Yandex Security Deck release notes

Written by

Updated at August 6, 2026

June 2026

Yandex Security Deck has entered the General Availability stage. The Threat Detection and Vulnerability Manager modules, along with the AI assistant, remain in Preview.
Added new rules for infrastructure security compliance verification in CSPM. New rules now govern using MFA, rotating keys, tracking service account last authentication dates, and using Yandex ID accounts.
In KSPM:
- Exceptions now allow excluding resources from checks by resource type, workload name, and labels.
- Implemented rule modes of the admission type.
- Added support for new Kubernetes® version.
Added support for changing status, assigning owners, and adjusting severity for multiple alerts at once.
Creating a workspace automatically creates a default alert sink unless the user creates a custom one.
Added support for activating and deactivating workspaces in Security Deck.

CSPM now includes a new ruleset aligned with GOST R 57580, the national security standard for banking and financial operations.
DSPM now supports creating scan scopes from preliminary analysis results and continuously monitoring those scopes for new or modified sensitive data.
The pricing model has been expanded: you can now purchase monthly subscriptions for the CSPM and Threat Detection modules.
All module errors are now displayed in a unified error interface.
Now all users can enjoy DSPM's capability to scan Yandex 360 disks for sensitive data; previously, this feature was only available upon request.

Threat Detector (TD) kicked off. This module is in Preview and available only upon request.
Added new rules for infrastructure security compliance verification in CSPM. The new rules regulate Managed Service for GitLab instance security event monitoring and user credential management.
You can now manually initiate an infrastructure security compliance verification procedure in CSPM.
You can also view and download the results of preliminary analysis in DSPM.
On the CSPM and KSPM alerts page, you can now exclude a resource from the compliance check.

Released the Vulnerability Management (VM) module. This module is in Preview and available only upon request.
DSPM now supports preliminary analysis of data stored in Object Storage buckets within a workspace.
You can now group alerts by type and filter them by new attributes.
In KSPM, you can now specify objects in exceptions using search by namespace.
Added new rules for infrastructure security compliance verification in CSPM. The new rules control the assignment of privileged roles, DDoS protection at the network level, service account access to Kubernetes® clusters, and redundant service account roles at the organization and service levels.

DSPM, CSPM, KSPM, and the AI assistant are now in Preview.
As of February 2, 2025, KSPM is charged according to the pricing policy.
Supported new security standards in CSPM: PCI DSS (Payment Card Industry Data Security Standard) and requirements of the FSTEC of Russia (Order No. 21) aimed at protection of personal data.
In CSPM, implemented new compliance rules for all supported security standards.

Introduced fixed-price subscriptions for DSPM. You can purchase a subscription instead of paying for the actual resource consumption. The subscription pricing will soon be available in the Pricing policy section.
Implemented an API to work with alerts.

Launched KSPM and CSPM.
You can now use KSPM and CSPM as data sources for alerts.
You can now create a Security Deck workspace, which is a container for module settings and resources, list of controlled resources, control parameters, and other settings.
Added an AI assistant.
DSPM now supports partial scanning and image scanning.