Skip to main content

Moving to the New Fluency Platform

Support
Fluency Support

Fluency instances are moving to the new Fluency SaaS platform. Each instance is migrated application by application, most data sources move over without any change on your side, and your current instance stays available while you try the new one.

The Fluency Logic Layer: A Headless SIEM

Support
Fluency Support

Fluency is introducing the Fluency Logic Layer™, an architecture built for AI-assisted operations. It turns security expertise (investigation procedures, behavioral analytics, reporting methods and operational workflows) into governed capabilities that AI assistants such as Claude, Codex and ChatGPT, as well as analysts, MSSPs and automation, can call directly.

The Logic Layer is available now as part of the Fluency platform.

FPL Strict Mode: Check Your Custom Processors

Support
Fluency Support

The FPLv2 engine now follows JavaScript strict-mode rules. An assignment to a variable that was never declared, such as a = 1, now fails validation. Processors from the Fluency repository are already updated. Processors written or edited on your own instance should be checked.

Ingext Community Edition Now Runs on Kubernetes, in Any Cloud

Support
Fluency Support

Ingext Community Edition, free on AWS Marketplace since 2024, now also installs into your own Kubernetes cluster on AWS, Microsoft Azure or Google Cloud, from Helm charts. It collects, labels, enriches, transforms and routes telemetry before it reaches a SIEM, and stores it in a searchable data lake in your own cloud account.

Advisory: Microsoft 365 User ID Case Change

Support
Fluency Support

On November 13, 2025, Microsoft briefly changed the user ID in the Office 365 audit feed to all lowercase. For users whose usernames contain capital letters, Fluency saw the lowercase name as a new user, so O365_AzureAD_UserLoggedIn and other rules that key on the field raised false positives.

No action is needed. Alerts raised during that window for this reason can be closed as false positives.

AI Assist: AI Triage on Every Alert

Support
Fluency Support

AI Assist reviews each behavior alert before an analyst has to. It gathers the evidence around the alert, decides whether it needs action, explains its reasoning, and closes the alerts that do not, so analysts spend their time on the ones that do.

After a beta with early customers, AI Assist is rolling out to all instances in stages.

A New Fluency Interface

Support
Fluency Support

A redesigned Fluency interface is rolling out, site by site. Each site moves to a new address in its own region, and your existing login carries over. Partners can show their own logo and background.

FPL Now Runs JavaScript

Support
Fluency Support

The Fluency Programming Language (FPL) now accepts JavaScript (ES6). Parsers and reports written in JavaScript, including the code AI assistants generate, run in Fluency without being translated by hand.

The update rolls out to all instances the weekend of May 17–18, 2025. Existing FPL code runs unchanged.

Introducing Replay

Support
Fluency Support

Fluency is launching Replay, a scenario-based training and testing platform. Replay plays real, sanitized security telemetry into a Fluency instance, so analysts, and AI, can work a realistic incident from first alert to response in a controlled, repeatable environment.