Yandex Security Deck release notes

Written by

Updated at August 21, 2026

July 2026

In the CSPM, KSPM, and Threat Detector modules, you can now configure the display and sorting of security control rules.
Added the option to filter alerts by an extended set of attributes.
Vulnerability Management was migrated to a paid plan. For more information, see the pricing policy.
Implemented the blocking mode for admission-type rules in KSPM, which allows you to prohibit deployment of loads that violate the security policy.
CSPM got a new rule set to minimize the risks of ransomware attacks and an extended list of rules for infrastructure security compliance verification. The new rules govern the password policy and outbound internet access control.
In DSPM:
- You can now hook up custom dictionaries to search for field-specific sensitive data.
- Added fixed-price subscriptions you may prefer over your pay-as-you-go plan.
- Implemented continuous change scanning to track the emergence and updates of sensitive data.

Yandex Security Deck has entered the General Availability stage. The Threat Detection and Vulnerability Manager modules, along with the AI assistant, remain in Preview.
Added new rules for infrastructure security compliance verification in CSPM. The new rules govern the use of MFA, key rotation, use of Yandex ID accounts, tracking of the last-authenticated date of service accounts, and last use of access keys.
In KSPM:
- Exceptions now support excluding resources from checks based on their type, workload name, and labels.
- Implemented rule modes of the admission type.
- Supported a new Kubernetes® version.
Added support for changing the status, assigning owners, and adjusting severity for multiple alerts at once.
When you create a workspace, the system automatically creates a default alert sink unless the user creates a custom one.
Added support for activating and deactivating workspaces in Security Deck.

CSPM now includes a new rule set aligned with GOST R 57580, the national security standard for banking and financial operations.
DSPM now supports creating scan scopes from preliminary analysis results and continuous monitoring of those scopes for new or modified sensitive data.
The pricing model has been expanded: you can now purchase monthly subscriptions for the CSPM and Threat Detection modules.
All module errors are now displayed in a single dedicated interface.
Scanning Yandex 360 disks for sensitive data using DSPM is now available to all users. Previously, this feature was only available upon request.

Threat Detector (TD) kicked off. This module is in Preview and available only upon request.
Added new rules for infrastructure security compliance verification in CSPM. The new rules regulate Managed Service for GitLab instance security event monitoring and user credential management.
You can now manually initiate an infrastructure security compliance verification procedure in CSPM.
You can also view and download the results of preliminary analysis in DSPM.
On the CSPM and KSPM alerts page, you can now exclude a resource from the compliance check.

Released the Vulnerability Management (VM) module. This module is in Preview and available only upon request.
DSPM now supports preliminary analysis of data stored in Object Storage buckets within a workspace.
You can now group alerts by type and filter them by new attributes.
In KSPM, you can now specify objects in exceptions using search by namespace.
Added new rules for infrastructure security compliance verification in CSPM. The new rules control the assignment of privileged roles, DDoS protection at the network level, service account access to Kubernetes® clusters, and redundant service account roles at the organization and service levels.

DSPM, CSPM, KSPM, and the AI assistant are now in Preview.
As of February 2, 2025, KSPM is charged according to the pricing policy.
Supported new security standards in CSPM: PCI DSS (Payment Card Industry Data Security Standard) and requirements of the FSTEC of Russia (Order No. 21) aimed at protection of personal data.
In CSPM, implemented new compliance rules for all supported security standards.

Launched KSPM and CSPM.
You can now use KSPM and CSPM as data sources for alerts.
You can now create a Security Deck workspace, which is a container for module settings and resources, list of controlled resources, control parameters, and other settings.
Added an AI assistant.
DSPM now supports partial scanning and image scanning.