Product Updates

A wave of new sources landed in April, covering edge and networking (Cloudflare), recruiting (Workable), cloud infrastructure (DigitalOcean, five GCP services), collaboration (Slack), application monitoring (Sentry), and code security (Semgrep). This brought the connector catalog to a substantially broader footprint.

Related control link on artifact side panel. The artifact side panel now includes a direct link to the related control, so admins can jump from an evidence artifact into the control it supports without navigating manually.

Artifact indicator on the Actions table. The Actions table now shows an indicator when an action has attached artifacts, giving admins...

DOCX artifacts now render inline in the preview panel, matching the existing PDF preview experience. There's no need to download a file just to check its contents.

Managed OS for macOS has been updated. The latest approved version for Tahoe is now 26.4.1, with the following release date:

macOS 26.4.1 : Apr 09, 2026

We’ve released Iru Agent for Mac (5.1.1 (5378)) and Windows (1.7.14).

This update rebrands the Kandji agent to Iru across all end-user facing apps, including the menu bar app, Self Service, Liftoff, and Passport.

Additionally, the kandji CLI tool on Mac has been renamed to iru and now includes a terminal user interface (TUI). To use the TUI, invoke sudo...

A dedicated Windows system tray application gives end users a clear prompt to close applications that block an install when an Auto App or Windows Custom App deployment runs.

The tray icon uses the Iru jelly-style mark. When an install targets processes you configured to detect as open apps, the tray application surfaces a prompt so users can close those...

Managed OS for iOS and iPadOS has been updated. The latest approved version is now 26.4.1, with the following release dates:

iOS 26.4.1 : Apr 08, 2026

iPadOS 26.4.1 : Apr 08, 2026

Device Isolation gives you the ability to immediately sever a network connection for any macOS device suspected of compromise. This feature, accessible directly within the Detections section, allows for rapid containment of active threats like malware or unauthorized lateral movement.

This feature was released in preview mode on March 5, 2026. Today, this...

The Windows Custom App Library Item deploys Win32 applications via MSI and EXE packages to Windows devices, with full control over installation, detection, and enforcement.

Upload a zipped installer containing your MSI or EXE and any supporting files, define silent install and uninstall commands, and configure detection logic so the agent knows whether the...

The manual enrollment portal has been rebranded from Kandji to Iru. All functionality remains the same.