Release Notes

2026-07-24

backend v0.1128.0 / frontend v0.859.0

New features

Endpoints: search covers more fields, and every column in the endpoints tables can be filtered.
Scopes: a new Copy Scope action duplicates an existing scope’s definition as a starting point for a new scope.
Checks: checks now run nightly by default, and each check’s schedule can be viewed and adjusted.
Forge: CVE research is more comprehensive, combining a dedicated CVE database lookup with recency-anchored web search, and distinguishes emerging-incident questions from established CVE research.
Integrations: CrowdStrike endpoints are enriched with hardware identity details from the CrowdStrike Hosts API.

Improvements

Strategies: updating the strategy for a remediation subject automatically rematches the targets it applies to.
Ticketing: scope ticket creation is more resilient. Lost ticket announcements are retried, and duplicate tickets are never created.
Endpoints: agent enrollment surfaces endpoint-linkage errors immediately, and a background sweep links agents that enrolled without an endpoint.

Bug fixes

Targets: retrying a scope no longer leaves a target’s status showing the previous attempt’s Failed state while the retry is in progress.
Approvals: approving or rejecting a remediation attempt that has already been replaced by a newer attempt is now safely rejected.
Integrations: CrowdStrike vulnerability sync returns endpoints correctly, and a failed enrichment batch no longer affects the rest of the sync.
Endpoints: the managed-by filter includes Cloud Infrastructure.
Checks: preflight validation honors the AI verdict, and service checks pass when a service is expected to be absent and is absent.
Targets: dependency targets are verified with real probes instead of being automatically confirmed.
Targets: remediation of Homebrew cask installs resolves to the managed application correctly.
Endpoints: software identification no longer overwrites a matched product identity when a later scan cannot identify the product.
Findings: vulnerability detection recovers for software with capitalized product names (such as Mozilla Firefox on Windows). An upstream product-identification service became case-sensitive; product lookups are now normalized before matching, so affected software is identified and scanned again automatically.
People: lookups and updates reference the correct person record and return a clear not-found error for unknown people.

2026-07-21

backend v0.1098.0 / frontend v0.849.0

New features

Endpoints: delete an endpoint along with its vulnerability data, and choose to keep operational data when deleting an integration.
Scopes: the scopes table now shows Active, Successful, and Failed target counts for each scope.

Improvements

Endpoints: automatic recovery of stalled osquery data collection now works on Windows endpoints.
Scopes: activating or resuming a scope now immediately re-evaluates its targets and starts remediation.
Checks: probe checks use an upgraded AI model for higher-quality results.
Strategies: strategy recommendations link directly to the corresponding strategy on the Strategies page.

Bug fixes

Endpoints: deleting an endpoint no longer disrupts agent event processing or scope evaluation for remaining endpoints and targets.
Approvals: an approval that fails to start remediation now restores the strategy’s previous state instead of leaving it superseded.
Approvals: duplicate pending-approval entries no longer occur for the same target.

2026-07-16

backend v0.1088.0 / frontend v0.845.0

New features

Dashboard: filter the summary metrics and trend graph by scanner source and time frame.
Targets: a new Scope column shows which scope each target belongs to, and the status popup now shows how the target was attributed to that scope.

Improvements

Strategies: strategy and remediation-subject generation now uses an upgraded AI model for higher-quality output.
Strategies: lowering your approval confidence threshold automatically re-evaluates strategies that were previously blocked by it.
Integrations: ticket updates in connected ticketing systems are now published durably after a remediation settles — a failed update is retried instead of silently dropped.

Bug fixes

Strategies: script-based strategies can no longer be generated with a malformed script template.
Approvals: approval counts and dispatches no longer include targets outside the approval’s scope.

2026-07-15

backend v0.1079.0 / frontend v0.838.0

New features

Targets: a new Finished column shows when each target was remediated or closed, with 30/60/90-day quick filters.
Scopes: pause and reactivate a scope directly from a row action on the scopes table.
Scopes: the scope’s targets view now shows when each target entered the scope.

Improvements

Strategies: the approval table is now sortable, and low-confidence entries show the strategy’s confidence score alongside the approval threshold.
Targets: version-change verification results now appear as remediation evidence, showing how a fix was confirmed.

Bug fixes

Scopes: creating or editing a scope now moves idle targets to their most specific matching scope.

2026-07-14

backend v0.1068.0 / frontend v0.832.0

New features

Strategies: added an Approved/Unapproved column with filtering, so you can see and filter strategies by their approval status.
Checks: probe check results now show timestamps.

Improvements

Software matching: product editions (such as Developer Edition) now bind to their own subject rather than the base product, improving remediation accuracy.
Endpoints: Furl now automatically recovers an agent whose osquery data collection has stalled, without manual intervention.
Endpoints: updated the bundled osquery to 5.23.1.
Remediation: job completions are now published durably, so a completed job no longer resolves with the wrong outcome after a transient failure.
Knowledge Graph: neighbor counts are computed more efficiently.
Scopes: added a Cancel button to the scope create and edit views.
Integrations: removed Carbon Black from the integrations list.

Bug fixes

Strategies: strategies disabled for your organization can no longer be approved or dispatched.
Findings: product and vendor filters are now case-insensitive.
Targets: the Status column now sorts by its displayed label.
Targets: uncovered targets are counted per target rather than per finding.
Targets: default filtering is only applied when you haven’t set any other filters.
Targets & Dashboard: the Furl-remediated count now reconciles with its drill-in view.
Rollouts: a lost ring-activation dispatch no longer stalls a rollout.
Checks: a failed manual check-run dispatch no longer wedges the check.

2026-07-07

backend v0.1030.0 / frontend v0.823.0

New features

Remediations that stall because an agent stops responding are now automatically detected and unblocked, so a dead agent no longer strands a remediation indefinitely.

Improvements

Endpoints: agent health now reflects whether the endpoint’s osquery collection loop is actually running its assigned jobs, so an agent that is checking in but no longer collecting data no longer shows as fully healthy.
Agent data reliability: agent events that fail to process are now retried and routed to a dead-letter queue instead of being silently dropped.

Bug fixes

Targets: targets awaiting a reboot after a successful update now resolve as remediated.
Windows remediations now report their real command exit codes and capture the full deployment output.
Remediation verification now runs against the endpoint’s actual operating system, fixing incorrect package-manager verification on mixed-OS fleets.
Nested tables now keep their pagination controls anchored at the bottom instead of floating mid-table.

2026-07-01

backend v0.1015.0 / frontend v0.819.0

Improvements

Forge: you can now create scopes using tag-based filters.
Forge: newly created remediation scopes start in a paused state, so you can review them before they take effect.

Bug fixes

Forge: target queries are now limited to your in-scope targets.
Windows winget remediations now reliably resolve winget on the system PATH.

2026-06-30

backend v0.1010.0 / frontend v0.818.0

Improvements

Data tables: wide tables now have a floating horizontal scrollbar so you can scroll across columns without jumping to the bottom of the page.

Bug fixes

Agent downloads: hardened the agent download redirect endpoints against path-traversal in encoded URLs.
Scopes: the scope detail page now shows tag names instead of internal IDs.

2026-06-26

backend v0.1009.0 / frontend v0.814.0

Improvements

Knowledge Graph: node detail loads faster
General performance improvements

2026-06-25

backend v0.1007.0 / frontend v0.813.0

Improvements

Knowledge graph: in-flight graph data requests are now cancelled when you navigate away or close the page, avoiding wasted work.

2026-06-24

backend v0.1003.0 / frontend v0.810.0

Improvements

Security improvements from regular scans.

Bug fixes

Endpoints: IP and MAC addresses now stay current as agents report changes, instead of occasionally going stale.
Findings: endpoint names now display correctly even when an endpoint has no IP address.

2026-06-23

backend v0.997.0 / frontend v0.807.0

Improvements

Findings: the Detected column is now sortable.

Bug fixes

Sign-in and account screens now follow your dark-mode theme instead of always rendering in light mode.
Forge: cancelling a single endpoint in a multi-endpoint batch now cancels only that endpoint — the batch resumes and still returns results from the others.
Findings: when a data source stops reporting, its findings and targets are now closed on endpoints that other sources still report, instead of lingering as stale.
Targets: asset-identity matching now prefers an exact name match when multiple candidates tie, so assets reported by multiple sources are correlated more accurately.

2026-06-23

backend v0.994.0 / frontend v0.805.0

Improvements

Endpoints: the agent status column is now labeled “Agent health” and reports two distinct signals — whether the agent is active (checked in recently) and whether it is healthy (its two daemons are reporting in sync).
Security improvements from regular scans.

Bug fixes

Forge: osquery and script commands are no longer sent to endpoints whose agent is inactive — previously the job would silently queue and time out after about 15 minutes. Forge now declines up front and explains why, so you can choose an active endpoint.
Forge: when a conversation’s messages fail to load, you now see an error you can retry instead of what looked like an empty conversation.

2026-06-22

backend v0.990.0 / frontend v0.802.0

Improvements

Integrations: deleting an integration now cleans up its associated operational data.

2026-06-19

backend v0.986.0 / frontend v0.801.0

New features

Forge: jobs can now dispatch across multiple endpoints in parallel, with a toggle to switch between parallel and sequential dispatch.
Endpoints: a dedicated, filterable Source column shows where each endpoint’s data comes from.

Improvements

Endpoints: the page header now shows an at-a-glance summary of your agent fleet.
Endpoints: the +N source rollup now shows integration logos on hover, and the hostname column stays frozen in place as you scroll horizontally.

Bug fixes

Endpoints: corrected the tooltip shown on the +N source rollup.

2026-06-17

backend v0.983.0 / frontend v0.794.0

New features

Dashboard: KPI tiles are now clickable and drill into the matching page, pre-filtered — for example, Actively exploited opens Findings filtered to known-exploited vulnerabilities, Closed remediation targets opens Targets filtered to closed, and Agents deployed opens Endpoints filtered to agent-managed hosts.
Endpoints: you can now export the Endpoints table to CSV.
Integrations: each connection can have its own data-source refresh interval, so you can tune how often Furl pulls from each source independently.
Dashboard: a new agent-coverage card shows how many endpoints don’t yet have an agent installed.
Memory: the memory your agent forms during its dreaming phase is now visible in the Memory tab.

Improvements

Dashboard: the remediation-target tiles are now labeled “Open remediation targets” and “Closed remediation targets” for clarity.
Dashboard: clearer vulnerability tile labels (“Actively exploited vulnerabilities”, “Total vulnerabilities (all sources)”, “Furl-remediated targets”), a more logical tile order, and consistent alignment so values and trend graphs line up across each row.
Dashboard: vulnerability stats are clearer — resolved targets are split into “Remediated by Furl” and “Closed”, and the deduplicated tile is renamed “Unique vulnerabilities”.
Targets: the Validation column now uses clearer, consistent wording (unvalidated → validating → valid / not valid).

Bug fixes

Dashboard: the Open remediation targets tile now shows the same count as the Targets page.
Validation: a finding is no longer marked invalid without corroborating evidence, preventing false negatives.

2026-06-15

backend v0.973.0 / frontend v0.783.0

New features

Targets: a new Open/Closed State column lets you filter and sort targets by whether they’re still open or have been closed.

Improvements

Targets: the Validation column is simplified — the Status now reflects only terminal outcomes, and the in-progress validating state is collapsed into a cleaner indicator. Scope-only validation shows a read-only status.
Settings and in-app navigation load faster — fewer redirects reaching Settings and a cached user profile remove a round-trip on each navigation.

Bug fixes

Vulnerability matching is more precise: CPE fallback matching now only applies to tokens that broaden the installed product, reducing false matches.
Logging out from the user menu now works reliably.
The app keeps its styling intact when an error page is shown.

2026-06-13

backend v0.968.0 / frontend v0.777.0

Improvements

Pages now refresh their data more reliably, and background polling pauses while you’re on another view — keeping what you see current without unnecessary requests.
Empty and error states across the app now show clear, plain-language messages instead of leaking internal technical text.

2026-06-12

backend v0.966.0 / frontend v0.774.0

Improvements

Remediation preflight now detects packages that are held back from upgrades (apt holds) on Linux endpoints, so blocked upgrades are surfaced before a fix is attempted.
Tables across the app use a consistent set of page-size options (10, 25, 50, 100).

Bug fixes

Vulnerability matching identifies more products correctly: ambiguous vendor/product combinations now fall back to product-only matching, and product identifiers covered by known CVEs are preferred.
Finding-to-target links are now recorded consistently during vulnerability processing.
Forge: when multiple approvals are pending, each response is applied to the correct action.

2026-06-11

backend v0.963.0 / frontend v0.774.0

Improvements

Targets: faster, more consistent loading for large target sets — target lists, filters, and counts are now served from purpose-built tables.
Endpoints: software inventory reports are now processed by diffing against the previous snapshot instead of rewriting every record, reducing processing load for large fleets.
Tables across the app share consistent page-size options (10, 25, 50, 100) and default to 10 rows per page.

Bug fixes

Vulnerability matching now recognizes more product version formats, and targets are no longer incorrectly closed as removed when an upstream CVE lookup briefly returns no results.
Vulnerability identity matching is more accurate: candidate software identities covered by the CVE are preferred, and vendor/product pairs with no match fall back to a product-only lookup.
Findings are now recorded even when no remediation target exists yet, and a finding that affects several pieces of software on one endpoint is linked to all of them.

2026-06-10

backend v0.951.0 / frontend v0.772.0

New features

A new overview dashboard surfaces KPI cards and a vulnerability/remediation trend at a glance.

Improvements

Targets: the list now paginates, sorts, and filters on the server, so large target sets load quickly and every column stays sortable across pages.
Findings: the table now has per-column filters and a Source column showing where each finding came from.
Scopes: processed targets now distinguish targets you closed from those the remediation pipeline resolved, and the processed-targets CSV export includes the closed disposition and the time each target was closed.

Bug fixes

Targets: the Urgency column now sorts in the correct order.

2026-06-08

backend v0.940.0 / frontend v0.766.0 / agent v1.2.0

New features

The macOS agent (v1.2.0) now supports Intel-based (amd64) Macs running macOS Sequoia and later.

Improvements

Findings: table columns now keep a fixed width while you sort, so the column headers no longer shift around.

Bug fixes

Targets: furl-detected remediation targets now dedupe consistently, so duplicate entries no longer appear across calculation cycles.
Vulnerability scanning now detects known CVEs for Windows applications whose version numbers carry extra trailing segments (such as 7-Zip), which were previously reported as having no known vulnerabilities.

2026-06-07

backend v0.935.0 / frontend v0.765.0

New features

Authoring a remediation subject in Forge now automatically rematches previously-unmatched targets to it, so newly-defined subjects immediately pick up the software already in your inventory.

Improvements

Targets now match to remediation strategies using their native CPE and package URL (purl) identifiers, so more software is correctly paired with the right strategy.
Vulnerability scans run faster — identity resolution is batched and deduplicated, and probes are skipped for targets that can’t be remediated.

Bug fixes

Known Exploited Vulnerability (KEV) indicators now render with the correct critical styling.

2026-06-06

backend v0.924.0 / frontend v0.764.0

Improvements

Targets: the list now sorts by highest CVSS score first by default, so the most severe targets surface at the top.
Severity and urgency indicators are now a single, consistent chip style across the app.

Bug fixes

Fixed a sorted, filterable column header that was invisible in light mode.

2026-06-05

backend v0.923.0 / frontend v0.757.0

New features

Findings: a high-level metrics header now summarizes key counts at the top of the Findings page.

Bug fixes

Integrations: endpoints imported from Qualys now include their hardware UUID and serial number — and use the correct hardware identifier on macOS — so they correlate with agent-managed endpoints instead of appearing as duplicates.
Forge: the size of a proposed reach change is now validated before it can be applied.

2026-06-04

backend v0.910.0 / frontend v0.756.0

New features

Scopes: you can now retry remediation across a scope’s targets — retry all of them, just the failed or blocked ones, or an individual target.

Bug fixes

Targets: remediation targets and their findings now close automatically when the underlying software is removed from an endpoint — and reopen if it’s reinstalled — instead of lingering as active indefinitely.
Remediation: when a remediation is blocked during preflight checks, the blocking reason now surfaces instead of the attempt failing without explanation.

2026-06-03

backend v0.906.0

Bug fixes

Findings: improved CVE version matching so vulnerabilities are detected more accurately — affected software with open-ended version ranges, trailing-zero version numbers, and multi-segment versions now match correctly, reducing missed detections.

2026-06-02

backend v0.905.0 / frontend v0.755.0

New features

Scopes: new scopes are created in a paused state so you can review their configuration before any remediation activity begins; activate or resume them when ready.
Endpoints: the endpoint detail panel now includes a software inventory table listing the software installed on that endpoint.

Improvements

Scopes: the Scopes page loads faster.
Targets: the Targets page loads faster.
Strategies: the strategies table now has a Created Date column.
Security: updated platform and agent dependencies to address known vulnerabilities.

Bug fixes

Forge: vulnerability research now anchors to the current date — web search results are treated as current and up to date rather than relying on the model’s training data.
Forge: switching to a different session while one is running now prevents thrashing between them in the user interface.

2026-06-01

frontend v0.747.0

Bug fixes

Sign-in now returns you to the page you originally requested, instead of dropping you on the default landing page.

2026-05-31

backend v0.891.0

Bug fixes

Endpoints: agents are now matched by their hardware UUID, so two machines that share a hostname are tracked as separate endpoints instead of being merged into one.
Targets: filtering remediation targets by multiple values no longer fails.
Remediation: when a deployment step fails, the pipeline no longer runs verification against it.

2026-05-30

backend v0.888.0 / frontend v0.746.0

New features

Endpoints: endpoints can now be tagged automatically from agent configuration, so you can group and target them by tags set on the agent itself.

Bug fixes

People: only real user accounts from endpoint agents are ingested as people now — service and machine accounts are filtered out — and each person is correctly linked to their endpoint.
Remediation: Windows preflight checks now correctly evaluate available disk space and pending-reboot status before a remediation runs.

2026-05-29

backend v0.885.0 / frontend v0.745.0

New features

Scopes: a new Processed Targets table shows the targets a scope has run through, with a CSV export of the current view.
Scopes: blocked targets now explain why they’re blocked, and admin approval gates can be approved inline without leaving the page.

Improvements

Strategies: targets with no matched strategy now show a clear “No Strategy” pill instead of the misleading “Needs Review” label.

Bug fixes

Targets: remediation targets that have no CVSS score now sort below those scored 0, rather than mixing in above them.
Strategies: the subject picker in the Create Strategy flow is usable again.

2026-05-28

backend v0.876.0 / frontend v0.739.0

New features

Scopes: an endpoint tags filter on the “Where to Remediate” step lets you target remediation by endpoint tag.

2026-05-27

backend v0.875.0 / frontend v0.738.0

New features

Targets: a CSV export button on the Remediation Targets table downloads the current filtered view.

Improvements

Findings: the search bar now filters results server-side, matching how search works on other tables.
Endpoints and Findings: integration and scanner icons in table columns are right-aligned and collapse cleanly when many are present.
Severity badges across the app now use the style guide’s color variants consistently.

Bug fixes

Scopes: the ticketing destination dropdown handles Freshservice’s flat ticketing model correctly.

2026-05-26

backend v0.870.0 / frontend v0.733.0

New features

Sidebar: a What’s New link now opens the release-notes page directly from the app.
Forge: endpoints flash green when a command completes against them, making it easier to see which hosts just finished.

Bug fixes

Forge: the reach panel refreshes after the assistant makes scope or strategy changes, so the affected-endpoints count stays in sync with the conversation.

2026-05-22

backend v0.862.0 / frontend v0.730.0

New features

Desktop tray notifications for informational events, approval requests, and snoozed deferrals.
Multi-select column filters across Targets, Findings, and Endpoints — pick more than one value at a time and see them as pills above the table.

Improvements

Column-bound filters (CVE, VSI, CVSS Score, and others) now live in each table’s column headers rather than a separate toolbar.
Tables remember column visibility, page size, and active filters across refreshes — each table has its own scoped settings.
Active filters collapse to a summary pill when more than three values are selected.
Targets: Coverage card moved above the toolbar for clearer reading.
Strategies: enable/disable toggle moved into the secondary toolbar row alongside other table controls.
Unified search behavior across tables — press Enter or click Apply to submit, with a Reset-to-default control.

Bug fixes

Targets: Software Vendor and Software Name filters include targets that only have attribute-level vendor or product data.
Tables: column-header filter dropdowns stay open across data refreshes.
Endpoints: Columns dropdown shows up even when the global search bar is hidden.

2026-05-20

backend v0.856.0 / frontend v0.727.0

New features

Forge streams the assistant’s response incrementally — text, tool calls, and approval state appear as they happen rather than after completion.

Bug fixes

Forge: new user messages are now rejected while a tool call or interrupt is in flight, and when the last message isn’t from the assistant.
Forge: reach-panel job state pills show human-readable labels.
Endpoint owner lookup repaired (filters out stale and non-furl owners), restoring correct exception routing.