Change Log

Training:

• Certificates show continuing professional education (CPE) time, based on the time the learner was active in the course, up to the course’s total voiceover and video time
• Staff can record their professional certifications and outside training hours, see progress toward each certification’s CPE requirement, and get reminders before a certification or CPE cycle ends
• Certifications and CPE: when a CPE cycle ends, the next period starts automatically, and each certification lists its previous periods with the credits required and earned, the activities counted and whether the requirement was met; people and their training managers can see them, and the CSV download includes them
• Audit export on Training Reports: a CSV file or a Lavawall®-branded PDF, each with a report ID and a fingerprint that shows whether the file has been changed
• Audit exports rate limiting enhancements
• Certificates print on one page without browser headers, download as a PDF in Letter or A4, and carry a QR code anyone can scan to verify them
• Certificates show Valid until or Expired on, and the expiry set in training settings now decides how long certificates stay valid
• Certificate verification pages open without signing in, including in a browser that is already signed in to the console
• Emails from Lavawall® carry their logos inside the message, so they show in Outlook, Gmail and Apple Mail even when pictures from the internet are blocked, and the logo stays readable in dark mode

Notifications:

• The notification bell shows server outage alerts in red, and alerts about a computer’s identity have their own icon
• Each subscriber shows whether it is a console user or an External address
• A console user’s subscription is removed automatically when that user is locked, deleted or no longer in the organization or one of its managing organizations, and each removal is recorded in the activity log
• Only Super Admins, Admins and people given the new Change notification subscribers permission can add, change or remove subscribers, and every change is recorded in the activity log
• When browser notification choices can’t be saved, the notification settings window explains why instead of showing an error code
• Help desk ticket notifications are now delivered reliably, so subscribers receive the new ticket, reply and status emails they signed up for

Computers:

• Only Super Admins, Admins, MSP Client Administrators, Client Local IT and people given the new Restart computers permission can restart computers; only a Super Admin or Admin can give the permission, and every restart and every refused restart is recorded in the activity log
• For everyone else the Restart buttons stay visible and say who can give the permission
• Patch configurations that apply to all companies can be changed only by Lavawall, and show as Read only to other organizations

Security:

• Computer, script, patching, remote support, backup, network diagram and uptime pages refer to records by random identifiers, so nothing in a page, link or request reveals other organizations’ records or how many exist

Remote support:

• On phones and tablets, choosing a display closes the display picker, and tapping anywhere else closes it without clicking on the remote computer
• The display picker, help, snapshot, restart and process details windows have an X to close them, close with the Escape key, and return you to the button that opened them
• Every message box on the remote support page has an X to close it, with larger close buttons on touch screens

Scripts:

• An organization can sign a script it shares with its clients while keeping its contents hidden, so the clients’ technicians can run it on their own computers with end-to-end encryption without ever seeing it; each computer checks both signatures
• The script owner chooses which clients it is offered to, how it may run and which parameter values clients may set, and can withdraw a version at any time
• Organization automation key: scheduled and automatic runs on computers that require signed scripts can be signed by a key a Super Admin endorses, only for scripts a technician approved by their exact content, with every use listed on Remote Access Policy
• Moving old Secret variables to the vault is available to every organization’s Super Admins and Admins, also moves values that client organizations use, and explains on screen what to change when a variable cannot be moved yet
• Before an old Secret value is cleared, the vault tab shows how many earlier run records may still hold it, so it can be changed where that matters
• Script output that cannot be checked for secret values is no longer stored

Microsoft 365:

• Access Review collects SharePoint, Teams and guest access automatically for every company that has it turned on, and keeps it up to date every day
• Access Review shows access waiting for approval again; some was hidden as soon as it was collected
• Access Review opens for a reseller’s client companies, and says when nothing has been collected yet instead of showing an empty table

Enhancements:

• Dependency security updates
• Lavawall connects to Microsoft 365 and Google Workspace only from its servers’ IPv4 addresses, so Lavawall’s sign-ins in your Microsoft 365 and Google Workspace logs always come from the same, recognizable addresses

Training:

• Automatic enrolment of new people: off by default, with a preview that shows who would be enrolled in which course or bundle, and when, before you can turn it on. Only licensed Microsoft 365 or Google Workspace users with their own mailbox are enrolled (never shared, room or equipment mailboxes, or guests), from a switch-on date, with optional catch-up for existing staff a few a day, and your usual reminders
• The automatic language setting now picks a language the course is offered in
• Slides without a minimum time get an automatic one based on the narration or video length, and the course editor shows the value and why
• Completion emails are retried after temporary delivery problems, and any that were missed are sent
• Training emails show your training logo, or the Lavawall® logo when you have not set one, and percentages and certificate IDs display correctly
• Links in training emails and certificate verification addresses point to the learner’s own console
• Training group sync keeps working when someone in the directory has no first name

Phishing Simulations:

• Microsoft 365 delivery settings in their own dialog
• Choose Microsoft 365 or Google for delivery when both are connected
• A banner says what delivery still needs, with a button to fix it, and campaign buttons stay disabled (with the reason shown) until delivery is ready
• Fixed an error that stopped some campaigns from being created or launched
• Schedule Send now sends campaigns at the date and time you choose, entered and shown in your own time zone
• Launch now and Cancel schedule buttons on campaigns
• Campaign, report and add-in dates show in your local time
• Reported emails are no longer shown with a sequential report number
• A shorter delivery status line, and the setup banner no longer appears on training administration pages

Notifications:

• Automatically configure critical notifications for super admins.
• Super admins who unsubscribe stay unsubscribed, and no backlog of older alerts is sent when the subscription starts
• Sign up wizard includes notifications
• Subscribers section moved higher on the notification settings page

Remote Support and Computers:

• New Agent keys page: see which computers are ready for their own keys, then retire the shared organization key when you are ready (optional, per organization)
• Enrolment tokens let you control which new installs can join an organization
• BitLocker recovery keys can be backed up to a key held in your console, so they stay recoverable after the shared key is retired
• When a disk image is restored onto other hardware, a technician is alerted right away, and the copy can be split into its own computer automatically if your organization allows it
• Remote support checks technician passkeys against your organization’s own keys on each computer
• Files sent during remote support go only to allowed folders
• Secrets are blanked out in script output
• Files restored from backup are marked as coming from the internet, so Windows handles them with the same caution
• Logout All asks you to confirm first
• Fixed BitLocker recovery keys that occasionally displayed incorrectly
• Fixed computers being refused after their TPM chip started working

Microsoft 365:

• Automatically Notify users about third-party breaches
• Super admins are told when an app that Lavawall® support has flagged after a vendor security incident is found in their Microsoft 365 tenant, and the alert closes once the app is removed
• Day-to-day Microsoft 365 monitoring uses read-only access, and write access is used only for actions that change something
• We are alerted if Lavawall’s own Microsoft 365 connection is ever used from somewhere unexpected
• More complete audit log collection, and location details for more sign-in addresses, including IPv6
• Company lists no longer show prospects or inactive companies
• Mark reviewed buttons on the security dashboard work again
• A configuration rollback can no longer run twice
• Email signature images are cleaned when uploaded, and SVG files are no longer accepted
• Deleted users are removed automatically two years after they were deleted, unless you choose to keep them or place a legal hold, and the users list shows when each one will be removed

Sophos:

• Client companies can connect Sophos Central with their own credentials instead of their managing organization’s
• The Sophos page shows each connection, when it was last tested and synced, and whose credentials synced each organization
• Fixed Sophos Central connections made with a single tenant’s own credentials not syncing
• Sophos endpoint, alert, case, firewall and licence pages include data synced with a client company’s own credentials

Huntress:

• A Huntress API key that stops working is kept, and the Huntress page asks an administrator to enter it again, instead of the key being removed

Accessibility and French:

• More of the console is available in French (about 500 phrases)
• Training emails and certificates tell screen readers which language they are in
• French certificate dates write the first of the month as « 1er »

Proactive Security:

• Dependency updates
• Stronger checks on every page and action that you reach only your own organization and its client companies
• Signed, time-stamped messages between computers and Lavawall®, enhanced authenticated registration for new computers, and signature checks before Windows agent updates install
• Stronger protection for stored integration credentials
• Integration pages and links refer to records by unique identifiers instead of sequential numbers
• Public blog pages, the blog feed and the embed snippet on Blog Settings refer to blogs and posts by unique identifiers instead of sequential numbers; existing blog links and embeds keep working
• Fixed public blog pages that did not load
• Training and phishing pages and links refer to courses, groups, people, campaigns and reports by unique identifiers instead of sequential numbers
• Compliance pages and links (controls, evidence, documents, risks, audits, vendors, business continuity, privacy, incident response and the trust centre) refer to records by long unique identifiers instead of sequential numbers. For integrators: GRC webhook delivery IDs are now long unique identifiers instead of integers
• Enhanced Lavawall® support chat client authentication
• Security improvements across the console, agents, and integrations

Add:

• High Impact Actions reporting, permissions, and notifications
• Enhanced authentication option for remote support and scripting

Password vault:

• Add secure notes, etc. to the extension instead of just in the web interface.

Enhancements:

• AD/M365 User listing view permission granularity
• Improved handling for terminated users and companies
• Chat support enhancements
• Inactivity lock enhancements per-session instead of per user
• Passkey enhancements for increased compatibility on mobile devices that make assumptions and prevent hardware tokens when integrated passkeys are configured
• Remote consent and connection enhancements
• Stronger distinctions for signing of USGOV and FIPS140-3 accounts with scripting
• Chat warnings for upcoming chats when users enter chats, but don't send anything
• M365 snapshot and signature enhancements, new way of handling images and social links for enhanced encryption and compatibility
• Increased verifications before M365 rollbacks
• Improved Remote desktop resolution and load times

Accessibility and language:

• Additional PCI-related translations and definitions

Proactive Security:

• Enhanced backup signing, M365 and Google Certificate authentication
• Technician browser certification behind the scenes
• Enhanced entitlements and permissions
• Improved signing and protection approach for Sophos and Huntress keys
• Post-quantum cryptography
• Microsoft signing and entitlements on every request with increased permission granularity

Add:

• Outage and informational notifications for console users and public site
• French training
• Multiple relays per region for enhanced capacity
• M365 configuration baselining, storage capacity consistency, storage growth graphs

Enhancements:

• Resolution for remote support based on connection speed
• Health monitoring
• Remote administration permission customizations
• Network traffic efficiency optimizations
• SaaS monitoring improvements to decrease checks
• Elimination of artificial M365 caps; M365 database efficiency improvements
• AWS Evidence saving changes for GRC integration
• AWS Security Assessment
• S3 storage options
• Billing requires phone numbers for new direct debit compliance requirements
• Additional Active Directory logging
• CRM lead management
• Email login changes to ensure that email is sent from the same region
• Google Backup download improvements
• Prevent strings like LGBTQ2S in domains from showing as being high entropy throw-away domains when scoring phishing risk
• Log SAAS discovery (datagov_m365) every 30 minutes instead of every minute
• AWS Sync database connection enhancements
• synchronize ISPs for SAAS monitoring and status page
• change scopes to allow for email injections for phishing simulation
• Google workspace backup resilience
• HubSpot sync skip unchanged records to reduce network traffic
• Ingranm variable consistency and pre-requisites
• Lavawall Remote resolution changes, speed dependent resolution, backup service, tile approach, multiple relays in the same region
• M365sync backups, data retention and data minimization, phishing remediation, maibox usage consistency, policy and configuration baselining
• Phishing email importing refinements
• LGBTQ2SA, LGBT, etc. allow listing to not be listed as throwaway strings

Proactive Security:

• Backend dependency updates
• AWS Sync dependency updates
• Domain scan dependency updates
• Google sync dependency update
• M365 sync dependency update
• HubSpot sync dependency updates
• HubSpot sync billing distributors hardening
• Cloudflare sentinel hardening
• M365 login hardening
• Huntress Company ID hardening
• Active company and user's company hardening

Add:

• Login with Google
• Support Centre
• Remade help pages for each module

Enhancements:

• In the quick search menu, move the page links to the top so they don’t move when the devices load.
• Backend support and logging improvements
• Database connectivity enhancements
• Login by email reliability
• User and company security layers
• Dependency security updates

Add:

• Accessibility Settings feature in top bar
• Get/Send Clipboard added to full screen view
• Technician checklists with integrated console data, monitored sites, SaaS monitoring, ISP monitoring
• Status page indicates outages to SaaS providers and monitored systems
• Ability for non-technicians at a company to access their tickets through the console
• Chat notifications through browser notifications
• Mac and Linux support added for Google Export

Enhancements:

• Remote support decline flow improvements
• Faster initial load for remote support GUI mode
• Display and Layout with higher contrast colours baseline and ability to set further with Accessibility Settings
• Delegated M365 app permissions consistently displayed in SAAS discovery and M365 details
• Tightened controls around shared email providers and schools
• Administrator elevation requests through browser notifications
• Centralization of GRC user roles
• Centralization of CRM, ticket, and user contacts
• Chat history and layout improvements
• Colours improved for accessibility and contrast
• Elevation log improvements
• Elevation approval flow
• Details and risk signals for elevation requests including reputation verdict, parent processes, etc.
• CRM integration
• WAF blocking intelligence in uptime checker
• Details for why a website was recorded down

Enhancements:

• New account creation flow edge case loop prevention
• Session hardening
• Increased use of TPM for password vault
• Backend tool updates to prevent supply-chain dependency vulnerabilities

Add:

• Partner invite codes

Enhancements:

• Changes to technician account pinning for remote support: outside of FIPS 140-3, CJIS, and other restricted environments, the default behaviour for new technician browsers, IP addresses, etc. will be notify the technician and optional security contact instead of blocking the connection. Agent pinning can be configured in the Technician keys section in Remote Policy (from the top of the Users & Permissions page) to
  Block it until an administrator clears it.
  Thanks to David Walliams for highlighting that our previous forced pinning policy was too strict.
• Knowledge base Rich Text Editor enhancements
• Microsoft 365 Authentication speed improvements
• Administrator elevation enhancements.
• Password change hardening
• Add-hoc remote support zero-knowledge and end-to-end encryption enhancements
• CSRF mitigation reliability
• Remote support connection speed enhancements
• Linux secret manager enhancements

Add:

• Add methods for Lavawall® support staff to verify users.
• Lavawall® support enhancements to improve support capabilities without providing internal technicians access to company-level encrypted data
• Wireguard deployment

Enhancements:

• Application patch display consistency
• Testing enhancements
• Console health monitoring enhancements

Enhancements:

• Add password generation to context menu
• Passkey performance improvements
• jQuery updates

Add:

• FIPS 140-3 end-to-end encryption visibility for remote desktop and password vault

Enhancements:

• Large upload stability enhancements
• Additional Cloudflare security
• Administrator elevation
• User login flow and lockout flow smoothing

Add:

• FIPS 140-3 encryption validation
• CJIS logging
• Ingram Micro integration

Enhancements:

• Remote desktop FIPS compliance
• Library updates
• Vault hardening for FIPS 140-3 and non-FIPS (supporting Argon 2id)
• Billing administration
• Administration elevation enhancements

Add:

• Two-way ZenDesk sync
• White-label help desk

Enhancements:

• Ticket tracking to reduce repeated content across comments
• AWS interface expansion
• Administrator elevation enhancements
• Library updates
• Chat spacing

Enhancements:

• Helpdesk phishing detection integration
• Automatic tagging of human, automated, spam tickets
• jQuery updates

Enhancements:

• cPanel, Plesk, and related vulnerabilities added to domain scanner and reports
• Refine control design and assessments for RGC
• Expanded GRC roles

Enhancements:

• Chat retention and deletion
• Ontario PHIPA alignment
• Names added for multi-technician chat
• FIPS 140-3 compliance visibility for technician passkeys and FIDO2 tokens
• GRC wizard improvements
• Additional control over cookies and Cloudflare Analytics for website visitors who don't want it enabled
• GRC Report and Assessment consistency and automation

Add:

• FIPS 140-3 configuration option for CJIS 6.0 control SC-13 compliance
• Phish Rip tool to remove malicious emails from all affected mailboxes with multi-tenant support

Enhancements:

• GRC assessment wizard improvements for municipalities
• CJIS framework clarifications
• StateRamp to GovRAMP clarifications
• Automated GRC evidence automation
• Regional GRC frameworks for Texas, Iowa, Ontario, British Columbia
• Vendor attestation automation
• Framework categorization simplification
• 146 new definitions for tool tips
• Multi-technician web chat optimizations
• Add optional phone number to web chat form
• Cookie privacy notifications for jurisdictions that require it
• Improved assessment filtering
• Regional municipality definitions
• Mobile remote desktop screen selection thumbnail improvements to behave like desktop version
• Mac backstage compatibility
• Texas state and municipal compliance
• Iowa Public Sector Information Obligations
• ADA Title II
• Faster remote support connections
• Sidebar navigation improvements

Add:

• US Municipality Industry to GRC wizard
• CJIS, GovRAMP (formerly StateRAMP), US Water & Wastewater Cyber Security (AWIA) framework
• Improved invitation emails, redirection to console and public site handling

Enhancements:

• NIST SP 800-53 alignment with CJIS
• CJIS framework: CJIS 5.9.5 (9 July 2024), CJIS v6.0, CJIS v6.1 (25 June 2026), gap assessments
• Improved Mac Backend support
• MacOS version history for audit reports
• Increased Nessus file uploads and email receipt

Enhancements:

• Phishing company and user impersonations
• Combined ARM and Intel download script for Apple devices
• Improved invitation emails, redirection to console and public site handling

Enhancements:

• Google Workspace configuration detection and reporting, integration with reports
• Google Workspace breach detection
• Google Workspace activity search and enrichment
• Login flow, turnstile reliability
• Squarespace and signoff impersonation
• Restriction for new accounts outside of Canada and the US

Add:

• Authorization add and download only entitlements for audit clients
• Partner and referral feature
• MeshCore out of band support

Enhancements:

• Google Workspace scope reduction
• Google Workspace DLP, sharing, and permissions
• Google Workspace external application identification
• Subdomain-only scanning

Add:

• Outlook add-in support for shared mailboxes

Enhancements:

• Remote desktop reconnection speed
• Topbar and prospect company distinctions

Add:

• Asset management

Enhancements:

• Notification toast interactions between states
• Loading indicators
• Automatic ticket closing

Enhancements:

• Restart and reminder toast improvements
• Web log refinements

Enhancements:

• Sophos deployment
• Google export for hangouts
• MFA reset

Enhancements:

• Backstage tools
• Nessus automatic imports
• Toast notifications

Enhancements:

• Synthetic task manager speed
• AI reboot analysis
• Inter-operative backstage tools
• Google export downloader

Enhancements:

• Cloudflare Sentinel deployment
• Device-human matching
• Summary dashboard speed
• Sophos deployment

Add:

• News ticker and notifications
• Django security
• Ad-hoc remote desktop
• WordPress "Hello World" detection

Enhancements:

• Attended Ad-Hoc Remote Support deployment process
• compressed scrolling menu
• Virtual Task Manager aggregation
• Device Detail Speed
• Configuration Speed

Add:

• Interac, ACH, Pre-Authorized Debit, and Cheque payment option added

Enhancements:

• Significantly improved M365 login speed
• AI analysis for M365 issues
• M365 false positive reduction
• Granular access improvements

Add:

• Healthcare AI policy templates for every Canadian province
• AI-powered categorization for new SaaS applications with human review
• New M365 Dashboard

Enhancements:

• CRM company and contact improvements
• CRM speed
• SaaS application rule refinements
• Purview log optimization
• M365 breach identification refinements

Add:

• Integration for SaaS discovery, Entra/M365 apps, Google Workspace apps, Vendor inventory, BIA and other resilience items

Enhancements:

• Improved drawing and interface for mobile remote desktop
• New Microsoft 365 dashboard false positive, AI, and export enhancements

Add:

• Google Export disk spanning
• Add Hyper-V manager to the admin launcher
• Evidence for BIA and Vendor assessment
• Flags for company data storage location
• Optional AI analysis for M365 incidents

Enhancements:

• More efficient Google Workspace export graphs and support for more edge cases
• Hide drawing tools when they aren't active in all contexts
• Improve dark mode colours for synthetic regedit
• Only display supported synthetic tools
• Make full screen bar repositionable and less annoying.
• Google workspace edge case errors for unlicensed owners
• Less noisy token recreation during logins
• Mobile admin/scripts/draw/laser in more menu
• Ability to move web console full screen bar to sides and/or top
• Improved performance on google drive monitoring
• Add DPA flexibility in vendor monitoring
• Expand backup options in BIA and vendor inventory

Add:

• Google Export disk spanning
• Add Hyper-V manager to the admin launcher
• Evidence for BIA and Vendor assessment
• Flags for company data storage location

Enhancements:

• Google Export speed, display clarification, and filename truncation for Windows and Mac
• Remote Desktop tool self-healing
• BIA and Vendor identification/interview tool layout and navigation improvements
• Backup clarification in Vendor and BIA interview
• Backstage recalibrated to favour virtual tools
• Timeline button in Google Workspace Vulnerabilities
• Improved integration with the BIA, Vendor, Resilience, DRP, BCP, SaaS identification, and other Lavawall® components

Add:

• Trust Centre / Trust Center
• US and Canadian Spelling option for Trust Centre
• Vendor Inventory
• Data Residency and subprocessor disclosure generator
• Business Impact Assessment system with questionnaires and templates
• Business Continuity Planning
• Disaster Recovery Planning
• Incident Response Planning
• Data Flow mapping
• Prospect flagging for domain scans

Enhancements:

• Improved handling of fake computers that are created when sandboxes install Lavawall for Malware testing

Add:

• Synthetic backstage tools
• Locked out and failed authentication user hunting for M365
• Drawing and colour capabilities for remote support
• Searching for scripts and tools in remote support
• Category, assignee, etc. searching in tickets

Enhancements:

• Speed up remote support connectivity

Add:

• Administrator Elevation capability and integration
• View uninstalled computers in computer view
• Backstage synthetic tools for faster view

Enhancements:

• Speed up computer device detail load time
• Tighter and better use of space for device details
• Microsoft 365 and Google Workspace breach detection refinements

Add:

• Manual user access certification for M365

Enhancements:

• Speed up initial Remote Desktop connections
• Increase connection reliability fore remote desktop connection
• Add protections to ensure that the connection banner doesn't remain in edge case disconnections
• Speed up Login /Register with Microsoft
• Automatically display the active screen on connection
• Email security analyzer awareness for additional CAPTCHAs and other indicators
• Improved grouping and authentication for access review tools

Bugs:

• Missing icon for firewall admin app launcher
• Windows tool launcher tools launch reliability improvements
• GRC Controls error handling improvements

Add:

• M365 SharePoint and Guest Access review
• User contact information added to Remote Desktop interface
• View only mode added to full screen mode
• Prevent remote and local users fighting over mouse control
• Separate remote console user mouse cursor
• “Send as keystrokes” option for pasting content to the remote desktop for cases where the clipboard may not be accessible.
• Device owner contact info on Remote Desktop page
• Recent pages in side bar
• Downloadable snapshots added directly to session notes
• Screen drawing for annotations

Enhancements:

• Email assessment performance research and redesign
• Script execution timeout enhancements
• Microsoft authorization resiliency when Microsoft’s servers are slow or database connections get dropped
• Remote control terminal access improvements
• PDF link details in Outlook plugin
• KnowBe4 Defend Egress link unwrapping enhancements
• Remote Desktop laser now the same as the one that the user sees (more translucent)
• Remote support redundant server resiliency failover improvements
• Domain age calculation is now based on when the email was sent, not when it was analyzed
• Significant enhancements to the malicious link and email content filters for email security
• Outlook add-in version 1.3.2.2 displays the new PDF and Link intelligence within the Outlook add-in. It also has a two-phased system that does a quick initial pass and then follows the links, etc. to give users in-depth analysis without the wait.
• Ubiquiti Unifi all company view improvements

Bugs:

• Windows Remote Agent 1.0.63 fixes a bug that caused remote support console windows to appear black if the remote Windows computer was in a setup screen (e.g. adding a new user) when more than one remote administrators were connected.

Add:

• Dedicated PDF security analysis (in Phishing reporter, side menu, and quick launch search)

Enhancements:

• Enhanced link and launch analysis for PDFs in Outlook security assessment plugin
• Web chat formatting for mobile
• Chat resiliency

Bugs:

• Script execution tracking edge cases
• Server outage configuration setting buttons were inconsistent

Add:

• Ubiquiti cloud console support

Enhancements:

• Resume training from the last slide
• Images added to instructions

Bugs:

• Internal utility for CVE updates hardening and efficiency (issues from internal review and Claude review)

Add:

• Local and AD user search and CSV in device details
• Ubiquiti / Unifi notifications and breach indicators of compromise

Enhancements:

• Full screen usability on mobile remote screen sharing

New:

• Email security domain popularity

Enhancements:

• Expanded Cloudflare monitoring and active blocking configuration
• Domain scanner business context
• Email security context and calculations
• Android compatibility for email security and phishing reporting
• Faster email reports
• Domain scanner performance
• On-site glossary additions
• Mac remote support smart restart tool
• Flags and other visuals for training

Bugs:

• Allow phishing reporting from IPs that aren’t permitted to use the Lavawall® console.

New:

• Cloudflare bad actor blocker integrated automation
• Client and prospect combination feature
• Company duplicate finder
• URL unwrapping and email proxy filter awareness for Outlook phishing add-in
• Remediation instructions in Outlook plugin
• Alpha launch of phishing simulations

Enhancements:

• CRM and company listing
• Industry associations
• Add link to remote access policy to Profile/Security section to make it easier to find
• Phishing Reporter Add-in for Outlook version 1.2.2.0 release
• Improved phishing scores and approach to third-party headers
• Related brand intelligence
• Plain language for phishing panel
• Real-time glossary with mouseover definitions
• Improved Canadian privacy training
• Sophos installation
• MSP client billing and reporting
• JavaScript library security enhancements
• Patch reporting enhancements
• Industry enhancements for OSINT
• Provincial flags
• Training videos and voiceovers

New:

• Allow MSP-managed companies to have their own Sophos accounts with their own APIs and CSV files
• Mac backstage tool launcher
• Outlook phishing tool now checks for malicious PDFs, Outlook, HTML, and compressed files
• Artificial Intelligence (AI) LLM policy
• AI policy integration with AI courses.
• Large Language Model (LLM) training modules by industry
• Microsoft 365 user type and status filtering options
• Sophos configuration for non-MSP Sophos accounts
• Sophos configuration for MSP clients with their own Sophos accounts
• Custom notification subscriptions and thresholds
• Microsoft 365 snapshot to backup features that other Microsoft 365 SAAS backup tools miss
• Azure, Entra, and Microsoft 365 backup
• Azure, Entra, and M365 change audit and configuration change undo
• Device ownership, user contact information, and notes
• PSA ticket notification customization options
• Ticket email customization options to avoid duplicate and circular emails from ZenDesk or Hubspot during migration
• Policy integration with training system
• .EML email security assessment and phishing danger review
• Phishing simulations

Enhancements:

• More granular permissions for MSPs
• Share logging improvements
• Update Sophos Central instructions to match new My Environment menu in Sophos Central.
• Mac remote desktop tool improvements
• Mac remote desktop speed enhancements
• Mac special keys added to mobile interface
• Mac zSH and Bash improvements
• Mac remote support tool installation and update process improvements
• CVE retrieval improvements
• MacOS Monterey compatibility and instruction improvements to match Ventura and later
• Formatting improvements
• Outlook phishing reporting compatibility and speed
• MSP client license, time use, and plan monitoring improvements for billing purposes
• Remote support cursor types
• Remote support sticky modification keys for Mac
• Escape button behaviour changes in full-screen mode
• Active Directory, Microsoft 365 user inactivity search and report criteria

Bugs:

• Removed users were not filtered out of the Microsoft 365 dashboard.

New:

• Find what tabs or programs are monitoring or using the speakers, mic(s), and camera(s) from the web-based Windows remote support tool
• SharePoint, Google Drive, and on-prem file share file changes by user graph
• Multi-select lifecycle and properties in End Users M365 / AD report
• Granular notification preference configurations
• Notifications for stale accounts

Enhancements:

• More granular permissions for MSPs
• BYOD / Company-owned setting improvements in computer listing and details
• Administrator elevation assignment granularity refinements
• AI ticket action item assessment refinements
• Subscription refinements
• SharePoint file change monitor case refinements
• Remote support connectivity enhancements
• Microsoft 365 add-in, SAAS company monitoring enhancements
• Resilience for future code signing changes
• Further decoupling ZenDesk and Hubspot with Lavawall®
• Separate Lifecycle and Properties in End Users AD/M365 report

New:

• Canned Messages
• ZenDesk Canned Message import
• Dedicated SharePoint file change view
• WordPress plugin security details
• Google Drive Monitor
• Scheduled tickets
• Administration Elevation features

Enhancements:

• Speed up M365 app listing
• Accept screen captures in RMM session notes
• Leave RMM session notes open after disconnect
• Domain scan speed and layout
• Report updated to include the new WordPress plugin security details
• Added notes to device details
• Moved nickname modification to device details
• SAAS discovery signal reliability enhancements and feedback capability
• M365 apps integrated with SAAS discovery
• M365 token compromise and agentic AI abuse enhancements
• Phishing plugin deployment refinements
• Changed support chat from ZenDesk to Lavawall. Eating our own dogfood is awesome when it’s so much better! :-)
• Web log filter additions for humans, bots, social, seo, etc.
• Add new pages to top search
• New billing structure
• ZenDesk canned message image imports
• SEO, AIO tweaks

Bugs:

• The consent changes inconsistently had a CSRF mitigation overreaction.

New:

• Outlook phishing plugin (in limited release)
• Privacy policy updates to discuss opt-out for domain reputation services used as part of the phishing plugin
• Hourly and unlimited plan support for help desk and billing summary

Enhancements:

• Breach report refinements
• Security test details for Microsoft 365 refinements
• Improved removed M365 external account handling
• IP address risk and source enhancements
• Move chat on public website to left side
• Domain scan speed and WAF detection enhancements
• Breach prioritization improvements

Enhancements:

• M365 Breach Reporting improvements
• Ticketing improvements
• Add DKIM to ticketing system
• Embedded image improvements for tickets
• Email login improvements
• Embedded scan improvements
• Breach prioritization improvements

Add:

• 86 Security awareness and compliance training courses
• SAAS Discovery for Data Governance
• Web chat module

Enhancements:

• Cross-site request forgery token handling improvements
• Country and IP allow listing for all of Lavawall® instead of just remote support
• Remote Support resiliency for specific NAT timeout edge cases
• Knowledge code block display improvements
• M365 Breach Detection refinements

Add:

• HITRUST, FTC Safeguards, GLBA, NYDFS, CCPA/CPRA, FINTRAC/PCMLTFA, Alberta PIPA, BC PIPA, Quebec Law 25, Sarbanes-Oxley (SOX), C-SOX, GDPR, NIS2, DORA, Cyber Resilience Act, UK GDPR / DPA, UK Cyber Essentials, Australia Privacy Act
• Additional documents and refinements to GRC questionnaires

Enhancements:

• HIPAA compliance enhancements
• Huge speed increases for Microsoft 365 compliance
• Remote desktop speed enhancements

Add:

• Open source intelligence for CRM
• Green dot on Lavawall icon for tabs with active Remote Desktop sessions

Enhancements:

• Remote Desktop speed improvements
• Suspicious IP detection enhancements
• Microsoft Azure false positive reduction

Add:

• Clone Systems PCI ASV Scan Integration, notifications for missed scans, and inclusion in reports
• Computer Issues added to Remote Support
• Knowledge Base
• Knowledge Base article list automatically updates during user chats

Enhancements:

• Computer Listing Redesigned for Speed
• Efficiency for location lookups

Enhancements:

• Faster Profile View
• Fast loading user timeline “all” view focused around a security signal’s timeframe
• Faster, more responsive, higher resolution for remote support
• Enhanced scripting capabilities with real-time tracking
• Improved handling of temporary virtual machines created by endpoint detection and response (EDR) tools like Defender
• Increased time of available logs from Microsoft 365
• Additional WAF tool interfaces
• Rocket fast domain scanner rewrite
• Network diagram tweaks
• GoDaddy vulnerability and peculiar configuration issues
• GRC tool refinements
• Onboarding checklist improvements
• Increased reliability through database redundancy
• Improved Datto RMM integration and key changes
• Additional training information in PDF and Word reports
• Significant performance enhancements
• Additional Lavawall® user logging
• Enhanced permission capabilities for remote support consent
• Enhanced support for Cloudflare Zero Trust
• Trusted IP friendly name refinements

Add:

• Desktop console remote support
• PowerShell console remote support
• Mobile-friendly remote support
• Canadian Program for Cyber Security Certification (CPCSC) Levels 1, 2, and 3
• phpMyAdmin vulnerabilities
• MongoDB vulnerabilities
• Mongo Express vulnerabilities
• Grafana vulnerabilities
• Kibana vulnerabilities
• Portainer vulnerabilities
• Redis Commander vulnerabilities
• RedisInsight vulnerabilities
• Redis vulnerabilities
• MongoDB exposure
• Ubuntu, Debian, etc. backporting
• Memcached vulnerabilities
• PostgreSQL vulnerabilities
• RHEL, CentOS, Rocky, Alma awareness
• Custom findings for automatic report generation

Enhancements:

• Significant speed improvements to domain scanner
• Significant quality improvements to automatic report generator

Add:

• WordPress version check
• WordPress plugin version check
• Web technologies and popular library checks:
  • Nginx
  • Apache
  • Microsoft IIS
  • LiteSpeed
  • Caddy
  • React
  • Vue.js
  • Angular
  • jQuery
  • Bootstrap
  • Tailwind
  • Google Analytics
  • Google Tag Manager
  • Hotjar
  • Facebook Pixel
• Reduce noise by removing background Microsoft 365, Entra, and Azure processes
• Add Apps to Microsoft 365 activity lists, including third-party and Microsoft apps
• Capability to identify IPs as malicious
• Transient IP flags
• Organization renaming
• Granular GRC Assessment permissions

Enhancement:

• Complete rewrite of domain scanner. It now completes in a few seconds instead of minutes
• Enhance app and user baseline process to reduce false positives and identify more anomalies
• Increase visibility window
• Network diagram display and grouping refinements
• Auto assign one LAN scanner per location instead of per company

Add:

• Automatic security assessment report generation and LLM report prompt generation
• Nessus upload and analysis
• Glance Guest added to screen sharing tools in threat hunter

Enhancement:

• Integrated LAN scan and device information with Nessus scan information
• Summary Dashboard (formerly Executive Dashboard) automatic layout improvements
• Map shows number of devices in a location if multiple devices are present at one location
• Added “Connect Services” section to the right side of the Summary Report.
• Improved reliability for Ransomware/Threat hunter

Add:

• LAN scanner
• Windows integrity checking reporting
• Governance Risk and Compliance (GRC) tool
• Governance document templates
• GRC Assessments
• MSP Onboarding
• Unified control monitoring
• Support for the following frameworks:
  • CIS Critical Security Controls 8.1
  • NIST Cybersecurity Framework 2.0
  • NIST SP 800-171
  • Canadian Centre for Cyber Security Guidance 2024
  • ISO/IEC 27001 2022
  • CMMC Level 2
  • SOC 2 2025
  • Canadian Cyber Essentials 2024
  • Australia Essential Eight
  • HIPAA Security Rule
  • BC Health Information Act
  • Alberta Health Information Act
  • Canada PIPEDA
  • PCI DSS SAQ A
  • PCI DSS SAQ A-EP
  • PCI DSS SAQ B-IP
  • PCI DSS SAQ C
  • PCI DSS SAQ C-VT
  • PCI DSS SAQ D
  • NERC CIP 7
  • Canadian IIROC Cybersecurity Best Practices 2024
  • CPA Canada Cybersecurity Framework
  • Ontario Cyber Security Framework
  • BC Financial Services Authority Security Guidance

Enhancements:

• Microsoft 365 monthly vs. annual licenses
• Microsoft and Google license details added to Billing Summary
• Google Details user activity timeline style adjustments to look more like M365
• Microsoft 365 and Purview log gathering efficiency enhancements
• Increase replacement prioritization for computers with extreme battery degradation

Add:

• Google Workspace monitoring
• Overhaul of Microsoft 365 API interface using more efficient threading
• Microsoft 365 asynchronous logging to gather 180+ days of audit logs even with minimal licenses

Enhancements:

• Entra and Azure App security grants with risk-based monitoring
• Overhaul of Microsoft 365 API interface using more efficient threading
• Microsoft 365 asynchronous logging to gather 180+ days of audit logs even with minimal licenses
• Microsoft 365 User Activity Timeline enhancements and filtering with IP enrichment

Enhancements:

• IPv6 Privacy Extensions (RFC 4941) enhancements
• IP address enrichment
• Impossible travel enhancements, including for areas with limited coordinate information
• False positive reductions
• Duplicate data simplification
• Microsoft 365 and Entra API efficiency gains
• Exchange inbox rule enhancements
• Formatting improvements for Impossible travel
• Asynchronous Microsoft 365 Timeline changes for improved performance

Add:

• Lavawall® manual lockout functionality
• Multi-tenant user management
• PHP Mailer upgrade to 7.0.1
• Lavawall® role management
• Display all notification listing in the web viewer’s local time

Add:

• Microsoft 365 Breach Detection
• Microsoft 365 Risky Mail Rules
• Azure / Entra ID / M365 MFA Strength

Enhancements:

• Decrease notifications page load time
• enhance notification page sorting capabilities

Add:

• PDF security report for Quarterly Business Reviews

Enhancements:

• Initial referral source tracking
• Billing summary quantity clarifications
• Combine Huntress licenses for all companies in the all company view
• Application count update
• Notification page allow multiple selections in search panes
• Redaction features
• Remove redundant help on Replacement Priorities page
• Updated introduction video

Bugs:

• Under heavy load, company creation was taking too long
• Company domain scans were not being consistently added to the company

Add:

• Add outages to notifications
• Add Adobe animate, Adobe Premiere, Figma, Fontforge, Notion, Virtualbox

Enhancements:

• Renamed computers (replacement) forwarding and linking refinements
• Application installation notification consistency
• Notification loading efficiency
• Database scaling with read replica

Add:

• P9 link to P9 logo for RMM integration
• Additional search options for Notification listing
• Add server offline notification options

Enhancements:

• Separate database for read activities to increase reliability and speed
• Notifications on top bar now loaded on demand to speed up all pages
• Re-registered computer redirection refinements
• Application installation notification and timeout tuning
• Script result cleanup to remove progress indicators

Bugs:

• In some cases, when a new user signed up with Microsoft Azure single sign-on, the company information was not fully loaded

Add:

Enhancements:

• AJAX global search starts on first two characters instead of loading all search terms on each page load
• Additional pages added to global search
• Do not include agents that were not properly installed on the dashboard
• Type-o with duplicate “hasn’t”

Add:

• Application Installation
• Additional PowerShell scripts
• Welcome video
• Icon for SQLite DB, ExpressVPN Synchronization
• Notification with link to replacement registration if a device was re-registered

Enhancements:

• Subdomain redaction capabilities
• Enhanced reliability for Filezilla installation
• In the device details page, highlight if the device is hidden, uninstalled, or replaced
• Public website refinements
• Added additional resilience to the TeamViewer update process

Bugs:

• The link to the Ontario support number was correct, but it was displayed incorrectly
• Sort notifications by actual timestamp instead of the numbers in the time
• When domains were assigned to multiple parent and children organizations, they would appear multiple times in the domain summary.
• Shared email registration was not reliable
• Dashboard included partially-installed computers

Enhancements:

• Patch button compatibility enhancements
• Agent compilation now happens faster after signup
• Configuration summary clarification for computers with compliance issues
• Redaction capabilities added to links
• Rename Co. Summary to Org Summary in the side menu

Bugs:

• The correct link wasn’t always displayed for invoice counts in the side bar

Add:

• MSP Billing Summary to make it easier for MSPs to gather license counts for invoices
• Google Map upgrade
• Huntress deployment
• Akira ransomware hunter
• Approximate computer release date added to computer details

Enhancements:

• Improved status responses for Huntress installations, for example when firewalls block the download
• Google Map upgrade
• Start loading the search box data when the 15th device is loaded for the detailed view, so search is accessible before all of the computers load for larger organizations
• Stop all loading when a new company is selected to make company changes faster

Add:

• Scripting capabilities
• Alternative patching for Team Viewer

Enhancements:

• Improved compatibility for ransomware hunter
• Renamed Akira hunter to ransomware hunter
• More classification options for phone call system

Add:

• Sophos API support for endpoints, firewalls, licenses, alerts, and cases
• Hubspot integration for Lavawall support
• Huntress deployment
• Akira ransomware hunter

Enhancements:

• RAM description enhancements
• Show process description instead of name in the process listing

Add:

• Offline overlay to device performance chart
• Additional Mac and Intel year details
• Notifications to top bar
• Full notification page
• Ability to display reboot details without clicking the reboot button
• Event log help page
• Patch more Windows applications
• Tool tip in the email verification field when users enter @ to remind them not to enter an email address in that field, but to enter the code we sent by email

Enhancements:

• Allow passkey tools that do not allow for user attestation, such as 1Password and BitWarden. This also expands compatibility for services like iCloud Keychain and Google Password Manager that sync Passkeys across devices.
• Update screen captures on public pages
• Links to make navigation easier on public site
• Display performance graph in local browser's time zone
• Display Average CPU in performance graph instead of max CPU (Min and Max CPU are still displayed in range view)
• Hide process "Name" in Mac and Linux views, since they are the same as the path anyhow
• Reduce the number of notifications in the top bar from 999 to 99 to improve performance
• Updated screen captures in device performance help page
• Allow computer details to display before all computers are loaded
• Add default phone number links to the contact page

Bugs:

• Dynamic ownership setting did not work in some stand-alone situations
• Full C: drive count and computer listings were inconsistent with multi-organization accounts

Add:

• BYOD indicator and easy set in computer listing and details
• Add AV to Operating System Section of system details
• Execute Powershell through Websocket for faster performance even if the console and computer API server are different due to load balancing
• Montana (US) phone number

Enhancements:

• Performance graph enhancements
• Pricing sizing changes for smaller mobile devices, clarifications on benefits
• When clicking a patch to view all affected, automatically change the active company

Add:

• Temperature to device details performance chart tab
• Temperature to hardware details
• Temperature trend to hardware details
• Previous high temperature flags to device details
• Links in the patch details tab that show all computers missing the applicable patch
• Support for referral affiliates
• MSP objectives to MSP menus

Enhancements:

• Improve network use accuracy and replace the line graph with dots to highlight when data is transferred (the line graphs were misleading, since the downloads/uploads are points in time)
• As performance graph data loads asynchronously, do not change the current view
• Change "Data Sent" and "Data Received" to "Upload" and "Download"
• Indicate if an uninstall is pending or completed in device details
• Speed up detailed chart loading, decrease granularity of details for views greater than a day
• Improve pricing alignment and sizing
• Performance overview date data in ISO format to improve compatibility

Bugs:

• Redirection to the console was getting triggered for parts of the public site's domain scan, causing problems for new domain scans.

Add:

• Server-side searching of Windows Event Viewer and summary search, smaller initial client-side searchable load (covers most workstations)

Enhancements:

• Sorting of summary log issues by critical, error, warning, and info
• Faster device detail loading with chunked loading of client-side search for event viewer logs
• Additional security for device detail AJAX
• Clarity of Operating System patches in public website for listed patches

Add:

• Windows Event Viewer Summary and search

Add:

• Pressing Enter on the top page/device search box will select the first item in the list
• Grey overlay (adding grey background and dulling graph) during time periods where the device was sleeping or off
• Loading indicator for progressive load of comprehensive device statistics
• Help for Processes and Performance
• New light grey bandage icon in application listing for applications that have new published versions without patches or mainstream updates. Lavawall® does not install preview or beta updates, but does provide information about their availability.

Enhancement:

• Formatting for comprehensive device performance statistics to fit into one screen
• Mouseover details in comprehensive device statistics show all dimensions (CPU, RAM, Network Sent, Network Received, Used C: Drive, Used D: Drive) with units (% or MB). Time details go on the x-axis
• Improved consistency in patch messaging, application and patch agreement

Add:

• Full zoomable performance history added to device details (previously, it was just the last month)
• Buttons to see the last day, week, month, year, or all performance information
• Ability to show or hide the range of performance metrics within one observation period (previously, the minimum and maximum were displayed in an area graph, which makes it hard to view over long periods)
• Redaction capabilities for Huntress Summary and device detail
• Redaction capabilities in the company drop-down
• Indication if specific process in device detail is currently running
• Serial number for Mac devices in device detail and device search
• Add page number selection buttons to bottom of computer listing

Enhancement:

• Faster device detail loading with performance history loaded asynchronously
• Remove "Page" from page number selection buttons in computer listing

Bugs:

• The number of rows to display in computer listing was not always remembered when changing pages

Add:

• Computer display filters for:
  • Huntress Installed
  • Huntress Not Installed
  • Active Huntress Incidents
• Links in Huntress Company Summary apply computer listing filters automatically
• Devices with Huntress incidents added to Huntress Company Summary
• Help Link to Page titles, integrated with
  • Dashboard
  • Battery Summary
  • Huntress Summary
  • Patch Summary
  • Replacement Priorities
  • White-label Domain Scanner
• Links to detailed help for Datto RMM installation

Enhancement:

• Simpler Huntress Installation Instructions
• Huntress mention on home page
• Formatted Huntress incident details on Device Details

Bug:

• Huntress Company Summary links were filtering “Server Only” automatically.

Add:

• Huntress setup, animation, and instructions
• Analyze devices and automatically assign the most popular orgkey to companies when setting up Huntress API
• Add services tab for Windows, Mac, and Linux for device details
• Add search function in device details for patch, processes, services, applications tabs
• Add Atera, Huntress, and AV as well as "white-label domain scanner" to MSP information
• Allow domain scan results reference code to use white-label website
• Security filters for white-label domain
• Axcient icon to computer listing in platform field if Axcient is installed and Lavawall® identified the reference number for API integration
• Colour-coding risk factors in replacement priority
• Prioritize the following MacOS versions for replacement: Monterey, Big Sur, Catalina
• Atera integration instructions page
• Redaction capability to computer search listing
• Redaction capability for replacement priority report
• Indicate which application update patches Lavawall® will be able to apply in the next release
• Delete domain functionality
• Huntress and other new summary pages added to quick search
• Indicate which computers have open Huntress incidents in the computer listing

Enhancement:

• Sort Domain summary by total errors (descending) followed by domain name (ascending) by default
• Improve network connection type (anonymous proxy, business, etc) listing
• On public website, display footer headers in white if on the index page
• Clarify pricing page to specify that overages are charged month-to-month without high watermark pricing for annual agreements
• Add quantity discounts to each subscription level
• In the feature list, add "Login" to "M365, Passkey, MFA" for clarity
• On public pages, emphasize "no high watermark billing," white-label security, and training
• Add additional subdomains to domain scanner

Add:

• White-label Domain Scanner embedding customization (Embed Scanner under You)
• Huntress API

Add:

• Domain summary page
• Ability to remove domain from company
• FAQ about device installer process
• Uninstall state added to device details

Enhancement:

• Display computer name in title of Device Detail page if opened in new tab/window
• Datto Component refinements
• Display remaining number of days in MFA grace period in delay button instead of maximum period

Add:

• Add automatic calculation of tax based on location in British Columbia and Canada

Enhancement:

• Pricing page clarification and mobile optimization

• When a user who signed up with a passkey or password later tried to log in using Microsoft 365, the user wasn’t redirected to their intended target properly and their sessions were not consistently maintained (fail secure, but fail nonetheless) after sending the new authentication method added notification email. This also prevented consistent session management when the user logged in.
  Thanks to Al Del Degan from New Idea Machine in Calgary, Alberta for responsibly disclosing this issue to us!

Enhancement:

• Increase visible area of domain scan on mobile devices when not logged in
• Improve dark mode visibility

Add:

• MSP Directory
• Display Huntress in the platform area if it's installed
• Datto RMM Windows installation component
• Datto RMM Mac installation component
• SPF issue list in the top summary of domain scanner, so it's visible with a trial
• Port 4443 and Sonicwall to the domain scanner
• Features page for public mobile menu

Enhancement:

• Improve the spacing of the uninstall button
• Improve colours of SVG icons on home page
• Change Datto RMM installation instructions to use the new Datto RMM components
• Prevent the "open computer details in a new window" from wrapping to a new line
• Improve styling for links to make them more obvious on the public site
• Change wording for DKIM test to clarify that it uses standard selectors and may give false positives

Bug:

• Do not display close button on computer details if opened in a full screen

• Change Internal IT to Individual Organization in signup to avoid confusion for non-IT folks signing up.
  Thanks to Faith in Calgary, Alberta for highlighting this confusion during our presentation for Movement51 founders!
• Improve colours of SVG icons on home page

Bug:

• FAQ link on home page was lower-case instead of upper-case
• SVG icons on home page were not showing up on Firefox

New:

• New public-facing website

Enhancement:

• Add redact feature for demos
• Style the free scanner to be easier to see and consistent with the new site

Enhancement:

• User process statistics
• Windows current user