August 2026 - Platform

The following updates were released to the Kentik platform for Platform during August 2026.

Features

Universal Agent management APIs now public: Agent, agent-capability, config and provisioning-token management APIs for Universal Agents are now publicly available under new ua-admin read and write scopes, with improved API documentation.
Company-specific Data Explorer dictionary: The Data and Metrics Explorer dictionary now shows only the dimensions, metrics and data types that apply to your company, hiding unused cloud providers, synthetic test dimensions, event data, unused device subtypes and NMS measurements.
Cleaner filter dropdowns: Filter dropdowns no longer show "Select All" when everything is already selected, or "Clear" when nothing is selected.
Login page announcement: A promotional banner on the login page announces the "Transforming Network Operations with AI Advisor" webinar.

Bug Fixes

Login failures with special characters in passwords: Fixed a password-parsing mismatch that caused authentication failures for companies whose credentials contained characters such as %, :, + or =.
Widespread authentication failures: Fixed a bug causing roughly 74,000 authentication failures per day for companies whose database was missing its login role; the role and permissions are now detected and recreated automatically.
Web framework security fix: The Echo web framework was upgraded to fix a vulnerability allowing encoded path separators to bypass middleware and expose static files, plus a related host-header validation issue.
Connect-protocol API calls: Connect protocol calls (JSON or proto over HTTP POST) to gRPC-Connect backend services now route and authenticate correctly.
SSO role cleanup: SSO login now clears locally-assigned roles when a valid role set comes from the identity provider, and the RBAC migration skips users who already have role mappings, keeping role assignments consistent. Super admins are exempt.
Device config read permission after migration: Users migrated to the new RBAC system, including via the KMR and SSH Executor roles, now retain the device.config::read permission.
Device label permissions: Fixed a permission-key collision that incorrectly blocked normal users from updating device labels.
Missing country codes on maps: Dashboards and maps with traffic from certain countries no longer fail to render because the country code was missing from Kentik's allowlist; the list expanded from 246 to 329 codes.
Admin table scroll position: Clicking a row to open its detail panel on large admin tables no longer causes the table to jump back to the top.
Navigation menu flicker: Fixed flickering in the main navigation menu by hiding "Recent Views" when setup tasks are shown, preventing overflow.
Dashboard widget panel crash: Fixed a crash in dashboard widget panels caused by reading a property on an undefined status object.
Data integrity for grouping and alerting: Primary keys are now defined across all NMS measurement schemas to prevent duplicate index values, which previously could produce incorrect results when grouping by index in Metrics Explorer or Data Explorer, or in alert policies.
Gateway configuration snapshots: The API gateway no longer publishes incomplete configuration snapshots during startup or updates, which could cause request routing gaps.
Edge failover reliability: Connection-state synchronization is now separated by traffic class (BGP/Flow versus Portal), preventing stale connection state from one traffic type causing requests to be forwarded to down servers in the other.