New features, improvements, and fixes shipping across the platform.
Follow @officiallyiru ↗Highlights this week in What’s New in Iru:
Extend Privacy Library Item coverage to Mac computers .
Make your user’s sign-in experience more seamless with Single-Sign On upgrades
Upgrade Android devices to a managed Google domain directly within Iru.
We've released Iru Agent for Windows 1.25.7. Endpoint Agent
Checksum validation for downloads on Windows Iru Agent for Windows now validates the checksum of every app and update it downloads, so it only installs files that match what Iru sent.
App inventory for Windows computers now reports the install path for more applications, giving you a clearer...
New Windows Auto Apps have been added to the catalog and are now available for all Iru Endpoint customers.
See all available Auto Apps in the Library Items section of our website.
A new Auto App, XQuartz, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
A new Auto App, Termius, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
A new Auto App, Superhuman, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
A new Auto App, RustDesk, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
A new Auto App, Proxyman, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
A new Auto App, GitHub Copilot, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
A new Auto App, Grok Bot, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
Remote Shell gives you a root command line on a managed Mac, right from a detection or the device record. It stays connected while the Mac is in Partial Isolation, so you can contain a threat and investigate it at the same time.
Remote Shell is available to all customers who have Iru EDR for macOS.
For more information, see our support article.
Managed OS for iOS and iPadOS has been updated. The latest approved versions are now 27.2, 26.7.2, and 18.7.11, with the following release dates:
iOS 27.2 : Oct 26, 2026
iOS 26.7.2 : Oct 26, 2026
iOS 18.7.11 : Oct 26, 2026
iPadOS 27.2 : Oct 26, 2026
iPadOS 26.7.2 : Oct 26, 2026
iPadOS 18.7.11 : Oct 26, 2026
Managed OS for tvOS has been updated. The latest approved versions are now 27.2 and 26.6.1, with the following release dates:
tvOS 27.2 : Oct 26, 2026
tvOS 26.6.1 : Oct 26, 2026
Managed OS for macOS has been updated. The latest approved version for Golden Gate is now 27.2; for Tahoe, 26.7.2; and for Sequoia, 15.8.2, with the following release dates:
macOS 27.2 : Oct 26, 2026
macOS 26.7.2 : Oct 26, 2026
macOS 15.8.2 : Oct 26, 2026
We’ve released Iru Agent for Mac 5.2.7 (5401).
This release adds Korean localization to Passport, Self Service, Liftoff, and the Iru menu bar app.Mac Custom App Library Items now support installers up to 30 GB in size. Downloads happen in the background in the Iru Agent as to not hold up processing of other Library Items, and downloads auto resume when possible if they are interrupted by network hiccups or devices sleeping.
We've released Iru Agent for Windows 1.24.6.0. This release fixes apps missing from device inventory, stops apps reinstalling repeatedly when an installer leaves an older entry in Add/Remove Programs, and stops the Self Service updater creating a system restore point that some endpoint security tools flagged.
Highlights we cover this week in What's New in Iru:
Iru AI now builds Library Items for BitLocker on Windows and Android Restrictions from a plain-language description. Describe the disk encryption policy or device restrictions you need, and Iru AI sets up the Library Item for you.
Automated Device Enrollment now has an update to setting in addition to the minimum required OS version, so you can set a floor for enrollment and a separate version that devices update to. Devices below the minimum update to that version before they enroll, and devices already at or above the minimum enroll without updating. This works for macOS, iOS, and...
FileVault recovery keys can now rotate automatically after an administrator views the current key. Turn on Automatically rotate keys after viewing in the FileVault Library Item and set when the rotation happens. Key views continue to be recorded in the device activity timeline.
The Single Sign-On Library Item now supports OpenID sign-in on macOS 27 and later, so users can sign in through identity provider web sign-in pages, including multi-factor authentication, at the login window, Lock Screen, and FileVault unlock. New settings let you sync the web login password to the local account and set a web login URL allow list. These...
Admins can now upgrade an Android Enterprise integration from a managed Google Play account to their organization's managed Google domain, directly from the Iru web app and without re-enrolling any devices.
An upgrade banner and an Upgrade to managed Google domain button appear for integrations connected with a managed Google Play account. The admin enters...
The Privacy Library Item's Recommended privacy permissions area now supports Mac, in addition to iPhone and iPad. Admins can recommend app permissions for macOS apps and website permissions for Safari, so end users see a single consent prompt listing everything an app or site needs instead of being prompted one permission at a time. The user can select...
We’ve released Iru Agent for Mac 5.2.7 (5400).
This release includes performance improvements for Endpoint Detection and Response.
Highlights we cover this week in What's New in Iru:
Custom App, Custom Printer, and Custom Script Library Items for Mac now provide an option for whether they should be processed during or after Liftoff.
We’ve released Iru Agent for Mac 5.2.4 (5399).
This release includes a bug fix for the Passport login window that may have caused it to not display on macOS 14 and macOS 15.
We’ve released Iru Agent for Mac 5.2.3 (5398).
This release includes miscellaneous bug fixes and improvements.
Highlights we cover in this week in What's New in Iru:
We've released Iru Agent for Windows 1.23.7. This release includes miscellaneous bug fixes and performance improvements.
Windows 11 26H2 is here, and Iru is ready for it. Devices running 26H2 can now be enrolled in Iru, so your team can onboard new hardware and upgraded fleets without waiting or building workarounds. We've also added a new Managed OS Library Item for Windows 11 26H2, which lets IT teams set 26H2 as the target version and keep devices on a consistent,...
New Windows Auto Apps have been added to the catalog and are now available for all Iru Endpoint customers.
See all available Auto Apps in the Library Items section of our website.
A new Auto App, TIDAL, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
A new Auto App, Parallels Desktop 27, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
A new Auto App, Microsoft 365 Copilot, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
A new Auto App, IINA, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
A new Auto App, cmux, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
A new Auto App, Audacity 4, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
The Iru Identity activity log now shows a new, more detailed view of activities, including user sign-ins, application management, account lifecycle events, and group management. You can filter the table by activity time, activity type, outcome, user, actor, and application. Multiple filter conditions at once are also supported.
Managed OS for Apple devices now includes a dynamic timeline view that adjusts to the settings defined in the Library Item, taking the guesswork out of when a particular update will be enforced and to which version a device will be forced to update.
The Restrictions Library Item for Apple devices now supports the following restrictions:
AllowNaturalLanguageEditing
AllowVisualIntelligence
AllowLiveRecognition
AllowSiriAI
ForceReduceSensitiveContent
Iru automatically deploys these restrictions in DDM declarations alongside any existing restrictions deployed using MDM. Additionally, these new...
The Safari Extensions Library Item has been enhanced to support management of Safari Extensions on macOS.
Note: This feature requires the user of the Mac to be enabled for user channel MDM.
The user list shown on a Mac device record now includes whether the user is enabled for user channel MDM.
Additionally, this data is also now available in Prism in the Users category and enterprise API for bulk reporting.
Managed OS for macOS has been updated. The latest approved version for Golden Gate is now 27.0.1; for Tahoe, 26.7.1; and for Sequoia, 15.8.1, with the following release dates:
macOS 27.0.1 : Sep 28, 2026
macOS 26.7.1 : Sep 28, 2026
macOS 15.8.1 : Sep 28, 2026
Managed OS for iOS and iPadOS has been updated. The latest approved versions are now 27.0.1 and 26.7.1, with the following release dates:
iOS 27.0.1 : Sep 28, 2026
iOS 26.7.1 : Sep 28, 2026
iPadOS 27.0.1 : Sep 28, 2026
iPadOS 26.7.1 : Sep 28, 2026
We’ve released Iru Agent for Mac 5.1.102 (5397).
This release includes miscellaneous bug fixes and improvements.
As of today, Iru has removed the following Auto App(s) from our catalog:
Any deployed configuration profiles bundled with these titles will be automatically removed from Mac computers at their next MDM check-ins.
However, this app will not be removed from managed devices if currently installed. An applicable uninstaller for this app,...
The Privacy Library Item now includes a Recommended privacy permissions area for iPhone and iPad, letting admins recommend the app permissions and Safari website permissions that managed apps and sites will need. The end user sees a single consent prompt listing every permission the admin recommends, with the choice to Allow all at once or select Not Now....
MSP Billing gives managed services providers daily, per-tenant spend visibility, so they always know what they owe and can bill clients with confidence. MSPs can also update payment methods, billing information, and view past invoices. It's available now for U.S. customers, with self-serve setup in minutes, right in the Partner Portal.
The Managed OS Library Item for Windows now reports whether each assigned device has reached the Windows 11 build the Library Item requires. Devices show as Pass, Update past due, or Error, and expanding a device row shows its current build against the required build, plus the eligibility, install enforcement, and restart enforcement dates.
We've released Iru Agent for Windows. This release fixes Custom App and Auto App detection so apps are no longer reinstalled when a version is missing or misread, corrects Auto Apps enforcement after a user closes an app, and resolves agent installation failures.
highlights we cover this week in What's New in Iru:
Deploy Vulnerability Management and Response on Windows
See clear status of OS updates for every Windows device
Control which email address enrollment invites go to for Iru Identity
Iru AI can now recommend and implement Windows Update settings based on CIS benchmarks or Microsoft defaults, and you can ask follow-up questions to refine those settings or understand their behavior. Iru AI can also answer questions about most Library Items, settings, and best practices from any chat, even when you're not on that Library Item page.
We’ve released Iru Agent for Mac 5.1.102 (5396).
This release includes reliability improvements to the MSDC registration process.
Introducing macOS LAPS: Local Administrator Password Solution. The new LAPS Library Item for Mac automatically generates, rotates, securely escrows, and controls access to local administrator passwords.
macOS LAPS in Iru offers a number of features including strong, customizable passwords, automatic rotation (both scheduled and after viewing), multiple...
We’ve released Iru Agent for Mac 5.1.101 (5395).
This release includes upgraded iconography for macOS 27.
Managed OS support for iOS 27, iPadOS 27, and tvOS 27 has been added. The latest approved versions are now 27.0, with the following release dates:
iOS 27.0 : Sep 14, 2026
iPadOS 27.0 : Sep 14, 2026
tvOS 27.0 : Sep 14, 2026
Additionally, Managed OS for iOS and iPadOS has been updated. The latest approved version is now 26.7, with the following release dates:
Managed OS for macOS Golden Gate has been added. The latest approved version is now 27.0, with the following release date:
macOS 27.0: Sep 14, 2026
Additionally, Managed OS for macOS has been updated. The latest approved version for Tahoe is now 26.7; and for Sequoia, 15.8, with the following release dates:
macOS 26.7 : Sep 14, 2026
macOS 15.8 : Sep 14,...
Highlights we cover this week in What's New in Iru:
As of today, Iru has removed the following Auto Apps from our catalog:
Any deployed configuration profiles bundled with these titles will be automatically removed from Mac computers at their next MDM check-ins.
However, these...
We’ve released Iru Agent for Mac 5.1.32 (5394).
This release includes miscellaneous bug fixes and performance improvements, including a fix for an issue with Custom Apps installing on macOS 27.
Vulnerability Management now supports auto remediation of CVEs for apps on Windows, when an update for the app is available from the Auto App catalog.
From the Vulnerability Response Library Item, select the Windows platform and define remediation rules (Enforce update upon detection, Enforce update on a timeframe, or no action) based on CVE severity...
Your evidence library now covers new actions automatically. When a new action is created — from a new framework, a new control, or one added by hand — Iru evaluates it against the artifacts already in your evidence library and attaches any strong match. Add SOC 2 today and a policy you uploaded months ago is already attached to the actions it covers....
Managed OS for iOS and iPadOS has been updated. The latest approved version is now 26.6.2, with the following release dates:
iOS 26.6.2 : Sep 08, 2026
iPadOS 26.6.2 : Sep 08, 2026
Highlights we cover this week in What's New in Iru:
Administrators can now send a Workforce Identity enrollment invitation to a user's secondary or personal email instead of their work email. This unblocks first-time enrollment for users who need a passkey to access the work mailbox that holds the invitation.
Devices erased with Return to Service can now retry enrollment on their own if the initial attempt fails. In the Erase device modal, checking Use Return to Service reveals a new Retry enrollment option, checked by default, that's available for iPhone and iPad on iOS 27 or iPadOS 27 or later.
When enrollment fails after the device erases, the device...
We've released an update to Iru Agent for Windows. This release includes miscellaneous bug fixes and performance improvements.
Audit details show as pills on the framework card. Auditor name, audit period, and audit engagement date now appear as separate pills on each framework card header, so audit status is readable without opening the framework. A framework with none of them set shows a single "Audit details not set" pill.
Clear a date you no longer need. Edit audit details now...
Cyber Essentials, the UK Government-backed certification scheme, is now available as a framework in Iru Compliance, covering its five technical themes: Firewalls, Secure Configuration, Security Update Management, User Access Control, and Malware Protection. Add it from the Frameworks page and build your control set with AI generation, a CSV import, or from...
Generated controls and actions name your actual tools. AI-generated controls and actions now refer to the tools you selected by name instead of generic descriptions like "the identity provider." Categories you leave blank keep the generic wording — Iru won't invent a vendor name for a category you skipped.
A new Auto App, Teleport Connect, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
A new Auto App, Gather, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
A new Auto App, Foxit PDF Reader, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
A new Auto App, Foxit PDF Editor, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
A new Auto App, Dia, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
A new Auto App, Cavalry, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
A new Auto App, AppCleaner, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
New Windows Auto Apps have been added to the catalog and are now available for all Iru Endpoint customers.
See all available Auto Apps in the Library Items section of our website.
Mac Custom App, Custom Script, and Custom Printer Library items now support being hidden in Liftoff or displaying a "friendly name" to the end user instead of the Library Item name.
Liftoff will show "Processing additional required configurations before proceeding…" when processing hidden items, and setting a friendly name does not change the ordering of...
We’ve released Iru Agent for Mac 5.1.28 (5393).
This release includes miscellaneous bug fixes and performance improvements. Additionally it brings support for the new Hide in Liftoff and Liftoff friendly name options for Custom App, Custom Script, and Custom Printer Library Items.
Highlights we cover this week in What's New in Iru:
Windows Update Library Item now features native Iru AI integration for a guided experience
Windows System Tray app gives employees visibility into pending updates with deadlines
New Auto Apps added for Windows and Mac
Three updates make Iru AI answers easier to read and act on.
Library Item pages now show an auto-generated summary of how the item is configured, who it affects, and its security impact — and it stays current as configuration changes.
References to devices, Library Items, Blueprints, apps, or CVEs in chat answers now appear as clickable links straight...
Device system health statuses for supported hardware components (such as camera, NFC, baseband, Touch ID, etc.) are now shown in Iru on the device record for supported devices running iOS or iPadOS 27 beta.
These values are also available in the enterprise API device details endpoint.
Select Sync Frequency for Directory Sync Integrations - It is now possible to choose the sync frequency interval for each directory sync integration. Choices include: Manual Only, Every 30 minutes, every hour, 2 hours, 4 hours, 8 hours, 12 hours, daily, every 2 days, or weekly.
Added Refresh and Sync Now...
We’ve released Iru Agent for Mac5.1.26 (5392).
This release includes miscellaneous bug fixes and performance improvements.
Admins can now require company-owned Android devices with a work profile to be signed in with a managed Google Account, ensuring end users have full access to the organization's Google Workspace services.
The Android Restrictions Library Item includes a new managed Google Account setting with two modes: allow any managed Google Account from the...
Iru admins can now control which apps are allowed to act as credential managers, such as password managers and passkey providers, in the work profile on managed Android devices. The Android Restrictions Library Item includes a new Credential managers setting that sets the default policy: block all credential managers, or allow the device's pre-loaded system...
Mac Auto Apps now support enforcing a specific version, selecting from a list of Iru hosted versions.
Devices installing the Auto App for the first time or that are out of date will install the selected version instead of the latest available.
Iru Vulnerability Response overrides these settings if applicable.
We've released an update to Iru Agent for Windows. This release includes miscellaneous bug fixes and performance improvements.
Single Sign On (SSO) pre-configuration templates are now available for 209 commonly used web applications, including Slack, Zoom, Google Workspace, and more! The templates guide Identity administrators through the steps needed to set up SAML or OIDC single sign-on and can also assist with SCIM user provisioning configuration. Iru is continuously adding new...
Managed OS for iOS and iPadOS has been updated. The latest approved versions are now 26.6.1 and 18.7.10, with the following release dates:
iOS 26.6.1 : Aug 17, 2026
iOS 18.7.10 : Aug 17, 2026
iPadOS 26.6.1 : Aug 17, 2026
iPadOS 18.7.10 : Aug 17, 2026
Managed OS for macOS has been updated. The latest approved version for Tahoe is now 26.6.2, with the following release date:
macOS 26.6.2 : Aug 17, 2026
Highlights we cover this week in What's New in Iu (Black Hat 2026 edition):
Windows devices now show a list of Auto App and Custom App updates that haven't installed yet right from the new Iru system tray app. End users can install one update at a time or use Update all, closing open apps when needed to complete the install, and the list clears itself as installs succeed.
Google Cloud Platform is now available in the Iru Compliance connector catalog, replacing the previous coming-soon placeholder.
Connect the Google Cloud project you want Iru to monitor using a read-only service account and JSON key, and Iru collects configuration and inventory evidence across Google Cloud IAM, Cloud Storage, Cloud KMS, Cloud Logging,...
We’ve released Iru Agent for Mac 5.1.25 (5391).
This release includes miscellaneous bug fixes and performance improvements.
The Owner and Delegate filters on the Actions list within Compliance Automation now include an Unassigned option, so admins can find the actions nobody owns yet without scanning the table. This pairs with the separate Owner and Delegate columns added in May.
Highlights we cover this week in What's New in Iru:
A new way to work with Library Items in Iru AI: get a plain-language description of what the Windows Update Library Item does, a summary of how it's configured, and a breakdown of what users will experience.
Iru AI can also recommend configuration changes, highlight exactly what's changing and why, and apply them with one click. Windows Update is the first...
Devices held in Setup Assistant while Library Items install can now be released manually. This applies to devices enrolling via Automated Device Enrollment and devices migrating into Iru with managed apps preserved. While a device is held at the Configuring screen, a banner appears at the top of the device's record in the Iru web app showing when the hold...
Managed OS for macOS has been updated. The latest approved version for Tahoe is now 26.6.1; for Sequoia, 15.7.9; and for Sonoma, 14.8.9, with the following release dates:
macOS 26.6.1 : Aug 06, 2026
macOS 15.7.9 : Aug 06, 2026
macOS 14.8.9 : Aug 06, 2026
In the Software Update Library Item, Apple beta program enrollment can now be offered to end users to opt-in, or a specific program can be enforced without needing to enforce a specific version alongside the enrollment.
Iru now supports three different ways to manage Apple beta program enrollments and version enforcements:
The Single Sign-On Extension Library Item now supports configuring Authenticated Guest Mode when using Platform SSO with macOS.
The new phased rollout option previously introduced for Mac Auto Apps is now available for Apple Managed OS. Phased rollouts give admins more control over how updates are introduced across their fleet.
Instead of sending a new declaration to every device at the same time once a new version is available from Apple, admins can enable phased rollout and...
We've released an update to Iru Agent for Windows. This release includes miscellaneous bug fixes and performance improvements.
Windows devices now show a list of Auto App and Custom App updates that haven't installed yet right from the Iru system tray app. End users can install one update at a time or use Update all, closing open apps when needed to complete the install.
A new Auto App, Screen Studio, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
A new Auto App, Glean, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
A new Auto App, Elgato Stream Deck, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
A new Auto App, AltTab, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
New Windows Auto Apps have been added to the catalog and are now available for all Iru Endpoint customers.
See all available Auto Apps in the Library Items section of our website.
We’ve released Iru Agent for Mac 5.1.22 (5390).
This release includes miscellaneous bug fixes and performance improvements.
Iru AI now starts responding roughly 3–4 seconds faster after a prompt, and a rare worst-case delay of up to 10 seconds has been eliminated. Starting a new chat also brings a lighter, cleaner starting screen.
When using the Rolling Enforcement option with Managed OS for Apple devices, it's now possible to specify an automatic delay (up to 90 days) that will prevent Iru from sending a new target version declaration to devices.
This delay embedded in Managed OS can be combined with Apple software update deferrals (configured in a Software Update Library Item) to...
Exclude specific users from a policy assignment. When publishing or updating a policy, admins can now exclude specific users from the assignment. This is useful when a policy applies broadly but has a handful of exceptions who shouldn't be asked to acknowledge it.
Admins and auditors can now re-include a user who was previously excluded from a policy...
Version 1.2.4 of the Iru ServiceNow integration is now available on the ServiceNow store and supports the Australia release of ServiceNow.
A new Assignment Rule is now available on Assignment Maps to assign Library Items to devices based on beta program enrollment status. Assignments can be made on whether a device is enrolled in any beta program at all, or based on specific enrollment(s).
Managed OS for macOS has been updated. The latest approved version for Tahoe is now 26.6; for Sequoia, 15.7.8; and for Sonoma, 14.8.8, with the following release dates:
macOS 26.6 : Jul 27, 2026
macOS 15.7.8 : Jul 27, 2026
macOS 14.8.8 : Jul 27, 2026
Managed OS for iOS, iPadOS, and tvOS has been updated. The latest approved version is now 26.6, with the following release dates:
iOS 26.6 : Jul 27, 2026
iPadOS 26.6 : Jul 27, 2026
tvOS 26.6 : Jul 27, 2026
Highlights we cover this week in What's New in Iru:
Iru AI can now confidently answer questions that combine more than one topic in a single prompt, like a device's configuration and its open vulnerabilities together. Vulnerability details and EDR detection pages now include plain-English "Why this was flagged" and "Next steps" summaries, and vulnerability answers in chat now pull from the same source as the...
Policy generation framework picker limited to available frameworks. The framework picker in the policy generation intake now only lists the frameworks a tenant is entitled to (SOC 2, ISO 27001, HIPAA, GDPR by default), so admins never see options they can't actually generate against.
Choose a framework for policy generation intake. Admins can now select the...
The following new restrictions are available in Iru for devices testing the macOS 27 Apple beta release:
Workforce Identity
Endpoint Management
Endpoint Detection & Response
Vulnerability Management
Compliance Automation
Trust Center
ForceCaptivePortalConnectionFromLockScreenForceWifiConfigurationOnLockScreenAdditionally, the following existing restrictions can now be applied to visionOS 27+:
allowAutomaticAppDownloadsallowCameraallowListedAppBundleIDsblockedAppBundleIDsAppleCare enhanced log collection can now be requested from devices running iOS and iPadOS 27, currently in beta.
Support for requesting enhanced log collection from Mac computers will be coming later.
Bulk Device Exclusion
Bulk Device Exclusion lets you exclude multiple devices from Vulnerability Management in a single action, and remove exclusions the same way. Excluding a device hides that device from all vulnerability views, detection counts, and alerts, which is useful for taking a machine temporarily out of scope, such as a device pending...
When using the option to customize what gets installed during Automated Device Enrollment for Mac, Auto Apps or Okta Verify with Okta Device Trust now receive their Iru managed configuration profiles (PPPC, background items, etc.) during Setup Assistant, ensuring full functionality when the end user is released out of Setup Assistant.
Apple devices now show their public IP address on the device record > details tab, in the new optional Prism column, and in the enterprise API device details endpoint.
Devices' public IP addresses are captured during their daily full MDM check-in.
Apple beta program enrollment and version enforcement is now available for iOS and iPadOS in Managed OS and ADE Library Items. Support for macOS was previously added.
Additionally, any Apple device enrolled in an Apple beta program will now show its program enrollment on the device record > details tab, in the new optional Prism column, and in the...
We've released an update to Iru Agent for Windows. This release includes miscellaneous bug fixes and performance improvements.
We’ve released Iru Agent for Mac 5.1.21 (5389).
This release includes improvements to the MSDC registration process.
Highlights we cover this week in What's New in Iru:
The Artifacts table now shows a Status column that surfaces evidence sufficiency for each artifact, making it clear at a glance which artifacts still need review versus which fully cover their mapped controls.
We’ve released Iru Agent for Mac 5.1.20 (5388).
This release includes miscellaneous bug fixes and performance improvements.
Reminder emails for employees with pending policy acknowledgements now send once a week, on Mondays, instead of once a day. The content of the reminder is unchanged — the same pending acknowledgements arrive in one weekly email rather than a daily one.
Control names and descriptions for ISO 27001 and ISO 42001 frameworks are locked from edits to preserve the framework's official language. Local overrides can still be captured in your organization's implementation notes.
Framework deletion restricted to account owners.Only account owners can delete a framework from an organization now. This prevents accidental deletion of a framework mid-audit by admins or auditors who shouldn't have that authority.
Type-to-confirm before deleting a framework.Deleting a framework now requires typing the framework's name into a...
Highlights we cover this week in What’s New in Iru:
Managed OS for Apple Library Item updates
Managed OS for Windows now available
Proactive ServiceNow updates
The controls list on a framework now supports a "needs review" filter that surfaces only the controls whose actions still need admin attention, helping teams focus on the remaining work in a framework rollout.
We’ve released Iru Agent for Mac 5.1.18 (5387).
This release includes miscellaneous bug fixes and performance improvements.
Managed OS for macOS has been updated. The latest approved version for Tahoe is now 26.5.2, with the following release date:
macOS 26.5.2 : Jun 29, 2026
Managed OS for iOS and iPadOS has been updated. The latest approved version is now 26.5.2, with the following release dates:
iOS 26.5.2 : Jun 29, 2026
iPadOS 26.5.2 : Jun 29, 2026
Highlights we cover this week in What’s New in Iru:
The ability to exclude specific devices from Vulnerability Reports
Support for changes to Microsoft Entra ID Conditional Access
Updated Config as Code tooling, iructl, alongside other frameworks
Administrators can now enforce a specific Windows 11 feature version across their fleet using Managed OS Library Items. This gives you direct control over which build your Windows 11 computers run, so you can keep devices on a known-good version instead of relying on each computer to update on its own schedule.
Each Managed OS Library Item supports...
Wildcard support in the EDR Library Item provides greater flexibility when managing allow and block lists.
This update introduces recursive wildcarding. Administrators can establish dynamic, broad-matching rules rather than specifying exact paths or filenames individually, streamlining configuration within the interface.
A new Windows Auto App, Iru Access, has been added to the catalog and is now available for all Iru Endpoint customers.
See all available Auto Apps in the Library Items section of our website.
The Automated Device Enrollment Library Item for Apple devices has been updated with the following enhancements:
1. Devices can be forced to upgrade to beta OS releases before they enroll, ensuring complete test coverage of critical enrollment workflows when testing beta Apple OS releases.
2. For Mac, devices can always be forced to update to the latest...
Managed OS Library Items for Apple devices now support enforcing beta releases using AppleSeed for IT beta tokens provided through Apple Business. These beta tokens synchronize to Iru automatically with configured Automated Device Enrollment (ADE) integrations.
Additionally, automated upgrade timing is now separate from updates and has its own enforcement...
We've released an update to Iru Agent for Windows. This release includes miscellaneous bug fixes and performance improvements.
Highlights we cover this week in What’s New in Iru:
Unified view for all Activities across the platform
Updated Managed OS Library Items for Endpoint Management
Helper tool prompts blocked for Mac Auto Apps
New side-by-side view for easier collaboration with Iru AI
Microsoft Entra ID (identity) and Arnica (developer security) are now available in the Iru Compliance connector catalog, adding two more sources for automated identity and code-security evidence.
We’ve rebranded and released updates to the following open source enterprise API utilities:
Kandji Sync Tool (kst) has been renamed to Iru Control (iructlv1.3.0) , Kandji Packages (kpkg) to Iru Packages (irupkgv2.1.0), and Kandji AutoPkg Processor Actions (KAPPA) to Iru Orchestration Tool for AutoPkg (IOTAv1.1.0). These rebrands are fully backwards...
Vulnerability Management now supports excluding specific devices from vulnerability reporting.
You can exclude a device directly from its device record or from the Devices tab within any CVE detail view. Excluding a device removes it from all CVE affected device counts across your fleet and stops vulnerability notifications from being sent for that device....
We’ve released Iru Agent for Mac 5.1.16 (5386), which now makes smarter decisions about when to download managed software if the current connection is believed to be constrained (like on Low Data Mode), expensive (like a mobile hotspot), or both.
Ask which apps are blocked on your users' devices and get an answer grounded in your App Blocking configuration. EDR detection answers in chat now line up exactly with the Detections page, and more questions — like "What is MDM?" or SKU questions — are now answered directly in chat instead of routing to Support.
The Trust Center editor now lets admins tune the opacity of their logo image so it looks right against different background treatments in their public trust page.
Endpoint Detection and Response for Windows is now generally available.
Endpoint Detection and Response (EDR) for Windows brings file-based threat detection and automated response to your Windows endpoints. Malicious files, PUPs, and unknowns are automatically categorized and acted on, keeping your fleet protected from the moment devices enroll.
Deploy via...
CMMC and ISO 27701 are now available as frameworks in Iru Compliance, with AI-generated controls and actions and coverage tracking across each framework's full requirement set.
Highlights we cover this week in What’s New in Iru:
New Iru AI features and capabilities
EDR alerts now deliverable via Microsoft Teams
New framework in Compliance Automation: NIST CSF 2.0
Auto App support for MSIX applications from our Windows Agent
The intake form for AI policy generation has been reorganized into clearer field groups, with tighter spacing and improved handling of long-form inputs.
A new unified activity experience is now available through our classic activity page for easier debugging and tracking across your environment. Unified Activity brings all of your events into one timeline across Endpoint, Detections, Vulnerabilities, and Compliance. You can switch to the new view whenever you're ready. The new experience includes full JSON...
Iru AI chat now opens alongside your work in a side-by-side view — chat on one side, the app on the other — making it easier to reference a page while you chat.
The new phased rollout option for Mac Auto Apps gives admins more control over how updates are introduced across their fleet.
Instead of offering a new version to every device at the same time, admins can enable phased rollout and choose a rollout window between 1 and 7 days (in hours). Devices are then offered the update gradually over that period, helping...
Managed OS Library Items for Apple devices now have an updated look and feel and offer powerful new levels of control for IT teams, with more coming soon.
IT teams can now define a specific version (and optional build) to enforce on devices.
Time enforcement has also been enhanced to allow for any time instead of predefined 30 minute increments.
More...
We've released an update to Iru Agent for Windows. This release includes miscellaneous bug fixes and performance improvements.
Delete an unpublished generated policy draft. Admins can now delete a draft generated policy from the editor before publishing, so unwanted drafts don't clutter the Policies overview.
Persistent autosave status in the policy editor. The generated-policy editor now shows a persistent autosave indicator next to the generation date so admins always know their...
Map a generated policy to recommended actions after publish. After publishing a generated policy, admins are prompted with a set of recommended actions to map the policy to, closing the loop from policy content to compliance evidence.
NIST 800-171 Rev 3 framework added. NIST 800-171 Revision 3 is now available as a framework template in Iru Compliance,...
Policies uploaded through the Policies overview now appear with a Draft status until an admin explicitly publishes them, replacing the previous behavior where uploads went straight to published.
The Policies list now surfaces AI generation jobs that are still running, along with any that failed, so admins never have to wonder whether their generation request is queued, in progress, or stuck.
Add PDFs and screenshots directly into chat context when using Iru AI — drop in a vendor best-practice doc or compliance artifact and tell Iru AI how to use it. Chat can also now ground answers in trusted external sources like Apple, Microsoft, NVD, and MITRE for vulnerability lookups and configuration guidance. A new Page Focus toggle shows exactly what...
We’ve released Iru Agent for Mac 5.1.13 (5385).
This release includes miscellaneous bug fixes and performance improvements. Additionally, it includes improvements for handling new Microsoft Conditional Access requirements in Iru Passport. For more details on these changes, reference our product documentation.
Microsoft Teams notifications give administrators the ability to receive alerts about detections directly within their communication platform.
This feature allows the configuration of Microsoft Teams notifications in the same manner as existing Slack integrations. Administrators can manage alert routing for the Detections section to ensure visibility into...
Generated policies live on the main Policies page. AI-generated policies now appear on the standard Policies overview alongside uploaded policies, and re-generation is gated to prevent accidentally overwriting an already-published version.
Publish CTA for generated policies. The generated-policy editor now includes a clear Publish action that packages the...
Managed OS for macOS has been updated. The latest approved version for Tahoe is now 26.5.1, with the following release date:
macOS 26.5.1 : Jun 01, 2026
Managed OS for iOS has been updated. The latest approved version is now 26.5.1, with the following release date:
iOS 26.5.1 : Jun 01, 2026
We've released an update to Iru Agent for Windows. This release includes miscellaneous bug fixes and performance improvements.
Iru Self Service for iOS and iPadOS will begin rolling out globally on June 3, 2026, at 10:00 AM PDT as an update to the existing Kandji Self Service app. Iru Self Service will show as Iru on the Home Screen. The bundle ID remains io.kandji.Self-Service-Mobile.
Ask questions about enrollments, Blueprint changes, compliance actions, and more — things like "how many devices were enrolled yesterday?" now just work.
The Actions table now splits the previous single "Team" column into distinct Owner and Delegate columns, so it's clear at a glance who's responsible for driving each action versus who's supporting.
App inventory and usage information is now able to be sent from Iru to ServiceNow for customers licensed for SAM Pro.
For more details, consult our product documentation.
A new AD CS connector is now available for Iru tenants.
If you still use AD CS from a Kandji tenant, first upgrade your tenant to Iru, then install the new connector from your Iru tenant. During cutover, you can run the legacy and new connectors on different servers. You can reassign AD CS servers using Assign servers once the new server is approved, or...
Admins can now refresh the credentials of an already-enabled source directly from the source's row. There's no need to disconnect and reconnect the integration to rotate an expiring token.
Uploading a new questionnaire in the Trust Center is now restricted to admin roles, matching the permission model used elsewhere in the product.
Ask "explain this" and Iru AI already knows what you're looking at — no more describing context manually. When a request is ambiguous, Iru AI now asks a focused follow-up question instead of guessing, and a new thinking indicator shows when it's actively working on your answer.
We’ve released Iru Agent for Mac 5.1.12 (5384).
This release includes miscellaneous bug fixes and performance improvements.
Specifically, this release brings further performance enhancements to application inventory collection for customers using Iru Endpoint but not Iru EDR.
File and Behavioral Detections are combined into a single view. This update includes a filter to isolate either file detections or behavioral detections. The Threat Status column is normalized to align consistently across both detection types.
Note, this update modifies solely the interface and does not alter underlying data.
Chat now pulls from Iru's knowledge base to answer technical questions, with a cleaner handoff to Support when it can't help. You can edit any message you've already sent and pick up the conversation from there. Iru AI can now configure Windows apps in addition to Mac, and a new AI summarization capability is rolling out across products.
Settings to configure Windows Autopilot for MDM auto-enrollment to Iru during out-of-box experience (OOBE) on new Windows devices are now available under Integrations in Iru. The one-time setup covers app registration in Microsoft Entra ID and a custom domain for your tenant.
The setup provides a guided flow with step-by-step instructions and lists the...
Acknowledgement exports now include the specific policy each acknowledgement was for as well as the acknowledgement date, so audit-ready records are one click away.
Organizations using Iru's Okta Device Trust (ODT) integration can now configure the integration on the Okta Verify Auto App for Mac in addition to, or instead of, on the App Store App version. Assignment Maps ensure only one or the other will be installed on Mac computers at one time. Using the Auto App provides an easier setup process and improved update...
Iru MCP is a Model Context Protocol integration that exposes the Iru Endpoint Management API as MCP tools for assistants such as Claude, Cursor, and other MCP-enabled clients.
Create an API key and enable MCP for the API key in Iru. After setup, Iru displays the token once together with a ready-to-paste MCP configuration for HTTP transport: MCP server URL,...
A new Auto App, Okta Verify, has been added to the catalog and is now available for all customers.
See all available Auto Apps in the Library Items section of our website.
When the enforcement deadline for a Windows Custom App or Auto App arrives and a blocking process is still running, users now see a 5-minute countdown dialog. The dialog names the app, gives users time to save their work, and offers two options: Update now, which closes the app immediately and runs the install, or Delay for 1 hour, which defers the...
We've released an update to Iru Agent for Windows. This release includes miscellaneous bug fixes and performance improvements.
The Users table now supports filtering by a specific policy and sorting by acknowledgement count, so admins can quickly see, for example, who hasn't acknowledged a given policy yet.
Iru's bi-weekly collection of articles, videos, and research to keep IT & Security teams ahead of the curve.