– Query Log filters have been consolidated into a single top-level panel, bringing grid-level filters up to the top filter bar. All filters apply together with a single Apply button, so nothing runs until you're ready and there's no need to set filters across multiple places.

– Several refinements to the dashboard experience: newly added widgets now land in the next available grid slot without overlapping or displacing existing ones; a persistent time range indicator now stays visible while scrolling or switching views; and the destructive "Reset to Default" option has been removed from the Dashboard Actions menu.

– Resolved an issue where the Site dropdown when editing a Roaming Client's assigned Site was limited to 20 results, making additional Sites unreachable for larger accounts. All Sites now appear in the dropdown.

– Resolved an issue where the Overview page's Top Domains widget displayed domains out of order, causing some high-traffic domains to be pushed off the visible list.

– Resolved an issue where CyberSight reports covering a time window that spanned midnight — such as an overnight "last few hours" query — incorrectly returned empty results. These time windows now return data correctly.

Plus general performance and stability improvements across the dashboard.

Version 3.7.11 of the Windows Roaming Client is now available on the . To install, download the latest beta installer from the dashboard under .

DNSFilter's DNS-layer protection already follows users onto any network, but being covered is not the same as being private. On hotel Wi-Fi, in airport lounges, and on the home connections where hybrid work actually happens, the destinations a device reaches stay visible to whoever runs the network — and to the ad networks, location trackers, and data brokers collecting alongside. SecureTransit closes that gap by making privacy a policy the organization enforces, not a choice each user has to remember to switch on.

The Windows agent replaces the right-click tray menu with a full DNSFilter One window, themed to match your system's light or dark mode.

– The Policy/Schedule dropdown now groups your organization's own policies under an "Organization" header, with sections ordered Organization, Global, then Scheduled — making it easier to find the right policy when assigning across Sites, Roaming Clients, Relays, Subnets, Users, and Collections.

– Resolved an issue where DNS Query Log CSV exports were missing user attribution fields when a sub-organization inherited its PII setting from a parent MSP. Exports now correctly include this data.

– Resolved an issue where new trial signups were seeing the license overuse banner before becoming paying customers. The banner now only appears for genuine overuse by existing customers.

– Resolved an issue where self-serve MSP sub-organizations on the Core plan were shown an upsell banner blocking AppAware reporting, despite AppAware being included in the Core plan. AppAware reporting now loads correctly regardless of plan.

Plus general performance and stability improvements across the dashboard.

Version 3.6.10 of the Windows Roaming Client is now available on the . The latest installer is available in the dashboard under .

– DNS PreCheck now maintains policy enforcement even on networks that hijack or redirect DNS traffic — closing a gap where certain network conditions could allow content through that should have been blocked. PreCheck v2 is being rolled out gradually and is not automatically enabled with this agent update. Once enabled, the tray will update to show "DNS PreCheck v2" to confirm the active mode.

– The system tray process now automatically restarts if it stops unexpectedly, keeping tray status and controls available without requiring a manual restart of the client or machine.

– The agent now correctly restores DNS settings on all network adapters when the service stops, including on machines with multiple adapters such as a VPN or virtual adapter alongside Wi-Fi.

– The agent now reliably resumes filtering through PreCheck and Transparent Proxy modes after a network interruption or sleep/resume cycle without requiring a service restart.

– The loopback proxy no longer starts when the client is running in Transparent Proxy or PreCheck mode, preventing the two filtering paths from conflicting.

– Resolved an issue where the agent could crash or enter repeated service restart cycles after waking from sleep, causing intermittent DNS resolution failures until the service recovered.

– Resolved an issue where the agent returned SERVFAIL instead of NXDOMAIN for non-existent records in Classic (Loopback) mode, causing browser retry behavior and extended DNS delays on page loads.

– Resolved an issue where the Last Sync timestamp in the system tray froze after agent startup and never updated, even while the device was online and actively filtering.

– Resolved a conflict between the Roaming Client and GlobalProtect VPN that could cause DNS resolution failures and in some cases an agent crash.

– Resolved an issue where a null value for the browser extension setting in the API response caused the agent's configuration sync to fail on every cycle, preventing local domains and other dashboard settings from reaching the agent.

Version 2.4.5 of the macOS Roaming Client is now available on the . To install, download the latest beta installer from the dashboard under .

⚠️ – Starting with v2.4.4, the macOS Roaming Client requires macOS 13 Ventura or later. macOS 12 Monterey is no longer supported.

Plus general performance and stability improvements across the dashboard.

Version 3.6.10 of the Windows Roaming Client is now available on the . To install, download the latest beta installer from the dashboard under .

Plus general performance and stability improvements across the dashboard.

Version 2.4.4 of the macOS Roaming Client is now available on the . To install, download the latest beta installer from the dashboard under .

⚠️ – Starting with v2.4.4, the macOS Roaming Client requires macOS 13 Ventura or later. macOS 12 Monterey is no longer supported.

– Local domain and resolver configuration changes made in the dashboard now apply without requiring a daemon restart, keeping filtering current as your environment changes.

We've released Relay Manager v0.2.1 with an improvement to the default installation path for binary deployments on Linux.

– The default relay home directory has been updated to for binary installations on Linux. This resolves an issue where the relay service could get stuck in a restart loop on certain enterprise Linux distributions due to system permission restrictions on the previous default location.