Host Shield for Windows Release Notes

Welcome to the release notes for Sysdig Windows Host Shield.

0.18.0 June 30, 2026

Improved container scanning on containerd nodes so it reliably skips Kubernetes pause/sandbox containers across all containerd runtime variants, including those labeled io.kubernetes.cri.container-type=sandbox.

This release addresses the following security vulnerabilities:

This release addresses the following security vulnerabilities:

You can now define tags directly in the Windows MSI Wizard, both through the UI and via the CLI (for example, TAGS=env:prod,team:backend), making it easier to label and organize your hosts during installation. For more information, see Tags in Windows Host

Fixed a bug where Host Posture sent requests incompatible with on-prem < 7.7.0, preventing Host Posture scans from being scheduled.
Fixed a bug where Host Posture could send duplicated results for the same host, preventing Host Posture evaluation from being performed.

Fixed an issue causing KSPM Analyzer to log the Sysdig backend access key when log level was set to debug.
Fixed a bug which could cause host scanner to use a wrong socket path when connecting to the container runtime.

This release addresses the following security vulnerabilities:

Shield can load the access key from the system environment variable. The access key must be stored in the SYSDIG_HOST_SHIELD_SYSDIG_ENDPOINT__ACCESS_KEY environment variable.

This release addresses the following security vulnerabilities: