Security Updates

Improved

• Runs on a current, supported Electron and Chromium — Server Compass moves to Electron 44 (Chromium 152, Node.js 24), so the app picks up the latest browser and runtime security fixes

• macOS 13 Ventura or later is now required — the new Electron release no longer supports macOS 12 Monterey, and Macs on older versions are no longer offered this update

• Locked-down app launch — the installed app can no longer be started as a plain Node.js runtime, and debugger flags or NODE_OPTIONS passed to it are ignored

• Tamper checks on the app's own code — Server Compass only loads code from its packaged app bundle, and on macOS that bundle is integrity-checked when it starts

• Tighter macOS permissions — the app no longer honors dynamic-library environment variables injected into its process

• Safer handling of compressed network data — remote access and background requests to your servers, tunnels and synced devices now decline Brotli-compressed content; gzip and deflate keep working

• Patched security issues in bundled components — updated the libraries behind remote access, the MCP server for AI tools, update checks and app navigation, closing known denial-of-service, address-spoofing and URL-parsing issues