What's New | December 2025

This release includes:

• 47 New AWS Security Tests
• Link Existing Jira Tickets to Tidal Tasks
• Required Documents in Tidal Control
• Performance & Integration Improvements

For more information and visuals of the updates, check out the What's New section in your Tidal app.

47 New AWS Security Tests

Comprehensive coverage across IAM, KMS, Secrets Manager, and CloudWatch

We've added 47 new AWS tests following AWS Security Hub controls to help you strengthen your cloud security posture.

IAM (20 Tests)

Including:

• Policy security: no full admin privileges, no wildcards, no direct attachments
• Access key management: rotation every 90 days, detection of unused credentials
• MFA enforcement for console users, root account, hardware MFA for root
• Password policies: complexity, expiration, reuse prevention
• Resource tagging for roles, and users
• CloudShell access controls and SSL certificate management

KMS (5 Tests)

Validating:

• IAM restrictions on decryption
• Key rotation enablement
• Deletion prevention and public access controls

Secrets Manager (5 Tests)

Checking:

• Automatic rotation and rotation success validation
• Detection of unused secrets
• Rotation frequency compliance and secret tagging

CloudWatch (17 Tests)

Monitoring and alerting for:

• Critical security events, including unauthorized API calls, IAM policy changes, S3 and CloudTrail changes, and VPC/network modifications
• Alarm actions and log group retention configuration

This update brings you stronger, automated AWS security checks for a safer cloud environment.

Link Existing Jira Tickets to Tidal Tasks

Better integration with your existing workflows

You can now link existing Jira tickets directly to Tidal Tasks and Issues. Simply open a Task or Issue, click the link icon, and enter the Jira ticket ID.

Benefits:

• Connect ongoing work in Jira with compliance activities in Tidal Control
• Avoid creating duplicate Jira issues
• Keep all stakeholders aligned across platforms

Required Documents in Tidal Control

Easier document management for compliance

We've introduced Required Documents, making it simpler to upload, manage, and track recurring compliance evidence such as DPIA forms, audit reports, and ISO 27001 management review minutes.

Key features:

• Versioning and lifecycle management like Policies
• Fast, simple uploads similar to Evidence
• Link each document to controls via corresponding tests for automated compliance checks

Manage Required Documents on the new Documents page, while the Evidence page continues to provide a complete overview of all uploaded files.

Performance & Integration Improvements

Performance improvements

The Controls page now remains responsive even after prolonged use, eliminating browser unresponsiveness.

Fixed: GitHub and Azure app integration redirect

Users are now correctly redirected after completing integration setup.

Fixed: Azure tests

Several Azure tests that previously caused errors have been corrected.

---

As 2025 comes to a close, we want to thank you for your continued partnership. We've made great progress together this year in strengthening compliance, improving workflows, and increasing security automation. Stay tuned for next year, we have big plans in store!

From Team Tidal we wish you pleasant holidays, and a great 2026!

For questions, feel free to reach out on LinkedIn or email. We're here to help.

PS: If you liked this newsletter, you can share it with your colleagues through the sign up link here.