🌊 LogTide 1.0.0 is here

[Polliog]

🌊 LogTide 1.0.0 is here

First stable release of the 1.0 line. LogTide is a self-hosted observability + SIEM platform: unified logs, traces and metrics with built-in security detection, and your choice of storage engine (TimescaleDB, ClickHouse or MongoDB).

Highlights

• Tenant data isolation audit: every backend data-access path hardened, with an isolation test suite and CI tripwires.
• Capability + metering system: per-organization usage measurement, feature gates and enforceable limits/quotas (ingestion, spans, storage). OSS defaults stay unlimited.
• Lifecycle hooks: typed before-/after- extension points for ingestion, query, alert evaluation and webhook dispatch, configurable without forking.
• Generic outbound webhook delivery: HMAC signing, retry with backoff, a dead-letter queue and centralized SSRF protection, with a unified event envelope.
• Audit log primitive: typed actions, actors and outcomes with per-org retention.
• SIEM: Sigma rules engine, MITRE ATT&CK mapping and incident workflows.
• PII masking is fail-closed at ingestion, and two waves of dependency advisories were resolved before the cut.

Links

• 📦 Release notes: https://github.com/logtide-dev/logtide/releases/tag/v1.0.0
• 📝 Full changelog: https://github.com/logtide-dev/logtide/blob/main/CHANGELOG.md
• 🚀 Get started: https://logtide.dev

Notes

• Scheduled email digest reports are merged as groundwork but disabled in this release, pending completion ([Feature] Scheduled digest reports via email #154).

Thanks to everyone who tested the beta and reported issues. Feedback, questions and bug reports are very welcome in the comments. 🙌