Change Log

Add:

• French language support

Enhancements:

• Dependency security updates
• Update deployment improvements

Add:

• Outage and informational notifications for console users and public site
• French training
• Multiple relays per region for enhanced capacity
• M365 configuration baselining, storage capacity consistency, storage growth graphs

Enhancements:

• Resolution for remote support based on connection speed
• Health monitoring
• Remote administration permission customizations
• Network traffic efficiency optimizations
• SaaS monitoring improvements to decrease checks
• Elimination of artificial M365 caps; M365 database efficiency improvements
• AWS Evidence saving changes for GRC integration
• AWS Security Assessment
• S3 storage options
• Billing requires phone numbers for new direct debit compliance requirements
• Additional Active Directory logging
• CRM lead management
• Email login changes to ensure that email is sent from the same region
• Google Backup download improvements
• Prevent strings like LGBTQ2S in domains from showing as being high entropy throw-away domains when scoring phishing risk
• Log SAAS discovery (datagov_m365) every 30 minutes instead of every minute
• AWS Sync database connection enhancements
• synchronize ISPs for SAAS monitoring and status page
• change scopes to allow for email injections for phishing simulation
• Google workspace backup resilience
• HubSpot sync skip unchanged records to reduce network traffic
• Ingranm variable consistency and pre-requisites
• Lavawall Remote resolution changes, speed dependent resolution, backup service, tile approach, multiple relays in the same region
• M365sync backups, data retention and data minimization, phishing remediation, maibox usage consistency, policy and configuration baselining
• Phishing email importing refinements
• LGBTQ2SA, LGBT, etc. allow listing to not be listed as throwaway strings

Proactive Security:

• Backend dependency updates
• AWS Sync dependency updates
• Domain scan dependency updates
• Google sync dependency update
• M365 sync dependency update
• HubSpot sync dependency updates
• HubSpot sync billing distributors hardening
• Cloudflare sentinel hardening
• M365 login hardening
• Huntress Company ID hardening
• Active company and user's company hardening

Add:

• Login with Google
• Support Centre
• Remade help pages for each module

Enhancements:

• In the quick search menu, move the page links to the top so they don’t move when the devices load.
• Backend support and logging improvements
• Database connectivity enhancements
• Login by email reliability
• User and company security layers
• Dependency security updates

Add:

• Accessibility Settings feature in top bar
• Get/Send Clipboard added to full screen view
• Technician checklists with integrated console data, monitored sites, SaaS monitoring, ISP monitoring
• Status page indicates outages to SaaS providers and monitored systems
• Ability for non-technicians at a company to access their tickets through the console
• Chat notifications through browser notifications
• Mac and Linux support added for Google Export

Enhancements:

• Remote support decline flow improvements
• Faster initial load for remote support GUI mode
• Display and Layout with higher contrast colours baseline and ability to set further with Accessibility Settings
• Delegated M365 app permissions consistently displayed in SAAS discovery and M365 details
• Tightened controls around shared email providers and schools
• Administrator elevation requests through browser notifications
• Centralization of GRC user roles
• Centralization of CRM, ticket, and user contacts
• Chat history and layout improvements
• Colours improved for accessibility and contrast
• Elevation log improvements
• Elevation approval flow
• Details and risk signals for elevation requests including reputation verdict, parent processes, etc.
• CRM integration
• WAF blocking intelligence in uptime checker
• Details for why a website was recorded down

Enhancements:

• New account creation flow edge case loop prevention
• Session hardening
• Increased use of TPM for password vault
• Backend tool updates to prevent supply-chain dependency vulnerabilities

Add:

• Partner invite codes

Enhancements:

• Changes to technician account pinning for remote support: outside of FIPS 140-3, CJIS, and other restricted environments, the default behaviour for new technician browsers, IP addresses, etc. will be notify the technician and optional security contact instead of blocking the connection. Agent pinning can be configured in the Technician keys section in Remote Policy (from the top of the Users & Permissions page) to
  Block it until an administrator clears it.
  Thanks to David Walliams for highlighting that our previous forced pinning policy was too strict.
• Knowledge base Rich Text Editor enhancements
• Microsoft 365 Authentication speed improvements
• Administrator elevation enhancements.
• Password change hardening
• Add-hoc remote support zero-knowledge and end-to-end encryption enhancements
• CSRF mitigation reliability
• Remote support connection speed enhancements
• Linux secret manager enhancements

Add:

• Add methods for Lavawall® support staff to verify users.
• Lavawall® support enhancements to improve support capabilities without providing internal technicians access to company-level encrypted data
• Wireguard deployment

Enhancements:

• Application patch display consistency
• Testing enhancements
• Console health monitoring enhancements

Enhancements:

• Add password generation to context menu
• Passkey performance improvements
• jQuery updates

Add:

• FIPS 140-3 end-to-end encryption visibility for remote desktop and password vault

Enhancements:

• Large upload stability enhancements
• Additional Cloudflare security
• Administrator elevation
• User login flow and lockout flow smoothing

Add:

• FIPS 140-3 encryption validation
• CJIS logging
• Ingram Micro integration

Enhancements:

• Remote desktop FIPS compliance
• Library updates
• Vault hardening for FIPS 140-3 and non-FIPS (supporting Argon 2id)
• Billing administration
• Administration elevation enhancements

Add:

• Two-way ZenDesk sync
• White-label help desk

Enhancements:

• Ticket tracking to reduce repeated content across comments
• AWS interface expansion
• Administrator elevation enhancements
• Library updates
• Chat spacing

Enhancements:

• Helpdesk phishing detection integration
• Automatic tagging of human, automated, spam tickets
• jQuery updates

Enhancements:

• cPanel, Plesk, and related vulnerabilities added to domain scanner and reports
• Refine control design and assessments for RGC
• Expanded GRC roles

Enhancements:

• Chat retention and deletion
• Ontario PHIPA alignment
• Names added for multi-technician chat
• FIPS 140-3 compliance visibility for technician passkeys and FIDO2 tokens
• GRC wizard improvements
• Additional control over cookies and Cloudflare Analytics for website visitors who don't want it enabled
• GRC Report and Assessment consistency and automation

Add:

• FIPS 140-3 configuration option for CJIS 6.0 control SC-13 compliance
• Phish Rip tool to remove malicious emails from all affected mailboxes with multi-tenant support

Enhancements:

• GRC assessment wizard improvements for municipalities
• CJIS framework clarifications
• StateRamp to GovRAMP clarifications
• Automated GRC evidence automation
• Regional GRC frameworks for Texas, Iowa, Ontario, British Columbia
• Vendor attestation automation
• Framework categorization simplification
• 146 new definitions for tool tips
• Multi-technician web chat optimizations
• Add optional phone number to web chat form
• Cookie privacy notifications for jurisdictions that require it
• Improved assessment filtering
• Regional municipality definitions
• Mobile remote desktop screen selection thumbnail improvements to behave like desktop version
• Mac backstage compatibility
• Texas state and municipal compliance
• Iowa Public Sector Information Obligations
• ADA Title II
• Faster remote support connections
• Sidebar navigation improvements

Add:

• US Municipality Industry to GRC wizard
• CJIS, GovRAMP (formerly StateRAMP), US Water & Wastewater Cyber Security (AWIA) framework
• Improved invitation emails, redirection to console and public site handling

Enhancements:

• NIST SP 800-53 alignment with CJIS
• CJIS framework: CJIS 5.9.5 (9 July 2024), CJIS v6.0, CJIS v6.1 (25 June 2026), gap assessments
• Improved Mac Backend support
• MacOS version history for audit reports
• Increased Nessus file uploads and email receipt

Enhancements:

• Phishing company and user impersonations
• Combined ARM and Intel download script for Apple devices
• Improved invitation emails, redirection to console and public site handling

Enhancements:

• Google Workspace configuration detection and reporting, integration with reports
• Google Workspace breach detection
• Google Workspace activity search and enrichment
• Login flow, turnstile reliability
• Squarespace and signoff impersonation
• Restriction for new accounts outside of Canada and the US

Add:

• Authorization add and download only entitlements for audit clients
• Partner and referral feature
• MeshCore out of band support

Enhancements:

• Google Workspace scope reduction
• Google Workspace DLP, sharing, and permissions
• Google Workspace external application identification
• Subdomain-only scanning

Add:

• Outlook add-in support for shared mailboxes

Enhancements:

• Remote desktop reconnection speed
• Topbar and prospect company distinctions

Add:

• Asset management

Enhancements:

• Notification toast interactions between states
• Loading indicators
• Automatic ticket closing

Enhancements:

• Restart and reminder toast improvements
• Web log refinements

Enhancements:

• Sophos deployment
• Google export for hangouts
• MFA reset

Enhancements:

• Backstage tools
• Nessus automatic imports
• Toast notifications

Enhancements:

• Synthetic task manager speed
• AI reboot analysis
• Inter-operative backstage tools
• Google export downloader

Enhancements:

• Cloudflare Sentinel deployment
• Device-human matching
• Summary dashboard speed
• Sophos deployment

Add:

• News ticker and notifications
• Django security
• Ad-hoc remote desktop
• WordPress "Hello World" detection

Enhancements:

• Attended Ad-Hoc Remote Support deployment process
• compressed scrolling menu
• Virtual Task Manager aggregation
• Device Detail Speed
• Configuration Speed

Add:

• Interac, ACH, Pre-Authorized Debit, and Cheque payment option added

Enhancements:

• Significantly improved M365 login speed
• AI analysis for M365 issues
• M365 false positive reduction
• Granular access improvements

Add:

• Healthcare AI policy templates for every Canadian province
• AI-powered categorization for new SaaS applications with human review
• New M365 Dashboard

Enhancements:

• CRM company and contact improvements
• CRM speed
• SaaS application rule refinements
• Purview log optimization
• M365 breach identification refinements

Add:

• Integration for SaaS discovery, Entra/M365 apps, Google Workspace apps, Vendor inventory, BIA and other resilience items

Enhancements:

• Improved drawing and interface for mobile remote desktop
• New Microsoft 365 dashboard false positive, AI, and export enhancements

Add:

• Google Export disk spanning
• Add Hyper-V manager to the admin launcher
• Evidence for BIA and Vendor assessment
• Flags for company data storage location
• Optional AI analysis for M365 incidents

Enhancements:

• More efficient Google Workspace export graphs and support for more edge cases
• Hide drawing tools when they aren't active in all contexts
• Improve dark mode colours for synthetic regedit
• Only display supported synthetic tools
• Make full screen bar repositionable and less annoying.
• Google workspace edge case errors for unlicensed owners
• Less noisy token recreation during logins
• Mobile admin/scripts/draw/laser in more menu
• Ability to move web console full screen bar to sides and/or top
• Improved performance on google drive monitoring
• Add DPA flexibility in vendor monitoring
• Expand backup options in BIA and vendor inventory

Add:

• Google Export disk spanning
• Add Hyper-V manager to the admin launcher
• Evidence for BIA and Vendor assessment
• Flags for company data storage location

Enhancements:

• Google Export speed, display clarification, and filename truncation for Windows and Mac
• Remote Desktop tool self-healing
• BIA and Vendor identification/interview tool layout and navigation improvements
• Backup clarification in Vendor and BIA interview
• Backstage recalibrated to favour virtual tools
• Timeline button in Google Workspace Vulnerabilities
• Improved integration with the BIA, Vendor, Resilience, DRP, BCP, SaaS identification, and other Lavawall® components

Add:

• Trust Centre / Trust Center
• US and Canadian Spelling option for Trust Centre
• Vendor Inventory
• Data Residency and subprocessor disclosure generator
• Business Impact Assessment system with questionnaires and templates
• Business Continuity Planning
• Disaster Recovery Planning
• Incident Response Planning
• Data Flow mapping
• Prospect flagging for domain scans

Enhancements:

• Improved handling of fake computers that are created when sandboxes install Lavawall for Malware testing

Add:

• Synthetic backstage tools
• Locked out and failed authentication user hunting for M365
• Drawing and colour capabilities for remote support
• Searching for scripts and tools in remote support
• Category, assignee, etc. searching in tickets

Enhancements:

• Speed up remote support connectivity

Add:

• Administrator Elevation capability and integration
• View uninstalled computers in computer view
• Backstage synthetic tools for faster view

Enhancements:

• Speed up computer device detail load time
• Tighter and better use of space for device details
• Microsoft 365 and Google Workspace breach detection refinements

Add:

• Manual user access certification for M365

Enhancements:

• Speed up initial Remote Desktop connections
• Increase connection reliability fore remote desktop connection
• Add protections to ensure that the connection banner doesn't remain in edge case disconnections
• Speed up Login /Register with Microsoft
• Automatically display the active screen on connection
• Email security analyzer awareness for additional CAPTCHAs and other indicators
• Improved grouping and authentication for access review tools

Bugs:

• Missing icon for firewall admin app launcher
• Windows tool launcher tools launch reliability improvements
• GRC Controls error handling improvements

Add:

• M365 SharePoint and Guest Access review
• User contact information added to Remote Desktop interface
• View only mode added to full screen mode
• Prevent remote and local users fighting over mouse control
• Separate remote console user mouse cursor
• “Send as keystrokes” option for pasting content to the remote desktop for cases where the clipboard may not be accessible.
• Device owner contact info on Remote Desktop page
• Recent pages in side bar
• Downloadable snapshots added directly to session notes
• Screen drawing for annotations

Enhancements:

• Email assessment performance research and redesign
• Script execution timeout enhancements
• Microsoft authorization resiliency when Microsoft’s servers are slow or database connections get dropped
• Remote control terminal access improvements
• PDF link details in Outlook plugin
• KnowBe4 Defend Egress link unwrapping enhancements
• Remote Desktop laser now the same as the one that the user sees (more translucent)
• Remote support redundant server resiliency failover improvements
• Domain age calculation is now based on when the email was sent, not when it was analyzed
• Significant enhancements to the malicious link and email content filters for email security
• Outlook add-in version 1.3.2.2 displays the new PDF and Link intelligence within the Outlook add-in. It also has a two-phased system that does a quick initial pass and then follows the links, etc. to give users in-depth analysis without the wait.
• Ubiquiti Unifi all company view improvements

Bugs:

• Windows Remote Agent 1.0.63 fixes a bug that caused remote support console windows to appear black if the remote Windows computer was in a setup screen (e.g. adding a new user) when more than one remote administrators were connected.

Add:

• Dedicated PDF security analysis (in Phishing reporter, side menu, and quick launch search)

Enhancements:

• Enhanced link and launch analysis for PDFs in Outlook security assessment plugin
• Web chat formatting for mobile
• Chat resiliency

Bugs:

• Script execution tracking edge cases
• Server outage configuration setting buttons were inconsistent

Add:

• Ubiquiti cloud console support

Enhancements:

• Resume training from the last slide
• Images added to instructions

Bugs:

• Internal utility for CVE updates hardening and efficiency (issues from internal review and Claude review)

Add:

• Local and AD user search and CSV in device details
• Ubiquiti / Unifi notifications and breach indicators of compromise

Enhancements:

• Full screen usability on mobile remote screen sharing

New:

• Email security domain popularity

Enhancements:

• Expanded Cloudflare monitoring and active blocking configuration
• Domain scanner business context
• Email security context and calculations
• Android compatibility for email security and phishing reporting
• Faster email reports
• Domain scanner performance
• On-site glossary additions
• Mac remote support smart restart tool
• Flags and other visuals for training

Bugs:

• Allow phishing reporting from IPs that aren’t permitted to use the Lavawall® console.

New:

• Cloudflare bad actor blocker integrated automation
• Client and prospect combination feature
• Company duplicate finder
• URL unwrapping and email proxy filter awareness for Outlook phishing add-in
• Remediation instructions in Outlook plugin
• Alpha launch of phishing simulations

Enhancements:

• CRM and company listing
• Industry associations
• Add link to remote access policy to Profile/Security section to make it easier to find
• Phishing Reporter Add-in for Outlook version 1.2.2.0 release
• Improved phishing scores and approach to third-party headers
• Related brand intelligence
• Plain language for phishing panel
• Real-time glossary with mouseover definitions
• Improved Canadian privacy training
• Sophos installation
• MSP client billing and reporting
• JavaScript library security enhancements
• Patch reporting enhancements
• Industry enhancements for OSINT
• Provincial flags
• Training videos and voiceovers

New:

• Allow MSP-managed companies to have their own Sophos accounts with their own APIs and CSV files
• Mac backstage tool launcher
• Outlook phishing tool now checks for malicious PDFs, Outlook, HTML, and compressed files
• Artificial Intelligence (AI) LLM policy
• AI policy integration with AI courses.
• Large Language Model (LLM) training modules by industry
• Microsoft 365 user type and status filtering options
• Sophos configuration for non-MSP Sophos accounts
• Sophos configuration for MSP clients with their own Sophos accounts
• Custom notification subscriptions and thresholds
• Microsoft 365 snapshot to backup features that other Microsoft 365 SAAS backup tools miss
• Azure, Entra, and Microsoft 365 backup
• Azure, Entra, and M365 change audit and configuration change undo
• Device ownership, user contact information, and notes
• PSA ticket notification customization options
• Ticket email customization options to avoid duplicate and circular emails from ZenDesk or Hubspot during migration
• Policy integration with training system
• .EML email security assessment and phishing danger review
• Phishing simulations

Enhancements:

• More granular permissions for MSPs
• Share logging improvements
• Update Sophos Central instructions to match new My Environment menu in Sophos Central.
• Mac remote desktop tool improvements
• Mac remote desktop speed enhancements
• Mac special keys added to mobile interface
• Mac zSH and Bash improvements
• Mac remote support tool installation and update process improvements
• CVE retrieval improvements
• MacOS Monterey compatibility and instruction improvements to match Ventura and later
• Formatting improvements
• Outlook phishing reporting compatibility and speed
• MSP client license, time use, and plan monitoring improvements for billing purposes
• Remote support cursor types
• Remote support sticky modification keys for Mac
• Escape button behaviour changes in full-screen mode
• Active Directory, Microsoft 365 user inactivity search and report criteria

Bugs:

• Removed users were not filtered out of the Microsoft 365 dashboard.

New:

• Find what tabs or programs are monitoring or using the speakers, mic(s), and camera(s) from the web-based Windows remote support tool
• SharePoint, Google Drive, and on-prem file share file changes by user graph
• Multi-select lifecycle and properties in End Users M365 / AD report
• Granular notification preference configurations
• Notifications for stale accounts

Enhancements:

• More granular permissions for MSPs
• BYOD / Company-owned setting improvements in computer listing and details
• Administrator elevation assignment granularity refinements
• AI ticket action item assessment refinements
• Subscription refinements
• SharePoint file change monitor case refinements
• Remote support connectivity enhancements
• Microsoft 365 add-in, SAAS company monitoring enhancements
• Resilience for future code signing changes
• Further decoupling ZenDesk and Hubspot with Lavawall®
• Separate Lifecycle and Properties in End Users AD/M365 report

New:

• Canned Messages
• ZenDesk Canned Message import
• Dedicated SharePoint file change view
• WordPress plugin security details
• Google Drive Monitor
• Scheduled tickets
• Administration Elevation features

Enhancements:

• Speed up M365 app listing
• Accept screen captures in RMM session notes
• Leave RMM session notes open after disconnect
• Domain scan speed and layout
• Report updated to include the new WordPress plugin security details
• Added notes to device details
• Moved nickname modification to device details
• SAAS discovery signal reliability enhancements and feedback capability
• M365 apps integrated with SAAS discovery
• M365 token compromise and agentic AI abuse enhancements
• Phishing plugin deployment refinements
• Changed support chat from ZenDesk to Lavawall. Eating our own dogfood is awesome when it’s so much better! :-)
• Web log filter additions for humans, bots, social, seo, etc.
• Add new pages to top search
• New billing structure
• ZenDesk canned message image imports
• SEO, AIO tweaks

Bugs:

• The consent changes inconsistently had a CSRF mitigation overreaction.

New:

• Outlook phishing plugin (in limited release)
• Privacy policy updates to discuss opt-out for domain reputation services used as part of the phishing plugin
• Hourly and unlimited plan support for help desk and billing summary

Enhancements:

• Breach report refinements
• Security test details for Microsoft 365 refinements
• Improved removed M365 external account handling
• IP address risk and source enhancements
• Move chat on public website to left side
• Domain scan speed and WAF detection enhancements
• Breach prioritization improvements

Enhancements:

• M365 Breach Reporting improvements
• Ticketing improvements
• Add DKIM to ticketing system
• Embedded image improvements for tickets
• Email login improvements
• Embedded scan improvements
• Breach prioritization improvements

Add:

• 86 Security awareness and compliance training courses
• SAAS Discovery for Data Governance
• Web chat module

Enhancements:

• Cross-site request forgery token handling improvements
• Country and IP allow listing for all of Lavawall® instead of just remote support
• Remote Support resiliency for specific NAT timeout edge cases
• Knowledge code block display improvements
• M365 Breach Detection refinements

Add:

• HITRUST, FTC Safeguards, GLBA, NYDFS, CCPA/CPRA, FINTRAC/PCMLTFA, Alberta PIPA, BC PIPA, Quebec Law 25, Sarbanes-Oxley (SOX), C-SOX, GDPR, NIS2, DORA, Cyber Resilience Act, UK GDPR / DPA, UK Cyber Essentials, Australia Privacy Act
• Additional documents and refinements to GRC questionnaires

Enhancements:

• HIPAA compliance enhancements
• Huge speed increases for Microsoft 365 compliance
• Remote desktop speed enhancements

Add:

• Open source intelligence for CRM
• Green dot on Lavawall icon for tabs with active Remote Desktop sessions

Enhancements:

• Remote Desktop speed improvements
• Suspicious IP detection enhancements
• Microsoft Azure false positive reduction

Add:

• Clone Systems PCI ASV Scan Integration, notifications for missed scans, and inclusion in reports
• Computer Issues added to Remote Support
• Knowledge Base
• Knowledge Base article list automatically updates during user chats

Enhancements:

• Computer Listing Redesigned for Speed
• Efficiency for location lookups

Enhancements:

• Faster Profile View
• Fast loading user timeline “all” view focused around a security signal’s timeframe
• Faster, more responsive, higher resolution for remote support
• Enhanced scripting capabilities with real-time tracking
• Improved handling of temporary virtual machines created by endpoint detection and response (EDR) tools like Defender
• Increased time of available logs from Microsoft 365
• Additional WAF tool interfaces
• Rocket fast domain scanner rewrite
• Network diagram tweaks
• GoDaddy vulnerability and peculiar configuration issues
• GRC tool refinements
• Onboarding checklist improvements
• Increased reliability through database redundancy
• Improved Datto RMM integration and key changes
• Additional training information in PDF and Word reports
• Significant performance enhancements
• Additional Lavawall® user logging
• Enhanced permission capabilities for remote support consent
• Enhanced support for Cloudflare Zero Trust
• Trusted IP friendly name refinements

Add:

• Desktop console remote support
• PowerShell console remote support
• Mobile-friendly remote support
• Canadian Program for Cyber Security Certification (CPCSC) Levels 1, 2, and 3
• phpMyAdmin vulnerabilities
• MongoDB vulnerabilities
• Mongo Express vulnerabilities
• Grafana vulnerabilities
• Kibana vulnerabilities
• Portainer vulnerabilities
• Redis Commander vulnerabilities
• RedisInsight vulnerabilities
• Redis vulnerabilities
• MongoDB exposure
• Ubuntu, Debian, etc. backporting
• Memcached vulnerabilities
• PostgreSQL vulnerabilities
• RHEL, CentOS, Rocky, Alma awareness
• Custom findings for automatic report generation

Enhancements:

• Significant speed improvements to domain scanner
• Significant quality improvements to automatic report generator

Add:

• WordPress version check
• WordPress plugin version check
• Web technologies and popular library checks:
  • Nginx
  • Apache
  • Microsoft IIS
  • LiteSpeed
  • Caddy
  • React
  • Vue.js
  • Angular
  • jQuery
  • Bootstrap
  • Tailwind
  • Google Analytics
  • Google Tag Manager
  • Hotjar
  • Facebook Pixel
• Reduce noise by removing background Microsoft 365, Entra, and Azure processes
• Add Apps to Microsoft 365 activity lists, including third-party and Microsoft apps
• Capability to identify IPs as malicious
• Transient IP flags
• Organization renaming
• Granular GRC Assessment permissions

Enhancement:

• Complete rewrite of domain scanner. It now completes in a few seconds instead of minutes
• Enhance app and user baseline process to reduce false positives and identify more anomalies
• Increase visibility window
• Network diagram display and grouping refinements
• Auto assign one LAN scanner per location instead of per company

Add:

• Automatic security assessment report generation and LLM report prompt generation
• Nessus upload and analysis
• Glance Guest added to screen sharing tools in threat hunter

Enhancement:

• Integrated LAN scan and device information with Nessus scan information
• Summary Dashboard (formerly Executive Dashboard) automatic layout improvements
• Map shows number of devices in a location if multiple devices are present at one location
• Added “Connect Services” section to the right side of the Summary Report.
• Improved reliability for Ransomware/Threat hunter

Add:

• LAN scanner
• Windows integrity checking reporting
• Governance Risk and Compliance (GRC) tool
• Governance document templates
• GRC Assessments
• MSP Onboarding
• Unified control monitoring
• Support for the following frameworks:
  • CIS Critical Security Controls 8.1
  • NIST Cybersecurity Framework 2.0
  • NIST SP 800-171
  • Canadian Centre for Cyber Security Guidance 2024
  • ISO/IEC 27001 2022
  • CMMC Level 2
  • SOC 2 2025
  • Canadian Cyber Essentials 2024
  • Australia Essential Eight
  • HIPAA Security Rule
  • BC Health Information Act
  • Alberta Health Information Act
  • Canada PIPEDA
  • PCI DSS SAQ A
  • PCI DSS SAQ A-EP
  • PCI DSS SAQ B-IP
  • PCI DSS SAQ C
  • PCI DSS SAQ C-VT
  • PCI DSS SAQ D
  • NERC CIP 7
  • Canadian IIROC Cybersecurity Best Practices 2024
  • CPA Canada Cybersecurity Framework
  • Ontario Cyber Security Framework
  • BC Financial Services Authority Security Guidance

Enhancements:

• Microsoft 365 monthly vs. annual licenses
• Microsoft and Google license details added to Billing Summary
• Google Details user activity timeline style adjustments to look more like M365
• Microsoft 365 and Purview log gathering efficiency enhancements
• Increase replacement prioritization for computers with extreme battery degradation

Add:

• Google Workspace monitoring
• Overhaul of Microsoft 365 API interface using more efficient threading
• Microsoft 365 asynchronous logging to gather 180+ days of audit logs even with minimal licenses

Enhancements:

• Entra and Azure App security grants with risk-based monitoring
• Overhaul of Microsoft 365 API interface using more efficient threading
• Microsoft 365 asynchronous logging to gather 180+ days of audit logs even with minimal licenses
• Microsoft 365 User Activity Timeline enhancements and filtering with IP enrichment

Enhancements:

• IPv6 Privacy Extensions (RFC 4941) enhancements
• IP address enrichment
• Impossible travel enhancements, including for areas with limited coordinate information
• False positive reductions
• Duplicate data simplification
• Microsoft 365 and Entra API efficiency gains
• Exchange inbox rule enhancements
• Formatting improvements for Impossible travel
• Asynchronous Microsoft 365 Timeline changes for improved performance

Add:

• Lavawall® manual lockout functionality
• Multi-tenant user management
• PHP Mailer upgrade to 7.0.1
• Lavawall® role management
• Display all notification listing in the web viewer’s local time

Add:

• Microsoft 365 Breach Detection
• Microsoft 365 Risky Mail Rules
• Azure / Entra ID / M365 MFA Strength

Enhancements:

• Decrease notifications page load time
• enhance notification page sorting capabilities

Add:

• PDF security report for Quarterly Business Reviews

Enhancements:

• Initial referral source tracking
• Billing summary quantity clarifications
• Combine Huntress licenses for all companies in the all company view
• Application count update
• Notification page allow multiple selections in search panes
• Redaction features
• Remove redundant help on Replacement Priorities page
• Updated introduction video

Bugs:

• Under heavy load, company creation was taking too long
• Company domain scans were not being consistently added to the company

Add:

• Add outages to notifications
• Add Adobe animate, Adobe Premiere, Figma, Fontforge, Notion, Virtualbox

Enhancements:

• Renamed computers (replacement) forwarding and linking refinements
• Application installation notification consistency
• Notification loading efficiency
• Database scaling with read replica

Add:

• P9 link to P9 logo for RMM integration
• Additional search options for Notification listing
• Add server offline notification options

Enhancements:

• Separate database for read activities to increase reliability and speed
• Notifications on top bar now loaded on demand to speed up all pages
• Re-registered computer redirection refinements
• Application installation notification and timeout tuning
• Script result cleanup to remove progress indicators

Bugs:

• In some cases, when a new user signed up with Microsoft Azure single sign-on, the company information was not fully loaded

Add:

Enhancements:

• AJAX global search starts on first two characters instead of loading all search terms on each page load
• Additional pages added to global search
• Do not include agents that were not properly installed on the dashboard
• Type-o with duplicate “hasn’t”

Add:

• Application Installation
• Additional PowerShell scripts
• Welcome video
• Icon for SQLite DB, ExpressVPN Synchronization
• Notification with link to replacement registration if a device was re-registered

Enhancements:

• Subdomain redaction capabilities
• Enhanced reliability for Filezilla installation
• In the device details page, highlight if the device is hidden, uninstalled, or replaced
• Public website refinements
• Added additional resilience to the TeamViewer update process

Bugs:

• The link to the Ontario support number was correct, but it was displayed incorrectly
• Sort notifications by actual timestamp instead of the numbers in the time
• When domains were assigned to multiple parent and children organizations, they would appear multiple times in the domain summary.
• Shared email registration was not reliable
• Dashboard included partially-installed computers

Enhancements:

• Patch button compatibility enhancements
• Agent compilation now happens faster after signup
• Configuration summary clarification for computers with compliance issues
• Redaction capabilities added to links
• Rename Co. Summary to Org Summary in the side menu

Bugs:

• The correct link wasn’t always displayed for invoice counts in the side bar

Add:

• MSP Billing Summary to make it easier for MSPs to gather license counts for invoices
• Google Map upgrade
• Huntress deployment
• Akira ransomware hunter
• Approximate computer release date added to computer details

Enhancements:

• Improved status responses for Huntress installations, for example when firewalls block the download
• Google Map upgrade
• Start loading the search box data when the 15th device is loaded for the detailed view, so search is accessible before all of the computers load for larger organizations
• Stop all loading when a new company is selected to make company changes faster

Add:

• Scripting capabilities
• Alternative patching for Team Viewer

Enhancements:

• Improved compatibility for ransomware hunter
• Renamed Akira hunter to ransomware hunter
• More classification options for phone call system

Add:

• Sophos API support for endpoints, firewalls, licenses, alerts, and cases
• Hubspot integration for Lavawall support
• Huntress deployment
• Akira ransomware hunter

Enhancements:

• RAM description enhancements
• Show process description instead of name in the process listing

Add:

• Offline overlay to device performance chart
• Additional Mac and Intel year details
• Notifications to top bar
• Full notification page
• Ability to display reboot details without clicking the reboot button
• Event log help page
• Patch more Windows applications
• Tool tip in the email verification field when users enter @ to remind them not to enter an email address in that field, but to enter the code we sent by email

Enhancements:

• Allow passkey tools that do not allow for user attestation, such as 1Password and BitWarden. This also expands compatibility for services like iCloud Keychain and Google Password Manager that sync Passkeys across devices.
• Update screen captures on public pages
• Links to make navigation easier on public site
• Display performance graph in local browser's time zone
• Display Average CPU in performance graph instead of max CPU (Min and Max CPU are still displayed in range view)
• Hide process "Name" in Mac and Linux views, since they are the same as the path anyhow
• Reduce the number of notifications in the top bar from 999 to 99 to improve performance
• Updated screen captures in device performance help page
• Allow computer details to display before all computers are loaded
• Add default phone number links to the contact page

Bugs:

• Dynamic ownership setting did not work in some stand-alone situations
• Full C: drive count and computer listings were inconsistent with multi-organization accounts

Add:

• BYOD indicator and easy set in computer listing and details
• Add AV to Operating System Section of system details
• Execute Powershell through Websocket for faster performance even if the console and computer API server are different due to load balancing
• Montana (US) phone number

Enhancements:

• Performance graph enhancements
• Pricing sizing changes for smaller mobile devices, clarifications on benefits
• When clicking a patch to view all affected, automatically change the active company

Add:

• Temperature to device details performance chart tab
• Temperature to hardware details
• Temperature trend to hardware details
• Previous high temperature flags to device details
• Links in the patch details tab that show all computers missing the applicable patch
• Support for referral affiliates
• MSP objectives to MSP menus

Enhancements:

• Improve network use accuracy and replace the line graph with dots to highlight when data is transferred (the line graphs were misleading, since the downloads/uploads are points in time)
• As performance graph data loads asynchronously, do not change the current view
• Change "Data Sent" and "Data Received" to "Upload" and "Download"
• Indicate if an uninstall is pending or completed in device details
• Speed up detailed chart loading, decrease granularity of details for views greater than a day
• Improve pricing alignment and sizing
• Performance overview date data in ISO format to improve compatibility

Bugs:

• Redirection to the console was getting triggered for parts of the public site's domain scan, causing problems for new domain scans.

Add:

• Server-side searching of Windows Event Viewer and summary search, smaller initial client-side searchable load (covers most workstations)

Enhancements:

• Sorting of summary log issues by critical, error, warning, and info
• Faster device detail loading with chunked loading of client-side search for event viewer logs
• Additional security for device detail AJAX
• Clarity of Operating System patches in public website for listed patches

Add:

• Windows Event Viewer Summary and search

Add:

• Pressing Enter on the top page/device search box will select the first item in the list
• Grey overlay (adding grey background and dulling graph) during time periods where the device was sleeping or off
• Loading indicator for progressive load of comprehensive device statistics
• Help for Processes and Performance
• New light grey bandage icon in application listing for applications that have new published versions without patches or mainstream updates. Lavawall® does not install preview or beta updates, but does provide information about their availability.

Enhancement:

• Formatting for comprehensive device performance statistics to fit into one screen
• Mouseover details in comprehensive device statistics show all dimensions (CPU, RAM, Network Sent, Network Received, Used C: Drive, Used D: Drive) with units (% or MB). Time details go on the x-axis
• Improved consistency in patch messaging, application and patch agreement

Add:

• Full zoomable performance history added to device details (previously, it was just the last month)
• Buttons to see the last day, week, month, year, or all performance information
• Ability to show or hide the range of performance metrics within one observation period (previously, the minimum and maximum were displayed in an area graph, which makes it hard to view over long periods)
• Redaction capabilities for Huntress Summary and device detail
• Redaction capabilities in the company drop-down
• Indication if specific process in device detail is currently running
• Serial number for Mac devices in device detail and device search
• Add page number selection buttons to bottom of computer listing

Enhancement:

• Faster device detail loading with performance history loaded asynchronously
• Remove "Page" from page number selection buttons in computer listing

Bugs:

• The number of rows to display in computer listing was not always remembered when changing pages

Add:

• Computer display filters for:
  • Huntress Installed
  • Huntress Not Installed
  • Active Huntress Incidents
• Links in Huntress Company Summary apply computer listing filters automatically
• Devices with Huntress incidents added to Huntress Company Summary
• Help Link to Page titles, integrated with
  • Dashboard
  • Battery Summary
  • Huntress Summary
  • Patch Summary
  • Replacement Priorities
  • White-label Domain Scanner
• Links to detailed help for Datto RMM installation

Enhancement:

• Simpler Huntress Installation Instructions
• Huntress mention on home page
• Formatted Huntress incident details on Device Details

Bug:

• Huntress Company Summary links were filtering “Server Only” automatically.

Add:

• Huntress setup, animation, and instructions
• Analyze devices and automatically assign the most popular orgkey to companies when setting up Huntress API
• Add services tab for Windows, Mac, and Linux for device details
• Add search function in device details for patch, processes, services, applications tabs
• Add Atera, Huntress, and AV as well as "white-label domain scanner" to MSP information
• Allow domain scan results reference code to use white-label website
• Security filters for white-label domain
• Axcient icon to computer listing in platform field if Axcient is installed and Lavawall® identified the reference number for API integration
• Colour-coding risk factors in replacement priority
• Prioritize the following MacOS versions for replacement: Monterey, Big Sur, Catalina
• Atera integration instructions page
• Redaction capability to computer search listing
• Redaction capability for replacement priority report
• Indicate which application update patches Lavawall® will be able to apply in the next release
• Delete domain functionality
• Huntress and other new summary pages added to quick search
• Indicate which computers have open Huntress incidents in the computer listing

Enhancement:

• Sort Domain summary by total errors (descending) followed by domain name (ascending) by default
• Improve network connection type (anonymous proxy, business, etc) listing
• On public website, display footer headers in white if on the index page
• Clarify pricing page to specify that overages are charged month-to-month without high watermark pricing for annual agreements
• Add quantity discounts to each subscription level
• In the feature list, add "Login" to "M365, Passkey, MFA" for clarity
• On public pages, emphasize "no high watermark billing," white-label security, and training
• Add additional subdomains to domain scanner

Add:

• White-label Domain Scanner embedding customization (Embed Scanner under You)
• Huntress API

Add:

• Domain summary page
• Ability to remove domain from company
• FAQ about device installer process
• Uninstall state added to device details

Enhancement:

• Display computer name in title of Device Detail page if opened in new tab/window
• Datto Component refinements
• Display remaining number of days in MFA grace period in delay button instead of maximum period

Add:

• Add automatic calculation of tax based on location in British Columbia and Canada

Enhancement:

• Pricing page clarification and mobile optimization

• When a user who signed up with a passkey or password later tried to log in using Microsoft 365, the user wasn’t redirected to their intended target properly and their sessions were not consistently maintained (fail secure, but fail nonetheless) after sending the new authentication method added notification email. This also prevented consistent session management when the user logged in.
  Thanks to Al Del Degan from New Idea Machine in Calgary, Alberta for responsibly disclosing this issue to us!

Enhancement:

• Increase visible area of domain scan on mobile devices when not logged in
• Improve dark mode visibility

Add:

• MSP Directory
• Display Huntress in the platform area if it's installed
• Datto RMM Windows installation component
• Datto RMM Mac installation component
• SPF issue list in the top summary of domain scanner, so it's visible with a trial
• Port 4443 and Sonicwall to the domain scanner
• Features page for public mobile menu

Enhancement:

• Improve the spacing of the uninstall button
• Improve colours of SVG icons on home page
• Change Datto RMM installation instructions to use the new Datto RMM components
• Prevent the "open computer details in a new window" from wrapping to a new line
• Improve styling for links to make them more obvious on the public site
• Change wording for DKIM test to clarify that it uses standard selectors and may give false positives

Bug:

• Do not display close button on computer details if opened in a full screen

• Change Internal IT to Individual Organization in signup to avoid confusion for non-IT folks signing up.
  Thanks to Faith in Calgary, Alberta for highlighting this confusion during our presentation for Movement51 founders!
• Improve colours of SVG icons on home page

Bug:

• FAQ link on home page was lower-case instead of upper-case
• SVG icons on home page were not showing up on Firefox

New:

• New public-facing website

Enhancement:

• Add redact feature for demos
• Style the free scanner to be easier to see and consistent with the new site

Enhancement:

• User process statistics
• Windows current user