Changelog
Follow up on the latest improvements and updates.
RSS
new
Web App
API
06/02 June 2 – Web Application and API Update
✨
What's New
- CyberSight AI Usage dashboard– A new AI Usage dashboard in CyberSight gives administrators a single view of how AI tools are being used across their organization—covering both web-based AI activity captured via DNS and native desktop AI applications detected on the endpoint.
- CyberSight Timeline: Per-User Incident View– The CyberSight Timeline now renders individual activity charts per user, giving security teams a clear visual breakdown of activity over time during an investigation. Each chart is independently zoomable and filterable, making it easier to isolate and respond to specific user activity.
- Search in CyberSight Activity Logs– A search bar is now available in the CyberSight Activity Logs, allowing quick filtering across Application, Web URL, Web Host, Window Title, and Application Path fields. Search works alongside any active filters and requires a minimum of two characters.
🛠️
Improvements
- Dark Mode Expansion– Dark mode support has been extended to the Legacy Distributor Subscriptions page and the CyberSight section of the RC Control Center drawer.
🪲
Bug Fixes
- QPS Chart Display– Resolved an issue where the Queries Per Second chart displayed an uneven pattern due to data aggregation inconsistencies. Charts now render a smooth, accurate representation of query volume.
- Block Page Edits via Relay– Resolved an issue where Block Page changes made through the relay interface were not being saved. Edits now apply correctly.
- MSP Plan Selector for Sales-Managed Accounts– Resolved an issue where Sales-Managed MSP accounts were shown plan options that weren't available to them during onboarding. The selector now reflects only applicable plans.
- CyberSight Timeline Initial Load– Resolved an issue where the Timeline screen occasionally rendered empty on first load due to missing user context in the initial API request.
new
Windows Roaming Client
RC Release Channels
05/28 May 28 – Windows Roaming Client v3.3.8 Hotfix
We've released Windows Roaming Client v3.3.8 with an improvement to how the agent handles connectivity checks in the background.
🛠️
Improvement
Optimized Background Connectivity Checks
– Reduced the frequency of internal connectivity checks performed by the Windows Roaming Client under steady-state conditions. Checks are now triggered by actual network events rather than on a fixed polling cycle, improving efficiency without impacting connectivity detection or DNS filtering behavior.🪲
Bug Fixes
Intermittent IPv6 Connectivity Recovery
– Resolved an issue where transient IPv6 route changes could leave the agent in a state where filtering was marked as not working, even though network connectivity had not actually changed. The agent now correctly recovers and resumes filtering when the underlying network state has not changed.new
Mac Roaming Client
RC Release Channels
Beta
05/22 May 22 – macOS Roaming Client v2.4.1 Beta
Version 2.4.1 of the macOS Roaming Client is now available on the
Beta channel
. To install, download the latest beta installer from the dashboard under Deployments → Roaming Clients → Beta Channel.
🪲 Hotfix
AirPrint Connectivity with macOS Agent Enabled
– Resolved an issue where AirPrint was unresponsive while the macOS Roaming Client was active. AirPrint now works as expected with the agent enabled.new
Web App
API
05/26 May 26 – Web Application and API Update
✨
What's New
- CyberSight Activity Log Filter Enhancements– The Activity Log now supports multi-select for both Activity Type and Categories filters, with updated operators (Includes / Does Not Include). Free text fields — Application, Website, Window Title, and Application Path — now support Contains, Does Not Contain, Starts With, and Ends With operators with substring matching.
- CyberSight Activity Log Search– A new search parameter in the Activity Logs API supports case-insensitive partial matching across Application, Web URL, Web Host, Window Title, and Application Path fields, working in combination with any active filters.
🛠️
Improvements
- CyberSight UI Refinements– Several polish updates across CyberSight: Activity Overview and Threat Trends widget headers now display dynamic record counts that update as filters change; export filenames are now clearer and include a unique ID and timestamp; browser tab titles are unique per CyberSight page; and the Threats Only filter dropdown now shows only Yes and No.
- Dark Mode Expansion– Dark mode support has been extended to Reporting Insights, Deployments Collections, Users, and Sync Tools pages. Additional fixes address page header color consistency, info banner contrast, and a link color regression in light mode.
🪲
Bug Fixes
- Reporting Chart Display for Extended Date Ranges– Resolved an issue where charts in Insights, AppAware, Data Explorer, and related views displayed irregular peaks when viewing ranges over 60 days.
- Data Explorer Org Scoping– Resolved an issue where selecting a root organization in Data Explorer queried traffic across all accessible org IDs instead of scoping to the selected organization.
- Roaming Client Grid Fixes– Resolved an issue where sorting by the Auto Upgrade column returned a database error, and fixed a bug where bulk-deleting Roaming Clients with a Site filter active resulted in zero deletions.
Plus general performance and stability improvements across the dashboard.
new
Mac Roaming Client
RC Release Channels
05/21 May 21 – macOS Roaming Client v2.4.0 Beta
Version 2.4.0 of the macOS Roaming Client is now available on the
Beta channel
. To install, download the latest beta installer from the dashboard under Deployments → Roaming Clients → Beta Channel
.✨
What's New
IPv6 Support
– Filtering and protection now extend to IPv6 networks, keeping users on dual-stack and IPv6-only environments protected without falling back to unfiltered resolvers. Administrators can configure IPv4-only, IPv6-only, or automatic upstream resolution to fit their network.Modernized Configuration Architecture
– The agent now uses a more resilient configuration format, replacing the legacy daemon.conf
with configuration.json
. Configuration changes apply more reliably without agent restarts, recoverable errors no longer cascade into broader issues, and existing installations migrate cleanly on upgrade.🪲
Stability & Connectivity Fixes
- Resolved an issue where DNS queries could fail on certain cellular and mesh network setups, causing slow or failed page loads
- Addressed an edge case where connection reuse on DNS-over-TLS upstreams could cause the client to enter a fail-closed state on some devices
- Resolved an intermittent issue where internal domains could fail to resolve through local resolvers in certain upgrade scenarios
- Fixed an issue where the Roaming Client could go offline on certain ISP networks and require a manual restart to recover
This release brings IPv6 coverage and a stronger configuration foundation to the macOS Roaming Client, with meaningful stability improvements across network types and upgrade paths.
new
Web App
API
05/19 May 19 – Web Application and API Update
✨
What's New
- Threats Only Column in Activity Logs– A new Threats Only column is now available in the CyberSight Activity Logs, displaying a clear Yes or No indicator for threat activity on each log row.
- Multi-Select Category Filters in CyberSight Activity Log– The Categories filter in the CyberSight Activity Log now supports multi-select, allowing users to filter by multiple categories at once using "Includes" and "Does Not Include" operators.
🛠️
Improvements
- CyberSight Timeline Enhancements– Several usability improvements to the Timeline view: Roaming Client and User selectors now support multi-select with an "All" default, widget filter dropdowns show clearer selected states with an "All" reset option and clear button, and general spacing and visual consistency updates have been applied throughout.
- Dark Mode Polish– Continued refinements to Dark Mode across the app, including improved visibility for notifications, checkboxes, info banners, logos, and the Billing settings page.
- Improved Access Controls for Reporting Data– Strengthened access controls to ensure only authorized users within an organization can access reporting data.
🪲
Bug Fixes
- CyberSight Browser Extension Installation– Resolved an issue that could prevent the CyberSight Browser Extension from installing correctly on some machines, causing errors during the extension status check process. The extension now installs and uninstalls reliably.
- CyberSight Experience Improvements– Resolved several small display and usability issues across CyberSight, including inconsistent empty state messaging, column preferences not being reflected in CSV exports, sorting consistency between View All screens and exported files, and minor fixes for machine unlock detection, activity classification, and Timeline event timing accuracy.
new
Android Roaming Client
RC Release Channels
05/13 May 13 – Android Roaming Client v1.22.0
We've released
Android Roaming Client v1.22.0
with refreshed branding, improved DNS reliability, and several under-the-hood improvements. Navigate to the Google Play store to download.✨
What's New
Refreshed Branding and UI
– The Android Roaming Client has been updated to reflect current DNSFilter branding for a more consistent experience across the platform.🛠️
Improvements
Reliable DNS-over-TLS Across Network Changes
– The client now maintains DNS-over-TLS reliably when switching between networks or recovering from a TLS failure, rather than falling back to UDP. This ensures encrypted DNS protection stays active as expected.Cleaner Device Records on De-registration
– De-registering an Android device now removes the previous device entry from the dashboard automatically, preventing duplicate records when re-registering.🪲
Bug Fixes
Log Attachment via Debug Menu
– Resolved an issue where log files would intermittently fail to attach when using "Send Logs" from the debug menu in Outlook and Gmail. Logs now attach reliably on the first attempt.Plus security and dependency updates to keep the app current and supported.
new
Web App
API
05/12 May 12 – Web Application and API Update
✨ What's New
Timeline View in CyberSight
– The Timeline tab is now available to all organizations, giving every user access to time-based threat and activity visibility across their network.🛠️ Improvements
CyberSight UI and UX Improvements
– Several refinements across CyberSight for a more consistent and streamlined experience.🪲 Bug Fixes
Data Explorer Multi-Day Search from MSP dashboard
– Resolved an issue where searching across more than one day in Data Explorer from the MSP dashboard could result in repeated timeout errors. Data loads as expected without requiring retries.CyberSight Dashboard Visibility
– Resolved an issue where users viewing the CyberSight dashboard at the organization level saw no data and were repeatedly prompted to enable CyberSight, even when it was already active. Data now displays correctly.new
Web App
API
04/05 May 4 – Web Application and API Update
✨ What's New
Dark Mode
– You asked. A lot. For years. Dark Mode is now available across DNSFilter—set your preference to light, dark, or system (default) in Account Settings
. We're still tidying up a few corners, but the wait is over. 🧛Features Visibility in Roaming Client Grid
– CyberSight and CyberSight Browser Extension status columns are now available in the Roaming Client grid, giving administrators greater visibility into whether CyberSight is enabled or disabled across their agents.🛠️ Improvements
Settings Page UI Refinements
– Several visual updates to the Settings page for a cleaner, more consistent experience, including improved layout, button sizing, and MFA card formatting.new
Web App
API
04/28 April 28 – Web Application and API Update
✨
What's New
MSP Client Organization Privacy Mode Override Control
– MSP administrators can now control whether client admins are able to adjust Privacy Mode settings within their organizations. This setting is enabled by default, preserving existing client admin permissions.🛠️
Improvements
CyberSight Data Display and Usability
– Percent values below 0.01% now display as "< 0.01%" across all widgets, grids, and CSV exports for improved clarity. Column sorting has also been removed from the Activity Log grid, where it was not fully supported, for a cleaner and less confusing experience.🪲
Bug Fixes
Plus general performance and stability improvements across the dashboard.
Load More
→