Release notes

What's new in Athena

Everything we've shipped across the SealGrid Athena platform — new capabilities, improvements, security hardening, and fixes. Fully self-hosted, air-gap-first, no cloud dependency.

July 2026
New

Single sign-on with Keycloak (OIDC)

Athena now supports OpenID Connect single sign-on via Keycloak, alongside the existing local accounts and LDAP / Active Directory options.

  • A new role-mapping editor maps Keycloak (and LDAP) groups to Athena roles, with provider-scoped mappings.
  • The Sign in with Keycloak button appears only when the provider is actually reachable.
  • A new Login & Authentication help page covers all three methods — local, LDAP/AD, and Keycloak OIDC.
New

Active Directory agent deployment from PowerShell

The PowerShell module (2.5.0) can now roll the Athena agent out across your AD estate directly over PowerShell Remoting — replacing the old standalone push tool.

  • Install-AthenaAgent auto-mints a registration token, so passing one is now optional.
  • A fast liveness pre-check reports unreachable machines cleanly before deployment.
  • 32 additional cmdlets, and Get-AthenaAgent gained an -OS filter.
Security

Hardened agent installation

Install-AthenaAgent now validates TLS and verifies the downloaded agent's hash by default. Use -SkipCertificateCheck to trust a self-signed Athena server on closed networks.

New

Instant self-serve trial

Spin up your own fully-provisioned Athena instance straight from the website. Each trial comes pre-populated with a sample fleet, so the console isn't empty while you explore.

Fixed

Reliability fixes

  • Compliance actions now dispatch correctly when a machine joins a dynamic collection.
  • Alignment fixes to the Execute Command panels.