Every ZopDay surface (projects, environments, deployments, provisioning, spaces, and remediation) is now gated by the same permission engine that protects ZopNight. Buttons a user can't use are disabled with a clear tooltip, and restricted pages show a single access screen instead of leaking structure. The Overrides page now paginates and sorts at scale, and IAM import cleanly separates linked from newly imported users.
New ZopDay: role-based access control across every surface, using the same permission engine as ZopNight; restricted mutations are disabled with an Ask your admin tooltip and restricted pages show a single Access restricted screen. No org-side reconfiguration required
Improved ZopNight: the Overrides page under a schedule group now paginates and sorts server-side, so the full list pages through regardless of size
Improved ZopNight: Manage IAM now distinguishes linked existing users from newly imported users, with a new Roles section and a jump into Roles
Improved ZopNight & ZopDay: removed the redundant manual Sync buttons now that discovery is fully automatic (a Refresh control remains on the Resources page)
ZopNight discovery now covers AWS IAM users, groups, roles, and policies alongside cloud resources, searchable on the Inventory page. ZopDay deploys get materially more reliable: Settings values now actually reach running pods, private-registry image pulls work on every cluster including bring-your-own, and the deploy wizard rejects invalid Dockerfiles before submit.
New ZopNight: import AWS IAM users, groups, roles, and policies into discovery, retaining their role and permission shape and searchable on the Inventory page next to compute and storage (GCP and Azure IAM next)
Improved ZopDay: Settings values (env vars, replicas, port, liveness path, CPU / memory caps) now reliably apply to the running service instead of being dropped at install
Improved ZopDay: private-registry image pulls now work on every cluster, including bring-your-own clusters with no cloud identity tied to a registry
Improved ZopDay: Azure AKS clusters bind the org's default registry at provision time, so the first deployment doesn't fail on an image pull
ZopDay can now view, edit, and create 20+ Kubernetes resource kinds directly, in a schema-driven form or raw YAML, with a side-by-side diff before any change is applied and per-action RBAC. Live pod logs stream in a terminal viewer with JSON level coloring. ZopNight adds a per-account cloud spend breakdown on the dashboard and a much cleaner architecture canvas for Kubernetes.
New ZopDay: view, edit, and create 20+ Kubernetes resource kinds (Deployments, StatefulSets, Pods, Services, ConfigMaps, Ingresses, HPAs, PVCs, CronJobs, NetworkPolicies, PDBs, and more) via a schema-driven form or raw YAML, with a side-by-side diff confirmation before any change, per-action access control, and per-cluster write rate limits; cluster-scoped destructive actions are blocked outright
New ZopDay: live pod logs in a dark terminal viewer with structured JSON level coloring, per-pod toggle chips, a Jump to live button, and a 5,000-line buffer, on Deployments, StatefulSets, DaemonSets, ReplicaSets, and Jobs
Improved ZopNight: Cloud Spend Portfolio: expand each provider card on the dashboard into per-cloud-account rows, with a two-layer donut, to spot which account is driving spend without leaving the page
Improved ZopNight: a cleaner Kubernetes architecture canvas showing cluster -> node pool -> nodes by default, filtering out ~85% of metadata nodes and removing duplicate node VMs
Improved ZopNight: Blast Radius opens faster with a standardized risk score and clear low / medium / high / critical tiers, and ownership counts are accurate on large orgs
Improved ZopNight: Azure AKS clusters using Entra ID + Azure RBAC no longer need kubeconfig changes; all three AKS auth modes are supported
Improved ZopNight: dashboard polish: Monthly savings renamed to Potential savings, and Cost Flow callouts respect your org currency preference
Kubernetes scheduling now works at the namespace boundary across EKS, GKE, and AKS: stop scales workloads to zero, suspends CronJobs, and saves the full state to replay on start. Auto-remediation gains a Resize action with five new right-size rules, and the platform now records true peak and trough metrics so bursty workloads aren't smoothed away into unsafe rightsizing.
New Namespace-level start / stop across EKS, GKE, and AKS: stop scales Deployments and StatefulSets to zero, suspends CronJobs, and snapshots replicas, HPA, and PDB to replay on start; system namespaces are protected at both discovery and execution
New Auto-remediation adds Resize, five new right-size rules: AWS Lambda memory, AWS EC2 instance type, AWS EBS IOPS / throughput, GCP machine type, and Azure VM SKU
Improved The Use existing VPC wizard now explains why a VPC is unselectable (needs at least one subnet and one NAT gateway) and offers a one-click Create new VPC instead
Improved Provisioner cluster jobs complete about 5 minutes faster by chaining quick steps within a single cycle
Before acting on a recommendation, open a Blast Radius overlay on the architecture canvas to see every connected resource (attached volumes, load balancers, downstream replicas, triggers, and owning teams or schedules) with a 0-100 risk score. Auto-remediation adds delete as a fourth action across nine more resource types, every certified recommendation now has a working Remediate button, and ZopDay's Connect to Space works on datastores you brought yourself.
New Blast Radius: preview the full impact of a recommendation on the architecture canvas (connected volumes, load balancers, replicas, triggers, and owning teams and schedules) with a 0-100 risk score weighted by environment, number of connections, ownership, and active schedules
New Auto-remediation adds delete as a fourth action across nine more types: EBS volumes and snapshots, GCP and Azure disks and snapshots, CloudWatch alarms, Elastic IPs, Azure Recovery vaults, and GCP Workbench instances (deletes are permanent and route to an admin for approval)
New ZopDay: Connect to Space now works on any datastore you already have, not just those ZopDay provisioned: pick a secret from AWS Secrets Manager, GCP Secret Manager, or Azure Key Vault, or paste credentials; ZopDay never deletes a cloud resource you brought in
Improved Every recommendation drawer now has one primary action in one place: Remediate for auto-remediable and schedule recs, Open in Console for advisory recs
Improved 44 remediation how-to instructions corrected across AWS, GCP, and Azure against current vendor documentation
ZopDay now provisions the right networking primitive automatically when connecting a datastore across VPCs: AWS and GCP peering, and Private Service Connect for Cloud SQL. The Event Readiness wizard shows a live current-vs-event cost preview, a round of autoscaler, Cost Flow, and dashboard polish lands, and six rightsizing rules that were still estimating savings now price against live cloud rates.
New ZopDay: cross-VPC datastore connectivity provisions the correct primitive automatically: AWS cross-region VPC peering, GCP VPC peering with custom-route exchange, and Private Service Connect for Cloud SQL
New ZopNight: a live cost preview in the Event Readiness wizard: current cost vs estimated event cost, per hour and per window, matching exactly what gets persisted
Improved ZopNight: the Autoscaler form is clearer: an explicit Autopilot / Manual choice, a directory-style resource picker, a single-toast Save & apply, Retry on failed policies, and per-field validation that never disables Next silently
Improved ZopNight: Event Readiness adds a scaled-up time-impact tile, real-delta cost, and clearer policy badges in place of confusing text suffixes
Improved ZopNight: Cost Flow (Sankey) polish: top-N rollups with click-to-expand, an always-on Unattributed highlight, and an auto-derived Insights strip above the chart
Improved ZopNight: dashboard widget polish across Budget Health, Upcoming Actions, Schedule Execution, and Tag / Team Cost
Improved ZopNight: Kubernetes activity events (warnings and pod restarts) are now fetched on EKS and AKS, not just GKE
ZopNight introduces end-to-end auto-remediation. Click Remediate on a cost recommendation and the platform checks live cloud state, optionally routes to an admin for approval, performs the action, and validates the result, with 20 rules certified end-to-end on real AWS, GCP, and Azure. This release also adds 123 Kubernetes workload recommendations and names the exact target SKU on every rightsizing recommendation, pricing savings against live cloud rates.
New Auto-Remediation: click Remediate on a recommendation to stop compute, scale a service to zero, or pause it, with a live precondition check, optional admin approval, and result validation (20 rules certified across AWS, GCP, and Azure; errors grouped into clear categories)
New 123 Kubernetes workload recommendations across EKS, GKE, and AKS covering reliability (missing requests / limits, single replica without an HPA, missing probes), security (privileged or root containers, missing TLS), idle and orphaned workloads, and rightsizing
Improved Every rightsizing recommendation now names a concrete target SKU (downsize to m5.large, step db.t3.medium -> db.t3.small) and prices savings as current minus target from live cloud rates. If a target isn't priceable in the region, the recommendation is skipped rather than shown with a guessed number
Improved Live per-container metrics extended to the Deployments, StatefulSets, DaemonSets, and ReplicaSets detail drawers
Improved ZopDay: Add Existing clusters (EKS, GKE, AKS) now work end-to-end for component installs, datastore connections, and database provisioning
Improved ZopDay: cluster reachability is now persisted and gates actions: a definitively unreachable cluster disables Sync, Connect Datastore, and Install, while transient blips are retried silently
Improved ZopDay: database creation now runs inside your own cluster, so master credentials never leave it and ZopDay needs no outside network path to your datastore (MySQL, PostgreSQL)
Cost Reports gains a business denominator. Pin a metric like Monthly Active Users, API Requests, Completed Transactions, or Signups, and the Cost Over Time chart adds a second axis showing cost per unit, so you can finally answer whether a rising bill means you're growing or getting less efficient. Feed the metric by CSV upload or a daily pull from your own HTTPS endpoint. Live per-container CPU and memory charts also land on every Kubernetes detail page.
New Unit economics in Cost Reports: overlay cost per Monthly Active User, Daily Active User, API request, completed transaction, or signup, org-wide or scoped to a single team
New Feed unit metrics by CSV upload (date,value) or a daily authenticated pull from your own HTTPS endpoint, with a Test fetch button to verify connectivity before the daily sync runs
New Live per-container CPU and memory bar charts on every pod, deployment, daemonset, statefulset, and replicaset detail drawer, with the configured request and limit overlaid as reference lines
Improved ZopDay: the home page loads faster on large orgs: project stats now load in a single batched call instead of one request per project
Open any connected cluster and see what's actually running inside it right now, not yesterday's snapshot. Live visibility spans 21 Kubernetes resource pages with detail drawers and an overview of failing and stuck pods, and the same experience lands in ZopDay. Cost recommendations also gain a richer drawer that answers savings, confidence, effort, and what the resource is, all in one place.
New Live Kubernetes visibility across 21 resource pages (Pods, Deployments, StatefulSets, DaemonSets, Jobs, ConfigMaps, Secrets, Services, Ingresses, PVCs, Nodes, Events, and more) with type-specific detail drawers
New A cluster Overview that surfaces running and failed pods, healthy deployments, total restart count, and any pods stuck in crashloop, OOM, or pending, together with the warning events explaining why
New The same live cluster experience in ZopDay, plus a dedicated Settings page (node pools, autoscaling config, Kubernetes version)
Improved The recommendation drawer now answers four questions at a glance: monthly and annual savings, a confidence score, implementation complexity, and the resource's key specs, plus when it was first generated and last re-evaluated
Improved Cloud Estate -> Resources is now Inventory, with a new icon; routes and bookmarks are unchanged
ZopNight now derives the owner of each resource from cloud activity logs (CloudTrail, GCP Audit Logs, and Azure Activity Logs), so 'who created this?' is answerable in showback without digging through logs by hand. ZopDay adds in-place updates and cross-VPC connections for provisioned databases and clusters, and discovery now survives pod failures.
New ZopNight: resource ownership: the IAM principal that originally created each resource is derived from CloudTrail (AWS), Audit Logs (GCP), and Activity Logs (Azure), separating humans from service accounts and feeding owner / team accountability into showback
New ZopDay: change tier, storage, scaling, and backup retention on RDS, ElastiCache, EKS node groups, Cloud SQL, Memorystore, GKE node pools, Azure SQL / MySQL / Postgres, Azure Redis, and AKS in place, without recreating anything
Improved ZopDay: connect a datastore to a cluster across VPCs: ZopDay auto-creates and accepts VPC peering, adds reciprocal routes, and opens a narrow port-scoped ingress rule; cross-region connections are rejected up front with a clear message
Improved ZopDay: the Provisioning Jobs list now distinguishes CREATE / UPDATE / DELETE / CONNECT / DISCONNECT with colored badges and a Type filter, with human-readable step labels
Improved ZopNight: discovery work now survives pod failures: orphaned tasks are reclaimed and retried, so a restart mid-run no longer drops resources
ZopNight now discovers, prices, and generates cost recommendations for AWS Bedrock: your provisioned throughput, custom and imported models, knowledge bases, agents, and guardrails appear in topology with real cost attached, and ten new recommendation types flag idle and underutilized generative-AI resources. ZopDay also gets a guided first-run setup, and this release closes a class of invalid recommendations on orchestrator-managed compute.
New ZopNight: AWS Bedrock support: discover, price, and optimize Provisioned Throughput, custom and imported models, knowledge bases, agents, and guardrails, with 10 new recommendation types (idle throughput, unused custom models, old model generations, and more)
New ZopDay: a guided three-step first-run setup: pick your goals, connect a cloud account, and choose where to start (deploy a service, provision infrastructure, or connect a datastore)
Improved ZopDay: clear connect-an-account prompts on Infrastructure, Datastores, K8s, and Deploy when no provisioning account is connected, instead of empty lists or broken flows
Improved ZopNight: keyboard navigation on the Architecture Globe and Canvas, and collapsible per-platform setup guides when adding Slack, Microsoft Teams, Google Chat, or webhook notification channels
ZopDay gets one-click service networking and a rebuilt Deployment Spaces experience. Configure how a deployed service is exposed (through the cluster ingress controller or a dedicated cloud load balancer) straight from the canvas, and navigate a cleaner, health-first Deployment Spaces layout that leads with what's running and what's connected.
New ZopDay: a new Network tab on the service drawer: route through the cluster's ingress controller (with optional cert-manager TLS) or a dedicated cloud load balancer, without editing Helm values or rerunning the create flow
Improved ZopDay: Deployment Spaces rebuilt around health first: a searchable list with status filters, a live provisioning stripe, a single connection-state status badge, and a Health Overview strip (nodes, CPU, memory, components installed)
Improved ZopDay: Platform Components grouped into All / Core / Optional / Needs attention, with a promoted one-click Install All Core action
Improved ZopDay: sidebar regrouped into Infrastructure, Deployment, and Activity, with a consistent Provision New action on every page
Improved ZopDay: Datastores & Caches now surface access errors clearly instead of failing silently
Get release notes in your inbox.
We ship every two weeks. Subscribe to receive a short summary of what's new, no marketing, just the changelog in email form.
Multi-cloud automation·Production-ready in 30 min·SOC 2 · ISO 27001·20–60% off the bill, first month·4 platforms · 1 console·Multi-cloud automation·Production-ready in 30 min·SOC 2 · ISO 27001·20–60% off the bill, first month·4 platforms · 1 console·