COD 3.6 is our biggest release yet. We're bringing two new modules at once, plus a hefty expansion of asset management.
If you want to manage secrets centrally and securely, or need clean network access control via TACACS+, you now get both right inside COD.
New: Stronghold – the Zero-Knowledge Vault
Stronghold is an end-to-end encrypted password and secrets vault. And it does it right: the server stores ciphertext only, and decryption happens solely on your end. Zero-knowledge means no one but you can see the contents, not even the operator.
- Browser Extension: Device pairing and in-page autofill, so credentials land exactly where you need them.
- Lock the Vault on Page Reload: an admin toggle for everyone who wants to play it safe.
Stronghold runs behind the backend proxy and is thereby cleanly embedded into COD's permission logic.
New: TACACS+ – Network AAA Under Control
The second new module manages your in-house TACACS+ server (RFC 8907) directly from COD:
- A dashboard with health, coverage, activity, accounting, and rules.
- Users and user groups, clients (NAS devices) and client groups.
- Access Control: Authorization rules, roles, and command sets, including a role simulator that evaluates a combination of user, client, and command against the real policy.
- Accounting: Session recordings with a live-log toggle.
All access runs through the secured backend proxy to the respective site. The frontend never talks to the management API directly.
Asset Management, Rethought
- Asset Workspace: Every asset now has its own detail page with tabs: Overview (edit all fields directly), Monitoring (the full Zabbix host card), Placement (rack and rack unit), Connectivity (network interfaces per asset), and more.
- Rooms, Racks, and Layer 1 Cabling: Buildings, floors, and rooms are now assessable assets in a tree. With drag and drop, you nest rooms, place assets, and model the physical cabling.
- Contacts and Contracts: Contacts and contracts now belong in the inventory, too.
And on the Network Side
The Layer 3 topology now groups HA and cluster pairings neatly together.
Small Comforts, Big Impact
Table headers stay visible while scrolling, firewall selection fields have a search, and each user can stay signed in for as long as COD is open.
Upgrade
3.6 ships an in-place upgrade path (scripts/upgrade-prod.sh). The release bundle includes Stronghold with its browser extensions and TACACS+ right out of the box. Details on databases, ports, and configuration are in the generated MIGRATION.
Want a Live Demo?
Whether it's Stronghold, TACACS+, or the new asset management: get in touch, and we'd be happy to show you COD 3.6 in action.
Module overview: extoco.de
extocode GmbH · Central Operations Dashboard