October 19, 2026 · InfraScout Team Security & Access
Reading a LAPS password, a BitLocker recovery key or an Azure Automation secret value takes an operator role, standard users change only the findings they recorded, and Admins can read any execution from chat.
October 18, 2026 · InfraScout Team Security & Access
agent_exec_powershell_readonly tells code from text, so LDAP filters, log messages and regex patterns no longer cause refusals. More legitimate reads run, and native tools that write are recognized and refused.
Agent-hosted MCP servers need an explicit entry for plain-HTTP loopback and trusted files on Linux, revoking an agent is immediate and final, and enrollment and the configuration commands get easier to use.
The AI can now search and read this documentation and its blog, so a question about installing an agent or what a setting does gets an answer from the current docs, with a link.
October 13, 2026 · InfraScout Team Product & Platform
The live-update dot now flags connections that keep being cut short, turns red when updates are down, and the network requirements list the portal paths a proxy must let stay open.
From agent 0.40.0, hosts whose only route to the internet is a corporate forward proxy can run the InfraScout agent, with the proxy set at install time or afterward and a status command that tells you what the proxy is blocking.
Haiku 5.5 is now selectable on Anthropic connections — a fraction of Haiku 4.5's per-token price, a million-token window, and the effort setting the old Haiku never had.
A new read-only Intune tool reports when your Apple push certificate, VPP tokens and Automated Device Enrollment tokens expire and whether they still sync, so you renew on time instead of re-enrolling every iPhone, iPad and Mac.
October 5, 2026 · InfraScout Team Product & Platform
Agent cards now say why the last update attempt failed and what to do about it, answered questions in chat open to show the full exchange, and agents return gradually after server maintenance.
October 3, 2026 · InfraScout Team Security & Access
Access Paths shows administrators every path that grants access to an agent, agent group, playbook, tool group, AI provider or Entra connector, and everything a single user can reach, traced hop by hop from the person to the resource.
Chat and workflow errors now say what happened, whether you can retry or an administrator must act, and where; answers cut short by the output-token cap are flagged; and new connections start with a larger Max Tokens.
Review a Microsoft Sentinel deployment and run KQL against your Log Analytics workspaces in the same conversation as your Entra, Defender, and host checks.
Pick how hard the model thinks when you start a chat, change it between messages, and see the model, effort, tokens and cost behind every answer, including work handed to Task Agents.
Sonnet 5.5 takes Sonnet 5's place at the same price, the GPT-6 family replaces the GPT-5.6 tiers, and a new OpenAI connection now defaults to a model that costs half as much as the previous default.
Every agent now reports whether it runs with administrator rights, so the AI tells you up front which checks it cannot run on a host, and Agent Details shows an Admin or Limited badge next to Runs as.
September 29, 2026 · InfraScout Team Security & Access
A first-party MCP integration from ITDESIGN lets InfraScout read One Identity Manager directly, so you can ask why someone holds a right, what a change triggered and which jobs are stuck, without the AI being able to change anything.
September 29, 2026 · InfraScout Team Agents & Fleet
FreeBSD amd64 hosts enroll like any other agent, run as a supervised rc.d service, report full inventory, and get their own OS filter and default group in the portal.
September 29, 2026 · InfraScout Team Product & Platform
A first-party MCP integration from ITDESIGN brings WATCH IT's live host and service status into InfraScout, read-only and on a call budget, so the AI can go from a red check to the reason behind it in one conversation.
Register your ticketing, virtualization, firewall, SIEM, monitoring and access systems as MCP servers, and one conversation can correlate them with what InfraScout sees on your hosts and in the Microsoft cloud.
September 27, 2026 · InfraScout Team Chat & Portal
Chat answers can now be shared as a formatted email or copied for Teams, charts and diagrams copy as images, and Task Agent cards show what a run cost.
September 26, 2026 · InfraScout Team Agents & Fleet
The Agent Details view is now a two-pane layout with health and actions at a glance, agent updates no longer stall behind offline hosts, and commands no longer time out while an agent reconnects.
September 26, 2026 · InfraScout Team Chat & Portal
Stopped and budget-exhausted answers now say what happened, attached playbooks run when asked, the tool catalog only offers usable servers, and MCP connections stay on the host you registered.
September 26, 2026 · InfraScout Team Agents & Fleet
On systemd hosts the InfraScout agent can run as an unprivileged system user whose commands cannot escalate, migrated in place with no re-enrollment — and x86-64 agents run on older distributions again.
September 24, 2026 · InfraScout Team Security & Access
Web research in chat now fetches only links that came from you or from the AI's own searches, so planted text in a host's output cannot trick it into sending your data to someone else's server.
September 24, 2026 · InfraScout Team Agents & Fleet
On domain-joined hosts the InfraScout agent can now run as a group Managed Service Account — tiered per host class, migrated in place without re-enrollment, and reporting exactly what its account can and cannot read.
Opus 5.5 is now the Opus tier on Anthropic connections — a million tokens of context, lower rates than Opus 5 on every line of the bill, and one model in the picker where there used to be two.
Hand a ticket to InfraScout and the AI reads it, checks the live environment, proposes exact changes for your approval, verifies the result, and writes the evidence back to the ticket.
September 20, 2026 · InfraScout Team Security & Access
Findings from Microsoft Cloud assessments now take their visibility from the Entra connection they came from, each connection keeps its own findings, and the Insights page shows which tenant every cloud finding belongs to.
How to use InfraScout to roll out Microsoft Remote Help on cloud-only, Intune-managed Windows laptops, find out why it fails on a helper's machine, and diagnose a slow laptop remotely without a domain or a VPN.
How to hand a flaky privileged-group automation in a tiered Active Directory to InfraScout in a chat, and come out with a root-cause chain, a documented automation map, least-privilege delegation, and a change ticket.
September 14, 2026 · InfraScout Team Microsoft Cloud
InfraScout now reads Azure Automation in depth — runbook source, job history and output, schedules, webhooks, variables, credentials and connections — so you can audit what runs unattended in your subscriptions, and with which secrets.
Five examples of custom playbooks that turn repeatable operations procedures, from onboarding baselines to ticket enrichment, into runs that look the same whoever triggers them.
September 10, 2026 · InfraScout Team Chat & Portal
The Insights page opened on aggregate color while the rows a triage pass works through sat below the fold. The list now leads, the charts moved into a rail beside it, and the detail view reads as a document.
How to use agentic workflows to run domain controller, PKI, SQL Server, and Microsoft 365 mail health checks unattended every morning and publish a dated report page to your team wiki.
September 8, 2026 · InfraScout Team Microsoft Cloud
Three mail tools shipped without any permission requesting them, and a distribution list's external contacts were coming back blank rather than refused. Both are fixed — and re-running the onboarding script got easier.
September 7, 2026 · InfraScout Team Product & Platform
A long assessment that meets a momentary fault now continues instead of discarding the work it had already done, and a chat tab stuck on "Reconnecting" clears itself.
Tool output is recorded verbatim again after an encoding fault put escape sequences into saved evidence. Read-only PowerShell gained a cmdlet and lost several destructive ones, and chat can now find a playbook on its own.
InfraScout's tools load on demand, so the AI searches the catalog for what it needs. Searches per turn roughly halved — and the default model, which could not search at all, now does.
How to hand a slow, power-hungry, or sign-in-troubled Windows device to InfraScout in a chat and come out with a ranked cause list that separates real problems from expected behavior, using live counters, short traces, and a bounded boot capture.
September 4, 2026 · InfraScout Team Microsoft Cloud
Eight new Intune tools cover the Windows Update deployment surface — feature, quality and driver update profiles, the policies behind them, and the release catalog that turns a version string into a dated release.
How paired ETW captures, event logs, LDAP, and the DFS referral cache explain in one short session why a DFS namespace root opens from one domain controller but not the other.
September 2, 2026 · InfraScout Team Product & Platform
The MCP server and Entra connection forms are now stepped, showing only the fields your chosen transport uses, with a Review summary — plus a per-server discovery timeout and visible discovery health.
September 2, 2026 · InfraScout Team Microsoft Cloud
A connection reads back the permissions your app registration holds and grades every tool family against them, so a missing consent is a named gap rather than a tool that fails mid-assessment.
September 1, 2026 · InfraScout Team Agents & Fleet
A failing agent update now gives up after four attempts, the rollout script refuses hosts that cannot run the binary, and an expired bulk enrollment key remains on the list as a record until you delete it.
Fable 5.1 sits at the top of the model catalog on Anthropic connections — a million tokens of context, Fable 5's input and output rates, and a quarter of its cost on cached input.
A command stopped at its deadline used to return like an ordinary non-zero exit. It now reports as an error naming the timeout, and batches across several hosts run in parallel instead of queueing behind each other.
What the Exchange, PKI, Security Review, and Infrastructure Review playbooks check, and how the same approach carries over to custom playbooks for SQL Server, SCCM/MECM, and vCenter.
August 29, 2026 · InfraScout Team Security & Access
Insights and memory entries record who created them and who last edited them, the insights list can be filtered by creator, and a workflow's findings name both the workflow and the person responsible for it.
A Purview label event in the audit log carries only a GUID, so findings read "label 89d530c4-… was removed". Two new tools read the label taxonomy and turn that into a sentence someone can act on.
A chat turn keeps running when your browser disconnects. Chat now recognizes that state — it reattaches instead of offering a retry that would start a second run alongside the first.
How to turn a single chat into an evidence-backed security assessment of a Windows 11 client, with prioritized findings, a stored baseline, and a written report, without changing anything on the device.
A transient provider failure is retried in place, a genuine failure is written into the transcript with a collapsible error card, and a failure no longer drops the messages before it from view.
OpenAI connections now load tools on demand instead of shipping the whole catalog on every turn — an 84% reduction upfront. Seven identity tools can also return a count instead of paging a directory.
August 24, 2026 · InfraScout Team Product & Platform
The dashboard hero counts high-severity findings alongside critical ones, the triage list is a real table, and auditing another user's session now stays in the admin area with the whole session in view.
How to hand a slow, crashing, or CPU-bound server to InfraScout in a chat and come out with a verified root cause, an approved fix, and a fleet-wide scope, shown on a Windows memory loop and a Linux SIEM under load.
August 20, 2026 · InfraScout Team Product & Platform
Max runtime is a per-workflow setting, up to two hours, fixed at the moment a run fires. Plus a fix for the enable toggle, which was resetting fields it did not carry.
August 20, 2026 · InfraScout Team Product & Platform
Tell InfraScout that an agent-hosted MCP server runs in a container, and the agent takes ownership of that container by name — removed before start, after stop, and on a failed handshake.
The AI receives a map of its memory store instead of a size-capped list, so every entry stays reachable however large the store grows — and search returns useful results for ordinary phrasing.
Four recurring mail-security questions (quarantine false positives, inbound TLS, sending IPs and whether a transport-rule fix worked) answered in one conversation, with evidence from how mail actually flowed.
August 17, 2026 · InfraScout Team Product & Platform
A planned platform maintenance window now announces itself in the portal — the window in your own timezone, a note about what is happening, and a countdown that turns to a warning when the work starts.
The chat timeline folds an assistant turn's iterations into a single assessment run with a milestone ledger, finished tool calls stay readable before they fold away, and the conversation gets about a third of its height back.
August 16, 2026 · InfraScout Team Product & Platform
MCP revision 2026-07-28 removes protocol-level sessions entirely. InfraScout now anchors session groups and the audit trail on its own logical session, so a modern client can start an assessment and an app caller becomes traceable.
August 16, 2026 · InfraScout Team Product & Platform
A stale tab could freeze after a deploy, a long-lived tab could wedge on sign-in, and the dashboard was reporting zeros it had never been sent. A roundup of portal fixes, plus a Cards or Table choice on the agent lists.
Claude Opus 5 and the GPT-5.6 tiers join the model catalog, superseded picks are retired with a badge telling you what replaced them, and a pricing row that was fifty percent too high stops inflating every Sonnet 5 conversation.
Hosts enrolled with a key that requires approval were filtered out of every view, stayed group-less after being approved, and retried inventory every sixty seconds forever. All three are fixed.
August 14, 2026 · InfraScout Team Security & Access
The InfraScout documentation is behind a Microsoft work or school account. How to get through the sign-in, what it does not grant us, what we record, and what stays public.
August 13, 2026 · InfraScout Team Security & Access
Fixing why Start-Sleep was blocked exposed three older gaps in the read-only PowerShell floor — a generic provider setter that was exempt, process launch that no rule owned, and a dozen missing aliases.
Bulk enrollment keys take a fleet from bare hosts to running agents with no interactive sign-in per machine — with signed installers, approval quarantine on by default, and revocation that reaches the hosts a key already enrolled.
August 12, 2026 · InfraScout Team Security & Access
A recommended Conditional Access baseline for InfraScout — why ordinary MFA is the wrong bar for a platform that reaches your whole estate, and the one exception our own installer forces us to be honest about.
Paste a link to a threat report or an exploited-vulnerability listing, ask whether it affects you, and get a verdict mapped against your live environment, with evidence and ranked next steps.
Six plain-language questions you can ask in your first InfraScout session, each returning a ranked, charted answer across your hosts, the Microsoft cloud, and connected external systems within minutes.
Agents can be filtered by the capability you actually need, host inventory pages past 100 systems, and a truncated result no longer reads as proof that nothing matches.
August 5, 2026 · InfraScout Team Product & Platform
A new field for telling the AI what an external MCP server is for, an allowlist that asks what to withhold rather than what to permit, and a fix for custom groups that reported themselves empty.
Every tool group can be scoped to the security groups that may use it — built-in groups included — with one action to take in your tenant before your users notice.
A batch of chat improvements — copy a reply as raw markdown with its sources, let the AI read an MCP server's own instructions, ten concurrent tabs, and titles that appear without a reload.
Delegated runs no longer receive the entire tool catalog, briefs follow a structure that stops runs from improvising, and the no-memory rule is finally stated instead of discovered.
A hard denylist of credential locations on the cross-platform log reader, enforced on both the server and the agent, plus fleet-wide rate limiting and a tighter read-only PowerShell floor.
External MCP tools now keep the annotations their servers declare — and because most servers declare nothing, a tenant admin can classify them per tool instead of losing them to a fail-closed default.
July 23, 2026 · InfraScout Team Product & Platform
Connect a remote MCP server with a consent popup instead of a pasted token — tokens refresh themselves, and the card warns you before a refresh grant expires.
Nominate an agent as the host for an MCP server and its tools reach the AI without the server ever becoming internet-reachable — stdio children it supervises, or servers already running on that network.
Two new tools read the Microsoft Security Exposure Management graph — start at the asset you care about protecting and find what can reach it, in readable relationships rather than graph queries.
Triage now lands on open, acknowledged, and in-progress findings, filters are multi-select, and a dashboard deep link actually applies the filter it promised.
Chat wrapped every tool call in a hard two-minute limit regardless of what the AI asked for — which reported long commands as timed out while they kept running, and provoked a retry that made things worse.
Sign in to Entra ID with a device code and the agent provisions itself, enrolls, and installs its service — no token to generate, no IDs to transcribe.
Charts gain pie, heatmap, and treemap with meaningful color ramps; diagrams gain timelines, mindmaps, and quadrant charts — all drawn on the portal's own palette.
A MIPS build makes OpenWrt-class hardware a first-class target, and the services inventory now reads procd, OpenRC, and SysV instead of assuming systemd.
Four new Intune tools — the tenant-wide compliance rollup, per-setting failure counts, a per-user device lookup, and the devices a detected app is installed on.
A Linux host now answers performance questions in the same shape a Windows host does, and the systemd journal is queryable with structured filters instead of a shelled-out journalctl.
Nine new read-only tools close the gaps a security review kept hitting — Defender for Identity sensor posture, attack simulation outcomes, and organization-wide Vulnerability Management.
July 15, 2026 · InfraScout Team Product & Platform
A tour of the InfraScout trust model — mutually authenticated agents, Entra ID sign-in, role-based access, closed-by-default visibility, and a complete audit trail.
Tool Groups cards now open a read-only tool-details view, LLM connection token limits validate correctly, and the API health banner recovers the moment the network returns.
How three library and three custom identity playbooks map what exists, find what is risky, and plan the removal of standing access across Active Directory and Entra ID.
Chat now pops out into a floating panel that keeps streaming as you navigate, greets you with curated starter prompts, and mirrors mid-turn tool calls to a second device instantly.
The PowerShell script you run in your own tenant to create the InfraScout Entra app registration is now Authenticode-signed with a publicly-trusted certificate.
InfraScout now reads log files on Windows, Linux, and macOS through a dedicated tool — tail or head, regex filters, dedupe, and time windows that finally respect the host's clock.
A roundup — long, tool-heavy assessments now cost meaningfully less, plus a long tail of avoidable tool-call failures, traced back to their causes and closed.
July 12, 2026 · InfraScout Team Product & Platform
A native iOS app with the full agentic chat, your dashboard, the agent fleet, insights, and the audit trail — plus a glance on the wrist. Here's what's built and where it stands.
The InfraScout Windows agent is now signed with a publicly-trusted, Microsoft-issued certificate via Azure Trusted Signing, eliminating unknown-publisher warnings.
You can now point an AI provider connection at Azure AI Foundry and run InfraScout assessments on models hosted inside your own Azure subscription — with Claude and GPT surfaces as separate provider choices and clearly stated capabilities.
Resources with no visibility groups are now admin-only instead of tenant-wide, with an explicit Everyone option, per-agent block inheritance, and a three-state visibility shield.
When an assessment hits an ambiguity, the AI now asks with a card you can answer by clicking — and the same turn carries straight on, instead of ending so you can type a reply.
We ran an adversarial audit across InfraScout's critical surfaces. Here is what it found, what it did not find, how reachable each finding actually was, and the fixes that shipped.
InfraScout chat now keeps an explicit task plan you can watch take shape, and hands self-contained work to isolated Task Agents that report back a distilled result — read-only by default, fully auditable, and with their cost finally visible.
Before you enforce LDAP signing and channel binding on your domain controllers, hand the readiness check to InfraScout in a chat and end up with trustworthy evidence, a clean LDAPS certificate, and change tickets for every client that would break.
A round of portal polish — chat stays smooth with a dozen charts in the thread, menus respond to the keyboard, and admin session records identify the iOS app correctly.
A roundup of shipped improvements — a Model column and more accurate costs in the Chat Audit, a round of polish in the chat view, and quieter reliability fixes across workflow runs, agent updates, and web research.
During live assessment chats, the AI now spells out exactly what a change will do and waits for your explicit go-ahead before making it — and every change it makes or observes is recorded as a dated entry in a change log you can browse.
InfraScout can now read Windows performance counters and run background diagnostic traces that keep recording for hours or days, plus ready-made capture profiles for common investigations — including boot-time failures a live trace can't reach.
The AI can now draw flowcharts, sequence diagrams, and other structural visuals directly in the assessment chat — showing you how a process or your environment fits together, not just describing it.
The AI can now render interactive line, area, bar, and donut charts right in the InfraScout chat, built from data it gathered earlier in the same conversation.
A chat roundup — Claude Sonnet 5 joins the model picker, Anthropic connections gain a per-connection data region for residency requirements, and safety refusals now show as a clear card in the thread.
You can now run InfraScout assessments on OpenAI's GPT-5 models alongside Anthropic — chosen per connection, with full chat parity across streaming, the agentic tool loop, reasoning, web search, and long-run compaction.
Two new read-only Entra ID tools complete the enterprise-app audit — who is assigned to an app and what delegated permissions were consented on users' behalf, including org-wide consent, so an AI assessment can sweep the illicit-consent attack surface conversationally.
InfraScout now reads the Defender for Office 365 Analyzed emails feed — the data behind Threat Explorer — for false-positive triage, phishing investigation, and delivery forensics, all read-only and conversational.
The Windows Event Log tool now accepts raw XPath filters and count-only queries, and every InfraScout tool now rejects unknown arguments instead of quietly running an unfiltered query.
A roundup of audit-visibility and reliability improvements — execution rows that name the exact tool, a per-conversation cost column in the Chat Audit, and changes that let assessments waste fewer turns on avoidable tool failures.
The admin Audit and Compliance Executions view gains a user picker that filters the trail down to everything one person caused — their own AI and tool calls plus any workflows that ran on their behalf.
You can now type and send a message while an InfraScout assessment is still running — the AI picks it up at the next safe point and adapts without restarting or discarding the work it has already done.
A roundup of three user-facing fixes — agent status labels and filters that finally agree, "last N" event log reads that return the newest entries, and a sign-out that no longer loops.
The Inventory data layer now has a home in the dashboard — a per-agent page to browse the latest snapshot, see what changed in the last 24 hours, and review past collections, with a Refresh button to collect on demand.
How an InfraScout playbook turns an expert's way of running a review into a structured method the AI follows the same way every time, in chat, in agentic workflows, and through task agents.
Agentic Workflows let InfraScout run AI-driven assessments on their own — defined once, triggered by a schedule, a webhook, or a button, and executed headlessly under a scoped, non-admin service account with full run history.
InfraScout now drills into a single Intune-managed device to explain exactly why it's non-compliant, check its on-device Defender and malware health, and read the baselines, ASR rules, and Settings Catalog profiles being pushed to it — all read-only and conversational.
InfraScout now aggregates Entra ID sign-in logs server-side and returns a compact, faceted roll-up — top source IPs, failure reasons, distinct users per IP, and success-after-failure candidates — so an AI assessment can triage password spray and brute force without drowning in raw rows.
Claude Fable 5, Anthropic's most capable model, is now selectable when you configure an AI provider for InfraScout — a premium option for the most complex, multi-step assessments.
InfraScout now queries the Microsoft 365 Unified Audit Log directly from chat — the workload activity log across Exchange, SharePoint, OneDrive, and Teams, with incident-response shortcuts for the questions IR teams ask first.
InfraScout now reports the current standing state of active sharing links across SharePoint Online and OneDrive — classifying each link's risk and pairing it with org-wide sharing-policy settings, all read-only and conversational.
InfraScout now reads Microsoft Defender for Cloud Apps Cloud Discovery data — surfacing shadow IT, per-app risk and usage, and emerging shadow-AI, all conversationally and read-only.
Slow cloud queries now show a live running row in the execution view while the call is in flight, so you can see that work is happening instead of waiting for it to appear once finished.
InfraScout now reads Microsoft 365 service health and traces Exchange Online mail-flow during assessments — two new read-only toolsets the AI can call mid-investigation.
A chat roundup — Claude Opus 4.8 is now selectable, cost reporting attributes spend to the right period with a per-message breakdown, and tool groups are easier to control across every model.
Four new typed Defender Advanced Hunting tools cover file, network, registry, and image-load events, and the feature now runs on Microsoft's current hunting query API.
Windows Event Log queries can now filter by Event ID and Event Data fields directly, so AI-driven investigations get precise results in one structured call instead of improvised PowerShell.
Chat assessment sessions are now organized under their conversation as session groups, with a clean lifecycle, an ended-chat banner, cascade close, and one running session per agent.
Inventory gives every connected agent a persistent, queryable record of system info, software, services, and certificates — collected on a schedule and on demand, and surfaced to AI clients through eleven new MCP tools.
A focused three-zone dashboard with a My work / All visible toggle, plus a clean split between personal Executions and an admin Audit and Compliance view.
Windows agents now use native Windows APIs for event log reads and WMI queries, making collections faster, lighter on CPU, and clearer when something fails.
Agent groups can now be dynamic — define rules once and InfraScout keeps membership in sync as new hosts connect, with OS defaults and a setup wizard for the common cases.