Blog ​

Stay up to date with the latest from InfraScout — product releases, new features, and announcements.

Read-Only PowerShell Now Tells Code From Text

October 18, 2026 · InfraScout Team Security & Access

agent_exec_powershell_readonly tells code from text, so LDAP filters, log messages and regex patterns no longer cause refusals. More legitimate reads run, and native tools that write are recognized and refused.

Read more →

What Changes in Agents 0.41 to 0.43

October 17, 2026 · InfraScout Team Agents & Fleet

Agent-hosted MCP servers need an explicit entry for plain-HTTP loopback and trusted files on Linux, revoking an agent is immediate and final, and enrollment and the configuration commands get easier to use.

Read more →

Ask InfraScout About InfraScout

October 13, 2026 · InfraScout Team Chat & Portal

The AI can now search and read this documentation and its blog, so a question about installing an agent or what a setting does gets an answer from the current docs, with a link.

Read more →

Agents Behind a Forward Proxy

October 8, 2026 · InfraScout Team Agents & Fleet

From agent 0.40.0, hosts whose only route to the internet is a corporate forward proxy can run the InfraScout agent, with the proxy set at install time or afterward and a status command that tells you what the proxy is blocking.

Read more →

Claude Haiku 5.5 Joins the Fast Tier

October 8, 2026 · InfraScout Team AI & Models

Haiku 5.5 is now selectable on Anthropic connections — a fraction of Haiku 4.5's per-token price, a million-token window, and the effort setting the old Haiku never had.

Read more →

See Who Can Access What, and Why

October 3, 2026 · InfraScout Team Security & Access

Access Paths shows administrators every path that grants access to an agent, agent group, playbook, tool group, AI provider or Entra connector, and everything a single user can reach, traced hop by hop from the person to the resource.

Read more →

Chat Errors Now Say What to Do Next

October 2, 2026 · InfraScout Team Chat & Portal

Chat and workflow errors now say what happened, whether you can retry or an administrator must act, and where; answers cut short by the output-token cap are flagged; and new connections start with a larger Max Tokens.

Read more →

Claude Sonnet 5.5 and GPT-6 Join the Catalog

October 1, 2026 · InfraScout Team AI & Models

Sonnet 5.5 takes Sonnet 5's place at the same price, the GPT-6 family replaces the GPT-5.6 tiers, and a new OpenAI connection now defaults to a model that costs half as much as the previous default.

Read more →

The InfraScout Agent Now Runs on FreeBSD

September 29, 2026 · InfraScout Team Agents & Fleet

FreeBSD amd64 hosts enroll like any other agent, run as a supervised rc.d service, report full inventory, and get their own OS filter and default group in the portal.

Read more →

The Linux Agent Can Now Run Without Root

September 26, 2026 · InfraScout Team Agents & Fleet

On systemd hosts the InfraScout agent can run as an unprivileged system user whose commands cannot escalate, migrated in place with no re-enrollment — and x86-64 agents run on older distributions again.

Read more →

The Windows Agent No Longer Has to Run as SYSTEM

September 24, 2026 · InfraScout Team Agents & Fleet

On domain-joined hosts the InfraScout agent can now run as a group Managed Service Account — tiered per host class, migrated in place without re-enrollment, and reporting exactly what its account can and cannot read.

Read more →

Claude Opus 5.5 Replaces Opus 5 and Opus 4.8

September 23, 2026 · InfraScout Team AI & Models

Opus 5.5 is now the Opus tier on Anthropic connections — a million tokens of context, lower rates than Opus 5 on every line of the bill, and one model in the picker where there used to be two.

Read more →

Microsoft Cloud Findings Now Follow Their Connection

September 20, 2026 · InfraScout Team Security & Access

Findings from Microsoft Cloud assessments now take their visibility from the Entra connection they came from, each connection keeps its own findings, and the Insights page shows which tenant every cloud finding belongs to.

Read more →

What Your Automation Accounts Are Actually Running

September 14, 2026 · InfraScout Team Microsoft Cloud

InfraScout now reads Azure Automation in depth — runbook source, job history and output, schedules, webhooks, variables, credentials and connections — so you can audit what runs unattended in your subscriptions, and with which secrets.

Read more →

The Findings List Comes First

September 10, 2026 · InfraScout Team Chat & Portal

The Insights page opened on aggregate color while the rows a triage pass works through sat below the fold. The list now leads, the charts moved into a rail beside it, and the detail view reads as a document.

Read more →

Two Permissions That Were Never in the List

September 8, 2026 · InfraScout Team Microsoft Cloud

Three mail tools shipped without any permission requesting them, and a distribution list's external contacts were coming back blank rather than refused. Both are fixed — and re-running the onboarding script got easier.

Read more →

An Interrupted Run Picks Up Where It Was

September 7, 2026 · InfraScout Team Product & Platform

A long assessment that meets a momentary fault now continues instead of discarding the work it had already done, and a chat tab stuck on "Reconnecting" clears itself.

Read more →

Cleaner Evidence, and New Limits on Read-Only

September 5, 2026 · InfraScout Team Chat & Portal

Tool output is recorded verbatim again after an encoding fault put escape sequences into saved evidence. Read-only PowerShell gained a cmdlet and lost several destructive ones, and chat can now find a playbook on its own.

Read more →

Fewer Searches Before the Right Tool

September 4, 2026 · InfraScout Team AI & Models

InfraScout's tools load on demand, so the AI searches the catalog for what it needs. Searches per turn roughly halved — and the default model, which could not search at all, now does.

Read more →

Which Windows Build Is That Estate Actually On?

September 4, 2026 · InfraScout Team Microsoft Cloud

Eight new Intune tools cover the Windows Update deployment surface — feature, quality and driver update profiles, the policies behind them, and the release catalog that turns a version string into a dated release.

Read more →

Two Long Forms Became Two Wizards

September 2, 2026 · InfraScout Team Product & Platform

The MCP server and Entra connection forms are now stepped, showing only the fields your chosen transport uses, with a Review summary — plus a per-server discovery timeout and visible discovery health.

Read more →

A Timed-Out Command Now Reports as a Failure

August 31, 2026 · InfraScout Team Agents & Fleet

A command stopped at its deadline used to return like an ordinary non-zero exit. It now reports as an error naming the timeout, and batches across several hosts run in parallel instead of queueing behind each other.

Read more →

Every Finding Now Names Who Recorded It

August 29, 2026 · InfraScout Team Security & Access

Insights and memory entries record who created them and who last edited them, the insights list can be filtered by creator, and a workflow's findings name both the workflow and the person responsible for it.

Read more →

Label Audit Records Now Name the Label

August 28, 2026 · InfraScout Team Microsoft Cloud

A Purview label event in the audit log carries only a GUID, so findings read "label 89d530c4-… was removed". Two new tools read the label taxonomy and turn that into a sentence someone can act on.

Read more →

A Failed Turn Now Stays in the Conversation

August 26, 2026 · InfraScout Team Chat & Portal

A transient provider failure is retried in place, a genuine failure is written into the transcript with a collapsible error card, and a failure no longer drops the messages before it from view.

Read more →

An Agent Can Now Own the Containers It Starts

August 20, 2026 · InfraScout Team Product & Platform

Tell InfraScout that an agent-hosted MCP server runs in a container, and the agent takes ownership of that container by name — removed before start, after stop, and on a failed handshake.

Read more →

Persistent Memory Now Scales to a Large Store

August 19, 2026 · InfraScout Team AI & Models

The AI receives a map of its memory store instead of a size-capped list, so every entry stays reachable however large the store grows — and search returns useful results for ordinary phrasing.

Read more →

Mail Security Questions, Answered from Chat

August 17, 2026 · InfraScout Team Use Cases

Four recurring mail-security questions (quarantine false positives, inbound TLS, sending IPs and whether a transport-rule fix worked) answered in one conversation, with evidence from how mail actually flowed.

Read more →

You Will Know About Maintenance Before It Happens

August 17, 2026 · InfraScout Team Product & Platform

A planned platform maintenance window now announces itself in the portal — the window in your own timezone, a note about what is happening, and a countdown that turns to a warning when the work starts.

Read more →

A Long Assessment Now Reads as One Run

August 16, 2026 · InfraScout Team Chat & Portal

The chat timeline folds an assistant turn's iterations into a single assessment run with a milestone ledger, finished tool calls stay readable before they fold away, and the conversation gets about a third of its height back.

Read more →

MCP Sessions That Outlive the Connection

August 16, 2026 · InfraScout Team Product & Platform

MCP revision 2026-07-28 removes protocol-level sessions entirely. InfraScout now anchors session groups and the audit trail on its own logical session, so a modern client can start an assessment and an app caller becomes traceable.

Read more →

No More Hard Refresh After a Release

August 16, 2026 · InfraScout Team Product & Platform

A stale tab could freeze after a deploy, a long-lived tab could wedge on sign-in, and the dashboard was reporting zeros it had never been sent. A roundup of portal fixes, plus a Cards or Table choice on the agent lists.

Read more →

Opus 5 Arrives, and Sonnet 5 Was Never That Expensive

August 16, 2026 · InfraScout Team AI & Models

Claude Opus 5 and the GPT-5.6 tiers join the model catalog, superseded picks are retired with a badge telling you what replaced them, and a pricing row that was fifty percent too high stops inflating every Sonnet 5 conversation.

Read more →

The Docs Now Ask Who You Are

August 14, 2026 · InfraScout Team Security & Access

The InfraScout documentation is behind a Microsoft work or school account. How to get through the sign-in, what it does not grant us, what we record, and what stays public.

Read more →

A Read-Only Floor That Owns Its Decisions

August 13, 2026 · InfraScout Team Security & Access

Fixing why Start-Sleep was blocked exposed three older gaps in the read-only PowerShell floor — a generic provider setter that was exempt, process launch that no rule owned, and a dozen missing aliases.

Read more →

A Thousand Hosts, Without a Thousand Sign-Ins

August 13, 2026 · InfraScout Team Agents & Fleet

Bulk enrollment keys take a fleet from bare hosts to running agents with no interactive sign-in per machine — with signed installers, approval quarantine on by default, and revocation that reaches the hosts a key already enrolled.

Read more →

A Passkey or Nothing

August 12, 2026 · InfraScout Team Security & Access

A recommended Conditional Access baseline for InfraScout — why ordinary MFA is the wrong bar for a platform that reaches your whole estate, and the one exception our own installer forces us to be honest about.

Read more →

Six Questions That Give You the Big Picture

August 7, 2026 · InfraScout Team Use Cases

Six plain-language questions you can ask in your first InfraScout session, each returning a ranked, charted answer across your hosts, the Microsoft cloud, and connected external systems within minutes.

Read more →

Ask for the Capability, Not the Host List

August 6, 2026 · InfraScout Team Agents & Fleet

Agents can be filtered by the capability you actually need, host inventory pages past 100 systems, and a truncated result no longer reads as proof that nothing matches.

Read more →

Usage Guidance the Model Actually Reads

August 5, 2026 · InfraScout Team Product & Platform

A new field for telling the AI what an external MCP server is for, an allowlist that asks what to withhold rather than what to permit, and a fix for custom groups that reported themselves empty.

Read more →

The Log Reader Now Refuses Credential Paths

July 26, 2026 · InfraScout Team Security & Access

A hard denylist of credential locations on the cross-platform log reader, enforced on both the server and the agent, plus fleet-wide rate limiting and a tighter read-only PowerShell floor.

Read more →

Who Decides an External Tool Is Read-Only?

July 26, 2026 · InfraScout Team Security & Access

External MCP tools now keep the annotations their servers declare — and because most servers declare nothing, a tenant admin can classify them per tool instead of losing them to a fail-closed default.

Read more →

MCP Servers That Run Inside Your Network

July 23, 2026 · InfraScout Team Agents & Fleet

Nominate an agent as the host for an MCP server and its tools reach the AI without the server ever becoming internet-reachable — stdio children it supervises, or servers already running on that network.

Read more →

Following an Attack Path Backward

July 21, 2026 · InfraScout Team Microsoft Cloud

Two new tools read the Microsoft Security Exposure Management graph — start at the asset you care about protecting and find what can reach it, in readable relationships rather than graph queries.

Read more →

A Two-Minute Cap That Wasn't Supposed to Be There

July 19, 2026 · InfraScout Team AI & Models

Chat wrapped every tool call in a hard two-minute limit regardless of what the AI asked for — which reported long commands as timed out while they kept running, and provoked a retry that made things worse.

Read more →

Enrolling an Agent Is Now One Command

July 19, 2026 · InfraScout Team Agents & Fleet

Sign in to Entra ID with a device code and the agent provisions itself, enrolls, and installs its service — no token to generate, no IDs to transcribe.

Read more →

Agents on Routers and Appliances

July 16, 2026 · InfraScout Team Agents & Fleet

A MIPS build makes OpenWrt-class hardware a first-class target, and the services inventory now reads procd, OpenRC, and SysV instead of assuming systemd.

Read more →

Role-Scoped MCP Tool Access

July 14, 2026 · InfraScout Team Security & Access

User-tier callers are now confined to read-only tools — an enforced boundary that covers raw MCP clients, not just the chat UI.

Read more →

Azure AI Foundry Joins Anthropic and OpenAI

July 11, 2026 · InfraScout Team AI & Models

You can now point an AI provider connection at Azure AI Foundry and run InfraScout assessments on models hosted inside your own Azure subscription — with Claude and GPT surfaces as separate provider choices and clearly stated capabilities.

Read more →

Resource Visibility Is Now Closed by Default

July 11, 2026 · InfraScout Team Security & Access

Resources with no visibility groups are now admin-only instead of tenant-wide, with an explicit Everyone option, per-agent block inheritance, and a three-state visibility shield.

Read more →

Task Agents: The AI Plans Its Work and Delegates It

July 9, 2026 · InfraScout Team AI & Models

InfraScout chat now keeps an explicit task plan you can watch take shape, and hands self-contained work to isolated Task Agents that report back a distilled result — read-only by default, fully auditable, and with their cost finally visible.

Read more →

Getting Ready to Enforce LDAP Signing and Channel Binding

July 8, 2026 · InfraScout Team Use Cases

Before you enforce LDAP signing and channel binding on your domain controllers, hand the readiness check to InfraScout in a chat and end up with trustworthy evidence, a clean LDAPS certificate, and change tickets for every client that would break.

Read more →

Diagrams, Now in Chat

July 4, 2026 · InfraScout Team Chat & Portal

The AI can now draw flowcharts, sequence diagrams, and other structural visuals directly in the assessment chat — showing you how a process or your environment fits together, not just describing it.

Read more →

Charts, Now in Chat

July 3, 2026 · InfraScout Team Chat & Portal

The AI can now render interactive line, area, bar, and donut charts right in the InfraScout chat, built from data it gathered earlier in the same conversation.

Read more →

OpenAI Models, Now Side by Side with Anthropic

July 2, 2026 · InfraScout Team AI & Models

You can now run InfraScout assessments on OpenAI's GPT-5 models alongside Anthropic — chosen per connection, with full chat parity across streaming, the agentic tool loop, reasoning, web search, and long-run compaction.

Read more →

Audit Enterprise App Access and Delegated Consent

June 30, 2026 · InfraScout Team Microsoft Cloud

Two new read-only Entra ID tools complete the enterprise-app audit — who is assigned to an app and what delegated permissions were consented on users' behalf, including org-wide consent, so an AI assessment can sweep the illicit-consent attack surface conversationally.

Read more →

Defender for Office 365 Analyzed Emails, Now in Chat

June 30, 2026 · InfraScout Team Microsoft Cloud

InfraScout now reads the Defender for Office 365 Analyzed emails feed — the data behind Threat Explorer — for false-positive triage, phishing investigation, and delivery forensics, all read-only and conversational.

Read more →

Event Log Queries Go Self-Sufficient

June 30, 2026 · InfraScout Team Agents & Fleet

The Windows Event Log tool now accepts raw XPath filters and count-only queries, and every InfraScout tool now rejects unknown arguments instead of quietly running an unfiltered query.

Read more →

Sharper Audit Trails and Fewer Failed Tool Calls

June 30, 2026 · InfraScout Team Security & Access

A roundup of audit-visibility and reliability improvements — execution rows that name the exact tool, a per-conversation cost column in the Chat Audit, and changes that let assessments waste fewer turns on avoidable tool failures.

Read more →

Filter the Executions Audit by a Specific User

June 28, 2026 · InfraScout Team Chat & Portal

The admin Audit and Compliance Executions view gains a user picker that filters the trail down to everything one person caused — their own AI and tool calls plus any workflows that ran on their behalf.

Read more →

A Dedicated Inventory Page for Every Agent

June 25, 2026 · InfraScout Team Agents & Fleet

The Inventory data layer now has a home in the dashboard — a per-agent page to browse the latest snapshot, see what changed in the last 24 hours, and review past collections, with a Refresh button to collect on demand.

Read more →

What's in a Playbook, and How It Gets Used

June 20, 2026 · InfraScout Team Use Cases

How an InfraScout playbook turns an expert's way of running a review into a structured method the AI follows the same way every time, in chat, in agentic workflows, and through task agents.

Read more →

Agentic Workflows: Assessments That Run Themselves

June 15, 2026 · InfraScout Team AI & Models

Agentic Workflows let InfraScout run AI-driven assessments on their own — defined once, triggered by a schedule, a webhook, or a button, and executed headlessly under a scoped, non-admin service account with full run history.

Read more →

Server-Side Sign-In Aggregation for Spray and Brute-Force Triage

June 11, 2026 · InfraScout Team Microsoft Cloud

InfraScout now aggregates Entra ID sign-in logs server-side and returns a compact, faceted roll-up — top source IPs, failure reasons, distinct users per IP, and success-after-failure candidates — so an AI assessment can triage password spray and brute force without drowning in raw rows.

Read more →

The Microsoft 365 Unified Audit Log, Now in Chat

June 9, 2026 · InfraScout Team Microsoft Cloud

InfraScout now queries the Microsoft 365 Unified Audit Log directly from chat — the workload activity log across Exchange, SharePoint, OneDrive, and Teams, with incident-response shortcuts for the questions IR teams ask first.

Read more →

Live Status for Slow Cloud Queries

June 5, 2026 · InfraScout Team Chat & Portal

Slow cloud queries now show a live running row in the execution view while the call is in flight, so you can see that work is happening instead of waiting for it to appear once finished.

Read more →

Smarter Windows Event Log Queries

May 12, 2026 · InfraScout Team Agents & Fleet

Windows Event Log queries can now filter by Event ID and Event Data fields directly, so AI-driven investigations get precise results in one structured call instead of improvised PowerShell.

Read more →

Inventory: A Persistent Record of Every Host You Audit

April 28, 2026 · InfraScout Team Agents & Fleet

Inventory gives every connected agent a persistent, queryable record of system info, software, services, and certificates — collected on a schedule and on demand, and surfaced to AI clients through eleven new MCP tools.

Read more →

Agent Auto-Update — End-to-End

April 26, 2026 · InfraScout Team Agents & Fleet

Agent Auto-Update brings end-to-end agent rollouts to InfraScout — update policies, maintenance windows, a live pipeline view, and per-agent history.

Read more →

Faster, Quieter Windows Agents

April 25, 2026 · InfraScout Team Agents & Fleet

Windows agents now use native Windows APIs for event log reads and WMI queries, making collections faster, lighter on CPU, and clearer when something fails.

Read more →

Dynamic Agent Groups

April 24, 2026 · InfraScout Team Agents & Fleet

Agent groups can now be dynamic — define rules once and InfraScout keeps membership in sync as new hosts connect, with OS defaults and a setup wizard for the common cases.

Read more →

Questions or want to prioritize a feature? Reach out at info@infrascout.cloud.