.png)
What's New for Security Center
More context behind every count - Security Center already gives vendors and their customers a clear read on vulnerability exposure, and this month it added more context to the numbers themselves. A count now carries its scope with it, including which images were scanned, which architecture it reflects, and how current the data is. Release totals are scoped to a single architecture, with a selector when a release ships more than one. An image that hasn't been scanned yet reads as Image not yet scanned, and an instance shows which of its applicable images haven't reported rather than folding them into the total. An air gap instance without its own reported data shows the latest release's counts as a reference and labels them as such. The effect is that a vendor and their customer can tell at a glance exactly what a number covers, which makes it easier to act on. You can read more in the Security Center documentation.
What's New for Embedded Cluster
Disaster recovery now available in Embedded Cluster v3 beta - Embedded Cluster v3 kept moving through the final beta milestones this month, and one of the larger additions is disaster recovery, now available to try. Your customers set up their backup destinations and schedules in the admin console, and when they need to recover, a restore wizard rebuilds the cluster on fresh hosts from a backup. Destinations include S3-compatible storage, with MinIO, and NFS for air gap environments. You package the Velero chart with your application the same way you package your other charts, so you own and pin the version yourself, and backup and restore is a capability Replicated supports and maintains. It's enabled per customer while the team works with early users, so reach out if you'd like to try it. The disaster recovery documentation covers the setup, and you can follow the rest of what's landing in v3 in the release notes.
What's New for the Vendor Portal
Scope which applications can pull from your Replicated registry - If you distribute more than one application, you can now control which of them are allowed to pull images from your Replicated registry, the same per-application scoping that external registries already offered. See the Replicated registry documentation to set it up.
Worth a look in the docs
Running Embedded Cluster alongside host security tools - Enterprise customers often run endpoint security tools like CrowdStrike Falcon or Illumio on the same hosts as Embedded Cluster, and those tools can interfere with a cluster in ways that are hard to diagnose. There's a new section in the Embedded Cluster documentation that lays out what these tools need to allow and why, from firewall rules and network ranges to file paths and scanning exclusions, so you can hand it to a customer's security team and have them let the cluster run rather than granting a blanket exception. See security tools on the host.