Change Log

SaaS discovery:

• SaaS App Discovery now shows the AI coding assistants and agent tools found on your managed Windows computers, the folders they were given access to, and when they were last active, and the computer page has a new AI agents tab
• New Agentic AI, Browser extensions and Browser notifications reports in the Devices menu, with filters by computer, extension, AI agent, website and text. Browser notifications lists the websites each person has allowed or blocked to send notifications in Chrome, Edge and Brave
• You now get a medium-priority notification when a new AI agent, browser extension or allowed browser-notification website appears on a computer after its first scan.

Remote support:

• Remote Policy has a new minimum extension version setting, so your organization can require everyone to update the browser extension
• The browser extension and the Lavawall Viewer stop working for an organization that has been deactivated

Computers:

• New built-in scripts update Windows computers for the 2026 time zone changes in British Columbia, Alberta, Manitoba and the Northwest Territories, and only change computers in those places. See the step-by-step guide

Security:

• The browser extension now follows your organization’s sign-in time limits
• Deleted Microsoft 365 users are now removed after your “Security history kept” period when that is shorter than two years

Remote support:

• Launch the new Lavawall Viewer, a native Windows remote support app, directly from the console
• One-click pairing and passkey sign-in for the viewer
• The viewer keeps itself up to date automatically

Computers:

• A computer’s hardware details now show its TPM, including whether it matches a FIPS 140-3 validated module listing, with a link to the certificate

Accessibility:

• The country choice in the Billing dialog now has a label, and the link that opens it is a proper button

Phishing Reporter:

• Phishing analysis now takes Microsoft’s own verdict on a message into account, so a message Microsoft calls phishing is no longer shown as low risk, including in Analyze .eml
• Impersonation checks are better at recognising a colleague’s name when it appears on a message from an outside address

Menu:

• New Training section in the side menu with Training, Training Programs and Phishing Simulations; Resilience now follows it
• Remote Access Policy is now in the You section of the menu for people with access

Billing:

• You can now choose whether your card and billing are in Canadian or US dollars
• Customers in the United States are billed in US dollars and everyone else in Canadian dollars, unless you choose otherwise
• Your Billing page now shows your currency and billing period

Training:

• Training emails now name a training contact for questions. Set it in Settings; managed organizations can use their provider’s contact

Browser extension:

• With a locked vault, the field icon now goes straight to the passphrase prompt
• Saving a login from a password-only step now keeps the username from the previous step, so two-step sign-ins continue automatically
• The extension window no longer opens blank when the extension is slow to answer; it retries and then offers Retry

Activity log:

• Every remote shell entry now offers the Commands button to see what was typed
• “Script executed” entries now list the computers the script ran on

Billing:

• If your account is set to pay by card but no card is on file, or you have chosen a plan but not how you will pay, administrators are taken to Billing to finish setting up payment

Accessibility:

• Screen readers now announce the input priority when it changes during remote support
• The text-message code box on the Billing page now has a label
• Country flags no longer repeat the country name for screen readers

Phishing simulations:

• Importing a real phishing email as a simulation template now works with messages from every common email program, including Outlook, Apple Mail and marketing senders whose emails are built from several layered parts; these messages were previously reported as unreadable
• Accented and non-English text and embedded images in those emails are kept exactly as received
• On the Import Email tab, the Available to choice now loads correctly when you open that tab directly, instead of showing an empty menu
• New simulation template categories: Consumer Services, Christmas, Accounting and Targeting IT

Billing:

• When adding a credit card, your billing phone number and address are now entered right on the card option and are required before the card is added, the same as for other payment methods

Compliance (GRC):

• New state compliance packs for New York, New Jersey, Illinois, California, Texas and Pennsylvania: one framework per state, with tiers for general privacy, insurance, finance, health, transportation and public sector, plus the state-specific federal-funded programs where the state adds rules
• New standalone frameworks for the largest state rules: the New York SHIELD Act, the New Jersey Data Privacy Act, Illinois BIPA, the California Privacy Protection Agency regulations, the Texas Data Privacy and Security Act and Texas Responsible AI Governance Act, and the Pennsylvania Breach of Personal Information Notification Act
• Each pack comes with questionnaires, policy and notice templates, and draft French descriptions; items that are not yet in force or not yet confirmed from the official text say so in the content
• The Compliance Wizard now recommends the matching state frameworks when you operate in one of these states
• New compliance packs for the rest of the picture: US state consumer privacy laws, state AI laws, breach notification, biometric, consumer health data and insurance data security rules; Canadian federal and provincial AI rules; provincial health and public-sector privacy laws for every province and territory; Canadian accessibility laws; anti-spam, do-not-call, CAN-SPAM and TCPA rules; and children's online safety, FERPA and CIPA. Laws that are not yet in force say so
• Each new pack comes with questionnaires, policy templates, a staff training course, and French draft text for review
• The Compliance Wizard recommends the new frameworks by location, industry and AI use
• New pages on lavawall.com list the compliance frameworks and training for each country, province, territory and state

Training:

• New privacy and security courses for each of the six states, with shorter modules for health, finance and insurance, public sector and transportation, each written to that state's law and marked as general information, not legal advice
• The Training Program wizard now lists New York, New Jersey, Illinois, California, Texas and Pennsylvania as regions, suggests the matching state requirements, and picks the state courses for your program
• State and province courses now show the country flag and their own state or province flag, and the region filter on the course list can drill down from a country to individual states, provinces and territories
• The Compliance Wizard now lets you pick any Canadian province or territory and any US state or the District of Columbia as an operating location

Phishing simulations:

• Importing a real phishing email as a simulation template works again; every import was failing with a server error
• You can now drag an .eml file onto the Import Email tab, or click the drop area to choose one; files over 10 MB and Outlook .msg files are refused with an explanation
• Emails with accented letters or other non-English characters in the subject or body are now imported exactly as received
• The check for an email that was already imported now only looks at your own organization’s templates
• Every link in a simulation email now leads to the landing page, including web addresses written as plain text, which email programs turn into links; older templates are brought up to date when a campaign is created or launched
• Previewing a template shows the email with every link opening the default landing page, with the template’s own red flags
• Imported emails open in the template editor as HTML with a live preview, so their layout is kept exactly; you can still switch to the visual editor
• Your organization’s own and imported templates can be deleted, and a deleted email can be imported again
• After importing an email, the new template opens for review with suggested red flags filled in; a template with no red flags no longer shows example ones on its landing page
• Imported simulations are sent from the impersonated name at your own domain (for example a message from “Michael Caffey” is sent as michael.caffey@your-domain), never from the real sender’s address
• The button at the bottom of the educational landing page now closes the page instead of doing nothing
• New and imported templates are for the organization you are working in, or you can make them available to your organization and its client organizations; Lavawall can also make a template available to every organization
• When simulation delivery is not set up yet, Set up lets you choose Microsoft 365 or Google Workspace; Google opens the phishing-simulation part of the Google set-up page instead of the backup set-up
• Each template can have its own landing page; a campaign that does not choose one uses its template’s
• More placeholders for simulation emails: last name, full name, the recipient’s organization and email domain, the date sent, and the date sent plus or minus a number of days (for deadlines); the HTML view of the template editor has an Insert a placeholder menu too
• Previews show sample values for the placeholders, and links in the editor’s preview open the template’s landing page instead of an error page
• Imported emails no longer keep the attacker’s sender address or the original recipient’s address: the sender becomes the recipient organization’s own domain placeholder, and the original recipient’s address and domain become placeholders
• Fixed Set up → Microsoft 365 leaving only a grey screen
• Fixed a page error on the Google Workspace set-up page when the backup service is not set up yet
• Verify authorization on the Google Workspace set-up page now finds a person with a Google licence to check mail, calendar and files against, skipping suspended, archived and unlicensed accounts; a service a person has no licence for is shown as authorized with that explanation, instead of as not authorized
• An organization that uses Google Workspace only for phishing simulations is asked for one permission, placing simulation messages in inboxes, instead of all the backup permissions; organizations with Google backup keep both in one authorization, so authorizing one never removes the other
• New Alerts & reports tab: send an email to any address, inside or outside the organization, when someone clicks a link in a phishing simulation, saying who clicked, the campaign and template, when (in the organization’s time zone) and whether they then pressed Sign in with or without a password typed; the password, IP address and browser are never included, and each person triggers at most one alert per campaign
• Daily, weekly or monthly digest reports of who clicked, who completed training courses, the percentage of people who have completed their assigned training and the completion of each training program, sent at the hour, day and time zone the organization chooses
• An address outside the organization’s own domains receives nothing until its owner confirms it from a confirmation email; addresses on the organization’s own domains start right away, and every change is recorded in the activity log
• Service providers can give an address alerts for all of their client organizations and a roll-up digest with one section per client plus totals; each client organization can also have its own recipients and only ever sees its own information
• Clicks and Sign in presses on simulation links are now recorded on every Lavawall server; on some servers opening a simulation link could fail with an error and nothing was recorded
• Fixed the Phishing Simulations page stopping part-way through loading, which left its tabs and buttons not working

Computers:

• A computer’s page shows its language and time zone in a new Language and time zone card on the Hardware tab: the language and region, display languages, the time zone with its current offset from UTC and the computer’s local time now, whether the time zone is set automatically, and the language each person who signs in to it uses; the card says Not collected yet until the computer has reported them
• The definition that appears when you point at a term no longer gives the payment card meaning of “token” for an enrolment token, an API token or other kinds of token; enrolment token and shared company key now have definitions of their own, in English and French
• New Support articles explain what the shared company key does and how to retire it, how enrolment tokens control which computers can join an organization, and how BitLocker recovery key escrow keeps recovery keys safe and at hand
• Download Agents / Add Computers has an enrolment token setting for each organization with three choices: Off (new computers can be added with the organization ID alone), Optional (new computers can be added with or without the token, those added with it are marked, and a wrong token is refused) and Required; the same setting is on the Agent keys page, and changing it needs the usual approval for high-impact actions
• The computer list has an Enrolment filter to show computers added with the enrolment token, without it, or added before this was recorded; computers added with the token show a Token badge, and the export includes how each computer was added
• When an organization requires an enrolment token, or a wrong one is given, the Windows, Mac and Linux installers explain what is needed in the computer’s language, give two minutes to enter the token, and remove their changes if none is entered
• Every installation that starts without the enrolment token is recorded in the organization’s activity log with the computer name and the address it came from; when one ends without a token, Super Admins and Admins get a notification (which can be subscribed to) and a pop-up message in the console
• Every new computer added with the enrolment token is recorded in the activity log, as are changes to the enrolment token setting
• The help link on the Agent keys page now opens the Shared company key Support article
• The computer list is more compact: each computer now takes two to four lines instead of six or more. Badges and status icons sit in wrapping rows, the domain, user and make share one line, the missing-patches count is a small chip with the application icons beside it (a +N button shows the rest), and the location reads as city and province or state with the provider underneath. The list scrolls sideways on narrow screens, and its badges and icons can now be reached and read with the keyboard and screen readers

Proactive Security:

• The Report misuse page has a field for the reference code shown by the Lavawall® installer and fills it in, with the organization ID, when the person follows the link from the installer; it also explains how to remove Lavawall if an installation they did not expect went ahead
• The domain scan now reports websites that disclose a PHP version affected by the PHP2Shell flaw (CVE-2026-109618 and CVE-2026-109619) as critical, with the fixed release and the interim protections, and, when a version is shown, websites running a Node.js version older than the October 2026 security releases (22.23.4, 24.22.1 or 26.12.1); versions that may carry the operating system vendor’s own fix are reported as “check your vendor’s advisory”, and a Node.js site that does not show its version gets an informational note. The check only reads what the site already announces and sends nothing to it
• The domain scan now finishes its WordPress plugin checks much faster at the end of a scan, shows what it is waiting on (the WordPress and CMS checks, plugin vulnerabilities, version and plugin updates, abandoned plugins) instead of one long “Generating subdomain findings” message, and lists its findings in the same order every time
• The domain scan no longer treats a beta or release candidate as the latest PHP version; it looks at the PHP version’s own branch, shows when that branch stops getting fixes and security updates, says to update to the latest release when a supported branch is behind, rates a security-only branch as low with a date to plan the upgrade before, and rates an end-of-life branch as high; a site with a PHP2Shell finding gets one message, not two; the same pre-release rule applies to WordPress and the other software versions the scan compares

Bugs:

• Fixed BitLocker recovery keys not showing: keys saved by older agents open again, a key that can’t be shown now explains why (not received yet, or saved damaged by an earlier server version and replaced automatically on the computer’s next drive report) instead of showing an error number, each drive’s key appears in its own row, and a recovery key already held is no longer erased when the computer sends a report without one
• The Drives table on the computer’s Storage tab now uses the full width, long serial numbers wrap at underscores, and drives missing from the last scan stay readable in dark mode
• Fixed sign-up stopping at the organization step for some new organizations whose short name or name was already in use; the new organization now gets the next free short name (a number added to the end), and a full name already in use gets a number in brackets; both can be changed later in the organization’s settings
• Renaming an organization to a name or short name that another organization already uses now says the company already exists, instead of failing without a message
• Adding a prospect or a web-form lead in the CRM, a training preview lead, or a referral no longer fails when its short name is already in use; the next free short name is used
• When the computer that scans a network moves to a different network, its scanning duties are handed to another online computer on the original network again, instead of the network being left without a scanner
• Fixed error reports from a computer being refused as a whole when one of them could not be stored; the others are now kept, so errors no longer go missing or get counted again every hour
• Fixed the time an error was last seen not moving forward when the same error happened again, for computers connected to some Lavawall® servers
• Fixed the remote shell log sometimes saying a computer’s remote support agent was too old to record commands, or not, based on the version of a different Lavawall® program
• Fixed the domain scan showing PHP as outdated against a beta version, which gave the wrong risk and advice (for example telling a site on a current PHP 8 release to move to a branch it was already past)
• Fixed the console’s automatic background checks (the timer badge, elevation requests, device and installation alerts and the news badge) carrying on quietly after your session had ended; when the session is no longer signed in, they now stop, you see a single message to sign in again, and a busy or unavailable server makes them check less often instead of more

Computers:

• Fixed installed applications not showing on some computers’ Applications tab; reports that count installed software include those applications again
• Fixed spurious agent health errors on servers and older Windows versions; those computers also report their device details, disks, network adapters, pending Windows updates and Microsoft Defender status more reliably
• New Move to organization… on a computer’s page: a Super Admin with the High-impact actions permission can move a computer between their own organization and the client organizations it manages, including to a sister organization, without reinstalling the agent; the computer keeps its history, moves the next time it connects, and loses the groups, schedules, printers, secret variables, WireGuard assignments and Remote Access for users grants of the organization it leaves; a reason is required, an organization at its computer limit can’t be chosen, and both organizations see the move in their activity log and their Super Admins are told
• New Browser extensions and Listening ports tabs on a computer’s page, shown only when the Lavawall® agent has sent that list for the computer: extensions are listed for every browser, user and profile, with those that can read every website, ask for sensitive permissions, did not come from a store or policy, or are disabled flagged in words, and a link to the store page where there is one; listening ports show the program behind each one, separate those reachable from the network from those open on the computer only, and flag well-known risky ports such as Remote Desktop, file sharing, remote management and databases; both lists can be sorted and filtered and show when they were last received, in your own time zone

Remote support:

• Links in notifications sent to Windows computers show a pointing hand when the mouse is over them, can be reached with the Tab key and opened with Enter or Space, show the full name of the website they lead to, and open in the person’s own default web browser; only secure (https) links are sent, and links clicked in the remote support chat open the same way
• Every command typed in a remote shell is now recorded, on Windows, Mac and Linux, including in end-to-end encrypted sessions; the record is made on the remote computer itself, so it can’t be skipped from the browser
• Passwords, keys and tokens in a command are removed before it is stored, the stored commands are encrypted, and shell output is never recorded
• The shell shows whether the commands typed in it are recorded; computers whose Lavawall® agent is too old to record them can still open a shell, and the session and the activity log say that command logging isn’t supported by that agent version
• In the Activity Log, remote shell entries have a Commands button that shows the commands typed in that session, who typed them and when, and whether each record is intact; the list can be sorted, filtered and downloaded as a CSV file, and each view or download is itself recorded in the activity log; the button appears only when commands were recorded, and otherwise the entry says that no commands were recorded, that the computer’s Lavawall® agent was too old to record them, or that command logging wasn’t available yet for that session
• Encoded PowerShell commands are shown decoded beside the original, and commands rebuilt from history recall or tab completion are labelled with the keys that were pressed

Email remediation:

• Email searches now check every message in the look-back period instead of stopping at each mailbox’s most recent messages, so older phishing in busy mailboxes is no longer missed
• Searches by sender domain or by an exact subject use Microsoft’s own mailbox search and finish much faster, and more mailboxes are searched at the same time
• Mailboxes searched lists every mailbox a search covered, how it was searched, how many messages were checked and how many matched; a very large mailbox that could not be checked in full is flagged with how many of its messages were checked
• Searches run on the Lavawall® server: you can leave the page, and when the search finishes you get a notification with a link straight to its results (and an email for longer searches)
• Search results are kept for 30 days, and each search in Recent searches shows the date it is kept until; a search with a removal still queued is kept until the removal is done
• A search can be cancelled while it is running with Cancel search, and pressing Search mailboxes again for the same search no longer queues it twice
• Recent searches can be filtered

Client organizations:

• New Deactivate option for an organization: its people see a notice telling them to contact their provider instead of the console, and scripts, remote sessions, computer notifications and new computer installs stop; the Lavawall® agents stay installed, and Reactivate brings everything back as it was
• Deactivating an organization also deactivates the client organizations it manages; reactivating it brings back only the ones that were deactivated with it, so a client deactivated on its own stays deactivated
• Uninstall all agents is now its own action, separate from deactivating: it asks you to type the organization’s name, removes the agents from every computer of the organization and of its client organizations, and cannot be undone
• Each of these actions asks for a reason, shows how many client organizations and computers it affects before you confirm, is recorded in the activity log, and emails the Super Admins of every organization affected
• Super Admins use the new organization status button on List Clients and Company Summary for the organizations they manage; the Active switch in the organization editor is replaced by it

Billing:

• Organizations whose billing phone number, city or postal code is missing now see a reminder on every page and a message after signing in, whatever way they pay; people who can change billing get an Update billing details button that opens the details form, and others are asked to tell their administrator

Enhancements:

• In the Activity Log, you can choose several actions at once in the Action filter, and the Potentially malicious choice at the top selects remote control sessions, file transfers and script runs together; the CSV export uses the same filter
• In the Activity Log, details recorded as structured data are shown one item per line, with nested items indented, when you open an entry; the list keeps its one-line preview and the CSV export keeps the details as recorded
• Organization pickers across the console now have a search box
• When Lavawall® support opens the details of one of your computers, your own Activity Log shows it as Lavawall Support viewed device details, with the computer’s name

Training:

• Certificates show continuing professional education (CPE) time, based on the time the learner was active in the course, up to the course’s total voiceover and video time
• Staff can record their professional certifications and outside training hours, see progress toward each certification’s CPE requirement, and get reminders before a certification or CPE cycle ends
• Certifications and CPE: when a CPE cycle ends, the next period starts automatically, and each certification lists its previous periods with the credits required and earned, the activities counted and whether the requirement was met; people and their training managers can see them, and the CSV download includes them
• Audit export on Training Reports: a CSV file or a Lavawall®-branded PDF, each with a report ID and a fingerprint that shows whether the file has been changed
• Audit exports rate limiting enhancements
• Certificates print on one page without browser headers, download as a PDF in Letter or A4, and carry a QR code anyone can scan to verify them
• Certificates show Valid until or Expired on, and the expiry set in training settings now decides how long certificates stay valid
• Certificate verification pages open without signing in, including in a browser that is already signed in to the console
• Emails from Lavawall® carry their logos inside the message, so they show in Outlook, Gmail and Apple Mail even when pictures from the internet are blocked, and the logo stays readable in dark mode
• New courses on Nova Scotia health privacy and Nova Scotia public sector privacy, in English and French, including how the law applies to AI tools

Notifications:

• The notification bell shows server outage alerts in red, and alerts about a computer’s identity have their own icon
• Each subscriber shows whether it is a console user or an External address
• A console user’s subscription is removed automatically when that user is locked, deleted or no longer in the organization or one of its managing organizations, and each removal is recorded in the activity log
• Only Super Admins, Admins and people given the new Change notification subscribers permission can add, change or remove subscribers, and every change is recorded in the activity log
• When browser notification choices can’t be saved, the notification settings window explains why instead of showing an error code
• Help desk ticket notifications are now delivered reliably, so subscribers receive the new ticket, reply and status emails they signed up for
• Send a Notice: Super Admins and Admins can send an informational notice to everyone in their organization or in a client organization they manage; it appears in the notification bell, the notification list and Recent Alerts, is included in the email of people whose Notification Setup covers notices, and can also be emailed to every active member at once

Computers:

• Only Super Admins, Admins, MSP Client Administrators, Client Local IT and people given the new Restart computers permission can restart computers; only a Super Admin or Admin can give the permission, and every restart and every refused restart is recorded in the activity log
• For everyone else the Restart buttons stay visible and say who can give the permission
• Patch configurations that apply to all companies can be changed only by Lavawall, and show as Read only to other organizations
• A computer’s Threats tab shows only that computer’s detections, antivirus issues and EDR incidents; it had been listing other computers in the organization as well
• Malware & AV follows the organization selected at the top of the page instead of having its own Organization filter; with All selected it lists every organization you manage, including your clients’ own clients, with an Organization column
• When a detection’s location or command line holds an encoded PowerShell command, Malware & AV and a computer’s Threats tab show the decoded script under Details, labelled with how it was decoded, beside the original
• Organizations without billing, on their own account or through an organization that manages them, can register up to 3 computers; organizations that already had computers keep their current limit
• Setting up billing lifts the limit, and if billing stops later, computers already registered stay; Downloads / Add and Company Summary show organizations without billing how many computers they can add, with a Set up billing button
• On Windows, Mac and Linux, a new installation refused because its organization reached its device limit now stops, removes the changes it made, and tells the person installing it that the organization has reached its device limit and to contact their IT provider; computers that are already installed are never removed, and the organization’s administrators still get a notification
• Every attempt to add a computer beyond an organization’s limit is recorded, and everyone who can open the computer or remote support pages sees a notice at the top of console pages saying how many computers couldn’t be added; they can dismiss it, and it comes back if another computer is refused

Backup:

• Stored backups can only be added to: a computer, or anyone holding its credentials, can no longer delete or replace backups, and only the retention plan removes them
• When a backup shows a large share of a computer’s or cloud account’s files deleted or changed at once, Lavawall® raises a critical Possible ransomware in backups notification, keeps every earlier backup and puts clean-up of older backups for that device on hold until an administrator reviews it
• Uninstalled computers whose backups are kept stay listed on the backup pages as Device deleted, backup retained, and their backups can still be restored

Security:

• Computer, script, patching, remote support, backup, network diagram and uptime pages refer to records by random identifiers, so nothing in a page, link or request reveals other organizations’ records or how many exist
• Security Review refers to blocked sign-ins and sender rules by random identifiers, so nothing in a page, link or request reveals other organizations’ records or how many exist
• Every decision in Security Review (reported phishing, quarantine release or deletion, sender rules and blocked sign-ins) is recorded in the activity log
• Actions in Security Review are protected against cross-site request forgery and require access to Security Review
• Saved connections to Microsoft 365, Google Workspace, Huntress, Cloudflare, Clone Systems, Sophos Central and AWS are re-encrypted automatically with new keys every month, with post-quantum protection for those keys, without reconnecting anything; computers that were offline for up to a year keep working when they come back
• The Activity Log follows the organization selected at the top of the console: one organization shows only its own entries, and All shows your organization and every active client beneath it, including a reseller’s own clients; the auditor export covers the same organizations
• The Activity Log records the technician’s own IP address when a remote desktop, PowerShell or Admin Workspace session starts, instead of the address of the Lavawall® server; entries recorded before this update show the server’s address
• Remembered consent for remote sessions applies only when the same technician reconnects from the same network

Remote support:

• On phones and tablets, choosing a display closes the display picker, and tapping anywhere else closes it without clicking on the remote computer
• The display picker, help, snapshot, restart and process details windows have an X to close them, close with the Escape key, and return you to the button that opened them
• Every message box on the remote support page has an X to close it, with larger close buttons on touch screens

Scripts:

• An organization can sign a script it shares with its clients while keeping its contents hidden, so the clients’ technicians can run it on their own computers with end-to-end encryption without ever seeing it; each computer checks both signatures
• The script owner chooses which clients it is offered to, how it may run and which parameter values clients may set, and can withdraw a version at any time
• Organization automation key: scheduled and automatic runs on computers that require signed scripts can be signed by a key a Super Admin endorses, only for scripts a technician approved by their exact content, with every use listed on Remote Access Policy
• Moving old Secret variables to the vault is available to every organization’s Super Admins and Admins, also moves values that client organizations use, and explains on screen what to change when a variable cannot be moved yet
• Before an old Secret value is cleared, the vault tab shows how many earlier run records may still hold it, so it can be changed where that matters
• Script output that cannot be checked for secret values is no longer stored
• Script Execution Status follows the organization selected at the top of the page: it lists scripts run on that organization’s computers only, or on the computers of every organization you manage when All is selected, with an Organization column and filter; signed runs and schedules and scheduled runs waiting for a signature follow the same selection. It had been listing runs on every computer whatever was selected
• Run Script shows the organization selector and follows it: with one organization selected it offers only that organization and its computers, and with All it offers every active client you manage; inactive organizations and prospects are no longer offered as targets

Microsoft 365:

• Access Review collects SharePoint, Teams and guest access automatically for every company that has it turned on, and keeps it up to date every day
• Access Review shows access waiting for approval again; some was hidden as soon as it was collected
• Access Review opens for a reseller’s client companies, and says when nothing has been collected yet instead of showing an empty table
• Lavawall makes changes in Microsoft 365 only for companies that authorized read and write access: for a company connected read-only, account locking, Conditional Access, security fixes, access removal, email removal, signature deployment, phishing simulations and rollbacks are shown disabled with a link to authorize read and write access, and nothing is changed in its tenant
• Queued changes for a company connected read-only are shown as Needs read and write authorization instead of failing

Reported phishing:

• Reported phishing in Recent Alerts, notification emails and the notification bell opens the report in Security Review with Phishing Report Details already open, switching to the report’s organization when it is one you manage; links in emails sent earlier take you there too
• The sender IP of messages reported through Microsoft is filled in from the message’s own headers when Microsoft’s report leaves it out, using the public address of the server that delivered the message to Microsoft 365; Phishing Report Details shows where it came from, or Not available with the reason
• Phishing Report Details lists the other reports and quarantined messages from the same sender domain in that organization and analyses each one like the Phishing Reporter does: links followed to where they really lead, domains and attachments checked, and a score and risk level for each message; results appear as they are ready
• The sender domain counts in Security Review cover only your own organization
• Notifications about a quarantined message waiting for release open that message in Security Review, and notifications about an app consent request or a privileged role activation open its details at the top of the M365 Security Dashboard, switching to that item’s organization when it is one you manage; links in emails sent earlier work too
• Security Review with All companies selected lists every organization you manage, including your clients’ own clients
• Reported messages nobody has opened yet are analysed in the background, so results are waiting when someone opens the report

Google Workspace:

• Temporary Shared Drive access added by the Google Workspace export tool now expires on its own: it is removed as soon as the export of that drive finishes, renewed automatically every few days while a long export keeps making progress, granted again automatically when an interrupted export is resumed, and removed by Lavawall® after 7 days without progress even if the computer that ran the export never comes back; each step is recorded in the activity log
• Google Workspace connections are moved to stronger, versioned encryption automatically the next time they are used, without reconnecting
• Connecting Google Workspace takes one click: the authorization link opens Google’s admin screen with Lavawall’s details already filled in, so a super admin only reviews them and selects Authorize; the details to copy by hand are still available if needed

Referral partners:

• On Partners, New Partner has a searchable organization list that finds your organizations as you type, including clients and prospects
• A referral partner that is not in Lavawall® yet can be enrolled directly: type its name, and it is added to your organizations as a prospect and enrolled in one step, after a check for an organization with the same or a similar name or the same domain
• Managing referral partners is limited to Super Admins and people given the new Manage referral partners permission, which only a Super Admin can give, on the Users page; every change to the permission and every refused attempt is recorded in the activity log
• Companies can be a Prospect – partner (treated like a prospect, so never in client lists) or a Client – partner (a client that also refers clients); the CRM’s Partners filter shows both, and partners added from New Partner start as prospect-partners
• Partners see a Client status for each client they referred (under review, lead, prospect, onboarding, active client, inactive or closed) and nothing else about your clients; when they submit a referral that may already be one of your organizations, they are told it will be reviewed without being shown which organization
• The CRM’s Referred by partner is saved reliably and lists every referral partner
• Adding a company in the CRM is limited to service provider organizations, is rate limited, and is recorded in the activity log

Domain scanning:

• Where It Is Hosted on Domain Scan Results shows the network provider, ASN and location of the domain and each of its subdomains, with totals by provider and by country; hosts behind a CDN or proxy such as Cloudflare are marked so the edge location is not mistaken for where the site runs, and private or reserved addresses are labelled instead of looked up. The details are refreshed at every scan and are included in the CSV downloads and the PDF and Word reports
• A domain your organization has verified through Microsoft 365, Google Workspace or a DNS record can now be scanned, and its results seen, only by your organization and the organizations above it; everyone else, including the public scanner, sees that no results are available. Domains nobody has verified can still be scanned by anyone, with earlier results reused for a faster answer

Compliance:

• Nova Scotia frameworks: the Personal Health Information Act, for health care custodians and the organizations that work for them, and public sector privacy, for public bodies, municipalities and their service providers, covering today’s rules on keeping personal information in Canada and the new access and privacy law that takes effect on 1 April 2027, with questionnaires and policy templates
• The framework wizard asks about Nova Scotia and recommends these frameworks for health care organizations, public bodies and municipalities there

Billing:

• Change how you pay on the Billing page now lists every way to pay in one place: credit card, pre-authorized debit from a Canadian bank account, ACH debit from a US bank account, and invoice paid by Interac e-Transfer; each says what it needs, and choosing one shows its details right below it
• Choosing a way to pay saves it straight away; credit card, pre-authorized debit and ACH debit first ask for the card or the bank agreement, and nothing changes until that is done. Moving through the options with the arrow keys saves only the option you stop on
• Credit card is back in the list, with the card on file and the Add card, Replace card, Remove card and Pay by this card from now on buttons inside the credit card option
• Paying by cheque is no longer offered; organizations that pay by cheque see a notice on every page asking them to choose another way to pay, and a message when they first open the console in each session, with a button to Billing for people who can change how the organization pays
• A saved credit card stays on file when you choose another way to pay: the credit card option shows it (for example Visa ending 1234, saved) and choosing it switches back to that card in one step; it isn’t charged while another way to pay is in use, and only Remove card deletes it
• Invoice billing details (email, phone, street address, city, province or state, and postal code) are entered right in Change how you pay; when an organization paying by invoice, pre-authorized debit or ACH debit is missing its billing phone number, city or postal code, its users are taken to Billing from every page and can’t make changes elsewhere in the console until the details are entered; organizations billed through the company that manages them see a notice instead
• New invoiced billing is confirmed by Lavawall® before it lifts the free-account limit of 3 computers; until then Billing shows Waiting for Lavawall to confirm
• Maximum computers: organizations with billing can set the most computers Lavawall® may be installed on, so billing cannot grow unexpectedly; new installations past it are refused and nothing already installed is removed, and managing organizations set it for the client organizations they pay for

Enhancements:

• The Recent list in the menu shows Lavawall® Log correctly instead of showing the “®” code
• The Lavawall® Windows agent runs its compliance checks natively or as readable commands, so security tools no longer flag them as suspicious PowerShell
• Lavawall® installers refuse to run when their file has been renamed to look like an invoice, a PDF or an email attachment, and tell the person how to report the email at lavawall.com/abuse; when a person installs Lavawall themselves, the installer shows which IT provider and organization requested it and offers 15 seconds to cancel, and renamed files and cancelled installations are reported to the Lavawall team; installations by RMM tools and scripts are not slowed down
• New pages on lavawall.com: Report misuse of Lavawall and How Lavawall prevents abuse
• In the Activity Log, the Action filter is a searchable list: type part of an action’s name to find it
• Searchable lists where you can choose several items, such as the Action filter in the activity logs, are easier to read in the light theme: chosen items, their remove buttons, the search box, highlighted and chosen options and the focus outline all have stronger contrast, in the light and dark themes
• In the Activity Log, the export buttons are now labelled CSV (the spreadsheet for auditors) and JSON (the full evidence package)
• Dependency security updates
• Lavawall connects to Microsoft 365 and Google Workspace only from its servers’ IPv4 addresses, so Lavawall’s sign-ins in your Microsoft 365 and Google Workspace logs always come from the same, recognizable addresses
• Users & Permissions lists every organization you manage or one at a time: choose it in the new searchable Organization list, which also selects that organization on your other console pages; with All organizations an Organization column appears, and prospects and inactive organizations are left out
• On Users & Permissions, accounts are locked and unlocked in Edit under Account Status, and the Locked column shows each account’s status; copied, CSV and Excel lists leave out the action buttons, and a name that looks like a spreadsheet formula is exported as plain text
• Free trials last 14 days from sign-up; the trial banner counts down the days left, and when a trial ends without a payment method, the console goes straight to Billing to choose a plan and a way to pay. Trials already under way keep their end date
• When Lavawall® support views or exports your organization’s activity log, your own Activity Log shows it as Lavawall Support viewed the activity log or Lavawall Support exported the activity log
• If Lavawall® support disables or re-enables one of your users, your organization gets a notification and the change is recorded in your Activity Log; a disabled user is signed out everywhere, and their browser extension pairings, the API tokens they created and their remote support access stop working. Re-enabling the user lets them sign in again but does not bring those back

Training:

• Automatic enrolment of new people: off by default, with a preview that shows who would be enrolled in which course or bundle, and when, before you can turn it on. Only licensed Microsoft 365 or Google Workspace users with their own mailbox are enrolled (never shared, room or equipment mailboxes, or guests), from a switch-on date, with optional catch-up for existing staff a few a day, and your usual reminders
• The automatic language setting now picks a language the course is offered in
• Slides without a minimum time get an automatic one based on the narration or video length, and the course editor shows the value and why
• Completion emails are retried after temporary delivery problems, and any that were missed are sent
• Training emails show your training logo, or the Lavawall® logo when you have not set one, and percentages and certificate IDs display correctly
• Links in training emails and certificate verification addresses point to the learner’s own console
• Training group sync keeps working when someone in the directory has no first name

Phishing Simulations:

• Microsoft 365 delivery settings in their own dialog
• Choose Microsoft 365 or Google for delivery when both are connected
• A banner says what delivery still needs, with a button to fix it, and campaign buttons stay disabled (with the reason shown) until delivery is ready
• Fixed an error that stopped some campaigns from being created or launched
• Schedule Send now sends campaigns at the date and time you choose, entered and shown in your own time zone
• Launch now and Cancel schedule buttons on campaigns
• Campaign, report and add-in dates show in your local time
• Reported emails are no longer shown with a sequential report number
• A shorter delivery status line, and the setup banner no longer appears on training administration pages

Notifications:

• Automatically configure critical notifications for super admins.
• Super admins who unsubscribe stay unsubscribed, and no backlog of older alerts is sent when the subscription starts
• Sign up wizard includes notifications
• Subscribers section moved higher on the notification settings page

Remote Support and Computers:

• New Agent keys page: see which computers are ready for their own keys, then retire the shared organization key when you are ready (optional, per organization)
• Enrolment tokens let you control which new installs can join an organization
• BitLocker recovery keys can be backed up to a key held in your console, so they stay recoverable after the shared key is retired
• When a disk image is restored onto other hardware, a technician is alerted right away, and the copy can be split into its own computer automatically if your organization allows it
• Remote support checks technician passkeys against your organization’s own keys on each computer
• Files sent during remote support go only to allowed folders
• Secrets are blanked out in script output
• Files restored from backup are marked as coming from the internet, so Windows handles them with the same caution
• Logout All asks you to confirm first
• Fixed BitLocker recovery keys that occasionally displayed incorrectly
• Fixed computers being refused after their TPM chip started working

Microsoft 365:

• Automatically Notify users about third-party breaches
• Super admins are told when an app that Lavawall® support has flagged after a vendor security incident is found in their Microsoft 365 tenant, and the alert closes once the app is removed
• Day-to-day Microsoft 365 monitoring uses read-only access, and write access is used only for actions that change something
• We are alerted if Lavawall’s own Microsoft 365 connection is ever used from somewhere unexpected
• More complete audit log collection, and location details for more sign-in addresses, including IPv6
• Company lists no longer show prospects or inactive companies
• Mark reviewed buttons on the security dashboard work again
• A configuration rollback can no longer run twice
• Email signature images are cleaned when uploaded, and SVG files are no longer accepted
• Deleted users are removed automatically two years after they were deleted, unless you choose to keep them or place a legal hold, and the users list shows when each one will be removed

Sophos:

• Client companies can connect Sophos Central with their own credentials instead of their managing organization’s
• The Sophos page shows each connection, when it was last tested and synced, and whose credentials synced each organization
• Fixed Sophos Central connections made with a single tenant’s own credentials not syncing
• Sophos endpoint, alert, case, firewall and licence pages include data synced with a client company’s own credentials

Huntress:

• A Huntress API key that stops working is kept, and the Huntress page asks an administrator to enter it again, instead of the key being removed

Accessibility and French:

• More of the console is available in French (about 500 phrases)
• Training emails and certificates tell screen readers which language they are in
• French certificate dates write the first of the month as « 1er »

Proactive Security:

• Dependency updates
• Stronger checks on every page and action that you reach only your own organization and its client companies
• Signed, time-stamped messages between computers and Lavawall®, enhanced authenticated registration for new computers, and signature checks before Windows agent updates install
• Stronger protection for stored integration credentials
• Integration pages and links refer to records by unique identifiers instead of sequential numbers
• Public blog pages, the blog feed and the embed snippet on Blog Settings refer to blogs and posts by unique identifiers instead of sequential numbers; existing blog links and embeds keep working
• Fixed public blog pages that did not load
• Training and phishing pages and links refer to courses, groups, people, campaigns and reports by unique identifiers instead of sequential numbers
• Compliance pages and links (controls, evidence, documents, risks, audits, vendors, business continuity, privacy, incident response and the trust centre) refer to records by long unique identifiers instead of sequential numbers. For integrators: GRC webhook delivery IDs are now long unique identifiers instead of integers
• Enhanced Lavawall® support chat client authentication
• Security improvements across the console, agents, and integrations

Add:

• High Impact Actions reporting, permissions, and notifications
• Enhanced authentication option for remote support and scripting

Password vault:

• Add secure notes, etc. to the extension instead of just in the web interface.

Enhancements:

• AD/M365 User listing view permission granularity
• Improved handling for terminated users and companies
• Chat support enhancements
• Inactivity lock enhancements per-session instead of per user
• Passkey enhancements for increased compatibility on mobile devices that make assumptions and prevent hardware tokens when integrated passkeys are configured
• Remote consent and connection enhancements
• Stronger distinctions for signing of USGOV and FIPS140-3 accounts with scripting
• Chat warnings for upcoming chats when users enter chats, but don't send anything
• M365 snapshot and signature enhancements, new way of handling images and social links for enhanced encryption and compatibility
• Increased verifications before M365 rollbacks
• Improved Remote desktop resolution and load times

Accessibility and language:

• Additional PCI-related translations and definitions

Proactive Security:

• Enhanced backup signing, M365 and Google Certificate authentication
• Technician browser certification behind the scenes
• Enhanced entitlements and permissions
• Improved signing and protection approach for Sophos and Huntress keys
• Post-quantum cryptography
• Microsoft signing and entitlements on every request with increased permission granularity

Add:

• Outage and informational notifications for console users and public site
• French training
• Multiple relays per region for enhanced capacity
• M365 configuration baselining, storage capacity consistency, storage growth graphs

Enhancements:

• Resolution for remote support based on connection speed
• Remote administration permission customizations
• Network traffic efficiency optimizations
• SaaS monitoring improvements to decrease checks
• Elimination of artificial M365 caps; M365 database efficiency improvements
• AWS Evidence saving changes for GRC integration
• AWS Security Assessment
• S3 storage options
• Billing requires phone numbers for new direct debit compliance requirements
• Additional Active Directory logging
• CRM lead management
• Email login changes to ensure that email is sent from the same region
• Google Backup download improvements
• Prevent strings like LGBTQ2S in domains from showing as being high entropy throw-away domains when scoring phishing risk
• Log SAAS discovery (datagov_m365) every 30 minutes instead of every minute
• AWS Sync database connection enhancements
• synchronize ISPs for SAAS monitoring and status page
• change scopes to allow for email injections for phishing simulation
• Google workspace backup resilience
• Ingranm variable consistency and pre-requisites
• Lavawall Remote resolution changes, speed dependent resolution, backup service, tile approach, multiple relays in the same region
• M365sync backups, data retention and data minimization, phishing remediation, maibox usage consistency, policy and configuration baselining
• Phishing email importing refinements
• LGBTQ2SA, LGBT, etc. allow listing to not be listed as throwaway strings

Proactive Security:

• AWS Sync dependency updates
• Domain scan dependency updates
• Google sync dependency update
• M365 sync dependency update
• M365 login hardening
• Huntress Company ID hardening
• Active company and user's company hardening

Add:

• Login with Google
• Support Centre
• Remade help pages for each module

Enhancements:

• In the quick search menu, move the page links to the top so they don’t move when the devices load.
• Database connectivity enhancements
• Login by email reliability
• User and company security layers
• Dependency security updates

Add:

• Accessibility Settings feature in top bar
• Get/Send Clipboard added to full screen view
• Technician checklists with integrated console data, monitored sites, SaaS monitoring, ISP monitoring
• Status page indicates outages to SaaS providers and monitored systems
• Ability for non-technicians at a company to access their tickets through the console
• Chat notifications through browser notifications
• Mac and Linux support added for Google Export

Enhancements:

• Remote support decline flow improvements
• Faster initial load for remote support GUI mode
• Display and Layout with higher contrast colours baseline and ability to set further with Accessibility Settings
• Delegated M365 app permissions consistently displayed in SAAS discovery and M365 details
• Tightened controls around shared email providers and schools
• Administrator elevation requests through browser notifications
• Centralization of GRC user roles
• Centralization of CRM, ticket, and user contacts
• Chat history and layout improvements
• Colours improved for accessibility and contrast
• Elevation log improvements
• Elevation approval flow
• Details and risk signals for elevation requests including reputation verdict, parent processes, etc.
• CRM integration
• WAF blocking intelligence in uptime checker
• Details for why a website was recorded down

Enhancements:

• New account creation flow edge case loop prevention
• Session hardening
• Increased use of TPM for password vault

Add:

• Partner invite codes

Enhancements:

• Changes to technician account pinning for remote support: outside of FIPS 140-3, CJIS, and other restricted environments, the default behaviour for new technician browsers, IP addresses, etc. will be notify the technician and optional security contact instead of blocking the connection. Agent pinning can be configured in the Technician keys section in Remote Policy (from the top of the Users & Permissions page) to
  Block it until an administrator clears it.
  Thanks to David Walliams for highlighting that our previous forced pinning policy was too strict.
• Knowledge base Rich Text Editor enhancements
• Microsoft 365 Authentication speed improvements
• Administrator elevation enhancements.
• Password change hardening
• Add-hoc remote support zero-knowledge and end-to-end encryption enhancements
• CSRF mitigation reliability
• Remote support connection speed enhancements
• Linux secret manager enhancements

Add:

• Wireguard deployment

Enhancements:

• Application patch display consistency
• Testing enhancements

Enhancements:

• Add password generation to context menu
• Passkey performance improvements
• jQuery updates

Add:

• FIPS 140-3 end-to-end encryption visibility for remote desktop and password vault

Enhancements:

• Large upload stability enhancements
• Additional Cloudflare security
• Administrator elevation
• User login flow and lockout flow smoothing

Add:

• FIPS 140-3 encryption validation
• CJIS logging
• Ingram Micro integration

Enhancements:

• Remote desktop FIPS compliance
• Library updates
• Vault hardening for FIPS 140-3 and non-FIPS (supporting Argon 2id)
• Administration elevation enhancements

Add:

• Two-way ZenDesk sync
• White-label help desk

Enhancements:

• Ticket tracking to reduce repeated content across comments
• AWS interface expansion
• Administrator elevation enhancements
• Library updates
• Chat spacing

Enhancements:

• Helpdesk phishing detection integration
• Automatic tagging of human, automated, spam tickets
• jQuery updates

Enhancements:

• cPanel, Plesk, and related vulnerabilities added to domain scanner and reports
• Refine control design and assessments for RGC
• Expanded GRC roles

Enhancements:

• Chat retention and deletion
• Ontario PHIPA alignment
• Names added for multi-technician chat
• FIPS 140-3 compliance visibility for technician passkeys and FIDO2 tokens
• GRC wizard improvements
• Additional control over cookies and Cloudflare Analytics for website visitors who don't want it enabled
• GRC Report and Assessment consistency and automation

Add:

• FIPS 140-3 configuration option for CJIS 6.0 control SC-13 compliance
• Phish Rip tool to remove malicious emails from all affected mailboxes with multi-tenant support

Enhancements:

• GRC assessment wizard improvements for municipalities
• CJIS framework clarifications
• StateRamp to GovRAMP clarifications
• Automated GRC evidence automation
• Regional GRC frameworks for Texas, Iowa, Ontario, British Columbia
• Vendor attestation automation
• Framework categorization simplification
• 146 new definitions for tool tips
• Multi-technician web chat optimizations
• Add optional phone number to web chat form
• Cookie privacy notifications for jurisdictions that require it
• Improved assessment filtering
• Regional municipality definitions
• Mobile remote desktop screen selection thumbnail improvements to behave like desktop version
• Mac backstage compatibility
• Texas state and municipal compliance
• Iowa Public Sector Information Obligations
• ADA Title II
• Faster remote support connections
• Sidebar navigation improvements

Add:

• US Municipality Industry to GRC wizard
• CJIS, GovRAMP (formerly StateRAMP), US Water & Wastewater Cyber Security (AWIA) framework
• Improved invitation emails, redirection to console and public site handling

Enhancements:

• NIST SP 800-53 alignment with CJIS
• CJIS framework: CJIS 5.9.5 (9 July 2024), CJIS v6.0, CJIS v6.1 (25 June 2026), gap assessments
• Improved Mac Backend support
• MacOS version history for audit reports
• Increased Nessus file uploads and email receipt

Enhancements:

• Phishing company and user impersonations
• Combined ARM and Intel download script for Apple devices
• Improved invitation emails, redirection to console and public site handling

Enhancements:

• Google Workspace configuration detection and reporting, integration with reports
• Google Workspace breach detection
• Google Workspace activity search and enrichment
• Login flow, turnstile reliability
• Squarespace and signoff impersonation
• Restriction for new accounts outside of Canada and the US

Add:

• Authorization add and download only entitlements for audit clients
• Partner and referral feature
• MeshCore out of band support

Enhancements:

• Google Workspace scope reduction
• Google Workspace DLP, sharing, and permissions
• Google Workspace external application identification
• Subdomain-only scanning

Add:

• Outlook add-in support for shared mailboxes

Enhancements:

• Remote desktop reconnection speed
• Topbar and prospect company distinctions

Add:

• Asset management

Enhancements:

• Notification toast interactions between states
• Loading indicators
• Automatic ticket closing

Enhancements:

• Restart and reminder toast improvements
• Web log refinements

Enhancements:

• Sophos deployment
• Google export for hangouts
• MFA reset

Enhancements:

• Backstage tools
• Nessus automatic imports
• Toast notifications

Enhancements:

• Synthetic task manager speed
• AI reboot analysis
• Inter-operative backstage tools
• Google export downloader

Enhancements:

• Device-human matching
• Summary dashboard speed
• Sophos deployment

Add:

• News ticker and notifications
• Django security
• Ad-hoc remote desktop
• WordPress "Hello World" detection

Enhancements:

• Attended Ad-Hoc Remote Support deployment process
• compressed scrolling menu
• Virtual Task Manager aggregation
• Device Detail Speed
• Configuration Speed

Add:

• Interac, ACH, Pre-Authorized Debit, and Cheque payment option added

Enhancements:

• Significantly improved M365 login speed
• AI analysis for M365 issues
• M365 false positive reduction
• Granular access improvements

Add:

• Healthcare AI policy templates for every Canadian province
• AI-powered categorization for new SaaS applications with human review
• New M365 Dashboard

Enhancements:

• CRM company and contact improvements
• CRM speed
• SaaS application rule refinements
• Purview log optimization
• M365 breach identification refinements

Add:

• Integration for SaaS discovery, Entra/M365 apps, Google Workspace apps, Vendor inventory, BIA and other resilience items

Enhancements:

• Improved drawing and interface for mobile remote desktop
• New Microsoft 365 dashboard false positive, AI, and export enhancements

Add:

• Google Export disk spanning
• Add Hyper-V manager to the admin launcher
• Evidence for BIA and Vendor assessment
• Flags for company data storage location
• Optional AI analysis for M365 incidents

Enhancements:

• More efficient Google Workspace export graphs and support for more edge cases
• Hide drawing tools when they aren't active in all contexts
• Improve dark mode colours for synthetic regedit
• Only display supported synthetic tools
• Make full screen bar repositionable and less annoying.
• Google workspace edge case errors for unlicensed owners
• Less noisy token recreation during logins
• Mobile admin/scripts/draw/laser in more menu
• Ability to move web console full screen bar to sides and/or top
• Improved performance on google drive monitoring
• Add DPA flexibility in vendor monitoring
• Expand backup options in BIA and vendor inventory

Add:

• Google Export disk spanning
• Add Hyper-V manager to the admin launcher
• Evidence for BIA and Vendor assessment
• Flags for company data storage location

Enhancements:

• Google Export speed, display clarification, and filename truncation for Windows and Mac
• Remote Desktop tool self-healing
• BIA and Vendor identification/interview tool layout and navigation improvements
• Backup clarification in Vendor and BIA interview
• Backstage recalibrated to favour virtual tools
• Timeline button in Google Workspace Vulnerabilities
• Improved integration with the BIA, Vendor, Resilience, DRP, BCP, SaaS identification, and other Lavawall® components

Add:

• Trust Centre / Trust Center
• US and Canadian Spelling option for Trust Centre
• Vendor Inventory
• Data Residency and subprocessor disclosure generator
• Business Impact Assessment system with questionnaires and templates
• Business Continuity Planning
• Disaster Recovery Planning
• Incident Response Planning
• Data Flow mapping
• Prospect flagging for domain scans

Enhancements:

• Improved handling of fake computers that are created when sandboxes install Lavawall for Malware testing

Add:

• Synthetic backstage tools
• Locked out and failed authentication user hunting for M365
• Drawing and colour capabilities for remote support
• Searching for scripts and tools in remote support
• Category, assignee, etc. searching in tickets

Enhancements:

• Speed up remote support connectivity

Add:

• Administrator Elevation capability and integration
• View uninstalled computers in computer view
• Backstage synthetic tools for faster view

Enhancements:

• Speed up computer device detail load time
• Tighter and better use of space for device details
• Microsoft 365 and Google Workspace breach detection refinements

Add:

• Manual user access certification for M365

Enhancements:

• Speed up initial Remote Desktop connections
• Increase connection reliability fore remote desktop connection
• Add protections to ensure that the connection banner doesn't remain in edge case disconnections
• Speed up Login /Register with Microsoft
• Automatically display the active screen on connection
• Email security analyzer awareness for additional CAPTCHAs and other indicators
• Improved grouping and authentication for access review tools

Bugs:

• Missing icon for firewall admin app launcher
• Windows tool launcher tools launch reliability improvements
• GRC Controls error handling improvements

Add:

• M365 SharePoint and Guest Access review
• User contact information added to Remote Desktop interface
• View only mode added to full screen mode
• Prevent remote and local users fighting over mouse control
• Separate remote console user mouse cursor
• “Send as keystrokes” option for pasting content to the remote desktop for cases where the clipboard may not be accessible.
• Device owner contact info on Remote Desktop page
• Recent pages in side bar
• Downloadable snapshots added directly to session notes
• Screen drawing for annotations

Enhancements:

• Email assessment performance research and redesign
• Script execution timeout enhancements
• Microsoft authorization resiliency when Microsoft’s servers are slow or database connections get dropped
• Remote control terminal access improvements
• PDF link details in Outlook plugin
• KnowBe4 Defend Egress link unwrapping enhancements
• Remote Desktop laser now the same as the one that the user sees (more translucent)
• Remote support redundant server resiliency failover improvements
• Domain age calculation is now based on when the email was sent, not when it was analyzed
• Significant enhancements to the malicious link and email content filters for email security
• Outlook add-in version 1.3.2.2 displays the new PDF and Link intelligence within the Outlook add-in. It also has a two-phased system that does a quick initial pass and then follows the links, etc. to give users in-depth analysis without the wait.
• Ubiquiti Unifi all company view improvements

Bugs:

• Windows Remote Agent 1.0.63 fixes a bug that caused remote support console windows to appear black if the remote Windows computer was in a setup screen (e.g. adding a new user) when more than one remote administrators were connected.

Add:

• Dedicated PDF security analysis (in Phishing reporter, side menu, and quick launch search)

Enhancements:

• Enhanced link and launch analysis for PDFs in Outlook security assessment plugin
• Web chat formatting for mobile
• Chat resiliency

Bugs:

• Script execution tracking edge cases
• Server outage configuration setting buttons were inconsistent

Add:

• Ubiquiti cloud console support

Enhancements:

• Resume training from the last slide
• Images added to instructions

Bugs:

• Internal utility for CVE updates hardening and efficiency (issues from internal review and Claude review)

Add:

• Local and AD user search and CSV in device details
• Ubiquiti / Unifi notifications and breach indicators of compromise

Enhancements:

• Full screen usability on mobile remote screen sharing

New:

• Email security domain popularity

Enhancements:

• Expanded Cloudflare monitoring and active blocking configuration
• Domain scanner business context
• Email security context and calculations
• Android compatibility for email security and phishing reporting
• Faster email reports
• Domain scanner performance
• On-site glossary additions
• Mac remote support smart restart tool
• Flags and other visuals for training

Bugs:

• Allow phishing reporting from IPs that aren’t permitted to use the Lavawall® console.

New:

• Client and prospect combination feature
• Company duplicate finder
• URL unwrapping and email proxy filter awareness for Outlook phishing add-in
• Remediation instructions in Outlook plugin
• Alpha launch of phishing simulations

Enhancements:

• CRM and company listing
• Industry associations
• Add link to remote access policy to Profile/Security section to make it easier to find
• Phishing Reporter Add-in for Outlook version 1.2.2.0 release
• Improved phishing scores and approach to third-party headers
• Related brand intelligence
• Plain language for phishing panel
• Real-time glossary with mouseover definitions
• Improved Canadian privacy training
• Sophos installation
• MSP client billing and reporting
• JavaScript library security enhancements
• Patch reporting enhancements
• Industry enhancements for OSINT
• Provincial flags
• Training videos and voiceovers

New:

• Allow MSP-managed companies to have their own Sophos accounts with their own APIs and CSV files
• Mac backstage tool launcher
• Outlook phishing tool now checks for malicious PDFs, Outlook, HTML, and compressed files
• Artificial Intelligence (AI) LLM policy
• AI policy integration with AI courses.
• Large Language Model (LLM) training modules by industry
• Microsoft 365 user type and status filtering options
• Sophos configuration for non-MSP Sophos accounts
• Sophos configuration for MSP clients with their own Sophos accounts
• Custom notification subscriptions and thresholds
• Microsoft 365 snapshot to backup features that other Microsoft 365 SAAS backup tools miss
• Azure, Entra, and Microsoft 365 backup
• Azure, Entra, and M365 change audit and configuration change undo
• Device ownership, user contact information, and notes
• PSA ticket notification customization options
• Ticket email customization options to avoid duplicate and circular emails from ZenDesk or Hubspot during migration
• Policy integration with training system
• .EML email security assessment and phishing danger review
• Phishing simulations

Enhancements:

• More granular permissions for MSPs
• Share logging improvements
• Update Sophos Central instructions to match new My Environment menu in Sophos Central.
• Mac remote desktop tool improvements
• Mac remote desktop speed enhancements
• Mac special keys added to mobile interface
• Mac zSH and Bash improvements
• Mac remote support tool installation and update process improvements
• CVE retrieval improvements
• MacOS Monterey compatibility and instruction improvements to match Ventura and later
• Formatting improvements
• Outlook phishing reporting compatibility and speed
• MSP client license, time use, and plan monitoring improvements for billing purposes
• Remote support cursor types
• Remote support sticky modification keys for Mac
• Escape button behaviour changes in full-screen mode
• Active Directory, Microsoft 365 user inactivity search and report criteria

Bugs:

• Removed users were not filtered out of the Microsoft 365 dashboard.

New:

• Find what tabs or programs are monitoring or using the speakers, mic(s), and camera(s) from the web-based Windows remote support tool
• SharePoint, Google Drive, and on-prem file share file changes by user graph
• Multi-select lifecycle and properties in End Users M365 / AD report
• Granular notification preference configurations
• Notifications for stale accounts

Enhancements:

• More granular permissions for MSPs
• BYOD / Company-owned setting improvements in computer listing and details
• Administrator elevation assignment granularity refinements
• AI ticket action item assessment refinements
• Subscription refinements
• SharePoint file change monitor case refinements
• Remote support connectivity enhancements
• Microsoft 365 add-in, SAAS company monitoring enhancements
• Resilience for future code signing changes
• Further decoupling ZenDesk and Hubspot with Lavawall®
• Separate Lifecycle and Properties in End Users AD/M365 report

New:

• Canned Messages
• ZenDesk Canned Message import
• Dedicated SharePoint file change view
• WordPress plugin security details
• Google Drive Monitor
• Scheduled tickets
• Administration Elevation features

Enhancements:

• Speed up M365 app listing
• Accept screen captures in RMM session notes
• Leave RMM session notes open after disconnect
• Domain scan speed and layout
• Report updated to include the new WordPress plugin security details
• Added notes to device details
• Moved nickname modification to device details
• SAAS discovery signal reliability enhancements and feedback capability
• M365 apps integrated with SAAS discovery
• M365 token compromise and agentic AI abuse enhancements
• Phishing plugin deployment refinements
• Changed support chat from ZenDesk to Lavawall. Eating our own dogfood is awesome when it’s so much better! :-)
• Web log filter additions for humans, bots, social, seo, etc.
• Add new pages to top search
• New billing structure
• ZenDesk canned message image imports
• SEO, AIO tweaks

Bugs:

• The consent changes inconsistently had a CSRF mitigation overreaction.

New:

• Outlook phishing plugin (in limited release)
• Privacy policy updates to discuss opt-out for domain reputation services used as part of the phishing plugin
• Hourly and unlimited plan support for help desk and billing summary

Enhancements:

• Breach report refinements
• Security test details for Microsoft 365 refinements
• Improved removed M365 external account handling
• IP address risk and source enhancements
• Move chat on public website to left side
• Domain scan speed and WAF detection enhancements
• Breach prioritization improvements

Enhancements:

• M365 Breach Reporting improvements
• Ticketing improvements
• Add DKIM to ticketing system
• Embedded image improvements for tickets
• Email login improvements
• Embedded scan improvements
• Breach prioritization improvements

Add:

• 86 Security awareness and compliance training courses
• SAAS Discovery for Data Governance
• Web chat module

Enhancements:

• Cross-site request forgery token handling improvements
• Country and IP allow listing for all of Lavawall® instead of just remote support
• Remote Support resiliency for specific NAT timeout edge cases
• Knowledge code block display improvements
• M365 Breach Detection refinements

Add:

• HITRUST, FTC Safeguards, GLBA, NYDFS, CCPA/CPRA, FINTRAC/PCMLTFA, Alberta PIPA, BC PIPA, Quebec Law 25, Sarbanes-Oxley (SOX), C-SOX, GDPR, NIS2, DORA, Cyber Resilience Act, UK GDPR / DPA, UK Cyber Essentials, Australia Privacy Act
• Additional documents and refinements to GRC questionnaires

Enhancements:

• HIPAA compliance enhancements
• Huge speed increases for Microsoft 365 compliance
• Remote desktop speed enhancements

Add:

• Open source intelligence for CRM
• Green dot on Lavawall icon for tabs with active Remote Desktop sessions

Enhancements:

• Remote Desktop speed improvements
• Suspicious IP detection enhancements
• Microsoft Azure false positive reduction

Add:

• Clone Systems PCI ASV Scan Integration, notifications for missed scans, and inclusion in reports
• Computer Issues added to Remote Support
• Knowledge Base
• Knowledge Base article list automatically updates during user chats

Enhancements:

• Computer Listing Redesigned for Speed
• Efficiency for location lookups

Enhancements:

• Faster Profile View
• Fast loading user timeline “all” view focused around a security signal’s timeframe
• Faster, more responsive, higher resolution for remote support
• Enhanced scripting capabilities with real-time tracking
• Improved handling of temporary virtual machines created by endpoint detection and response (EDR) tools like Defender
• Increased time of available logs from Microsoft 365
• Additional WAF tool interfaces
• Rocket fast domain scanner rewrite
• Network diagram tweaks
• GoDaddy vulnerability and peculiar configuration issues
• GRC tool refinements
• Onboarding checklist improvements
• Increased reliability through database redundancy
• Improved Datto RMM integration and key changes
• Additional training information in PDF and Word reports
• Significant performance enhancements
• Additional Lavawall® user logging
• Enhanced permission capabilities for remote support consent
• Enhanced support for Cloudflare Zero Trust
• Trusted IP friendly name refinements

Add:

• Desktop console remote support
• PowerShell console remote support
• Mobile-friendly remote support
• Canadian Program for Cyber Security Certification (CPCSC) Levels 1, 2, and 3
• phpMyAdmin vulnerabilities
• MongoDB vulnerabilities
• Mongo Express vulnerabilities
• Grafana vulnerabilities
• Kibana vulnerabilities
• Portainer vulnerabilities
• Redis Commander vulnerabilities
• RedisInsight vulnerabilities
• Redis vulnerabilities
• MongoDB exposure
• Ubuntu, Debian, etc. backporting
• Memcached vulnerabilities
• PostgreSQL vulnerabilities
• RHEL, CentOS, Rocky, Alma awareness
• Custom findings for automatic report generation

Enhancements:

• Significant speed improvements to domain scanner
• Significant quality improvements to automatic report generator

Add:

• WordPress version check
• WordPress plugin version check
• Web technologies and popular library checks:
  • Nginx
  • Apache
  • Microsoft IIS
  • LiteSpeed
  • Caddy
  • React
  • Vue.js
  • Angular
  • jQuery
  • Bootstrap
  • Tailwind
  • Google Analytics
  • Google Tag Manager
  • Hotjar
  • Facebook Pixel
• Reduce noise by removing background Microsoft 365, Entra, and Azure processes
• Add Apps to Microsoft 365 activity lists, including third-party and Microsoft apps
• Capability to identify IPs as malicious
• Transient IP flags
• Organization renaming
• Granular GRC Assessment permissions

Enhancement:

• Complete rewrite of domain scanner. It now completes in a few seconds instead of minutes
• Enhance app and user baseline process to reduce false positives and identify more anomalies
• Increase visibility window
• Network diagram display and grouping refinements
• Auto assign one LAN scanner per location instead of per company

Add:

• Automatic security assessment report generation and LLM report prompt generation
• Nessus upload and analysis
• Glance Guest added to screen sharing tools in threat hunter

Enhancement:

• Integrated LAN scan and device information with Nessus scan information
• Summary Dashboard (formerly Executive Dashboard) automatic layout improvements
• Map shows number of devices in a location if multiple devices are present at one location
• Added “Connect Services” section to the right side of the Summary Report.
• Improved reliability for Ransomware/Threat hunter

Add:

• LAN scanner
• Windows integrity checking reporting
• Governance Risk and Compliance (GRC) tool
• Governance document templates
• GRC Assessments
• MSP Onboarding
• Unified control monitoring
• Support for the following frameworks:
  • CIS Critical Security Controls 8.1
  • NIST Cybersecurity Framework 2.0
  • NIST SP 800-171
  • Canadian Centre for Cyber Security Guidance 2024
  • ISO/IEC 27001 2022
  • CMMC Level 2
  • SOC 2 2025
  • Canadian Cyber Essentials 2024
  • Australia Essential Eight
  • HIPAA Security Rule
  • BC Health Information Act
  • Alberta Health Information Act
  • Canada PIPEDA
  • PCI DSS SAQ A
  • PCI DSS SAQ A-EP
  • PCI DSS SAQ B-IP
  • PCI DSS SAQ C
  • PCI DSS SAQ C-VT
  • PCI DSS SAQ D
  • NERC CIP 7
  • Canadian IIROC Cybersecurity Best Practices 2024
  • CPA Canada Cybersecurity Framework
  • Ontario Cyber Security Framework
  • BC Financial Services Authority Security Guidance

Enhancements:

• Microsoft 365 monthly vs. annual licenses
• Microsoft and Google license details added to Billing Summary
• Google Details user activity timeline style adjustments to look more like M365
• Microsoft 365 and Purview log gathering efficiency enhancements
• Increase replacement prioritization for computers with extreme battery degradation

Add:

• Google Workspace monitoring
• Overhaul of Microsoft 365 API interface using more efficient threading
• Microsoft 365 asynchronous logging to gather 180+ days of audit logs even with minimal licenses

Enhancements:

• Entra and Azure App security grants with risk-based monitoring
• Overhaul of Microsoft 365 API interface using more efficient threading
• Microsoft 365 asynchronous logging to gather 180+ days of audit logs even with minimal licenses
• Microsoft 365 User Activity Timeline enhancements and filtering with IP enrichment

Enhancements:

• IPv6 Privacy Extensions (RFC 4941) enhancements
• IP address enrichment
• Impossible travel enhancements, including for areas with limited coordinate information
• False positive reductions
• Duplicate data simplification
• Microsoft 365 and Entra API efficiency gains
• Exchange inbox rule enhancements
• Formatting improvements for Impossible travel
• Asynchronous Microsoft 365 Timeline changes for improved performance

Add:

• Lavawall® manual lockout functionality
• Multi-tenant user management
• PHP Mailer upgrade to 7.0.1
• Lavawall® role management
• Display all notification listing in the web viewer’s local time

Add:

• Microsoft 365 Breach Detection
• Microsoft 365 Risky Mail Rules
• Azure / Entra ID / M365 MFA Strength

Enhancements:

• Decrease notifications page load time
• enhance notification page sorting capabilities

Add:

• PDF security report for Quarterly Business Reviews

Enhancements:

• Initial referral source tracking
• Billing summary quantity clarifications
• Combine Huntress licenses for all companies in the all company view
• Application count update
• Notification page allow multiple selections in search panes
• Redaction features
• Remove redundant help on Replacement Priorities page
• Updated introduction video

Bugs:

• Under heavy load, company creation was taking too long
• Company domain scans were not being consistently added to the company

Add:

• Add outages to notifications
• Add Adobe animate, Adobe Premiere, Figma, Fontforge, Notion, Virtualbox

Enhancements:

• Renamed computers (replacement) forwarding and linking refinements
• Application installation notification consistency
• Notification loading efficiency
• Database scaling with read replica

Add:

• P9 link to P9 logo for RMM integration
• Additional search options for Notification listing
• Add server offline notification options

Enhancements:

• Separate database for read activities to increase reliability and speed
• Notifications on top bar now loaded on demand to speed up all pages
• Re-registered computer redirection refinements
• Application installation notification and timeout tuning
• Script result cleanup to remove progress indicators

Bugs:

• In some cases, when a new user signed up with Microsoft Azure single sign-on, the company information was not fully loaded

Add:

Enhancements:

• AJAX global search starts on first two characters instead of loading all search terms on each page load
• Additional pages added to global search
• Do not include agents that were not properly installed on the dashboard
• Type-o with duplicate “hasn’t”

Add:

• Application Installation
• Additional PowerShell scripts
• Welcome video
• Icon for SQLite DB, ExpressVPN Synchronization
• Notification with link to replacement registration if a device was re-registered

Enhancements:

• Subdomain redaction capabilities
• Enhanced reliability for Filezilla installation
• In the device details page, highlight if the device is hidden, uninstalled, or replaced
• Public website refinements
• Added additional resilience to the TeamViewer update process

Bugs:

• The link to the Ontario support number was correct, but it was displayed incorrectly
• Sort notifications by actual timestamp instead of the numbers in the time
• When domains were assigned to multiple parent and children organizations, they would appear multiple times in the domain summary.
• Shared email registration was not reliable
• Dashboard included partially-installed computers

Enhancements:

• Patch button compatibility enhancements
• Agent compilation now happens faster after signup
• Configuration summary clarification for computers with compliance issues
• Redaction capabilities added to links
• Rename Co. Summary to Org Summary in the side menu

Bugs:

• The correct link wasn’t always displayed for invoice counts in the side bar

Add:

• MSP Billing Summary to make it easier for MSPs to gather license counts for invoices
• Google Map upgrade
• Huntress deployment
• Akira ransomware hunter
• Approximate computer release date added to computer details

Enhancements:

• Improved status responses for Huntress installations, for example when firewalls block the download
• Google Map upgrade
• Start loading the search box data when the 15th device is loaded for the detailed view, so search is accessible before all of the computers load for larger organizations
• Stop all loading when a new company is selected to make company changes faster

Add:

• Scripting capabilities
• Alternative patching for Team Viewer

Enhancements:

• Improved compatibility for ransomware hunter
• Renamed Akira hunter to ransomware hunter
• More classification options for phone call system

Add:

• Sophos API support for endpoints, firewalls, licenses, alerts, and cases
• Huntress deployment
• Akira ransomware hunter

Enhancements:

• RAM description enhancements
• Show process description instead of name in the process listing

Add:

• Offline overlay to device performance chart
• Additional Mac and Intel year details
• Notifications to top bar
• Full notification page
• Ability to display reboot details without clicking the reboot button
• Event log help page
• Patch more Windows applications
• Tool tip in the email verification field when users enter @ to remind them not to enter an email address in that field, but to enter the code we sent by email

Enhancements:

• Allow passkey tools that do not allow for user attestation, such as 1Password and BitWarden. This also expands compatibility for services like iCloud Keychain and Google Password Manager that sync Passkeys across devices.
• Update screen captures on public pages
• Links to make navigation easier on public site
• Display performance graph in local browser's time zone
• Display Average CPU in performance graph instead of max CPU (Min and Max CPU are still displayed in range view)
• Hide process "Name" in Mac and Linux views, since they are the same as the path anyhow
• Reduce the number of notifications in the top bar from 999 to 99 to improve performance
• Updated screen captures in device performance help page
• Allow computer details to display before all computers are loaded
• Add default phone number links to the contact page

Bugs:

• Dynamic ownership setting did not work in some stand-alone situations
• Full C: drive count and computer listings were inconsistent with multi-organization accounts

Add:

• BYOD indicator and easy set in computer listing and details
• Add AV to Operating System Section of system details
• Execute Powershell through Websocket for faster performance even if the console and computer API server are different due to load balancing
• Montana (US) phone number

Enhancements:

• Performance graph enhancements
• Pricing sizing changes for smaller mobile devices, clarifications on benefits
• When clicking a patch to view all affected, automatically change the active company

Add:

• Temperature to device details performance chart tab
• Temperature to hardware details
• Temperature trend to hardware details
• Previous high temperature flags to device details
• Links in the patch details tab that show all computers missing the applicable patch
• Support for referral affiliates
• MSP objectives to MSP menus

Enhancements:

• Improve network use accuracy and replace the line graph with dots to highlight when data is transferred (the line graphs were misleading, since the downloads/uploads are points in time)
• As performance graph data loads asynchronously, do not change the current view
• Change "Data Sent" and "Data Received" to "Upload" and "Download"
• Indicate if an uninstall is pending or completed in device details
• Speed up detailed chart loading, decrease granularity of details for views greater than a day
• Improve pricing alignment and sizing
• Performance overview date data in ISO format to improve compatibility

Bugs:

• Redirection to the console was getting triggered for parts of the public site's domain scan, causing problems for new domain scans.

Add:

• Server-side searching of Windows Event Viewer and summary search, smaller initial client-side searchable load (covers most workstations)

Enhancements:

• Sorting of summary log issues by critical, error, warning, and info
• Faster device detail loading with chunked loading of client-side search for event viewer logs
• Additional security for device detail AJAX
• Clarity of Operating System patches in public website for listed patches

Add:

• Windows Event Viewer Summary and search

Add:

• Pressing Enter on the top page/device search box will select the first item in the list
• Grey overlay (adding grey background and dulling graph) during time periods where the device was sleeping or off
• Loading indicator for progressive load of comprehensive device statistics
• Help for Processes and Performance
• New light grey bandage icon in application listing for applications that have new published versions without patches or mainstream updates. Lavawall® does not install preview or beta updates, but does provide information about their availability.

Enhancement:

• Formatting for comprehensive device performance statistics to fit into one screen
• Mouseover details in comprehensive device statistics show all dimensions (CPU, RAM, Network Sent, Network Received, Used C: Drive, Used D: Drive) with units (% or MB). Time details go on the x-axis
• Improved consistency in patch messaging, application and patch agreement

Add:

• Full zoomable performance history added to device details (previously, it was just the last month)
• Buttons to see the last day, week, month, year, or all performance information
• Ability to show or hide the range of performance metrics within one observation period (previously, the minimum and maximum were displayed in an area graph, which makes it hard to view over long periods)
• Redaction capabilities for Huntress Summary and device detail
• Redaction capabilities in the company drop-down
• Indication if specific process in device detail is currently running
• Serial number for Mac devices in device detail and device search
• Add page number selection buttons to bottom of computer listing

Enhancement:

• Faster device detail loading with performance history loaded asynchronously
• Remove "Page" from page number selection buttons in computer listing

Bugs:

• The number of rows to display in computer listing was not always remembered when changing pages

Add:

• Computer display filters for:
  • Huntress Installed
  • Huntress Not Installed
  • Active Huntress Incidents
• Links in Huntress Company Summary apply computer listing filters automatically
• Devices with Huntress incidents added to Huntress Company Summary
• Help Link to Page titles, integrated with
  • Dashboard
  • Battery Summary
  • Huntress Summary
  • Patch Summary
  • Replacement Priorities
  • White-label Domain Scanner
• Links to detailed help for Datto RMM installation

Enhancement:

• Simpler Huntress Installation Instructions
• Huntress mention on home page
• Formatted Huntress incident details on Device Details

Bug:

• Huntress Company Summary links were filtering “Server Only” automatically.

Add:

• Huntress setup, animation, and instructions
• Analyze devices and automatically assign the most popular orgkey to companies when setting up Huntress API
• Add services tab for Windows, Mac, and Linux for device details
• Add search function in device details for patch, processes, services, applications tabs
• Add Atera, Huntress, and AV as well as "white-label domain scanner" to MSP information
• Allow domain scan results reference code to use white-label website
• Security filters for white-label domain
• Axcient icon to computer listing in platform field if Axcient is installed and Lavawall® identified the reference number for API integration
• Colour-coding risk factors in replacement priority
• Prioritize the following MacOS versions for replacement: Monterey, Big Sur, Catalina
• Atera integration instructions page
• Redaction capability to computer search listing
• Redaction capability for replacement priority report
• Indicate which application update patches Lavawall® will be able to apply in the next release
• Delete domain functionality
• Huntress and other new summary pages added to quick search
• Indicate which computers have open Huntress incidents in the computer listing

Enhancement:

• Sort Domain summary by total errors (descending) followed by domain name (ascending) by default
• Improve network connection type (anonymous proxy, business, etc) listing
• On public website, display footer headers in white if on the index page
• Clarify pricing page to specify that overages are charged month-to-month without high watermark pricing for annual agreements
• Add quantity discounts to each subscription level
• In the feature list, add "Login" to "M365, Passkey, MFA" for clarity
• On public pages, emphasize "no high watermark billing," white-label security, and training
• Add additional subdomains to domain scanner

Add:

• White-label Domain Scanner embedding customization (Embed Scanner under You)
• Huntress API

Add:

• Domain summary page
• Ability to remove domain from company
• FAQ about device installer process
• Uninstall state added to device details

Enhancement:

• Display computer name in title of Device Detail page if opened in new tab/window
• Datto Component refinements
• Display remaining number of days in MFA grace period in delay button instead of maximum period

Add:

• Add automatic calculation of tax based on location in British Columbia and Canada

Enhancement:

• Pricing page clarification and mobile optimization

• When a user who signed up with a passkey or password later tried to log in using Microsoft 365, the user wasn’t redirected to their intended target properly and their sessions were not consistently maintained (fail secure, but fail nonetheless) after sending the new authentication method added notification email. This also prevented consistent session management when the user logged in.
  Thanks to Al Del Degan from New Idea Machine in Calgary, Alberta for responsibly disclosing this issue to us!

Enhancement:

• Increase visible area of domain scan on mobile devices when not logged in
• Improve dark mode visibility

Add:

• MSP Directory
• Display Huntress in the platform area if it's installed
• Datto RMM Windows installation component
• Datto RMM Mac installation component
• SPF issue list in the top summary of domain scanner, so it's visible with a trial
• Port 4443 and Sonicwall to the domain scanner
• Features page for public mobile menu

Enhancement:

• Improve the spacing of the uninstall button
• Improve colours of SVG icons on home page
• Change Datto RMM installation instructions to use the new Datto RMM components
• Prevent the "open computer details in a new window" from wrapping to a new line
• Improve styling for links to make them more obvious on the public site
• Change wording for DKIM test to clarify that it uses standard selectors and may give false positives

Bug:

• Do not display close button on computer details if opened in a full screen

• Change Internal IT to Individual Organization in signup to avoid confusion for non-IT folks signing up.
  Thanks to Faith in Calgary, Alberta for highlighting this confusion during our presentation for Movement51 founders!
• Improve colours of SVG icons on home page

Bug:

• FAQ link on home page was lower-case instead of upper-case
• SVG icons on home page were not showing up on Firefox

New:

• New public-facing website

Enhancement:

• Add redact feature for demos
• Style the free scanner to be easier to see and consistent with the new site

Enhancement:

• User process statistics
• Windows current user