What's new

• Custom Vitals Write your own compliance checks in the Logic Engine. They appear next to the built-in Vitals with the same pass and fail counts and drill-through to failing devices, and each failing device raises an alert just like a built-in Vital. The AI Composer understands Custom Vitals, so you can describe the check you want and refine the flow it builds. Available on Protect.
• AI Composer in the Logic Engine Describe the rule you want in plain English, such as “tag devices as Encrypted if Jamf or Intune reports encryption enabled”, and Composer builds the flow for you. It works wherever you use the Logic Engine (tags, dynamic columns and Custom Vitals), so you get working logic in minutes without needing to know which node or operator to use. Review it, tweak it by hand if you like, and publish.
• Tracked Views Tracking which devices enter and leave a saved view has moved out of Action Center into its own feature. Select filters in Devices (or pick an existing saved view) and click Track View in the toolbar at the bottom of the screen. You no longer need an Action to do this.
• Action Center redesign A new node-based editor where you drag, drop and connect nodes to build flows. It currently supports HTTP and Send Email nodes, with more to follow.
• Row grouping in Device Inventory Group devices under a column you choose, such as operating system, with collapsible headers and counts. Set or clear the grouping from the column menu.
• Self-service SSO Set up single sign-on yourself from the SSO settings page: Azure AD (automatic or manual SAML), Okta or CyberArk. Follow the guided steps, pick a provisioning mode and set the default role for first-time users. Disconnecting cleans up the resources SSO created.
• SCIM 2.0 provisioning Your identity provider creates, updates and deactivates users directly. Deactivated users are disabled, not deleted, so their audit history stays intact. SCIM uses its own bearer token, and provisioned users can be mapped to roles and teams. Not available for CyberArk.
• Command Menu Press ⌘ K (or Ctrl K) from anywhere to jump to any page, find a device or user, or switch theme without clicking through menus.
• Higher API rate limit The public API limit rises from 10 to 50 requests per minute.
• Other improvements. Improved Systems view (including a fix for the error pill popover), a rebuilt, faster query bar that remembers your recent queries and has more reliable DQL autocomplete, proper light-mode dashboard colours, and knowledge base links that point to this documentation site.

​

Major features

• Labs: AI-powered security workspace. The full launch of Labs. Build dashboards, workflows and complete applications that automate actions and transform your data, in a secure environment tailored to your organisation.
• Customer feedback portal for Labs. Share suggestions and report issues directly from within Labs.
• New documentation platform. A faster, more searchable documentation site, linked from inside the platform.
• AI and Code Transform nodes. Two new Logic Engine node types: AI Transform for natural-language data transformation, and Code Transform for custom TypeScript logic.
• Performance improvements. Faster load times, more responsive interactions and lower memory use, especially in large environments.

​

Minor features

• Date format and timezone localisation across the platform. See Settings → Timezone.
• Requirement Strategy for Vitals. Set a Vital to require, for example, only Deployed, for more precise compliance and coverage reporting.
• Logic Engine columns and Scheduled Reporting for User Inventory and Mobile Inventory.
• Export and Scheduled Reporting for Software Inventory.
• Fine-grained scheduled report timing, including specific days and times.
• Improved EC2 virtual machine matching, with fewer false positives when correlating cloud and on-premise devices.
• One automation per device execution mode in Action Center, preventing duplicate remediation.
• Enriched public IP data, including geolocation, ISP and threat intelligence.
• Mobile devices in Studio reporting apps.
• Edit Action definitions by archiving and re-creating them.
• Improved integration search by alternative connector names and aliases.
• Delete device notes, with a full audit trail.
• Clickable hostnames on the Issues page.
• Separated column editor views for Priority List and Logic Engine columns.
• Persisted condition node fields in the Logic Engine when switching between them.
• Download links for large scheduled reports that exceed size limits.
• “Run Now” reports now appear in a scheduled report’s history.
• Stealth devices in Device Explorer. See Stealth Devices.
• Immediate deactivation of virtual machines when they’re terminated.
• Concurrent editing prevention for Logic Engine flows.

​

Major features

• Device Explorer. A new way to visualise your environment, with real-time integration status, a global view with office locations, per-device detail, SaaS cloud application usage and stealth device detection. See Device Explorer.
• Action Center. A new area for driving remediation: track, manage, automate and resolve issues using workflow triggers, ticket creation and Teams or Slack notifications. See Action Center.
• Advanced dashboards, with Action Center reporting, long-term trends and a Focus Mode for reporting on Deployment or Function status alone.
• Logic Engine. Create dynamic tags and dynamic columns from any logical rules, transforming data rather than just repeating it from underlying systems. See Tags.
• Labs (preview). Create dashboards, workflows and applications that automate actions and transform your data through logic flows.
• Studio (new). A foundation for building dashboards, reports and end-to-end applications on top of your data.
• Enhanced Logic Engine (new). Compare values, set column types for better filtering and sorting, add multiple values to one condition, and test flows in Debug Mode before publishing.

​

Minor features

• Modernised UI, with refreshed visuals and faster device inventory performance.
• Redesigned Vitals, integrated with the device inventory so insight, configuration and reporting live in one view.
• Location Editor for named public and private locations using IP CIDR ranges, with geographic coordinates. See Settings → IP Locations.
• Enhanced device context, showing the cloud applications being logged into from each device.
• Platform improvements to the User Inventory, Software Inventory and Issues pages.
• Connection error details showing authentication and permission problems when an integration fails.
• New user tutorial that guides new users through the platform. Open it from your user menu → Help for this page on pages that have one, such as Devices.
• Stability enhancements: numerous bug fixes and performance improvements.