Recent releases: Case Management, CLI v5 GA, Endpoint Agent 5.2.0

Platform Updates Release Notes
1

Web App 5.7.2

  • We are happy to announce the GA of LimaCharlie Case Management. Built around our AI integration capabilities, it provides a focal point for security operations. Learn more at our recent blog post
  • Features, improvements: bug fixes:
    • AI Terminal gains two new display modes — a resizable bottom drawer and a right-docked side panel — letting users keep AI chat alongside their workflow instead of taking over the screen. A new Adapter Analytics page for per-adapter time-series. The release also adds Telegram and Microsoft Teams as native output destinations, configurable plugins for AI agents and profiles, secret-hive selectors in agent environment variables, adaptive Bash approval patterns in AI Sessions, and an explicit Auth Action confirmation page to defend against email-scanner auto-clicks. As usual, this release also includes a long tail of stability and UX fixes — most notably MFA enrollment for Microsoft OAuth users with unverified emails, AI Terminal auto-scroll reliability, MCP registry pagination, sensor-setup state on org switch, and a regression in the email-verification flow.

python-limacharlie 5.4.0 - GA

  • Long awaited rewrite of LimaCharlie CLI and Python SDK is now GA. It brings completeness, convenience, and AI agent friendliness. See the [Docs].(Python SDK - LimaCharlie Documentation)
    • The SDK v4 remains available from PyPi as well as from v4 branch on GitHub for those who rely on it to allow time for transition. The v4 documentation is maintained here.

Endpoint agent 5.2.0

  • New autorun implementation: added ~100 new bootstrap locations, added complete file path when available, added signer information when available;
  • Extra validation for HCP installation keys
  • Centralized LC file config/data locations
    • Linux: /opt/limacharlie
    • macOS: /Library/Application Support/limacharlie
    • Windows: %ProgramData%\limacharlie
  • Bug Fixes: Sensor health report endpoint_server was hardcoded, misleading customers