Changelog

Every Evorion release.

v4HydraSep 2026
Live
Evorion 4
Hydra ships bug fixes and improvements across the platform, tightens security throughout the SDK and API, upgrades virtual machine detection, hardens the heartbeat, and rolls out many feature implementations we have had queued for this release.
- Bug fixes and improvements.
- Improved security.
- Improved virtual machine detection.
- Improved heartbeat security.
- No need for end users to sync time anymore.
- Enhanced telemetry capture.
- Many feature implementations around the platform.
Read the release notes
v4-umbraUmbraSep 2026
Evorion 4
Umbra is a security and reliability release on top of Denali. Server-side authorisation is signed end to end, tamper detection was rewritten around a self-verifying integrity mesh, transport was hardened across every request path, and every server rejection now surfaces the exact reason your client needs to react. Windows 11 24H2 is supported natively, false-positive integrity trips on real launcher environments are gone, and the developer panel has been polished throughout.
- Better server-side security.
- Sharper tamper detection.
- Resolved vulnerabilities across the SDK, shield, and API.
- Server-signed session capabilities, verified on every request.
- Runtime security downgrade detection.
- Response replay protection.
- Anti-tamper telemetry across every subsystem.
- Transport hardening across every request path.
- Vault and key material hardening.
- Reworked syscall gate with health telemetry.
- Fewer false positives on real end-user machines.
- Server-provided reason codes surfaced directly in client errors.
- Secure payload delivery.
- Frontend polish across the developer panel.
- Documentation updated with the new methods.
- Bug fixes and improvements.
Read the release notes
v4-denaliDenaliJun 2026
Evorion 4
Two-factor auth and password reset for end users, self-serve billing, custom API domains, a referral program, and server-side code execution, plus security, performance, and documentation work across the platform.
- Two-factor authentication for end users.
- Password reset for end users.
- Social sign-in and email verification.
- Self-serve billing: check out and get upgraded automatically.
- Referral program: earn commission on referred sign-ups.
- Custom API domains: point your own hostname at the API.
- Server-side code execution.
- Server-decrypted sections.
- More API functionality.
- Durable webhooks and notifications.
- Free SDK resolved.
- Shield CLI deprecated.
- Better auth performance.
- False positives resolved.
- Frontend changes.
- Security upgrades.
- Documentation updated with the upgraded methods.
- Bug fixes and improvements.
Read the release notes
v3.1.0Apr 2026
Pro and Ultra tiers
Platinum/Obsidian renamed to Pro/Ultra in the dashboard. Unified security panel, broadcast delivery fix, chart edge-case fixes.
- Tier rename: Platinum → Pro, Obsidian → Ultra. No pricing changes.
- Unified security panel: anti-debug, integrity, and CFF settings now live under one tab.
- Fixed broadcast delivery race that could silently drop messages under high fan-out.
- Chart axis stabilised for sub-hour windows and zero-value ranges.
Read the release notes
v2.9.8Mar 2026
EVORION_PROTECT
EVORION_PROTECT and EVORION_SPLIT with auto-seed, plus EVORION_PROTECT_SEH. Developer REST API, resellers, abuse alerts, anti-inject.
- EVORION_PROTECT: control-flow flattening into a 64-slot encrypted dispatch table with ghost blocks.
- EVORION_SPLIT: distributes real logic across additional dispatch blocks (up to 6).
- EVORION_PROTECT_SEH: CFF transitions via int3 exceptions; debuggers stall the dispatcher.
- Developer REST API opened to Pro/Ultra tiers. Reseller panel + per-seller abuse alerts shipped.
- Anti-inject monitor added to the runtime, detecting LoadLibrary/CreateRemoteThread patterns.
Read the release notes
v2.9.5Mar 2026
Major
WebSocket transport
WebSocket mode with server push, capability tokens, DPoP-signed requests, and remote attestation challenge/response.
- WSS transport goes GA: the server can push revocations, alerts, and variable updates without polling.
- Capability tokens replace per-call scopes; issued at handshake, refreshed on the socket.
- DPoP request binding on every frame; keys rotate per session.
- Remote attestation: the server issues a challenge, and the client responds with a signed hash chain over its runtime state.
Read the release notes

Want a heads-up on new releases? Apply for access. Release notes go out on the first heartbeat after ship.

Back to Evora

Changelog

Every Evorion release.

v4HydraSep 2026
Live
Evorion 4
Hydra ships bug fixes and improvements across the platform, tightens security throughout the SDK and API, upgrades virtual machine detection, hardens the heartbeat, and rolls out many feature implementations we have had queued for this release.
- Bug fixes and improvements.
- Improved security.
- Improved virtual machine detection.
- Improved heartbeat security.
- No need for end users to sync time anymore.
- Enhanced telemetry capture.
- Many feature implementations around the platform.
Read the release notes
v4-umbraUmbraSep 2026
Evorion 4
Umbra is a security and reliability release on top of Denali. Server-side authorisation is signed end to end, tamper detection was rewritten around a self-verifying integrity mesh, transport was hardened across every request path, and every server rejection now surfaces the exact reason your client needs to react. Windows 11 24H2 is supported natively, false-positive integrity trips on real launcher environments are gone, and the developer panel has been polished throughout.
- Better server-side security.
- Sharper tamper detection.
- Resolved vulnerabilities across the SDK, shield, and API.
- Server-signed session capabilities, verified on every request.
- Runtime security downgrade detection.
- Response replay protection.
- Anti-tamper telemetry across every subsystem.
- Transport hardening across every request path.
- Vault and key material hardening.
- Reworked syscall gate with health telemetry.
- Fewer false positives on real end-user machines.
- Server-provided reason codes surfaced directly in client errors.
- Secure payload delivery.
- Frontend polish across the developer panel.
- Documentation updated with the new methods.
- Bug fixes and improvements.
Read the release notes
v4-denaliDenaliJun 2026
Evorion 4
Two-factor auth and password reset for end users, self-serve billing, custom API domains, a referral program, and server-side code execution, plus security, performance, and documentation work across the platform.
- Two-factor authentication for end users.
- Password reset for end users.
- Social sign-in and email verification.
- Self-serve billing: check out and get upgraded automatically.
- Referral program: earn commission on referred sign-ups.
- Custom API domains: point your own hostname at the API.
- Server-side code execution.
- Server-decrypted sections.
- More API functionality.
- Durable webhooks and notifications.
- Free SDK resolved.
- Shield CLI deprecated.
- Better auth performance.
- False positives resolved.
- Frontend changes.
- Security upgrades.
- Documentation updated with the upgraded methods.
- Bug fixes and improvements.
Read the release notes
v3.1.0Apr 2026
Pro and Ultra tiers
Platinum/Obsidian renamed to Pro/Ultra in the dashboard. Unified security panel, broadcast delivery fix, chart edge-case fixes.
- Tier rename: Platinum → Pro, Obsidian → Ultra. No pricing changes.
- Unified security panel: anti-debug, integrity, and CFF settings now live under one tab.
- Fixed broadcast delivery race that could silently drop messages under high fan-out.
- Chart axis stabilised for sub-hour windows and zero-value ranges.
Read the release notes
v2.9.8Mar 2026
EVORION_PROTECT
EVORION_PROTECT and EVORION_SPLIT with auto-seed, plus EVORION_PROTECT_SEH. Developer REST API, resellers, abuse alerts, anti-inject.
- EVORION_PROTECT: control-flow flattening into a 64-slot encrypted dispatch table with ghost blocks.
- EVORION_SPLIT: distributes real logic across additional dispatch blocks (up to 6).
- EVORION_PROTECT_SEH: CFF transitions via int3 exceptions; debuggers stall the dispatcher.
- Developer REST API opened to Pro/Ultra tiers. Reseller panel + per-seller abuse alerts shipped.
- Anti-inject monitor added to the runtime, detecting LoadLibrary/CreateRemoteThread patterns.
Read the release notes
v2.9.5Mar 2026
Major
WebSocket transport
WebSocket mode with server push, capability tokens, DPoP-signed requests, and remote attestation challenge/response.
- WSS transport goes GA: the server can push revocations, alerts, and variable updates without polling.
- Capability tokens replace per-call scopes; issued at handshake, refreshed on the socket.
- DPoP request binding on every frame; keys rotate per session.
- Remote attestation: the server issues a challenge, and the client responds with a signed hash chain over its runtime state.
Read the release notes

Want a heads-up on new releases? Apply for access. Release notes go out on the first heartbeat after ship.