New:

• Cloudflare bad actor blocker integrated automation
• Client and prospect combination feature
• Company duplicate finder
• URL unwrapping and email proxy filter awareness for Outlook phishing add-in
• Alpha launch of phishing simulations

Enhancements:

• CRM and company listing
• Industry associations
• Add link to remote access policy to Profile/Security section to make it easier to find
• Phishing Reporter Add-in for Outlook version 1.2.1.1 release
• Improved phishing scores and approach to third-party headers
• Related brand intelligence
• Plain language for phishing panel
• Real-time glossary with mouseover definitions
• Improved Canadian privacy training
• Sophos installation
• MSP client billing and reporting
• JavaScript library security enhancements
• Patch reporting enhancements
• Industry enhancements for OSINT
• Provincial flags
• Training videos and voiceovers

New:

• Allow MSP-managed companies to have their own Sophos accounts with their own APIs and CSV files
• Mac backstage tool launcher
• Outlook phishing tool now checks for malicious PDFs, Outlook, HTML, and compressed files
• Artificial Intelligence (AI) LLM policy
• AI policy integration with AI courses.
• Large Language Model (LLM) training modules by industry
• Microsoft 365 user type and status filtering options
• Sophos configuration for non-MSP Sophos accounts
• Sophos configuration for MSP clients with their own Sophos accounts
• Custom notification subscriptions and thresholds
• Microsoft 365 snapshot to backup features that other Microsoft 365 SAAS backup tools miss
• Azure, Entra, and Microsoft 365 backup
• Azure, Entra, and M365 change audit and configuration change undo
• Device ownership, user contact information, and notes
• PSA ticket notification customization options
• Ticket email customization options to avoid duplicate and circular emails from ZenDesk or Hubspot during migration
• Policy integration with training system
• .EML email security assessment and phishing danger review
• Phishing simulations

Enhancements:

• More granular permissions for MSPs
• Share logging improvements
• Update Sophos Central instructions to match new My Environment menu in Sophos Central.
• Mac remote desktop tool improvements
• Mac remote desktop speed enhancements
• Mac special keys added to mobile interface
• Mac zSH and Bash improvements
• Mac remote support tool installation and update process improvements
• CVE retrieval improvements
• MacOS Monterey compatibility and instruction improvements to match Ventura and later
• Formatting improvements
• Outlook phishing reporting compatibility and speed
• MSP client license, time use, and plan monitoring improvements for billing purposes
• Remote support cursor types
• Remote support sticky modification keys for Mac
• Escape button behaviour changes in full-screen mode
• Active Directory, Microsoft 365 user inactivity search and report criteria

Bugs:

• Removed users were not filtered out of the Microsoft 365 dashboard.

New:

• Find what tabs or programs are monitoring or using the speakers, mic(s), and camera(s) from the web-based Windows remote support tool
• SharePoint, Google Drive, and on-prem file share file changes by user graph
• Multi-select lifecycle and properties in End Users M365 / AD report
• Granular notification preference configurations
• Notifications for stale accounts

Enhancements:

• More granular permissions for MSPs
• BYOD / Company-owned setting improvements in computer listing and details
• Administrator elevation assignment granularity refinements
• AI ticket action item assessment refinements
• Subscription refinements
• SharePoint file change monitor case refinements
• Remote support connectivity enhancements
• Microsoft 365 add-in, SAAS company monitoring enhancements
• Resilience for future code signing changes
• Further decoupling ZenDesk and Hubspot with Lavawall®
• Separate Lifecycle and Properties in End Users AD/M365 report

New:

• Canned Messages
• ZenDesk Canned Message import
• Dedicated SharePoint file change view
• WordPress plugin security details
• Google Drive Monitor
• Scheduled tickets
• Administration Elevation features

Enhancements:

• Speed up M365 app listing
• Accept screen captures in RMM session notes
• Leave RMM session notes open after disconnect
• Domain scan speed and layout
• Report updated to include the new WordPress plugin security details
• Added notes to device details
• Moved nickname modification to device details
• SAAS discovery signal reliability enhancements and feedback capability
• M365 apps integrated with SAAS discovery
• M365 token compromise and agentic AI abuse enhancements
• Phishing plugin deployment refinements
• Changed support chat from ZenDesk to Lavawall. Eating our own dogfood is awesome when it’s so much better! :-)
• Web log filter additions for humans, bots, social, seo, etc.
• Add new pages to top search
• New billing structure
• ZenDesk canned message image imports
• SEO, AIO tweaks

Bugs:

• The consent changes inconsistently had a CSRF mitigation overreaction.

New:

• Outlook phishing plugin (in limited release)
• Privacy policy updates to discuss opt-out for domain reputation services used as part of the phishing plugin
• Hourly and unlimited plan support for help desk and billing summary

Enhancements:

• Breach report refinements
• Security test details for Microsoft 365 refinements
• Improved removed M365 external account handling
• IP address risk and source enhancements
• Move chat on public website to left side
• Domain scan speed and WAF detection enhancements
• Breach prioritization improvements

Enhancements:

• M365 Breach Reporting improvements
• Ticketing improvements
• Add DKIM to ticketing system
• Embedded image improvements for tickets
• Email login improvements
• Embedded scan improvements
• Breach prioritization improvements

Add:

• 86 Security awareness and compliance training courses
• SAAS Discovery for Data Governance
• Web chat module

Enhancements:

• Cross-site request forgery token handling improvements
• Country and IP allow listing for all of Lavawall® instead of just remote support
• Remote Support resiliency for specific NAT timeout edge cases
• Knowledge code block display improvements
• M365 Breach Detection refinements

Add:

• HITRUST, FTC Safeguards, GLBA, NYDFS, CCPA/CPRA, FINTRAC/PCMLTFA, Alberta PIPA, BC PIPA, Quebec Law 25, Sarbanes-Oxley (SOX), C-SOX, GDPR, NIS2, DORA, Cyber Resilience Act, UK GDPR / DPA, UK Cyber Essentials, Australia Privacy Act
• Additional documents and refinements to GRC questionnaires

Enhancements:

• HIPAA compliance enhancements
• Huge speed increases for Microsoft 365 compliance
• Remote desktop speed enhancements

Add:

• Open source intelligence for CRM
• Green dot on Lavawall icon for tabs with active Remote Desktop sessions

Enhancements:

• Remote Desktop speed improvements
• Suspicious IP detection enhancements
• Microsoft Azure false positive reduction

Add:

• Clone Systems PCI ASV Scan Integration, notifications for missed scans, and inclusion in reports
• Computer Issues added to Remote Support
• Knowledge Base
• Knowledge Base article list automatically updates during user chats

Enhancements:

• Computer Listing Redesigned for Speed
• Efficiency for location lookups

Enhancements:

• Faster Profile View
• Fast loading user timeline “all” view focused around a security signal’s timeframe
• Faster, more responsive, higher resolution for remote support
• Enhanced scripting capabilities with real-time tracking
• Improved handling of temporary virtual machines created by endpoint detection and response (EDR) tools like Defender
• Increased time of available logs from Microsoft 365
• Additional WAF tool interfaces
• Rocket fast domain scanner rewrite
• Network diagram tweaks
• GoDaddy vulnerability and peculiar configuration issues
• GRC tool refinements
• Onboarding checklist improvements
• Increased reliability through database redundancy
• Improved Datto RMM integration and key changes
• Additional training information in PDF and Word reports
• Significant performance enhancements
• Additional Lavawall® user logging
• Enhanced permission capabilities for remote support consent
• Enhanced support for Cloudflare Zero Trust
• Trusted IP friendly name refinements

Add:

• Desktop console remote support
• PowerShell console remote support
• Mobile-friendly remote support
• Canadian Program for Cyber Security Certification (CPCSC) Levels 1, 2, and 3
• phpMyAdmin vulnerabilities
• MongoDB vulnerabilities
• Mongo Express vulnerabilities
• Grafana vulnerabilities
• Kibana vulnerabilities
• Portainer vulnerabilities
• Redis Commander vulnerabilities
• RedisInsight vulnerabilities
• Redis vulnerabilities
• MongoDB exposure
• Ubuntu, Debian, etc. backporting
• Memcached vulnerabilities
• PostgreSQL vulnerabilities
• RHEL, CentOS, Rocky, Alma awareness
• Custom findings for automatic report generation

Enhancements:

• Significant speed improvements to domain scanner
• Significant quality improvements to automatic report generator

Add:

• WordPress version check
• WordPress plugin version check
• Web technologies and popular library checks:
  • Nginx
  • Apache
  • Microsoft IIS
  • LiteSpeed
  • Caddy
  • React
  • Vue.js
  • Angular
  • jQuery
  • Bootstrap
  • Tailwind
  • Google Analytics
  • Google Tag Manager
  • Hotjar
  • Facebook Pixel
• Reduce noise by removing background Microsoft 365, Entra, and Azure processes
• Add Apps to Microsoft 365 activity lists, including third-party and Microsoft apps
• Capability to identify IPs as malicious
• Transient IP flags
• Organization renaming
• Granular GRC Assessment permissions

Enhancement:

• Complete rewrite of domain scanner. It now completes in a few seconds instead of minutes
• Enhance app and user baseline process to reduce false positives and identify more anomalies
• Increase visibility window
• Network diagram display and grouping refinements
• Auto assign one LAN scanner per location instead of per company

Add:

• Automatic security assessment report generation and LLM report prompt generation
• Nessus upload and analysis
• Glance Guest added to screen sharing tools in threat hunter

Enhancement:

• Integrated LAN scan and device information with Nessus scan information
• Summary Dashboard (formerly Executive Dashboard) automatic layout improvements
• Map shows number of devices in a location if multiple devices are present at one location
• Added “Connect Services” section to the right side of the Summary Report.
• Improved reliability for Ransomware/Threat hunter

Add:

• LAN scanner
• Windows integrity checking reporting
• Governance Risk and Compliance (GRC) tool
• Governance document templates
• GRC Assessments
• MSP Onboarding
• Unified control monitoring
• Support for the following frameworks:
  • CIS Critical Security Controls 8.1
  • NIST Cybersecurity Framework 2.0
  • NIST SP 800-171
  • Canadian Centre for Cyber Security Guidance 2024
  • ISO/IEC 27001 2022
  • CMMC Level 2
  • SOC 2 2025
  • Canadian Cyber Essentials 2024
  • Australia Essential Eight
  • HIPAA Security Rule
  • BC Health Information Act
  • Alberta Health Information Act
  • Canada PIPEDA
  • PCI DSS SAQ A
  • PCI DSS SAQ A-EP
  • PCI DSS SAQ B-IP
  • PCI DSS SAQ C
  • PCI DSS SAQ C-VT
  • PCI DSS SAQ D
  • NERC CIP 7
  • Canadian IIROC Cybersecurity Best Practices 2024
  • CPA Canada Cybersecurity Framework
  • Ontario Cyber Security Framework
  • BC Financial Services Authority Security Guidance

Enhancements:

• Microsoft 365 monthly vs. annual licenses
• Microsoft and Google license details added to Billing Summary
• Google Details user activity timeline style adjustments to look more like M365
• Microsoft 365 and Purview log gathering efficiency enhancements
• Increase replacement prioritization for computers with extreme battery degradation

Add:

• Google Workspace monitoring
• Overhaul of Microsoft 365 API interface using more efficient threading
• Microsoft 365 asynchronous logging to gather 180+ days of audit logs even with minimal licenses

Enhancements:

• Entra and Azure App security grants with risk-based monitoring
• Overhaul of Microsoft 365 API interface using more efficient threading
• Microsoft 365 asynchronous logging to gather 180+ days of audit logs even with minimal licenses
• Microsoft 365 User Activity Timeline enhancements and filtering with IP enrichment

Enhancements:

• IPv6 Privacy Extensions (RFC 4941) enhancements
• IP address enrichment
• Impossible travel enhancements, including for areas with limited coordinate information
• False positive reductions
• Duplicate data simplification
• Microsoft 365 and Entra API efficiency gains
• Exchange inbox rule enhancements
• Formatting improvements for Impossible travel
• Asynchronous Microsoft 365 Timeline changes for improved performance

Add:

• Lavawall® manual lockout functionality
• Multi-tenant user management
• PHP Mailer upgrade to 7.0.1
• Lavawall® role management
• Display all notification listing in the web viewer’s local time

Add:

• Microsoft 365 Breach Detection
• Microsoft 365 Risky Mail Rules
• Azure / Entra ID / M365 MFA Strength

Enhancements:

• Decrease notifications page load time
• enhance notification page sorting capabilities

Add:

• PDF security report for Quarterly Business Reviews

Enhancements:

• Initial referral source tracking
• Billing summary quantity clarifications
• Combine Huntress licenses for all companies in the all company view
• Application count update
• Notification page allow multiple selections in search panes
• Redaction features
• Remove redundant help on Replacement Priorities page
• Updated introduction video

Bugs:

• Under heavy load, company creation was taking too long
• Company domain scans were not being consistently added to the company

Add:

• Add outages to notifications
• Add Adobe animate, Adobe Premiere, Figma, Fontforge, Notion, Virtualbox

Enhancements:

• Renamed computers (replacement) forwarding and linking refinements
• Application installation notification consistency
• Notification loading efficiency
• Database scaling with read replica

Add:

• P9 link to P9 logo for RMM integration
• Additional search options for Notification listing
• Add server offline notification options

Enhancements:

• Separate database for read activities to increase reliability and speed
• Notifications on top bar now loaded on demand to speed up all pages
• Re-registered computer redirection refinements
• Application installation notification and timeout tuning
• Script result cleanup to remove progress indicators

Bugs:

• In some cases, when a new user signed up with Microsoft Azure single sign-on, the company information was not fully loaded

Add:

Enhancements:

• AJAX global search starts on first two characters instead of loading all search terms on each page load
• Additional pages added to global search
• Do not include agents that were not properly installed on the dashboard
• Type-o with duplicate “hasn’t”

Add:

• Application Installation
• Additional PowerShell scripts
• Welcome video
• Icon for SQLite DB, ExpressVPN Synchronization
• Notification with link to replacement registration if a device was re-registered

Enhancements:

• Subdomain redaction capabilities
• Enhanced reliability for Filezilla installation
• In the device details page, highlight if the device is hidden, uninstalled, or replaced
• Public website refinements
• Added additional resilience to the TeamViewer update process

Bugs:

• The link to the Ontario support number was correct, but it was displayed incorrectly
• Sort notifications by actual timestamp instead of the numbers in the time
• When domains were assigned to multiple parent and children organizations, they would appear multiple times in the domain summary.
• Shared email registration was not reliable
• Dashboard included partially-installed computers

Enhancements:

• Patch button compatibility enhancements
• Agent compilation now happens faster after signup
• Configuration summary clarification for computers with compliance issues
• Redaction capabilities added to links
• Rename Co. Summary to Org Summary in the side menu

Bugs:

• The correct link wasn’t always displayed for invoice counts in the side bar

Add:

• MSP Billing Summary to make it easier for MSPs to gather license counts for invoices
• Google Map upgrade
• Huntress deployment
• Akira ransomware hunter
• Approximate computer release date added to computer details

Enhancements:

• Improved status responses for Huntress installations, for example when firewalls block the download
• Google Map upgrade
• Start loading the search box data when the 15th device is loaded for the detailed view, so search is accessible before all of the computers load for larger organizations
• Stop all loading when a new company is selected to make company changes faster

Add:

• Scripting capabilities
• Alternative patching for Team Viewer

Enhancements:

• Improved compatibility for ransomware hunter
• Renamed Akira hunter to ransomware hunter
• More classification options for phone call system

Add:

• Sophos API support for endpoints, firewalls, licenses, alerts, and cases
• Hubspot integration for Lavawall support
• Huntress deployment
• Akira ransomware hunter

Enhancements:

• RAM description enhancements
• Show process description instead of name in the process listing

Add:

• Offline overlay to device performance chart
• Additional Mac and Intel year details
• Notifications to top bar
• Full notification page
• Ability to display reboot details without clicking the reboot button
• Event log help page
• Patch more Windows applications
• Tool tip in the email verification field when users enter @ to remind them not to enter an email address in that field, but to enter the code we sent by email

Enhancements:

• Allow passkey tools that do not allow for user attestation, such as 1Password and BitWarden. This also expands compatibility for services like iCloud Keychain and Google Password Manager that sync Passkeys across devices.
• Update screen captures on public pages
• Links to make navigation easier on public site
• Display performance graph in local browser's time zone
• Display Average CPU in performance graph instead of max CPU (Min and Max CPU are still displayed in range view)
• Hide process "Name" in Mac and Linux views, since they are the same as the path anyhow
• Reduce the number of notifications in the top bar from 999 to 99 to improve performance
• Updated screen captures in device performance help page
• Allow computer details to display before all computers are loaded
• Add default phone number links to the contact page

Bugs:

• Dynamic ownership setting did not work in some stand-alone situations
• Full C: drive count and computer listings were inconsistent with multi-organization accounts

Add:

• BYOD indicator and easy set in computer listing and details
• Add AV to Operating System Section of system details
• Execute Powershell through Websocket for faster performance even if the console and computer API server are different due to load balancing
• Montana (US) phone number

Enhancements:

• Performance graph enhancements
• Pricing sizing changes for smaller mobile devices, clarifications on benefits
• When clicking a patch to view all affected, automatically change the active company

Add:

• Temperature to device details performance chart tab
• Temperature to hardware details
• Temperature trend to hardware details
• Previous high temperature flags to device details
• Links in the patch details tab that show all computers missing the applicable patch
• Support for referral affiliates
• MSP objectives to MSP menus

Enhancements:

• Improve network use accuracy and replace the line graph with dots to highlight when data is transferred (the line graphs were misleading, since the downloads/uploads are points in time)
• As performance graph data loads asynchronously, do not change the current view
• Change "Data Sent" and "Data Received" to "Upload" and "Download"
• Indicate if an uninstall is pending or completed in device details
• Speed up detailed chart loading, decrease granularity of details for views greater than a day
• Improve pricing alignment and sizing
• Performance overview date data in ISO format to improve compatibility

Bugs:

• Redirection to the console was getting triggered for parts of the public site's domain scan, causing problems for new domain scans.

Add:

• Server-side searching of Windows Event Viewer and summary search, smaller initial client-side searchable load (covers most workstations)

Enhancements:

• Sorting of summary log issues by critical, error, warning, and info
• Faster device detail loading with chunked loading of client-side search for event viewer logs
• Additional security for device detail AJAX
• Clarity of Operating System patches in public website for listed patches

Add:

• Windows Event Viewer Summary and search

Add:

• Pressing Enter on the top page/device search box will select the first item in the list
• Grey overlay (adding grey background and dulling graph) during time periods where the device was sleeping or off
• Loading indicator for progressive load of comprehensive device statistics
• Help for Processes and Performance
• New light grey bandage icon in application listing for applications that have new published versions without patches or mainstream updates. Lavawall® does not install preview or beta updates, but does provide information about their availability.

Enhancement:

• Formatting for comprehensive device performance statistics to fit into one screen
• Mouseover details in comprehensive device statistics show all dimensions (CPU, RAM, Network Sent, Network Received, Used C: Drive, Used D: Drive) with units (% or MB). Time details go on the x-axis
• Improved consistency in patch messaging, application and patch agreement

Add:

• Full zoomable performance history added to device details (previously, it was just the last month)
• Buttons to see the last day, week, month, year, or all performance information
• Ability to show or hide the range of performance metrics within one observation period (previously, the minimum and maximum were displayed in an area graph, which makes it hard to view over long periods)
• Redaction capabilities for Huntress Summary and device detail
• Redaction capabilities in the company drop-down
• Indication if specific process in device detail is currently running
• Serial number for Mac devices in device detail and device search
• Add page number selection buttons to bottom of computer listing

Enhancement:

• Faster device detail loading with performance history loaded asynchronously
• Remove "Page" from page number selection buttons in computer listing

Bugs:

• The number of rows to display in computer listing was not always remembered when changing pages

Add:

• Computer display filters for:
  • Huntress Installed
  • Huntress Not Installed
  • Active Huntress Incidents
• Links in Huntress Company Summary apply computer listing filters automatically
• Devices with Huntress incidents added to Huntress Company Summary
• Help Link to Page titles, integrated with
  • Dashboard
  • Battery Summary
  • Huntress Summary
  • Patch Summary
  • Replacement Priorities
  • White-label Domain Scanner
• Links to detailed help for Datto RMM installation

Enhancement:

• Simpler Huntress Installation Instructions
• Huntress mention on home page
• Formatted Huntress incident details on Device Details

Bug:

• Huntress Company Summary links were filtering “Server Only” automatically.

Add:

• Huntress setup, animation, and instructions
• Analyze devices and automatically assign the most popular orgkey to companies when setting up Huntress API
• Add services tab for Windows, Mac, and Linux for device details
• Add search function in device details for patch, processes, services, applications tabs
• Add Atera, Huntress, and AV as well as "white-label domain scanner" to MSP information
• Allow domain scan results reference code to use white-label website
• Security filters for white-label domain
• Axcient icon to computer listing in platform field if Axcient is installed and Lavawall® identified the reference number for API integration
• Colour-coding risk factors in replacement priority
• Prioritize the following MacOS versions for replacement: Monterey, Big Sur, Catalina
• Atera integration instructions page
• Redaction capability to computer search listing
• Redaction capability for replacement priority report
• Indicate which application update patches Lavawall® will be able to apply in the next release
• Delete domain functionality
• Huntress and other new summary pages added to quick search
• Indicate which computers have open Huntress incidents in the computer listing

Enhancement:

• Sort Domain summary by total errors (descending) followed by domain name (ascending) by default
• Improve network connection type (anonymous proxy, business, etc) listing
• On public website, display footer headers in white if on the index page
• Clarify pricing page to specify that overages are charged month-to-month without high watermark pricing for annual agreements
• Add quantity discounts to each subscription level
• In the feature list, add "Login" to "M365, Passkey, MFA" for clarity
• On public pages, emphasize "no high watermark billing," white-label security, and training
• Add additional subdomains to domain scanner

Add:

• White-label Domain Scanner embedding customization (Embed Scanner under You)
• Huntress API

Add:

• Domain summary page
• Ability to remove domain from company
• FAQ about device installer process
• Uninstall state added to device details

Enhancement:

• Display computer name in title of Device Detail page if opened in new tab/window
• Datto Component refinements
• Display remaining number of days in MFA grace period in delay button instead of maximum period

Add:

• Add automatic calculation of tax based on location in British Columbia and Canada

Enhancement:

• Pricing page clarification and mobile optimization

• When a user who signed up with a passkey or password later tried to log in using Microsoft 365, the user wasn’t redirected to their intended target properly and their sessions were not consistently maintained (fail secure, but fail nonetheless) after sending the new authentication method added notification email. This also prevented consistent session management when the user logged in.
  Thanks to Al Del Degan from New Idea Machine in Calgary, Alberta for responsibly disclosing this issue to us!

Enhancement:

• Increase visible area of domain scan on mobile devices when not logged in
• Improve dark mode visibility

Add:

• MSP Directory
• Display Huntress in the platform area if it's installed
• Datto RMM Windows installation component
• Datto RMM Mac installation component
• SPF issue list in the top summary of domain scanner, so it's visible with a trial
• Port 4443 and Sonicwall to the domain scanner
• Features page for public mobile menu

Enhancement:

• Improve the spacing of the uninstall button
• Improve colours of SVG icons on home page
• Change Datto RMM installation instructions to use the new Datto RMM components
• Prevent the "open computer details in a new window" from wrapping to a new line
• Improve styling for links to make them more obvious on the public site
• Change wording for DKIM test to clarify that it uses standard selectors and may give false positives

Bug:

• Do not display close button on computer details if opened in a full screen

• Change Internal IT to Individual Organization in signup to avoid confusion for non-IT folks signing up.
  Thanks to Faith in Calgary, Alberta for highlighting this confusion during our presentation for Movement51 founders!
• Improve colours of SVG icons on home page

Bug:

• FAQ link on home page was lower-case instead of upper-case
• SVG icons on home page were not showing up on Firefox

New:

• New public-facing website

Enhancement:

• Add redact feature for demos
• Style the free scanner to be easier to see and consistent with the new site

Enhancement:

• User process statistics
• Windows current user