Status of this post: COD 3.6. Later versions may differ. For the current feature status see the roadmap.
Passkeepr: Since COD 3.8.0, Stronghold is called Passkeepr. With the update to COD 3.8, every Passkeepr database starts empty. Accounts, vaults, entries and Emergency Kits from Stronghold are not carried over.
COD 3.6 is our biggest release yet. We're bringing two new modules at once, plus a hefty expansion of asset management.
If you want to manage secrets centrally and securely, or need clean network access control via TACACS+, you now get both right inside COD.
New: Stronghold, the Zero-Knowledge Vault
Stronghold is an end-to-end encrypted password and secrets vault. And it does it right: the server stores ciphertext only, and decryption happens solely on your end. Zero-knowledge means no one but you can see the contents, not even the operator.
- Browser Extension: Device pairing and in-page autofill, so credentials land exactly where you need them.
- Lock the Vault on Page Reload: an admin toggle for everyone who wants to play it safe.
Stronghold runs behind the backend proxy and is thereby cleanly embedded into COD's permission logic.
New: TACACS+, Network AAA Under Control
The second new module manages your in-house TACACS+ server (RFC 8907) directly from COD:
- A dashboard with health, coverage, activity, accounting, and rules.
- Users and user groups, clients (NAS devices) and client groups.
- Access Control: Authorization rules, roles, and command sets, including a role simulator that evaluates a combination of user, client, and command against the real policy.
- Accounting: Session recordings with a live-log toggle.
All access runs through the secured backend proxy to the respective site. The frontend never talks to the management API directly.
Asset Management, Rethought
- Asset Workspace: Every asset now has its own detail page with tabs: Overview (edit all fields directly), Monitoring (the full Zabbix host card), Placement (rack and rack unit), Connectivity (network interfaces per asset), and more.
- Rooms, Racks, and Layer 1 Cabling: Buildings, floors, and rooms are now assessable assets in a tree. With drag and drop, you nest rooms, place assets, and model the physical cabling.
- Contacts and Contracts: Contacts and contracts now belong in the inventory, too.
And on the Network Side
The Layer 3 topology now groups HA and cluster pairings neatly together.
Small Comforts, Big Impact
Table headers stay visible while scrolling, firewall selection fields have a search, and each user can stay signed in for as long as COD is open.
Upgrade
3.6 ships an in-place upgrade path (scripts/upgrade-prod.sh). The release bundle includes Stronghold with its browser extensions and TACACS+ right out of the box. Details on databases, ports, and configuration are in the generated MIGRATION.
Want a Live Demo?
Whether it's Stronghold, TACACS+, or the new asset management: get in touch, and we'd be happy to show you COD 3.6 in action.
Module overview: extocode.com
extocode GmbH · Central Operations Dashboard