Changelog
Back to All

[6.35.0.0] 2026-10-16

October 17th, 2026

ROH 6.35.0.0 Release

Release Overview

Release Name: ROH GA Release

Release Type: General Availability

Release Number: 6.35.0.0

Purpose

RegScale Orchestration Hub (ROH) enables organizations to automate the import and export of data between RegScale and external systems through configurable integrations and commands.

This general availability release adds Next Gen connectors, easier job setup, better handling of secrets, and self-hosted ROH. Classic integration jobs now run on the refreshed RegScale command line interface (CLI). The changes are summarized below.

What's Included

Next Gen connectors in the RegScale Orchestration Hub (ROH)

When your deployment has Next Gen turned on, you can choose the classic or Next Gen connector experience for each job. Next Gen jobs are labeled "Next Gen" in green. Your administrator first turns on Next Gen connectors and the RegScale Client API. After that, setting up a Next Gen source is configuration in ROH, not a development request. 40 new Next Gen connectors from 37 vendors are available:

  • Assets (devices sync into RegScale as assets): Armis Centrix, Claroty xDome, Iru, Ivanti Neurons, JupiterOne, Nozomi Vantage, ServiceNow CMDB, Sevco
  • Endpoint detection and response: Bitdefender GravityZone, ESET Connect, Iru, Sophos Endpoint, ThreatDown (Malwarebytes)
  • Endpoint management (devices sync into RegScale as assets): Automox, Iru, Jamf Pro, NinjaOne
  • Security event monitoring (alerts sync as issues): Datadog Cloud SIEM, Elastic SIEM, Google Security Operations, Microsoft Sentinel, Panther SIEM, Rapid7 InsightIDR, Splunk Enterprise Security, Sumo Logic Cloud SIEM
  • Ticketing (tickets sync as issues): Azure DevOps Boards, BMC Helix ITSM, Freshdesk, Ivanti Neurons Ticketing, Linear, PagerDuty Operations Cloud, ServiceNow Security Incident Response, Torq, Xurrent, Zendesk
  • Vulnerabilities (vulnerability findings sync into RegScale and link to matching assets): Iru, Microsoft Defender External Attack Surface Management, Nucleus, ServiceNow Unified Security Exposure Management, ServiceNow Vulnerability Response

Synced tickets and alerts land in RegScale as issues with a status of Open or Closed, owned by the job's service account. Synced devices land as Hardware assets.

Easier job setup

  • When Next Gen is turned on, Create Job shows the Next Gen providers approved for your deployment.
  • A job author picks the RegScale security plan that a Next Gen job writes into. Security plans are the only destination in this release.
  • When you create a service account, you pick which of your RegScale applications it belongs to.
  • On Edit Job, the provider of a configured Next Gen job is fixed. Duplicate starts a new job from an existing job's settings, so you can choose a different provider.
  • View Documentation on Create Job opens the provider's setup guide in a new tab, when one is available.
  • When a Next Gen job fails to set up, the job reports why and who needs to fix it: you, an administrator, or RegScale support.

Better handling of secrets

Next Gen jobs have their own secret category, preselected when you add a secret to a Next Gen secret set. ROH masks user-entered secret values the same way on the secrets, configuration, and import screens and their API responses. Default values supplied by RegScale are shown in full. An administrator can export only the secrets in the secret set they are viewing.

Run ROH in your own environment

Self-hosted ROH is available as a Helm chart from the RegScale Helm Repository, with setup instructions in the Orchestration Hub Setup guide. Next Gen connectors are not yet available in the self-hosted chart.

Classic ROH integration jobs run on the refreshed RegScale command line interface (CLI)

This covers 18 integrations and 73 commands: AWS, Microsoft Defender, Microsoft Entra ID, CrowdStrike, SentinelOne, Tanium, GCP, Tenable.io, Tenable SC, Wiz, Axonius, Prisma, Rapid7, Qualys, Jira, Azure AD, BigQuery, and FedRAMP. Most command options are unchanged, so most existing schedules keep working. Next Gen jobs do not use the CLI.

What's Fixed

  • Minor bug fixes and enhancements.
  • Security fixes. This release masks secrets in more API responses, logs, and job environments, and tightens workspace access rules on jobs, webhooks, service accounts, and administrator actions.

Maintenance and Updates

  • Updated Python dependencies. This release updates several Python dependencies, including PyJWT, urllib3, and tornado, to versions that fix known vulnerabilities.

Deployment Notes

Review these breaking changes before you upgrade:

  • The refreshed CLI needs the RegScale Client API turned on.
  • Three Azure AD commands are removed. The Azure AD commands Sync Admins, Sync General, and Sync Readonly are removed. Move their jobs to Sync Tenant Admins or Sync App.