Ingext Community Edition, free on AWS Marketplace since 2024, now also installs into your own Kubernetes cluster on AWS, Microsoft Azure or Google Cloud, from Helm charts. It collects, labels, enriches, transforms and routes telemetry before it reaches a SIEM, and stores it in a searchable data lake in your own cloud account.
On November 13, 2025, Microsoft briefly changed the user ID in the Office 365 audit feed to all lowercase. For users whose usernames contain capital letters, Fluency saw the lowercase name as a new user, so O365_AzureAD_UserLoggedIn and other rules that key on the field raised false positives.
No action is needed. Alerts raised during that window for this reason can be closed as false positives.
AI Assist reviews each behavior alert before an analyst has to. It gathers the evidence around the alert, decides whether it needs action, explains its reasoning, and closes the alerts that do not, so analysts spend their time on the ones that do.
After a beta with early customers, AI Assist is rolling out to all instances in stages.
A redesigned Fluency interface is rolling out, site by site. Each site moves to a new address in its own region, and your existing login carries over. Partners can show their own logo and background.
The Fluency Programming Language (FPL) now accepts JavaScript (ES6). Parsers and reports written in JavaScript, including the code AI assistants generate, run in Fluency without being translated by hand.
The update rolls out to all instances the weekend of May 17–18, 2025. Existing FPL code runs unchanged.
Fluency is launching Replay, a scenario-based training and testing platform. Replay plays real, sanitized security telemetry into a Fluency instance, so analysts, and AI, can work a realistic incident from first alert to response in a controlled, repeatable environment.
Anyone can now start a Fluency trial on their own. Sign up at trial.fluencyplatform.com/trial to get your own Fluency instance, connect your data sources, and see your first behavior alerts.
Fluency is introducing Applications: a new way to add data sources. Instead of assembling an integration, a router, pipes and processors by hand, you pick an application template and Fluency installs every component the source needs.
Applications roll out to all instances the weekend of January 18–19, 2025. Existing integrations keep working as they are.
If your Google Workspace integration shows administrator events but no user activity (no sign-ins, no Drive or Gmail events), the cause is an access setting in your Google Admin console, not in Fluency. Google sends only administrator events to a third-party app whose access is left at Limited.
Ingext Community Edition is now available free on AWS Marketplace. It runs Ingext in your own AWS account, so you can collect, transform and route your data without it leaving your control. Deployment takes about five minutes.