 | v2026.08 | New Feature | Added an EPM policy simulator that acts as the reference evaluator and is kept identical to both the Windows and Linux agents. |
MPAM-699 | v2026.08 | New Feature | Introduced Monofor Identity for Linux, the EPM agent that enforces endpoint privilege management policies on Linux hosts. |
MPAM-700 | v2026.08 | New Feature | The Linux resource agent ships as tarball packages with SysV init support, IPv4/IPv6 selection and parity with the legacy API. |
MPAM-703 | v2026.08 | New Feature | Database Proxy now supports Oracle, Db2, Sybase and SAP HANA, including credential injection and PII masking. |
MPAM-704 | v2026.08 | New Feature | Database Proxy gained query guardrails, and approval policy expressions can now be bound to database queries. |
MPAM-718 | v2026.08 | New Feature | Native database clients such as psql and DBeaver now wait for an approval decision instead of failing with "Access denied". |
MPAM-721 | v2026.08 | New Feature | Introduced the Monopam CLI for working with Monopam from the command line. |
MPAM-722 | v2026.08 | New Feature | Introduced Machine Identity for managing non-human identities and their access through Monopam. |
MPAM-723 | v2026.08 | New Feature | Introduced Access Gateway for brokering access to protected resources through Monopam. |
MPAM-725 | v2026.08 | New Feature | Building Template provides atomic multi-step certificate deployment with rollback and a run history. |
MPAM-726 | v2026.08 | New Feature | A Deployments overview lists certificate deployments and supports manual and automatic retry with backoff. |
MPAM-727 | v2026.08 | New Feature | Certificate Manager can import and deploy certificates to FortiGate devices through a FortiManager connector. |
MPAM-728 | v2026.08 | New Feature | HashiCorp Vault can be used as a certificate authority for issuing certificates in Certificate Manager. |
MPAM-736 | v2026.08 | New Feature | Certificate Manager can generate and use keys stored on a hardware security module through PKCS#11. |
MPAM-738 | v2026.08 | New Feature | Certificate events can be forwarded to a SIEM in Generic JSON, Splunk HEC or CEF format. |
MPAM-740 | v2026.08 | New Feature | Alert Channels support custom webhook body and headers, an ITSM ticket mode, labels and vault references for credentials. |
MPAM-742 | v2026.08 | New Feature | Added an Alert Settings page for expiry thresholds, email recipients and webhook channels, and an owner field on certificates. |
MPAM-744 | v2026.08 | New Feature | ACME certificates can be validated with DNS-01 challenges through 14 supported DNS providers. |
MPAM-749 | v2026.08 | New Feature | Certificates can be deployed to generic Linux servers as a deployment target type. |
MPAM-752 | v2026.08 | New Feature | Agents connect out to Monopam over WebSocket, so no inbound port needs to be opened on the agent host. |
MPAM-753 | v2026.08 | New Feature | Commands sent to agents are signed with Ed25519, keys are exchanged at enrollment, and agents return signed execution receipts. |
MPAM-755 | v2026.08 | New Feature | macOS machines can be imported as resources by installing and enrolling the Monopam resource agent. |
MPAM-756 | v2026.08 | New Feature | Resources can be discovered from Hetzner, AWS, Azure, Google Cloud, Vultr and Scaleway, including periodic discovery. |
MPAM-757 | v2026.08 | New Feature | Custom Fields add administrator-defined fields with multiple field types, default values, required and validation rules, lookups, uniqueness and audit. |
MPAM-758 | v2026.08 | New Feature | AD Bridging gained an access policy that is secure by default and grants access per user. |
MPAM-759 | v2026.08 | New Feature | Users can request access to resources and vault items themselves, governed by a Request Policy. |
MPAM-760 | v2026.08 | New Feature | Introduced Script Management for storing, editing and reusing scripts across Monopam. |
MPAM-761 | v2026.08 | New Feature | Introduced Run As, which lets an operation on a resource run under a selected account. |
Improvement
In this release 19 Improvements published.
Key | Version | Type Name | Release Notes |
|---|---|---|---|
MPAM-698 | v2026.08 | Improvement | EPM approvals now use a single decision screen, with defined cancel and revoke rules and notifications across the request lifecycle. |
MPAM-701 | v2026.08 | Improvement | The separate Access and Resources menus were merged into a single, permission-aware Resources view. |
MPAM-702 | v2026.08 | Improvement | The dashboard and Quick Connect now show only the resources and actions the current user is permitted to use. |
MPAM-705 | v2026.08 | Improvement | Database Proxy health is now visible in the UI, and an alert is raised when the proxy goes down. |
MPAM-720 | v2026.08 | Improvement | The Database Access Keys list gained a search box and per-column filters. |
MPAM-724 | v2026.08 | Improvement | Several usability and behavior improvements to Secret Management. |
MPAM-746 | v2026.08 | Improvement | Certificate Manager gained bulk actions on certificates, reports and ACME External Account Binding (EAB) support. |
MPAM-747 | v2026.08 | Improvement | Renewed certificates are now deployed to their targets regardless of which renewal path produced them. |
MPAM-748 | v2026.08 | Improvement | The certificate inventory can be grouped by domain, and certificates can be archived out of the active list. |
MPAM-750 | v2026.08 | Improvement | Each deployment target can be configured individually to run deployment commands with sudo. |
MPAM-751 | v2026.08 | Improvement | Deployment errors are now shown with full detail, stuck runs can be detected and handled, and saved scripts can be selected for deployment steps. |
MPAM-754 | v2026.08 | Improvement | Agents report endpoint inventory (OS, build, model and serial number), and the agent list shows a Channel/Inbound connection badge with a matching filter. |
MPAM-762 | v2026.08 | Improvement | PKI vault items can derive the public key from the stored private key or generate a new key pair, and the public key can be revealed. |
MPAM-763 | v2026.08 | Improvement | Policies, Resources and Vault gained sidebar filters: a policy type rail, resource types, credential types and a directory sidebar. |
MPAM-764 | v2026.08 | Improvement | The Resources area gained an Active Connections view listing currently open connections. |
MPAM-765 | v2026.08 | Improvement | The Privilege tab now uses the standard ObjectPicker for selecting objects instead of a static list. |
MPAM-766 | v2026.08 | Improvement | The Requests list shows the requested object in its own column and uses readable request type labels. |
MPAM-767 | v2026.08 | Improvement | Files can be copied to and from resources during brokered connections. |
MPAM-768 | v2026.08 | Improvement | RemoteApp streaming sessions now enforce the expected keyboard layout on the remote session instead of inheriting the gateway service layout. |
Bug Fixes
In this release 11 Bug Fixes published.
Key | Version | Type Name | Release Notes |
|---|---|---|---|
MPAM-769 | v2026.08 | Bug | Users without the required permissions could see menus and call the related APIs. Fixed across menus, Requests (Everyone), type filters and the 403 redirect. |
MPAM-770 | v2026.08 | Bug | The "Generate OTP Code" action copied the text "undefined" to the clipboard instead of the generated code. Fixed so the actual code is copied. |
MPAM-771 | v2026.08 | Bug | An agent that was re-enrolled with the same name did not appear in the agent list. Fixed so the re-enrolled agent is shown. |
MPAM-772 | v2026.08 | Bug | Import Resource with Agent hung indefinitely when no gateway was available. Fixed so the flow no longer hangs in that case. |
MPAM-773 | v2026.08 | Bug | ACME certificate renewal failed with "Object reference not set". Fixed so renewal completes. |
MPAM-774 | v2026.08 | Bug | Certificate deployment failed with the error "A certificate is required.". Fixed so the certificate is passed to the deployment correctly. |
MPAM-775 | v2026.08 | Bug | Deployments using an encrypted SSH private key failed with "Private key is encrypted but passphrase is empty". Fixed so the passphrase is used. |
MPAM-776 | v2026.08 | Bug | Clicking Continue on a database resource opened a new connection each time instead of reusing the existing one and showed no connection details. Fixed so the existing connection is reused. |
MPAM-777 | v2026.08 | Bug | The Database Proxy went down intermittently, interrupting database sessions. Fixed so the proxy stays available. |
MPAM-778 | v2026.08 | Bug | Links to expired certificates on the dashboard pointed to the wrong place. Fixed so they open the correct certificate. |
MPAM-779 | v2026.08 | Bug | A set of minor UI fixes: unsaved changes warning, reveal button shift, dropdown fonts, select and switch alignment, and CSS precedence. |