diff --git a/CHANGELOG.md b/CHANGELOG.md
index d6ba5b9..1f0a371 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,46 @@
+## 3.3.3 (May 4, 2021)
+- New Features
+  - DHCP: Update utilization stats now include gateway/broadcast IP addresses
+  - DHCP: Search address by prefix includes target’s parent
+  - DHCP: DHCP now stores DUID and client ID in lease object
+  - DNS: Allow the use of multiple XFR containers
+  - DNS: Set up batch transfers for zone updates
+  - DNS: Display zone serial number
+  - DNS: Portal now shows an alert re. hijacking risk when removing a domain
+  - DNS: Portal now expose the SOA name server field
+  - IPAM: Display gateway and broadcast addresses in IPAM
+  - System: Added a database backup integrity check
+  - System: Improved debug log file collection 
+  - System: DDI now supports SSO - MVP
+  - System: Email address and username can have special characters
+
+- What’s fixed?
+  - DNS: Fixed issue whereby query limits are being ignored
+  - DNS: Fixed issue where you cannot add a reverse zone using the portal
+  - DNS: DDNSD updates become unhealthy after pruner runs
+  - DNS: Primary zone can not be configured for zone transfers
+  - DNS: Edit filter chain after creating a A record results in blank page
+  - DHCP: NS1 DDNS, zone handle used instead of domain when zone is in a view
+  - DHCP: Fixed issue where the list search doesn’t stop
+  - DHCP: Scopes option box shows the wrong ScopeGroup name
+  - DHCP: Allow for creation of an address as a gateway
+  - DHCP: Cannot set lease duration option in the scope UI
+  - DHCP: Fixed issue which resulted in a blank page on reservation all lease tab
+  - DHCP: Improved IPAM address insert performance
+  - DHCP: Lease time and related renew/rebind timers have API/UI limitation and are incorrectly stored in KEA
+  - Security: Fixed OpenSSL Vulnerability - updates for LibSSL and OpenSSL 
+  - System: Updated health check for minimum disk 
+  - System: Added SAML endpoints
+  - System: Updated disk containers health check message
+  - System: Fixed issue whereby DIST container would become healthy after failing snapshot
+  - System: Added default values for Core, Data, Dist service definitions in the bootstrap wizard
+  - System: Fixed issue whereby you couldn’t get to the monitor container from the service types panel
+  - System: The services types health check page initially shows incorrect data
+  - System: The UI is not updating even though it is being polled
+  - System: Request being sent to the wrong definition ID is not triggering an error
+  - System: Wrong container is displayed after configuring multiple core containers
+  - System: Added DIST container rebalance timer
+
 ## 3.2.6 (March 19, 2021)
 - New Features
   - CORE: Automate debug collection from a DDI install
diff --git a/docker-compose/README.md b/docker-compose/README.md
index 6fe356d..4e666de 100644
--- a/docker-compose/README.md
+++ b/docker-compose/README.md
@@ -40,7 +40,7 @@ Use to start all container images on a single host: `data`, `dns`, `core`, `xfr`
 #### For example:
 
 ```shell
-$sudo TAG=3.2.6 POP_ID=mypop SERVER_ID=myserver docker-compose -p myproject -f docker-compose.yml up -d
+$sudo TAG=3.3.3 POP_ID=mypop SERVER_ID=myserver docker-compose -p myproject -f docker-compose.yml up -d
 ```
 
 ---
@@ -78,14 +78,14 @@ Used to start control services on a single host: `data`, `core`, `xfr`.
 #### For example, starting a control host with primary data:
 
 ```shell
-$sudo TAG=3.2.6 POP_ID=dc1 SERVER_ID=host1 PRIMARY=true DATA_CONTAINER_NAME=data1 DATA_PEERS=data2 DATA_HOSTS=data1,data2 \
+$sudo TAG=3.3.3 POP_ID=dc1 SERVER_ID=host1 PRIMARY=true DATA_CONTAINER_NAME=data1 DATA_PEERS=data2 DATA_HOSTS=data1,data2 \
 docker-compose -p myproject -f control-compose.yml up -d
 ```
 
 #### For example, starting a control host with replica data:
 
 ```shell
-$sudo TAG=3.2.6 POP_ID=dc1 SERVER_ID=host2 DATA_CONTAINER_NAME=data2 DATA_PEERS=data1 DATA_HOSTS=data1,data2 \
+$sudo TAG=3.3.3 POP_ID=dc1 SERVER_ID=host2 DATA_CONTAINER_NAME=data2 DATA_PEERS=data1 DATA_HOSTS=data1,data2 \
 docker-compose -p myproject -f control-compose.yml up -d
 ```
 
@@ -109,5 +109,5 @@ Used to start edge services on a single host: `dns`, `dhcp` and `dist` (distribu
 #### For example:
 
 ```shell
-$sudo TAG=3.2.6 POP_ID=dc2 SERVER_ID=host3 docker-compose -p myproject -f edge-compose.yml up -d
+$sudo TAG=3.3.3 POP_ID=dc2 SERVER_ID=host3 docker-compose -p myproject -f edge-compose.yml up -d
 ```
diff --git a/docker-compose/control-compose.yml b/docker-compose/control-compose.yml
index ee6af6a..82265c7 100644
--- a/docker-compose/control-compose.yml
+++ b/docker-compose/control-compose.yml
@@ -3,7 +3,7 @@ version: '3.4'
 services:
   data:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${DATA_CONTAINER_NAME:-data}
-    image: ns1inc/privatedns_data:${TAG:-3.2.6}
+    image: ns1inc/privatedns_data:${TAG:-3.3.3}
     logging:
       driver: "json-file"
       options:
@@ -61,7 +61,7 @@ services:
       --server_id            ${SERVER_ID:-myserver}
   core:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${CORE_CONTAINER_NAME:-core}
-    image: ns1inc/privatedns_core:${TAG:-3.2.6}
+    image: ns1inc/privatedns_core:${TAG:-3.3.3}
     logging:
       driver: "json-file"
       options:
@@ -100,7 +100,7 @@ services:
       --nameservers          ${NAMESERVERS:-ns1.mycompany.net}
   xfr:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${XFR_CONTAINER_NAME:-xfr}
-    image: ns1inc/privatedns_xfr:${TAG:-3.2.6}
+    image: ns1inc/privatedns_xfr:${TAG:-3.3.3}
     logging:
       driver: "json-file"
       options:
diff --git a/docker-compose/docker-compose.yml b/docker-compose/docker-compose.yml
index 330f5d9..2946afc 100644
--- a/docker-compose/docker-compose.yml
+++ b/docker-compose/docker-compose.yml
@@ -3,7 +3,7 @@ version: '3.4'
 services:
   data:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${DATA_CONTAINER_NAME:-data}
-    image: ns1inc/privatedns_data:${TAG:-3.2.6}
+    image: ns1inc/privatedns_data:${TAG:-3.3.3}
     logging:
       driver: "json-file"
       options:
@@ -49,7 +49,7 @@ services:
       --server_id            ${SERVER_ID:-myserver}
   core:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${CORE_CONTAINER_NAME:-core}
-    image: ns1inc/privatedns_core:${TAG:-3.2.6}
+    image: ns1inc/privatedns_core:${TAG:-3.3.3}
     logging:
       driver: "json-file"
       options:
@@ -88,7 +88,7 @@ services:
       --nameservers          ${NAMESERVERS:-ns1.mycompany.net}
   xfr:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${XFR_CONTAINER_NAME:-xfr}
-    image: ns1inc/privatedns_xfr:${TAG:-3.2.6}
+    image: ns1inc/privatedns_xfr:${TAG:-3.3.3}
     logging:
       driver: "json-file"
       options:
@@ -120,7 +120,7 @@ services:
       --core_host           ${CORE_HOSTS:-core}
   dns:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${DNS_CONTAINER_NAME:-dns}
-    image: ns1inc/privatedns_dns:${TAG:-3.2.6}
+    image: ns1inc/privatedns_dns:${TAG:-3.3.3}
     logging:
       driver: "json-file"
       options:
@@ -154,7 +154,7 @@ services:
       --num_trex_procs      2
   dhcp:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${DHCP_CONTAINER_NAME:-dhcp}
-    image: ns1inc/privatedns_dhcp:${TAG:-3.2.6}
+    image: ns1inc/privatedns_dhcp:${TAG:-3.3.3}
     logging:
       driver: "json-file"
       options:
@@ -194,7 +194,7 @@ services:
       --service_def_id      2
   monitor:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${MONITOR_CONTAINER_NAME:-monitor}
-    image: ns1inc/privatedns_monitor:${TAG:-3.2.6}
+    image: ns1inc/privatedns_monitor:${TAG:-3.3.3}
     logging:
       driver: "json-file"
       options:
diff --git a/docker-compose/edge-compose.yml b/docker-compose/edge-compose.yml
index dad9bea..afc055a 100644
--- a/docker-compose/edge-compose.yml
+++ b/docker-compose/edge-compose.yml
@@ -3,7 +3,7 @@ version: '3.4'
 services:
   dns:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${DNS_CONTAINER_NAME:-dns}
-    image: ns1inc/privatedns_dns:${TAG:-3.2.6}
+    image: ns1inc/privatedns_dns:${TAG:-3.3.3}
     logging:
       driver: "json-file"
       options:
@@ -37,7 +37,7 @@ services:
       --num_trex_procs      4
   dhcp:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${DHCP_CONTAINER_NAME:-dhcp}
-    image: ns1inc/privatedns_dhcp:${TAG:-3.2.6}
+    image: ns1inc/privatedns_dhcp:${TAG:-3.3.3}
     logging:
       driver: "json-file"
       options:
@@ -77,7 +77,7 @@ services:
       --service_def_id      2
   dist:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${DIST_CONTAINER_NAME:-dist}
-    image: ns1inc/privatedns_dist:${TAG:-3.2.6}
+    image: ns1inc/privatedns_dist:${TAG:-3.3.3}
     logging:
       driver: "json-file"
       options:
@@ -112,7 +112,7 @@ services:
       --core_host            ${CORE_HOSTS}
   monitor:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${MONITOR_CONTAINER_NAME:-monitor}
-    image: ns1inc/privatedns_monitor:${TAG:-3.2.6}
+    image: ns1inc/privatedns_monitor:${TAG:-3.3.3}
     logging:
       driver: "json-file"
       options:
diff --git a/terraform/modules/core/variables.tf b/terraform/modules/core/variables.tf
index 09078ea..41b4890 100644
--- a/terraform/modules/core/variables.tf
+++ b/terraform/modules/core/variables.tf
@@ -1,5 +1,5 @@
 variable "docker_image_tag" {
-  default     = "3.2.6"
+  default     = "3.3.3"
   description = "The image tag of the Docker image. Defaults to the latest GA version number."
 }
 
diff --git a/terraform/modules/data/variables.tf b/terraform/modules/data/variables.tf
index c624f48..6a9d684 100644
--- a/terraform/modules/data/variables.tf
+++ b/terraform/modules/data/variables.tf
@@ -1,5 +1,5 @@
 variable "docker_image_tag" {
-  default     = "3.2.6"
+  default     = "3.3.3"
   description = "The image tag of the Docker image. Defaults to the latest GA version number."
 }
 
diff --git a/terraform/modules/dhcp/variables.tf b/terraform/modules/dhcp/variables.tf
index 7728863..df520c4 100644
--- a/terraform/modules/dhcp/variables.tf
+++ b/terraform/modules/dhcp/variables.tf
@@ -1,5 +1,5 @@
 variable "docker_image_tag" {
-  default     = "3.2.6"
+  default     = "3.3.3"
   description = "The image tag of the Docker image. Defaults to the latest GA version number."
 }
 
diff --git a/terraform/modules/dist/variables.tf b/terraform/modules/dist/variables.tf
index 851dcaf..bcdbe08 100644
--- a/terraform/modules/dist/variables.tf
+++ b/terraform/modules/dist/variables.tf
@@ -1,5 +1,5 @@
 variable "docker_image_tag" {
-  default     = "3.2.6"
+  default     = "3.3.3"
   description = "The image tag of the Docker image. Defaults to the latest GA version number."
 }
 
diff --git a/terraform/modules/dns/variables.tf b/terraform/modules/dns/variables.tf
index 3557c60..87a56f3 100644
--- a/terraform/modules/dns/variables.tf
+++ b/terraform/modules/dns/variables.tf
@@ -1,5 +1,5 @@
 variable "docker_image_tag" {
-  default     = "3.2.6"
+  default     = "3.3.3"
   description = "The image tag of the Docker image. Defaults to the latest GA version number."
 }
 
diff --git a/terraform/modules/monitor/variables.tf b/terraform/modules/monitor/variables.tf
index 258a25c..c4f374c 100644
--- a/terraform/modules/monitor/variables.tf
+++ b/terraform/modules/monitor/variables.tf
@@ -1,5 +1,5 @@
 variable "docker_image_tag" {
-  default     = "3.2.6"
+  default     = "3.3.3"
   description = "The image tag of the Docker image. Defaults to the latest GA version number."
 }
 
diff --git a/terraform/modules/xfr/variables.tf b/terraform/modules/xfr/variables.tf
index 59fb0a9..5672f27 100644
--- a/terraform/modules/xfr/variables.tf
+++ b/terraform/modules/xfr/variables.tf
@@ -1,5 +1,5 @@
 variable "docker_image_tag" {
-  default     = "3.2.6"
+  default     = "3.3.3"
   description = "The image tag of the Docker image. Defaults to the latest GA version number."
 }