Changelog

Notable customer-facing changes to the TurboStack Platform, newest first. Releases go out roughly every two weeks; each entry is dated by its release. For the live, in-app feed see Platform Updates.

Each entry is labelled: New Improved Fixes Security .

2026-09-29

• New Deploy your app - A wizard at the top of the sidebar orders one or more hosts and deploys an application on them. In five steps you choose the application, name and size the production host, add a staging and a development host, answer the template's open questions, and review the price. It can also copy the configuration of a host you already have onto a new one. See Deploy your app.

• New Management overview on Health - The Health page and every host's Health tab open with a Management overview. It shows a status, a summary in business terms and decision cards with an urgency (Now, 7 days, 30 days, Monitor). Each decision links to the technical evidence in the Analysis. Refresh asks for a new analysis of a host. The severity filters now sit inside the Analysis card, and entries expand in place. See Health.

• New Reset a password from the Credentials tab - Every password on the tab has a reset icon. It covers the system user, the database, extra database users, FTP users and RabbitMQ. The new password is generated on the next publish. See Credentials.

• New Security, Health and monitoring over the API - New /api/v1 endpoints return the Threat Center findings, the Health issues and reports, and the monitoring checks of your hosts. One endpoint starts a rescan. See the API reference.

• New MySQL 9.7 - The new long-term-support MySQL can be selected as mysql_version. See Configure MySQL.

• Improved Acknowledge an indicator of compromise - An IoC you reviewed can be acknowledged on the host, which hides it in TurboStack without clearing it. The Hosts list shield now turns red for a critical finding or an IoC. See Threat Center.

• Improved The Credentials tab shows the public IP addresses of Windows hosts. The Health alert columns list only what needs a person: critical P1-P4 alerts, mail problems and security issues.

• Fixes The disk percentage on the Health tab matches the monitoring check and df. A browser tab left open across a release asks once to reload instead of showing errors. Git settings the GUI has no field for are kept when you save.

2026-09-15

• Improved Exposures and evidence in the Threat Center - The vulnerabilities panel is now Vulnerabilities & Exposures. Findings reported as an exposure carry an Exposure badge and their own filter. In the IoC panel, confirmed malware (red) is separated from suspicious evidence that still needs review (amber). See Threat Center.

• Security Magento security alert - Hosts running Magento show a security alert for CVE-2026-75650 (a Common Vulnerabilities and Exposures identifier) with the fix, until you close it.

• Improved A rescan stays visibly active until the scan finishes, also after you refresh the page. The Platform updates window is wider.

• Fixes The host dropdown in the header no longer jumps after a remembered sign-in.

2026-09-04

• New Clusters are yours to manage - Several hosts can now run one service together as a cluster, and you manage it yourself: create it, choose its members and their order, and publish the whole cluster at once. If a member is lost, the service continues on another one. Cluster Health and Threat Center combine every member, and Credentials are grouped per member. See Clusters.

• New Threat Center across all your hosts - The Threat Center now has its own entry in the navigation, showing the findings of every host in the account ranked together, with a search across host, vulnerability identifier, package and rule, and CSV export. The per-host tab is unchanged. See Threat Center.

2026-08-28

• New Health is the home page - Signing in now takes you to Health instead of the Hosts list. It leads with Analysis: a ranked list of the problems found across your servers, each with the host it affects, a severity and a category, and a report explaining what happens and the recommended fix. See Health.

• New TurboRAM and TurboKernel - Two platform-wide performance changes, on by default. TurboRAM compresses cold memory pages inside RAM instead of writing them to disk, so a server holds more before it slows down - which is why memory graphs can now report more effective capacity than the server has physical RAM. TurboKernel is a performance-tuned Linux kernel kept current through a signed update pipeline. See What is TurboRAM? and What is TurboKernel?.

• Improved Searching is clearer - The Threat Center gained a search box, the Health search narrows the Analysis card as well, and every search box now says what it searches.

• Fixes Monitoring detail graphs no longer show stale data, and the CPU and swap graphs for Windows hosts were corrected.

2026-08-13

• Improved Firewall settings in one place - The host Security tab is now organized into TurboShield, Firewall and Web Application Firewall. The IP allow-list and GeoIP filtering moved under Firewall, which also gained the open-port lists under Advanced Settings. Those stay automatically managed unless you set them. See Security.

• Improved Filter the Hosts list by status - The Hosts list gained a status filter, so you can narrow a long list to the servers that need attention. See Hosts.

• Fixes Publishing a group with no hosts no longer hangs; it now completes immediately. A host that could not be reached during a deployment records the error in the deploy output instead of failing silently. See Groups.

• Fixes The copy-link button on a monitoring alert, and graph loading when the monitoring backend is slow to answer, were both fixed.

2026-08-06

• Improved The API only lists active hosts - GET /api/v1/hosts and GET /api/v1/clients/{id}/hosts now leave out deactivated hosts for every token, including admin tokens. Previously an admin token still received them. See the API reference.

2026-07-20

• Improved Faster firewall block and unblock from the command line - tscli firewall block and unblock now apply at the firewall immediately, instead of waiting for the background sync. Repeating a block no longer stacks duplicate rules, and an unblock takes effect right away. See Block an IP address and the CLI reference.
• Fixes PHP preloading now takes effect reliably - A configured preload script now loads correctly. It is applied once per PHP version, at the runtime level. Only one application per PHP version can use preloading, as before. See php_opcache_preload_script.
• Fixes Account names containing an ampersand (&) now display correctly in the account switcher.

2026-06-22

• New Monitoring in the main navigation - Monitoring now has its own entry in the left navigation. Each alert opens a detail page with a downloadable PDF report, and the host graphs are clearer and more accurate. See Monitoring, Monitoring (concepts) and the host Health tab.

• Improved Threat Center: export and manage detections - You can now export Indicators of Compromise, Vulnerabilities and Runtime Detections to CSV, dismiss or clear individual detections, and page through long lists more comfortably. See Threat Center.

• New Filter and create hosts over the API - You can now filter the list endpoints by name to find the hosts you need without paging through everything, and create a host directly from the API. See the API reference.

• Improved Safer account names - The Add and Edit Account screens now reject reserved or invalid usernames before you save, so a bad name cannot slip through. See Applications and accounts.

• Improved Compact responsive sidebar - The navigation now collapses to a compact sidebar on medium-sized screens, so it stays usable on smaller displays.

• Fixes Minor fixes to the host Health tab, History tab pagination, and the CPU load graph.

2026-06-09

• Security Security alerts with one-click fix - Hosts now show security alerts directly in the interface, for example when a component is out of date. Each alert has an optional button that deploys the recommended fix for you, and alerts are hidden while a deployment is running. See Security.

2026-06-01

• Fixes Clearer deployment errors - When a step in a deployment fails, you now see the actual error message instead of a blank result, so it is clear what went wrong. See Publishing changes.

2026-05-18

• Improved Credentials, database users and FTP - The Credentials area is easier to use. You can create extra database users with a read-only or an admin role, and FTP accounts are now grouped under their database. See Credentials and Manage database users.

2026-05-11

• New Create Backup on demand - You can now start a backup yourself with Create Backup, instead of waiting for the scheduled run. See Backups.

• New Ruby application support - Ruby applications now support a custom start command (ruby_start_cmd) and an optional Sidekiq background-worker service (ruby_sidekiq, ruby_sidekiq_cmd). See Ruby and the application parameters.

• Fixes A host with no system users defined no longer causes an error.

2026-04-01

• Fixes Search fixes - Fixed enabling Elasticsearch, an Elasticsearch plugin problem, and search-result sorting. See Elasticsearch.

Related

• Platform Updates - the live in-app feed
• Publishing changes
• Support