This release is about stopping problems before they happen. Recordings and audit logs could only tell you what went wrong afterwards; now, the moment a dangerous command is typed in an SSH/Telnet session, SOSI can raise an alert, block the command or end the session — and notify administrators straight away.

New Features

• Dangerous command detection and blocking: A new “Dangerous command detection” switch in global settings. When enabled, any SSH/Telnet input matching a rule (such as rm -rf, mkfs, shutdown or DROP DATABASE) is handled according to the rule’s level: alert, block the command, or disconnect. You can choose how a blocked line is cleared: Ctrl+E, Ctrl+U (leaves the foreground program running) or Ctrl+C.
• Users see why they were stopped: When a command is blocked or a session is cut off, the remote screen now shows the reason instead of simply dropping the connection.
• Dangerous command event log: Every match records the user, device, level, source (keystroke / paste / transcript) and input. Filter the log and jump from an event straight to that session’s transcript. Passwords and other secrets in the input are masked automatically.
• Real-time alerts: Each event sends an email and an instant notice to administrators who are online. Notifications carry only a summary — one click opens the details.
• Transcripts forced on: With detection enabled, text session recording is forced on for every SSH/Telnet device. Per-device settings are left untouched and come back when detection is turned off.
• MCP Server: AI tools such as Claude Code can use MCP to query and manage users, devices, groups, authorizations, certificate-linked devices and LDAP authentication strategies on your behalf. Tokens are issued from a page, expire, and can be revoked at any time.
• Forced password change and password expiry: Administrators can require database-authenticated users to change their password at next login, and passwords can be set to expire.
• Configurable remote toolbar position: The slide-out toolbar in the remote screen (file system, clipboard, text input, on-screen keyboard) can be docked top, bottom, left or right from global settings.
• Let the remote host handle IME for RDP: A new RDP device option hands text input entirely to the remote host’s input method, avoiding mismatched language modes between the two sides.
• Postal email delivery: Choosing Postal in the mail settings now actually sends email.
• Leaner deployment: Real-time notifications now run on PostgreSQL; Redis is no longer required.

Bug Fixes

• Fixed SSH recordings playing back as a black screen in the browser.
• Fixed the session list showing “Converting” when automatic MP4 conversion is turned off site-wide.
• Fixed global settings pages showing the save confirmation only after the next action, and jumping back to the top after saving.
• Fixed long Japanese button labels on the device list covering the sort menu.
• Fixed the yellow --no-sandbox warning bar appearing at the top of BrowserApp sessions.