Product Release Notes - August 2025

Blog

Darwin Salazar

Howdy! We're thrilled to share our biggest product roll-up thus far! Over the past month and change, we’ve landed new pipeline monitoring capabilities, enterprise authentication features, 20+ new integrations, and significant platform enhancements that give security teams unprecedented visibility and control over their security telemetry.

Key Highlights

20+ New Integrations: Massive expansion including Sentry, Microsoft Defender XDR, Clumio, OpenAI audit logs, and more. This brings our total to 140+.
Pipeline Metrics Dashboard: Real-time monitoring with detailed ingress/egress flow and error tracking
Synthetic Data Generation: Test and validate pipelines with synthetic data across all inputs
Enterprise SSO/SAML Support: Seamless authentication with SAML 2.0 for enterprise deployments
Improved Pipeline Control: Manual triggers, advanced scheduling, and Transform Sandbox

Pipeline Metrics & Monitoring

New Metrics Dashboard

Having bird's-eye visibility into your security telemetry pipelines is critical for maintaining data integrity and pipeline uptime. With real-time monitoring, you can instantly detect anomalies like unexpected data spikes that might indicate security incidents, identify bottlenecks before they impact downstream systems, and ensure compliance by verifying that all critical security logs are being collected and processed without gaps.

Our real-time pipeline performance visibility includes:

Data Volume Tracking: Monitor ingress/egress volumes and throughput in real-time
Performance Metrics: Records per second, error rate graphs, and expired message monitoring
Pipeline Analytics: Individual pipeline status indicators, node-level insights, and detailed per-pipeline metrics

Input Connectors

Cloud Services

AWS WAF: Web application firewall logs
AWS Key Management Service (KMS): Encryption key usage tracking
AWS IAM Access Analyzer: Security compliance monitoring
AWS Cognito Users: User authentication events
AWS Certificate Manager: SSL/TLS certificate management
AWS Organizations: Multi-account management data
AWS Resource Evaluations: Compliance assessments‍
Azure Virtual Machines: Monitoring and performance data
Generic Object Storage: Flexible data ingestion from S3-compatible storage

SaaS Tools

OpenAI Audit Logs: Monitor ChatGPT Enterprise usage for compliance and tracking

Twilio Events: Monitor communication platform events‍
GitLab Issues: Track and analyze development workflow data

Zendesk Audit Logs: Complete visibility into support operations
Vercel User Events: Capture deployment and usage insights
OneLogin Integration: Enhanced identity management monitoring‍
Sentry Organization Logs: Capture and analyze app errors and performance issues

Security Solutions

Clumio Audit Trails: Returns a list of audit trails from your Clumio account
Clumio Consolidated Alerts: Returns a list of consolidated alerts from your Clumio account
Clumio Individual Alerts: Returns a list of individual alerts from your Clumio account‍
Microsoft Defender XDR: Ingest alerts from Defender XDR

Output Connectors

Panther HTTP Output: Export to Panther SIEM via HTTP
Azure Blob Storage Output: Stream processed data directly to Azure
Generic Object Storage Output: Universal S3-compatible output support

Authentication & Security

Enhanced SSO Support

Enterprise-grade single sign-on with full SAML 2.0 support transforms how organizations manage access to Monad:

Seamless integration with your existing identity providers (i.e., Okta)
Centralized user management and access control
Automatic user provisioning and deprovisioning

This means security teams can onboard teammates to Monad in minutes instead of hours, automatically revoke access when employees leave, and maintain consistency with their access policies.

Local Login

For organizations with on-prem Monad deployments, the new local authentication option provides:

Secure authentication without external dependencies
Full control over user credentials and password policies
Ideal for air-gapped environments and on-premise deployments

Pipeline Management

Manual Pipeline Triggers

Execute pipelines on-demand without waiting for scheduled runs or data streaming
Perfect for testing and ad-hoc processing needs

Improved Cron Schedule Management

Better visibility into scheduled runs
Enhanced scheduling interface
Support for complex scheduling patterns

Sandbox & Testing

Synthetic Data Generation

Testing with production data is risky and can often lead to data quality issues, but testing without realistic data also often leads to improperly formatted logs making it to your SIEM.

Synthetic data generation solves this dilemma by providing:

Realistic test data matching your exact schema
Instant availability across all input connectors
Safe validation of pipeline logic without touching sensitive data
Edge case testing capabilities
Compliance-friendly development and demonstration environments

Data Processing

Added JSONL Support

JSONL (JSON Lines) is a data format where each line of a file contains a valid JSON object, separated by newline characters. It's also sometimes called newline-delimited JSON or NDJSON.

Key Benefits of JSONL:

Streaming-friendly: You can process one line at a time without loading the entire file into memory. This is huge for large datasets.
Append-only: You can add new records by simply appending lines to the file, without parsing and rewriting the whole thing.
Error resilience: If one line has corrupted JSON, you can skip it and continue processing other lines. With regular JSON, one syntax error breaks the entire file.

Thank You

Thanks for being part of this journey with us. These two months of features came directly from your feedback, and we're excited to see how you'll use them to continue improving your security operations!