Release notes¶

October 2026¶

Organizations. Each MSP or direct customer is its own organization with its own database, so no organization can see another's clients, devices, or findings. Device credentials, enrollment keys, and invites only reach the organization that issued them. New organizations are invite-only. See Security and privacy.
Team and invites. Owners invite people with a one-time link and choose a role (Owner, Admin, Technician, Viewer) and access to all or selected clients. Invitees set their own password and authenticator. Includes sign-in resets, disabling accounts, and an activity log.
Standards per client. Choose CMMC Level 2, HIPAA, or both when you add a client, and change them any time. Scores, findings, reports, and the Checks page follow the client's standards.
Redesigned device and tenant pages. Findings by severity with a side panel, a category strip, and Needs attention, Passing, Controls, and Logbook tabs.
Correct course. Every finding has step-by-step Take the helm instructions. Hand us the helm (automated fixes) is coming soon.
Plain English. Every requirement shows what it means in everyday words, its official text, and a source link.
Fleet refresh. The Fleet page refreshes every minute, and Rescan tenants re-runs every Microsoft 365 scan.
Last scan and Overdue. The Fleet shows when each device was last scanned and flags devices that haven't reported for 3 or more days.

Microsoft 365 connection with 11 identity, admin, application, sharing, and Secure Score checks.
Exchange Online checks (8): mailbox auditing, the unified audit log, external forwarding, modern authentication, SMTP AUTH, DKIM, and DMARC.

Renamed to Trimtab Lookout. Scheduled tasks are now Trimtab Lookout Scan and Trimtab Lookout Upload. Upgrading replaces the previous tasks and keeps the device's registration.
New hourly upload task delivers results queued while a device was offline.
Results include step-by-step remediation for local reports.