Feature requests
What is shipped, what is next, and what we have decided against. Declined things stay on the list with the reason, because a request that quietly disappears is worse than one that gets a no.
The list
-
Shipped
Evidence packs covering a period
A pack runs between two dates and lists every change in between, rather than the state on the day it was produced.
-
Shipped
Silences that keep the record
Silencing stops the alert emails and nothing else. The finding stays red and stays in the pack, with the reason if one was given.
-
Shipped
Signed automatic updates
The probe can update itself, but only to a release whose signature it can check. Off until you turn it on, for the whole estate, a client or one machine.
-
Shipped
Hardware and software inventory
Each machine reports its hardware and installed software. Reported, not graded, and kept out of evidence packs.
-
Shipped
Audit log
Who did what on your account, and when. Entries cannot be edited or deleted through any interface.
-
Next
The remaining checks on Linux
Linux machines report 8 checks today. Firewall, disk encryption and the rest are being added, with a Linux download on Add a machine. A check that does not apply to a Linux machine will show as not applicable, with the reason, never as a pass.
-
Next
Update age on Linux
Linux machines currently report a count of pending updates. Measuring how old each one is needs a per-distribution source for release dates.
-
Next
Signed installer
A code-signing certificate, so Windows and security software recognise the installer as ours. It has been ordered and is being validated.
-
Asking resellers
Third-party software versions
Installed software is listed today but not graded against a supported-versions list. Whether to add that, or alerts for new software, depends on what resellers using the inventory tell us.
-
Not planned
Remote control or remediation
Monitor reads and reports. Giving it the ability to change a client machine would make it something your clients have to assess, and it is not what the tool is for.
-
Not planned
Cloud and Microsoft 365 checks
MFA on cloud services is an automatic failure under the current question set, but it is a different kind of evidence from an endpoint reading. Reporting it here would suggest a coverage we do not have.
-
Asking resellers
Routers, switches and network devices
Monitor reads Windows and Linux machines and nothing else. Reading network devices would need a small collector inside each client network, holding read-only credentials that never leave it. Whether to build that depends on what resellers tell us.