Two recent headlines carried the same lesson:  

•  A cyberattack forced Jaguar Land Rover to halt production that rippled pain across a vast supplier network, with economic impact now estimated between £1.9–2.5 billion.
 
• Attackers also abused OAuth tokens tied to Salesforce integrations, pushing careful teams to rotate credentials, search logs, and brief stakeholders on short notice.  

Both incidents point to the same need–when something breaks, whether in your stack or a partner’s, your team needs a safe workspace, clear evidence, and minimal friction. That’s exactly where Replica delivers.  

What’s new in 4.3

• Audit Evidence on Demand 

Replica has entered its 90-day SOC 2 Type 2 audit period. When you face vendor questions or due-diligence reviews, having stronger, finer-grained API auditing and easy CSV exports means you can show “who did what, when,” without a fire drill. The practical payoff is faster answers during access reviews and incident briefings. We will notify customers when certification is complete.
 

Why it matters: After the OAuth token spree, many teams needed to trace API activity and rotate credentials fast. Fine-grained audit trails and quick CSV exports eanble you to answer tough questions quickly instead of reconstructing them later. 

• Faster Workspace Launches 

Replica’s core objects (Virtual Environments, Enclaves, Egress, and the new Quick Create) now live together in one clear console, with cleaner notifications and less clicking. This design simplifies and speeds the creation of a clean, isolated environment, so investigations, sensitive research, or risky tool tests don’t stall when time is critical. 

Why it matters: During an incident, you shouldn’t be waiting on tickets or juggling multiple tools just to get started. “Quick Create” shortens time-to-isolation, so you can validate exposure or reproduce suspicious behavior without touching production. 

• Governance Made Simple 

List views for Virtual Environments and Users are now exportable to CSV, and Users now show Last Login. A pinned Actions tab keeps common tasks close at hand, so changes happen faster, and with fewer mistakes. The practical payoff is smoother quarterly reviews, quicker offboarding, and cleaner evidence packs when someone asks for proof. You stay in the console instead of wrangling spreadsheets. 

Why it matters: When a partner incident or audit request lands, teams need clean lists and last-activity signals right away. CSV exports and Last Login let you sweep access in minutes, while pinned Actions reduces clicks during bulk deprovisioning and entitlements checks. 

• More Platform Enhancements 

  • Troubleshooter upgrade: More robust host checks help users avoid drift and performance potholes before they slow you down. 
  • Fine-grained API event auditing: Detailed logs with clear actors and timestamps speed traceability, simplify access reviews, and yield audit-ready records. 
  • Elasticsearch log monitor added: Improves the health, hygiene, and resilience of the logging pipeline you rely on in stressful moments. Clearer log visibility helps teams triage faster. 

Putting These Capabilities to Work 

Picture this: a partner disclosure lands in your inbox. You open Replica and, in a few clicks, use Quick Create to bring up a clean workspace that stays off production. You export a CSV of Users with Last Login for a fast entitlement sweep, then review fine-grained API events to confirm nothing sensitive moved during the window. Elastic logging gives you the full trail, so you correlate quickly, rotate what matters, and brief leadership with specifics. The result is less scramble and more signal, with an evidence pack you can share and the rest of your day back. 

Release highlights recap 

• Security and compliance: SOC 2 Type 2 audit period underway, plus finer-grained API audit events. 

• UI and UX: Unified console, clearer notifications, Quick Create. 

• Platform: Ubuntu 25.10 images, upgraded Troubleshooter, Elastic log monitor.  
• Administration: CSV exports for Virtual Environments and Users, Last Login surfaced, pinned Actions. 

Cut friction in reviews and investigations while keeping evidence close at hand. 

Learn more about instant isolation on the Replica Secure Environments Platform or book a demo to see how it works.