Product Releases and Updates

Storing API keys and external service credentials in site properties is a common practice, but leaving them unencrypted creates a significant security vulnerability. Relying on manual reviews to catch these oversights is risky and often leads to overlooked vulnerabilities in O11 apps.

 

AI Mentor Studio now automatically identifies these risks by matching site property values against typical formats for sensitive credentials and API keys. 

 

By flagging exposed secrets early, teams can prevent accidental data exposure, enforce encryption best practices as well as ensure their applications remain compliant with modern security frameworks.

We’re introducing a new widget for error management in OutSystems Developer Cloud (ODC) Workflows: a new, visually intuitive panel that helps you quickly identify and resolve issues while building workflows.

Located at the bottom of the Workflow Editor, the Notification Panel aggregates all workflow errors in one place. Instead of navigating through multiple activities and properties to track down issues, you can now instantly see where problems exist and jump directly to them with a single click.

A notification indicator shows the number of errors detected in your workflow. Clicking it opens the Notification Panel, where you can:

• Identify issues at a glance – View a clear summary of all workflow errors in one place.
• Jump directly to the problem – Click any error to navigate straight to the affected node.
• Resolve issues faster – Reduce debugging time and avoid manually searching across the workflow.

 

With improved visibility, navigation, and filtering, this feature makes workflow creation smoother and more efficient—so you can spend less time debugging and more time delivering value.

We are thrilled to announce the Beta release of ODC Semantic Search, a powerful new AI capability that helps applications and AI agents find relevant information based on meaning, not just exact keyword matches.

 

Introducing ODC Semantic Search

Traditional search relies on exact word matches, which can miss what a user is really looking for. Semantic Search uses vector-based retrieval to understand the meaning and context behind a query. This enables your applications to surface the most relevant information based on concepts, even when the search terms don't perfectly match the data in your OutSystems database. By transforming existing text attributes into searchable vectors, you can finally unlock the full potential of your ODC data.

 

Powering Apps and AI Agents

Semantic Search is more than a search experience; it is a foundational capability for building the next generation of AI-powered applications and experiences.

• Enhanced user experiences - Deliver more natural, human-like search experiences in web and mobile apps, helping users find relevant information faster and with less effort.
  
• Grounded AI agents and RAG - Support Retrieval-Augmented Generation (RAG) patterns by supplying AI agents with the most relevant context from your ODC data. This helps improve response quality by making AI outputs more relevant, more trustworthy, and better grounded in your business information.

 

Regional Support & Data Handling

For ODC environments residing in unsupported AWS regions, search requests will be automatically and securely redirected to a supported region to ensure full functionality. Learn more about it in the documentation.

 

Get started today

Semantic Search is currently available in Beta - we’re excited for you to try it and share feedback with us. Contact your account team and learn how to enable this powerful AI capability.

We’re pleased to announce that you can now autonomously schedule the database upgrades, security patching, and other maintenance tasks directly in the ODC Portal. The custom maintenance scheduling empowers teams to align infrastructure updates with their specific business needs, ensuring that system reliability and compliance never come at the cost of operational agility.

 

With this update, you get a unified maintenance dashboard with real-time progress tracking, allowing administrators to flexibly reschedule pending operations to a specific date and time within available maintenance periods. To ensure you never miss a critical update, the system sends proactive email alerts for required actions. It includes an automated fallback mechanism that securely executes necessary updates before their deadlines if no rescheduling is performed.

 

You can find upcoming updates and patches for app vulnerabilities under Maintain > Platform updates (formerly under App security).

Following the success of our Event-Driven Architecture (EDA), we are excited to expand your toolkit with Database Events, a new capability exclusive to OutSystems Developer Cloud (ODC). While EDA allows for high-level application orchestration, this update specifically enables developers to build highly decoupled, reactive applications by triggering logic directly from database state changes, eliminating the need for manual wrappers or complex process modeling.

With this release, you can now trigger events based on native entity events—OnCreate, OnUpdate, and OnDelete—turning your database into an active participant in your application's architecture.

Key Features

• Native Entity Triggers: Directly subscribe to data changes at the source. Logic is automatically invoked whenever a record is created, modified, or removed.
• Asynchronous Execution: All database-triggered logic runs in the background. This ensures that your main user transactions remain fast and responsive, as the system doesn't wait for side-effect logic to complete.
• Access via Record ID: Each event provides access to the unique Identifier of the affected record. This allows you to easily retrieve the latest state to perform audits, handle cache invalidation, or stream data to external systems in real-time.
• Enhanced Reliability: Ensure that critical side effects—like audit logging or external data synchronization—happen every single time a record changes, regardless of where that change originated in your app.
• Seamless Studio Integration & Availability: Configure these triggers directly within ODC Studio under the Entity properties. This feature is currently rolling out to all ODC tenants; look for the new Events section under the properties of any Database Entity.

When you only have a few agents, running them without built-in safety checks might be fine. But as teams ship more agentic apps with Agent Workbench, it becomes hard to answer basic questions at scale: How do we block profanity or filter personally identifiable information? How do we prevent prompt injection and ensure our AI usage adheres to internal policies?

 

With this release, Agent Workbench now provides a built-in way to validate what goes into and comes out of an Agent’s LLM calls—so guardrails can be applied directly in the platform, not bolted on later.

 

To support governance and compliance at scale, we built a foundation that lets organizations enable predefined safety rules and lets developers apply them to specific Agents. This provides an initial layer of control and trust today—and sets the stage for more advanced, mandatory governance over time.

 

Introducing Agent Guardrails

Agent Guardrails are shared safety and compliance controls that validate what an AI Agent can receive (inputs) and produce (outputs), so teams can scale agent usage without increasing risk. System Administrator can configure the following predefined Guardrail Rules: 

• Content Safety: Detects and blocks harmful, unsafe, or policy-violating content in prompts or responses.
• PII Filtering: Identifies sensitive data (e.g., personal identifiers) and masks or blocks it to prevent leakage.
• Prompt Injection Prevention: Detects attempts to override instructions, exfiltrate data, or manipulate the agent’s behavior.
  
  

When an Agent runs, Guardrails automatically validate its inputs and outputs against the active rules. If a rule is violated, the system can:

• Block the response,
• Mask sensitive content, or
• Log the event (based on configuration).

You also get diagnostics that show which rules ran, what happened, and whether each check passed or failed—making it faster to troubleshoot and validate agent behavior against your policies.

Agent Guardrails is available in Beta—we’re excited for you to try it and share feedback. More improvements are already underway and coming soon

We have enhanced the recently released ODC Data Fabric Connector for O11 to support O11 multi-pipeline infrastructures (multiple production environments in the same infrastructure). This update is specifically for enterprise customers who manage development and delivery across segregated business lines or regional pipelines.

What has changed:

• Pipeline Interoperability: You can now expose entities from different O11 pipelines into an ODC tenant.
• Architectural Consistency: Maintain your existing O11 deployment and segregation rules while bridging data to ODC.
  
  

This update enables organizations with complex delivery architectures to use the connector to ground ODC-based AI agents and applications in their core business data residing in O11.

Identify outdated components automatically to reduce technical debt and security risks.

 

Manually auditing applications for deprecated elements is a tedious process that often leads to overlooked technical debt. AI Mentor Studio now proactively flags when your modules consume elements that are no longer recommended, so these can be replaced with more secure or efficient alternatives.

 

By identifying these risks early, teams can improve application health, minimize vulnerabilities, and simplify future upgrades. 

OutSystems is now FedRAMP compliant, providing U.S. federal agencies and federal contractors with an authorized, full-stack custom application development platform for deploying and managing mission-critical applications that meet the government’s data security requirements.

This milestone allows government organizations to incrementally modernize legacy systems and deploy cloud-native applications while meeting FedRAMP Moderate federal security requirements.

A rigorous and exclusive U.S. government program, FedRAMP is designed to standardize security assessment and authorization for cloud service offerings, accelerating the adoption of government-grade cloud solutions by federal agencies. OutSystems has partnered with Knox, the largest and longest-running managed federal cloud provider, to achieve FedRAMP Authorization.

OutSystems Developer Cloud (ODC) is now fully compliant with the Dubai Electronic Security Center (DESC) Information Security Regulation (ISR). This milestone provides UAE-based organizations with a secure, cloud-native platform that meets strict regional data residency and security standards, enabling government and private enterprises to innovate at scale with confidence in their data sovereignty.

This achievement eliminates significant regulatory hurdles, allowing development teams to move from idea to production faster than ever. By leveraging a DESC-compliant environment, IT leaders can reduce the overhead of security audits and focus resources on building mission-critical applications that drive superior business outcomes and citizen experiences.

DESC requires an add-on subscription. Please contact your OutSystems account team for more information.

OutSystems is now compliant with the Italian National Cybersecurity Agency (ACN) standards, meeting the stringent security requirements for the Italian Public Administration. This qualification ensures the OutSystems platform aligns with the Italian Cloud Strategy, providing a secure, trusted environment for handling critical national data.

This milestone enables developers to build mission-critical applications for regulated industries without the typical administrative delays of security vetting. By removing these barriers, organizations can accelerate digital transformation and improve citizen services while maintaining full compliance with Italian cybersecurity law and operational resilience standards.

ACN compliance requires an add-on subscription. Please contact your OutSystems account team for more information.

We are thrilled to announce Audit Trail Streaming, an enhancement that helps ODC users retain logs and set up security alerting. Securely stream platform audit logs directly to your preferred Security Information and Event Management (SIEM) solutions or other security monitoring repositories. Executing continuous threat detection and anomaly analysis is now faster and easier as ODC integrates with your existing monitoring tools.

Audit Trail Streaming requires an add-on subscription. Please contact your OutSystems account team for more information.

We’ve updated the MCP Connector to keep pace with the evolving Model Context Protocol, ensuring your integrations remain cutting-edge and secure. These MCP Connector improvements make AI integrations production-ready for enterprise use. With support for private network access, secure system-to-system authentication, and real-time streaming via SSE, customers can safely connect AI Agents to external systems, delivering faster and more responsive AI-driven experiences. This is a key step in enabling scalable, secure agentic and retrieval-based AI applications within OutSystems.

We are excited to announce the new ODC Data Fabric Connector for O11, a native solution designed to extend your trusted O11 data into ODC. This new feature enables ODC applications to access your existing O11 data seamlessly and securely, empowering you to build modern apps and AI agents faster without disrupting your core business operations.

The ODC Data Fabric Connector for O11 enables your team to:

• Build Faster: Developers can use O11 entities directly from the ODC Data Fabric catalog, making them available for use in aggregates or SQL nodes just like any other entity.
• Read and Write: Data Fabric O11 Connector supports direct read-write operations for SQL Server databases. 
• Security: Your data remains secure in transit. The connection is established via a dedicated Private Gateway, creating a secure, encrypted tunnel between your ODC tenant and your O11 environment.
• Governance: Select which O11 entities to expose, ensuring that only intended data is accessible to ODC developers.
  
  

Accelerate Your AI Journey

This capability is a critical enabler for your AI strategy. By connecting ODC’s advanced AI Agent Workbench to years of high-quality business data in O11, you can immediately start building AI agents that are grounded in your unique business context, dramatically accelerating time-to-value.

Mentor Code Quality already helps teams improve application quality with continuous built-in code analysis. Now, with Code Quality APIs, teams can integrate those results into their existing CI/CD and DevSecOps practices, allowing checks to run automatically in the tools your teams already use.

By integrating with CI/CD tooling, such as Jenkins or Azure DevOps, you can analyze each new app revision and enforce a quality gate before promotion. Your pipeline can trigger a new analysis, retrieve the quality score and findings, and make it easy to apply consistent standards across teams.

We’re pleased to announce that you can now retrieve the generated application source code through ODC DevOps APIs and scan it using your SAST tool of choice, such as Checkmarx, Snyk, SonarQube, or Veracode. 

This enhancement enables you to extend ODC’s built-in security checks to meet your organization’s security and compliance requirements, making it easy to integrate SAST as an automated quality gate within third-party CI/CD pipelines without disrupting existing DevSecOps practices. 

Streamline your asset governance and eliminate manual overhead by connecting ODC with your existing approval workflows and build pipelines.

 

These new DevOps APIs enable you to integrate asset creation directly into your portfolio approval process, whether in OutSystems or a third-party tool, ensuring that every new project instantly adheres to your organization's governance rules.

 

Additionally, you can now fully automate the lifecycle of external libraries by syncing ODC with your third-party CI/CD pipelines, removing error-prone manual work and increasing developer productivity.

The Mobile Library is a new ODC app type designed specifically for building mobile plugins. It introduces a cleaner, JavaScript-based plugin model that provides developers with direct access to native mobile capabilities, resulting in a smoother and more reliable development experience. This update makes it easier to create, maintain, and reuse mobile plugins across mobile applications.

We’re rolling out a set of App Generator (AppGen) enhancements designed to help Mentor generate better apps faster, with built-in field validation, modern UI patterns , and expanded dashboard aggregations.

 

What's New:

• Field-Level Validation Rules: AppGen now generates field-level validation rules for common scenarios based on your app context or requirements, including: mandatory fields, date checks (past/future), value range enforcement (Numeric, Text, Phone Number), and email validation.
• Pop-up and Tab Patterns: Mentor can now generate apps that include Pop-up and Tab patterns, providing more flexible and modern UI designs.
• Enhanced Dashboard Aggregations: Dashboard now supports additional aggregations, including Minimum, Maximum, Average, and Sum, providing richer data visualization options out of the box.

The latest version of Mobile Apps Build Service (MABS) is now GA!

 

For ODC, MABS 12 now supports Capacitor, a modern native runtime that allows developers to build native-like experiences on iOS and Android. Capacitor is a modern, forward-looking mobile foundation, offering a simple plugin system and an active developer community. Additionally, for O11 and ODC, MABS 12 is required to continue submitting your mobile apps to the Apple App Store and Google Play Store throughout 2026.

Before updating MABS, all supported plugins must be updated to their latest versions. For more details, check the MABS 12 release notes.