Captivo Access sürüm notları — 2026 · Sayfa 5 / 13

Smaller isolated-browser recordings

Isolated-browser session recordings now take roughly half the disk space with no change to how you review them.

• The stored video is capped in width and encoded at a lower bitrate, so recordings shrink ~50% (more on static-heavy sessions) while staying readable.
• Only the stored replay changes — the vendor's live screen and the admin's live-view (watch / take control) are unaffected and remain full resolution.
• Tunable per deployment without a rebuild: RECORDING_MAX_WIDTH (default 1280) and RECORDING_VIDEO_BITRATE (default 512k). If replay text ever looks soft, raise the bitrate (e.g. 768k).

Recordings are captured on the connector/gateway host, so this takes effect once that host is updated to the new image. Existing recordings are unchanged and still play.

Isolated browser: file transfer

Isolated browser sessions can now move files between the vendor and the throwaway browser, controlled per site.

• Upload — vendors can send a file into the isolated browser (e.g. to attach it in an internal web app's file picker).
• Download — files the isolated browser downloads appear in a Downloads tray the vendor can pull from.
• Per-site control — each isolated site chooses the policy: off (default), upload & download, upload only, or download only. Enforced server-side.
• Transfers are ephemeral (wiped when the session ends) and every upload/download is recorded in the audit log.

Set it under Sites → (isolated site) → File transfer. Off by default, so existing sites are unchanged until you enable it.

Custom connecting-screen image

You can now upload your own logo or animated GIF to show on the connecting screen while a remote-desktop or isolated-browser session starts — under the new Branding page (Infrastructure → Branding). PNG, JPG, WebP, or GIF up to 2 MB. Leave it empty to keep the default Captivo mark. The rest of the connecting screen (the "creating a secure connection" text and spinner) stays the same.

Session connect / disconnect in the audit trail

Remote-desktop, isolated-browser, and web-app WebSocket sessions now record a "connected" and "disconnected" event (with the session's duration) in the audit log and the console activity stream — so you can see when each vendor session started and ended, not just that a recording was saved. Previously remote-desktop and isolated sessions weren't audited at connect/disconnect at all.

Display timezone

Dates and times across the console and vendor portal can now be shown in a configured timezone. Set an organization-wide default under Policy → Display timezone, and each user can override it for their own account under Settings → Preferences. When neither is set, times follow the viewer's own browser timezone (as before). Timestamps are always stored in UTC — this only changes how they're displayed.

Terminate also revokes access

Terminating a live remote-desktop or isolated-browser session now also revokes that vendor's access grant to the resource, so they can't simply reconnect. The confirm dialog spells out both effects, and both the termination and the revocation are written to the audit log. (Web-app sessions already have a Revoke action, which does the same thing.)

Screen watermark (DLP) for isolated browser sessions

Isolated browser sessions can now carry an identifying watermark — the vendor's email plus a live clock, tiled diagonally across the screen. It appears on the vendor's screen and in any screenshot or photo they take, deterring and attributing leaks of sensitive content. Enable it as a global default under Policy, and override it per resource (inherit / on / off) on the site form.

Note: the watermark is composited to what the vendor sees (and to an admin's live view), so it is not part of the session recording.

Full-screen button for isolated browser sessions

Isolated browser sessions now have a "Full screen" button (bottom-right) that expands the session to fill the whole display exactly. The macOS green button only maximizes the window and keeps the browser's tabs/address bar, which left a small border — this button hides all of that. Press it again or Esc to exit.

Isolated browser fills the screen exactly

An isolated browser session now opens at your screen's own size, so entering browser fullscreen fills the display exactly — no letterbox bars — on any screen shape (including recent MacBooks). Recordings capture the full screen at that resolution, so playback stays correct and is sharper than before. Sessions opened without a reported size fall back to the previous 1280×800.

Fix: isolated recordings capture the full screen again

Isolated browser sessions now fill the screen by scaling a fixed-size desktop, so recordings capture the whole screen instead of just the top-left corner. (The previous fill approach resized the desktop past the recorder's capture area.)

Isolated browser now fills the screen

An isolated browser session now resizes to fit your browser window instead of showing a small fixed-size desktop — full-screen, at your display's resolution. When an admin watches a session live, their view scales to fit without changing the vendor's screen size.

Fix: readable brand on the connecting screen (light theme)

The "Captivo" wordmark on the session connecting screen is now always shown in a light colour, so it stays readable on the dark connecting screen in light theme (dark theme was already fine).

Seekable isolated browser recordings

Recordings of isolated browser sessions now play back with a correct duration and full scrubbing — you can jump to any second instead of the timeline sticking at the end. Recordings are finalized when the session ends cleanly; a session that is cut short still leaves a partial recording as before. (Previously-stored recordings are unaffected and remain non-seekable.)

Isolated session monitoring polish

• The live viewer for an isolated browser session now shows a clean branded connecting screen while it connects — and while taking or releasing control — instead of briefly flashing KasmVNC's own loading screen.
• Vendors in an isolated browser session now see the same on-screen notices as remote-desktop sessions: a "RECORDED" indicator when the session is being recorded, and a live banner when an admin is watching or has taken control.

Live watch + take-control for isolated browser sessions

Admins can now watch an Isolated Browser session live from the console (read-only) and take control when they need to step in — reaching parity with remote-desktop sessions, which already had watch, take-control, and terminate. The vendor stays connected while an admin watches, and the console shows how many people are watching a session.

This completes live monitoring across all three access methods (Web App, Remote Session, Isolated Browser).

Isolated browser sessions in Live monitoring

Isolated Browser sessions now appear in the console's Live section and the Live sessions table alongside remote-desktop sessions, and admins can terminate them on demand. Previously isolated sessions were invisible to live monitoring and couldn't be ended by an admin.

Live watching and take-control for isolated sessions are coming in a follow-up.

Fix: single connecting screen for isolated browser sessions

The branded "Creating a secure connection…" screen now stays up until the isolated browser is fully connected, so KasmVNC's own loading screen no longer appears afterwards. Isolated Browser sessions now show one clean connecting screen and go straight to the desktop.

Branded connect screen + cleaner isolated sessions

• Branded connecting screen. Remote sessions now open with a branded "Creating a secure connection…" splash that stays up until the desktop or isolated browser is ready, then disappears — no more staring at a blank screen during the connect wait. Applies to both Remote Session (RDP/SSH/VNC) and Isolated Browser.
• Recording notice for isolated sessions. Recorded isolated-browser sessions now show the same one-time "this session is recorded" acknowledgement that remote-desktop sessions already show, when recording consent is required.
• Cleaner isolated desktop. Removed the stray "can't find an app to set the wallpaper" dialog that briefly flashed when an isolated browser session started.

What changed

• Fixed: Hamburger menu + card reflow on phones

What changed

• Fixed: Tighter content padding and stacked page header on phones
• Fixed: Responsive layout for phones and tablets

What changed

• New: Unified activity stream (access + admin actions + recordings)
• Fixed: Readable chart tooltips and un-clipped vendor labels
• New: Icons in the command palette + slightly larger brand logo
• New: Dark/light theme toggle for the vendor portal
• New: Search + pagination for the vendor access cards
• New: Logout label, right-aligned nav with console link, block duplicate requests

What changed

• Fixed: Repair publish matrix after removing the browser image

What changed

• New: Play back hi-fi VIDEO recordings in /admin/recordings
• New: Stream hi-fi isolated session recording through the connector
• New: KasmRecWriter forwards hi-fi session WebM to ingest-video
• New: Broker streams the isolated session as live WebM via ffmpeg
• New: Enable recording in the hi-fi isolated descriptor
• New: Ingest-video endpoint for hi-fi session recordings
• New: Add VIDEO recording format for hi-fi isolated sessions

What changed

• Fixed: Enforce clipboard DLP via Xvnc SendCutText/AcceptCutText flags

What changed

• Fixed: Make server-side clipboard DLP authoritative (disable client override)