2026
Choose whether
env0.yml files in your repositories run: allow them, run a pull request’s changes only for verified VCS users, or block them. Custom flows now have their own permission, MANAGE_CUSTOM_FLOWS. Terraform users must add it to env0_custom_role resources that can edit project or organization settings.Read moreLimit an organization or personal API key to its own list of IP addresses, on top of your organization’s IP allowlist. Set the list when you create a key, or change it later from the key list or the API.Read more
Switch existing Azure DevOps connections to Microsoft Entra ID before Microsoft removes Azure DevOps OAuth. Connections that need it are marked in Organization Settings > VCS, and templates keep working after the switch. New connections use Microsoft Entra ID by default.Read more
SCIM provisioning is generally available. Pick a provisioning mode for your organization, push Okta or Microsoft Entra ID groups to env zero teams, rotate the SCIM token with a 24 hour overlap, and reconcile your identity provider against env zero users and teams.Read more
The Projects page ranks exact and prefix name matches first. Cmd+K shows environment search errors and no-match results separately. Project environment list filters stay in the URL, and Credentials, Git Tokens, and Teams can be searched.Read more
Tag Your Environments
Attach key-value tags to an environment, for exampleteam=payments, then filter the Explorer table by tag, search the project environments list by tag, and add or remove tags across many environments from the bulk operations wizard.Read moreV2 OIDC Tokens: Per-Cloud-Provider Audiences
OIDC credentials for AWS, Azure, GCP, and Vault can now use a provider-specific token audience instead of a single shared audience across all providers. This prevents a token issued for one provider from being replayed against another.Read moreSay Hello to the New env zero CLI
The env zero CLI has been rebuilt as a single binary, replacing the old npm-based tool. This release adds project management commands and read-only sign-in, and the CLI remains built for AI agents withenv0 skill install and env0 context.Read moreIP Allowlisting for Logins, API Keys, and the Agent API
env zero now supports an organization-level IP allowlist that restricts logins and unattended access to a set of approved source IP addresses, covering UI logins, API keys, and the Agent API.Read moreSelf-Service Agent: Create and Manage Agent Pools Without Contacting Support
Create new self-hosted agent pools directly from Organization Settings. Generate agents and start deploying without opening a support ticket.Read moreTerraform Cloud Migration Wizard
Migrate Terraform Cloud (TFC) or Terraform Enterprise (TFE) workspaces to env zero using a guided wizard that handles workspace discovery, variable migration, state transfer, and controlled cutover - all from the env zero UI.Read moreSCIM Provisioning: Automate User Lifecycle Management
env zero now supports SCIM 2.0, enabling your identity provider to automatically provision and deprovision users. Access is granted or revoked as soon as changes happen in your IdP - no manual user management required.Read moreSelf-Service SSO: Speed Up Authentication and Stay in Control
Configure Single Sign-On directly from Organization Settings. Set up Azure AD or SAML 2.0 authentication on your own schedule with full control over your enterprise authentication setup.Key benefits:- Immediate setup - configure SSO during onboarding or anytime after
- Full control - manage domain mappings, role assignments, and settings on your schedule
- Enterprise ready - centralize user access and enforce your org’s authentication policies
A Freshly Updated Projects Page: More Useful, More Powerful, and Easier to Navigate
We have rolled out a refreshed Projects page with improvements designed to make it easier to understand, organize, and act on your projects at a glance.Read more2025
Code Optimizer beta helps you improve infrastructure code quality and safety by detecting issues early.
Now Available (Beta): Code Optimizer Helps You Improve Infrastructure Code Quality and Safety
Code Optimizer is a new beta feature in env zero that scans your Infrastructure as Code and helps you catch issues early, before they cause problems in production. It detects risks, flags inconsistencies, and suggests code-level improvements you can review and apply.Read moreReady-to-use policies for instant governance and the new env zero MCP Server for fast, interactive infrastructure actions from your IDE or AI agent.