N3X
PLEN

N3X RELEASE STREAM

Releases, security and product direction

One place for every N3X application version, public changelogs, per-product notifications and user votes.

Follow product releases

LATEST

Release stream

ROADMAP

Vote on what comes next

Voting uses a one-time My N3X sign-in so one person cannot inflate a result.

N3X Web

Domain profile and monitoring

in progress

One report for DNS, TLS, email, DNSBL, HTTP, ports and uptime.

N3X Vault

Independent security-alpha review

planned

Cryptographic design review and penetration test before the beta label.

N3X

Mobile companion

planned

Secure access to alerts, reports and PWA installations from a phone.

N3X

Per-product release subscriptions

released

Separate consent for releases and security fixes.

Full changelogs

N3XShot

Changelog

    • ImprovementStability and security hardening.
    • ReleaseThe release includes a universal macOS disk image (.dmg), with safe Gatekeeper first-launch guidance on the product page.
    • NewBuilt-in automatic updates.
    • ReleaseFirst release: fast screenshots with region selection, annotations and one-shortcut save or copy.
    • NewMulti-monitor capture.
    • NewAnnotation tools (lines, arrows, marks) and a global shortcut with a tray icon.
    • NewPolish and English interface, plus autostart with the system.

N3XShell

Changelog

    • NewGuided software installs: pick a recipe, fill in a form, read the exact command list, and only then run it. The first recipe is the Zabbix 2 agent on Debian and Ubuntu, with active and passive mode explained where you choose between them.
    • NewCopy the last command's output with one click on the session tab — the command line included, ready to paste into a ticket or an AI chat.
    • ImprovementInstaller steps run with their exit status checked and stop at the first failure, showing its stderr. A step whose work is already done is skipped, so running a recipe again breaks nothing.
    • FixThe terminal scrollbar can finally be dragged — pressing it used to start a text selection instead of scrolling.
    • FixSettings use the width of the screen: on a wider window they lay out in two columns instead of one long ribbon, and the save button stays in view.
    • FixThe terminal's last line is no longer sliced off at the bottom edge — the grid was being given one row more than the pane could show.
    • NewCommand library v5: new Kubernetes, Helm and Velero packs — 53 ready-made cluster commands.
    • NewEveryday cluster work without hunting for syntax: unhealthy pods, logs from before a restart, deployment restart and rollback, scaling, service port-forwarding.
    • NewHelm releases with their history, values and rollback, plus Velero backups — review, create and restore.
    • ImprovementKubernetes object names typed into a command are checked against the RFC 1123 character set before they reach the shell.
    • NewCommand library v4: new Git, Ansible and Terraform packs — 52 ready-made commands.
    • NewPin a whole pack to the top of the list — it stays its own folder instead of scattering across the favourites.
    • NewCollapsible folders in the command library, remembered between launches.
    • ImprovementThe command library filters use their own menu instead of the system one, matching the app theme.
    • NewTerminal theme presets and a custom colour editor for SSH sessions.
    • ReleaseThe release includes a universal macOS disk image (.dmg), with safe Gatekeeper first-launch guidance on the product page.
    • NewMeasure the size of folders you can't read via “sudo du”, prompting for a password only when needed.
    • NewCommand library v3: new Users & permissions, Mail (Postfix/Dovecot), Carbonio and Proxmox VE/PBS/PMG packs.
    • NewFavourite commands, pinned as their own categories at the top of the list.

N3XRemote

Changelog

    • NewThe new Windows session manager shows every signed-in user on a workstation or RDS server, including domain, session ID, state, idle time, RDP station, client and logon time.
    • NewAn operator can connect to one exact active session, while an owner or administrator can provide a reason to disconnect it while preserving apps or log it off after an unsaved-work warning.
    • ImprovementN3XAgent 0.17.27 and N3XRemote Server 1.15.31 execute these operations as signed one-use actions through the native WTS API. Both server and agent recheck the session ID, user, domain and state, protect the sign-in screen, and audit the full lifecycle.
    • NewAutomation Center now installs or updates signed N3XShot, N3XShell, N3XRemote, N3XScan and N3XCare apps for every user of a selected Windows host with one click.
    • ImprovementN3XAgent 0.17.26 accepts only the closed app catalog, binds installers to the official repository and pinned version, verifies Minisign and SHA-256, and performs bounded silent per-machine installation.
    • ImprovementN3XRemote Server 1.15.30 adds a first-party release catalog, mandatory reason, permission and CSRF enforcement, shared job locking, and complete installation history and auditing.
    • NewThe new Automation Center stores versioned PowerShell and CMD scripts, supports file imports and safe input variables, and shows execution history with results, exit codes and output.
    • ImprovementN3XAgent 0.17.25 executes jobs as LocalSystem outside the heartbeat loop, verifies script SHA-256, enforces a timeout, bounds output and terminates the full process tree at the limit.
    • ImprovementN3XRemote Server 1.15.29 adds immutable script versions, a signed job queue, mandatory reasons, full auditing and owner-only access by default.
    • NewN3XRemote now includes a five-minute Administrator Mode for unattended sessions. An owner or administrator can launch only approved Windows tools without transmitting, storing or injecting an administrator password.
    • ImprovementN3XAgent 0.17.24 launches approved tools as LocalSystem in the active user session with a minimal environment that excludes session secrets. Processes are automatically terminated when access expires or is revoked, on disconnect and when the session ends.
    • ImprovementN3XRemote Server 1.15.28 independently reauthorizes the operator and active session before granting access, and audits every grant, revoke, expiry and administrator-tool launch result.
    • FixN3XAgent 0.17.23 no longer trusts the first winget.exe alias found on the service PATH. It locates the real App Installer binary, verifies that LocalSystem can start it, and falls back to the active user context when necessary.
    • ImprovementSoftware Center now presents readable package-manager failure reasons, including a missing binary, access denied, an invalid executable, and an unavailable active-user session, while preserving the technical code in a tooltip.
    • FixN3XRemote Server 1.15.27 and N3XAgent 0.17.23 keep the desktop session alive through a short WSS interruption. The browser and Windows service recover the connection for 12 seconds instead of ending the session after one transient network error.
    • ImprovementThe agent no longer encodes or sends identical full images, the decoder keeps only the newest frame and the relay drops expired frames under backpressure. Video and control no longer accumulate into a delayed queue, while heartbeat tolerates two late responses.
    • ImprovementAudit records a privacy-safe transport summary with interruption and recovery counts, dropped frames, decoder pressure and close codes—without video, desktop content or input data.

N3XScan

Changelog

    • NewScanning from the internet: choose the vantage point and the n3x.pl server checks which ports on your connection answer from outside — with an exposure reading, history, CSV export and a PDF report.
    • ImprovementThe scan from the internet defaults to your own public address; scanning any other address requires confirming that you are authorised to test it.
    • ImprovementA local scan accepts a single address — there is no need to append /32 any more.
    • NewVendor recognition from the MAC address using the full IEEE registry — 53 thousand assignments instead of 36, offline.
    • ImprovementDevices using a randomized MAC address are labelled as such and no longer clutter the list of new devices.
    • NewPDF report with the nex-IT logo: a summary, the findings that need attention with the port and the reason, and a table of discovered devices.
    • FixThe CSV export opens correctly in Excel — the service list no longer spills into neighbouring columns.
    • ImprovementThe CSV export includes a column with the reason a device was flagged.
    • FixA failed update check now shows the reason instead of just “update check failed”.
    • NewThe risk badge now says why: device details list the port and the reason, and the row shows them in a tooltip.
    • ImprovementThe assessment now covers databases and administrative services — MSSQL, MySQL, PostgreSQL, Redis, MongoDB, Elasticsearch, NFS, rsync and SNMP.

N3XCare

Changelog

    • FixTicking an item in any list no longer scrolls the view back to the top — this affected the starter set as well as the filters and selections in Applications.
    • ImprovementEvery program in the starter set carries a one-line description of what it actually is, in Polish and English.
    • NewStarter set: a curated list of programs for a freshly set up computer, installed in one pass through Windows Package Manager.
    • ImprovementThe install queue shows each package separately and tells "already installed" and "restart required" apart from an actual failure.
    • ImprovementUpdates pin the winget source, so an id shared with the Microsoft Store is no longer ambiguous.
    • FixBattery health now reads the values even when the driver publishes only some of the WMI classes — such a laptop previously showed no data at all.
    • FixThe driver's "unknown" sentinel (0xFFFFFFFF) is no longer treated as a measurement, which could show a worn battery at 100% health and fully charged.
    • ImprovementWhen the WMI classes report no capacities, N3XCare takes them from the powercfg report — the same one that reads the battery straight from its driver.
    • ImprovementWhen Windows returns no readings at all, the section explains why and lists the per-class WMI responses instead of vanishing without trace.
    • NewBattery health: full charge capacity against the factory capacity, charge level, cycles and power state — plus the full powercfg report.
    • ImprovementThe HTML report includes the battery figures and can be saved even before any operation has been run.
    • NewBulk application updates, update holds and inventory export.

N3XRemote Server

N3XMarket

N3X Remiza

Changelog

    • NewPhotos and PDF documents attached to operations and events, with access control, file limits and SHA-256 checksums.
    • NewAn interactive operations map with address suggestions, device geolocation and manual incident placement.
    • NewThe brigade's own location and a fire-station map layer alongside the incident-type legend.
    • NewHolidays and dates relevant to volunteer fire brigades in the calendar, plus archiving of incorrectly added operations.
    • ImprovementA refined mobile layout, fixed desktop sidebar and consistent current-release messaging on the product page.
    • ImprovementA dedicated app icon and fire-service N3X interface variant with clear active-section states on desktop and mobile.
    • NewIndividual user accounts, roles and per-module permissions.
    • NewUser administration with password resets, account blocking and active-session management.
    • NewAn activity log covering sign-ins, data changes, deletions and report exports.
    • NewA monthly calendar with one-off and recurring events plus deadline reminders.
    • NewPDF reports and CSV exports for members, assets and operations.
    • ImprovementA complete Polish and English interface with phone-optimised navigation.
    • ReleaseFirst self-hosted release deployed with Docker Compose: web panel, worker and PostgreSQL.
    • NewCore records for the brigade, members, equipment, vehicles, deadlines and operations.

N3XFlow

Changelog

    • ReleaseFirst self-hosted release: a web panel, deadline and notification worker, and PostgreSQL deployed with Docker Compose.
    • NewFive-stage Project Rooms with a designated decision maker, five-business-day reviews and up to three consolidated feedback rounds.
    • NewFeedback classification as defect, scope change or question, plus change-order cards with price, timing and an explicit client decision.
    • NewSingle-use email links, encrypted SMTP settings, project roles and an append-only log of material events.
    • NewAn installable PWA with a dedicated icon, iOS support, mobile bottom navigation and a safe offline screen that never stores project content.

N3X Vault

Changelog

    • ReleaseFirst security-alpha release for controlled testing and protocol review — not yet intended for production secrets.
    • NewBrowser-side end-to-end encryption with Argon2id, HKDF and XChaCha20-Poly1305; the server stores encrypted envelopes only.
    • NewSign-in and unlock with a master password or YubiKey/FIDO2 WebAuthn PRF, including a two-hardware-key readiness policy.
    • NewEncrypted recovery kit and safe resumable restore into an empty instance without a universal recovery key.