Captivo Portal changelog — 2026 · Page 9 of 12

Improvements

• On-Premise: A warning banner now appears in the panel when disk space runs low (red at critical level) — so you can act before the disk fills up. The update guide gained a step that cleans old Docker images and a troubleshooting section for update issues.

Improvements

• On-Premise: The Log Server raw records page is faster too — a default last-24-hours window and a new database index speed up paging on large log volumes, and the Next/Previous buttons now show a loading indicator when clicked.

Improvements

• On-Premise: Log Server pages open much faster with large log volumes — search now defaults to the last 24 hours (clear the date to widen the range), page transitions show a loading indicator, and auto-refresh pauses in background tabs.

New

• New: Identity Resolution — answer official log requests in minutes. Under Sessions → Identity Resolution, enter an IP or MAC address and a date/time to find the guest connected at that moment (name, room number, verification method). If you use the On-Premise log server, the "Who was this?" link in search results takes you there in one click.

Fixes

• On-Premise: The lock screen shown when your license expires was a dead end — you can now copy your Installation ID from that screen and, after signing in as an administrator, upload your new license file (.lic) right there to unlock the system.

New

• Hotel (PMS) guest sign-in now supports National ID/Passport verification: choose "Room No + National ID/Passport No" under Settings → PMS. Identity numbers are stored as irreversible hashes; the settings page shows how much of your reservation data includes identity information. If you change the method, remember to re-download your portal template.

Improvements

• The timezone list in Settings now covers all world regions — alphabetically sorted with UTC offsets (e.g. Europe/Istanbul (UTC+03:00)).

Fixes

• The session duration chart on the Analytics page could show Turkish labels even with the interface in English — fixed.
• The usage charts on the guest detail page (Daily Usage, Hourly Distribution) always appeared in Turkish — they now follow your interface language.

Fixes

• The Send Test button on the Templates page failed for Twilio and NetGSM providers — fixed. Test messages now also appear in the SMS logs.
• The customized SMS template was not applied to some deliveries: downloaded portal pages (pfSense/MikroTik/OPNsense), guests created from the panel, and sponsor-approval messages were sent with the default text — your custom template is now used for all SMS deliveries.

Improvements

• The SMS connection test now supports international numbers — enter the test phone with its + country code (e.g. +61...).
• The test SMS message is now sent in your interface language.
• SMS test and delivery errors are now shown in your interface language, with more actionable error descriptions.

Fixes

• The Test SMS button in SMS settings returned an authentication error for Twilio and NetGSM providers even with correct credentials — fixed.

Fixes

• NAS IP addresses added under RADIUS settings did not take effect immediately, so your network device could not authenticate portal logins — fixed. Newly added IPs are now recognized instantly, and removed entries or a regenerated shared secret take effect within 1 minute.

New

• The portal phone field's default country is now configurable: under Settings → Portal → Form Fields you can choose which country (flag + code) is preselected for guests — useful for businesses hosting international visitors. Optionally, 'Allow only this country' locks the field to a single country. Note: sending SMS to international numbers requires provider support (e.g. Twilio).

Fixes

• On on-premise installations, saving Log Server settings failed with the default 'Self-signed' signing method selected — fixed. When KamuSM fields are missing, the form now tells you which field is required instead of a generic error.

New

• Guest profiles now accept your own values beyond the presets: a 'Custom' option was added to all fields — session duration, idle timeout, download/upload speed, data quota and simultaneous devices (e.g. 20 Mbps, 3 GB, 6 hours). Idle timeout also gained 2-hour and 24-hour presets.

Improvements

• Profile values are now validated against sensible ranges (e.g. speed 1-1000 Mbps); invalid values can no longer be saved by mistake.

Fixes

• When idle timeout was set to 'Off' in a guest profile, some network devices (e.g. pfSense) could still drop the session based on their own settings — 'Off' now truly applies for the whole session; users are no longer dropped for being idle. The change takes effect on new logins.

New

• Update notifications for on-premise installations: if your server can reach the internet, a notice appears in the panel when a new version is released, and Settings → System shows your current version and whether you're up to date. Updating is not automatic — you're only notified and apply the update yourself. On closed or offline networks this check silently stays disabled.

New

• Requesting an on-premise license is now much easier: on Settings → License you can copy your Installation ID with one click and use the 'Request by email' button to send a pre-filled email to support@captivo.io (with your full name, organization, Installation ID and email).

Improvements

• Captivo is completely free right now; the wording on the sign-up and marketing pages was simplified accordingly.

New

• HTTPS with your own corporate certificate for on-premise installations: on a closed network with an internal domain (e.g. captivo.acme.local) and your organization's own certificate authority (e.g. AD CS), the staff panel can be served over secure HTTPS. The installation guide gained a 'TLS with a Corporate CA' section and an important guest-device note (the guest portal must stay on a plain LAN address, otherwise guest sign-in won't work).

Fixes

• When the on-premise panel was opened via IP address, page styles and scripts failed to load (the page appeared unstyled) — fixed. The install script now clearly prints the detected server IP.

New

• New 'System' settings page for on-premise installations: the server address that guests and devices use to reach Captivo is now managed under Settings → System (previously in RADIUS settings), and a 'Server Address' step was added to the setup wizard.

Fixes

• The on-premise panel now works from whichever address you open it — previously, connecting by IP redirected sign-in to 'localhost' and dropped the connection. Password-reset email links now also use the correct server address. Note: after updating, on-premise users will need to sign in again once.

Fixes

• In on-premise installations, downloaded portal templates now use the correct server address — previously, if the server address wasn't configured, 'localhost' was embedded in the template and guests couldn't register or sign in. If the address can't be determined, the download is stopped with a helpful warning. A new 'Server address' field was added to RADIUS settings for the address guests and devices use to reach Captivo; the install script now also auto-suggests the server's network address. Note: after updating an existing on-premise installation, re-download the portal and upload it to your device.

New

• SMS usage anomaly alert: if SMS is sent to an unusually high number of distinct phone numbers within a short window (for example, if your portal API key is being abused), you'll be alerted by email and an in-panel notification. Adjust the threshold or turn the alert off under Settings → SMS. Sending is never stopped automatically — you're only informed.

Fixes

• On the guest WiFi login page, phone numbers can now be typed with Arabic, Persian and similar keyboard digits — previously these digits were removed as you typed, leaving the field empty. Note: if you use a downloaded portal (pfSense/OPNsense/MikroTik), re-download the portal from the panel and upload it to your device for the fix to take effect.

Improvements

• The on-premise page now includes a table comparing the cloud (SaaS) and on-premise editions side by side. Shared features, operational differences (setup, updates, data location), which module is offered in which edition (VPN & RADIUS MFA in the cloud; 802.1X enterprise network and AD/LDAP login on-premise) and on-premise-only capabilities (log server, offline licensing, signed evidence chain, etc.) are visible at a glance — making it easier to decide which edition fits you.
• The guest WiFi portal page was clarified: a link to the full feature list was added, and it now notes that the log server is offered in the on-premise edition.

New

• Our products are now showcased on the website: dedicated pages were added for 802.1X enterprise network access, VPN & RADIUS MFA, Active Directory/LDAP login and the log server. A 'Products' menu that groups the products by category was added to the top navigation, along with product cards on the home page. Visitors can now easily discover the solutions beyond the guest WiFi portal.

New

• Secure LDAPS with your own certificate for AD/LDAP (on-premise): if your directory server uses an internal (corporate CA) or self-signed certificate, you can now paste its root/CA certificate into the 'CA Certificate (PEM)' field under Settings → Directory (AD/LDAP) to establish an encrypted LDAPS connection — previously such servers failed with an 'unreachable' error. If you can't prepare the certificate yet, a 'Skip certificate verification' option is available for testing only (recommended off in production; a warning is shown while it's on). Certificate problems are now reported with a clear message in the connection test. This improvement covers directory verification for both the guest portal and 802.1X enterprise network login.