Automox

No entries match these filters. Clear filters

1. End of Support and Upcoming End of Life for Windows Server 2012 R2 (2026-11-03) Nov 3, 2026 · issue 130
   • Retired supported platform Windows Server 2012 R2 support retirement
   └──▷ BREAKING ON UPGRADE

   • !Automox ends support for Windows Server 2012 R2 on October 13, 2026 — no further testing, bug fixes, or standard technical support for these devices.
   • !Automox ends life for Windows Server 2012 R2 on January 31, 2027 (Agent v2.8+) — patching is no longer guaranteed and devices may lose connectivity or experience degraded functionality.
2. COMING SOON: Manage Exclusion Windows Directly by Device (2026-10-29) Oct 29, 2026 · issue 125

   Automox adds device-level exclusion window management, replacing group-only assignment with direct per-device control and new API endpoints⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ HOW TO FIND IT
   Verify exclusion window assignments for a device after migration by reviewing the Device Details page in the Automox console.
   📍In the Automox console, go to Devices › select a device › Device Details page, and review the exclusion windows listed for that device to confirm expected coverage post-migration.
   • Assign and manage exclusion windows directly to individual devices via a new Edit Devices action in the Automox console, replacing the group-association workflow.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Updated device tables and Device Details pages now display which exclusion windows apply to each specific device.
   • New per-device exclusion window API endpoints replace the group-scoped scheduled window endpoints for programmatic management.
   • Assign and manage exclusion windows directly to individual devices via a new Edit Devices action in the Automox console, replacing the group-association workflow.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • New per-device exclusion window API endpoints replace the group-scoped scheduled window endpoints for programmatic management.

   1 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !The following public API endpoints are being updated or deprecated as exclusion management moves to the device level: Create a New Scheduled Window, Get a Scheduled Window, Update a Scheduled Window, Delete a Scheduled Window, List Scheduled Windows (search), 'Check Whether a Scheduled Window is Currently Active', Check Scheduled Window Status for Server Groups, List Next Scheduled Window Dates by Group, and List Next Scheduled Window Dates by Device.
   • !Moving a device between groups will no longer add or remove its exclusion window — any group-based scripts or onboarding flows that rely on group placement to apply or remove exclusion windows must be updated to manage exclusion windows as a separate, independent step.
3. api-docs-4a042873b954 Oct 20, 2026 · issue 114

   Automox MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. 3.0 customer setup guide now available in the developer documentation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

4. Set Remote Control consent once for your whole organization (2026-10-02) Oct 2, 2026 · issue 093

   Automox Remote Control consent is now managed at the org level, with per-device overrides, a daily enforcement option, and a new Consent column in the device table.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢ ⤢
   └──▷ HOW TO FIND IT
   Enable daily enforcement so Remote Control consent stays locked to the org default across the fleet without anyone auditing overrides by hand.
   📍In the Automox console, go to Settings › Remote Tools, set your organization default consent behavior, then enable Enforce Organization Default Daily.
   Identify devices whose consent differs from the org default and decide in bulk whether to clear their overrides or keep them as exceptions.
   📍In the Automox console, go to the device table, open the Consent column, filter by override, select the devices you want to realign, and apply the organization default from the bulk action menu.
   • Adds an organization-level default consent setting for Remote Control sessions, inherited automatically by all devices including newly added ones, found at Settings > Remote Tools.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds per-device consent overrides — individually or in bulk from the device table — that persist independently of organization default changes.
   • Adds an Enforce Organization Default Daily setting that resets every device to the organization default once per day and clears all per-device overrides, for fleet-wide consent consistency without manual checks.
   • Adds a Consent column to the device table showing each device's current consent setting and whether it is inherited or an override, with filtering on both states.

   4 details in Everything

5. Set Remote Control consent once for your whole organization Oct 2, 2026 · release notes

   Automox v.: Org-level Remote Control consent with daily enforcement and device exceptions

   • Adds Enforce Organization Default Daily setting to reset devices to org default and clear overrides every day
   • Adds a new Consent column in the device table showing inherited vs override status for Remote Control sessions
   • Adds bulk exception capability from the device table for Remote Control consent overrides

   3 details in Everything

6. Upcoming Improvements to Policy Execution Logic (2026-09-28) Sep 28, 2026 · release notes

   Automox v2.7 Agent consolidates overlapping patch policies and merges Tray notifications for unified user experience

   • Automox Agent v2.7 consolidates multiple active notification-enabled policies on an endpoint into a single Tray view showing the complete package list, nearest deadline, and one restart action.
   • Tray prioritizes custom Install or Restart messages over default ones when merging overlapping policy notifications.

   2 details in Everything

7. Upcoming Improvements to Policy Execution Logic Sep 28, 2026 · release notes

   Automox Agent v2.7 consolidates overlapping policy notifications and restarts via a dynamic Tray.

   • Agent and Tray in v2.7 consolidate multiple notification-enabled policies into a single view showing all packages, versions, and the nearest deadline
   • Tray Install Updates now applies patching for all active overlapping policies simultaneously instead of one at a time
   • Agent combines restart commands across overlapping policies to minimize end-user interruption by performing a single restart after patching

   3 details in Everything

8. Improved macOS Vulnerability Severity Data (2026-09-25) Sep 25, 2026 · issue 086

   Automox extends KEVKEVCISA's Known Exploited Vulnerabilities catalog, a list of vulnerabilities with evidence of exploitation in real attacks. It helps teams prioritize fixes for problems attackers already use. status, EPSSEPSSExploit Prediction Scoring System, an estimate of the probability that a published vulnerability will be exploited in the next 30 days. It helps prioritize investigation and patching. scores, and CVE severity data to macOS patches, enabling risk-based policy targeting across all platforms.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢
   • Extends existing KEV- and EPSS-targeted policies to automatically include macOS devices with no policy configuration changes required.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Updates console views, Analytics, and reports to reflect CVE counts and severity levels for macOS based on the expanded vulnerability data.
   • Extends existing KEV- and EPSS-targeted policies to automatically include macOS devices with no policy configuration changes required.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !Severity-based policies may behave differently on macOS — macOS patches may now fall in or out of scope depending on the severity levels a policy targets.
   • !Existing KEV- and EPSS-targeted policies will now include macOS devices automatically, without any configuration change.
   • !CVE counts and severity levels for macOS in console views, Analytics, and reports may change as vulnerability data has been expanded and refined.
9. 6 New Mitigation Worklets Sep 25, 2026 · release notes

   Adds six new Mitigation Worklets to the Automox Worklet Catalog for Docker, LibRaw, squashfs, Tomcat, cPanel and Office 2007.

   • Adds MacOS - Mitigations - Block Unauthenticated Docker Remote API TCP Port 2375 Worklet
   • Adds Linux - Mitigations - Audit LibRaw Security Update Status Worklet
   • Adds 'Linux - Mitigations - Blacklist squashfs Kernel Module to Prevent Automatic Loading' Worklet
   • Adds Windows - Mitigations - Disable Apache Tomcat Examples Web Application Worklet
   • Adds 'Linux - Mitigations - Block cPanel & WHM TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. Ports 2083 and 2087 via Host Firewall' Worklet

   +1 more show less

   • Adds 'Windows - Mitigations - Disable ActiveX Controls in Office 2007 via Registry Policy' Worklet

   6 details in Everything

10. Improved macOS Vulnerability Severity Data Sep 25, 2026 · release notes

    Automox adds macOS KEVKEVCISA's Known Exploited Vulnerabilities catalog, a list of vulnerabilities with evidence of exploitation in real attacks. It helps teams prioritize fixes for problems attackers already use./EPSSEPSSExploit Prediction Scoring System, an estimate of the probability that a published vulnerability will be exploited in the next 30 days. It helps prioritize investigation and patching. severity data; existing policies automatically target macOS devices

    • Known Exploited Vulnerability (KEV) status and EPSS scores are now available for macOS alongside third-party and Windows coverage
    • Existing policies targeting KEV or EPSS automatically extend to macOS devices without configuration changes

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Severity-based policies may behave differently on macOS, with patches falling in or out of scope depending on targeted severities
    • !CVE counts and severity levels for macOS may differ due to expanded and refined vulnerability data
11. announced Sep 16, 2026 · issue 078

    Automox adds support for macOS 27 (Golden Gate) as a managed operating system.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

12. New Automox Supported Operating System - macOS 27 (Golden Gate) (2026-09-16) Sep 16, 2026 · issue 077

    Automox now supports macOS 27 (Golden Gate) with Agent 2.6.53.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

13. Remote Tools — Splashtop Streamer auto-install improvements (2026-09-15) Sep 15, 2026 · issue 076

    Automox Remote Tools: Splashtop Streamer now auto-reinstalls on re-imaged devices and retries failed installs automatically.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Re-imaged devices with auto-install enabled now have the Splashtop Streamer reinstalled automatically, without manual intervention after an imaging batch.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Failed Splashtop Streamer installs now retry automatically when the failure is transient (network interruption, locked file, or antivirus interference), while permanently unresolvable failures (e.g. unsupported OS) are reported immediately.
    • Re-imaged devices with auto-install enabled now have the Splashtop Streamer reinstalled automatically, without manual intervention after an imaging batch.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    1 more in Everything

14. Remote Tools — Splashtop Streamer auto-install improvements Sep 15, 2026 · release notes

    Splashtop Streamer auto-reinstall on re-imaging and automatic retry for transient install failures

    • Enables automatic Splashtop Streamer reinstallation on devices that have been re-imaged when auto-install is enabled.
    • Adds automatic retry logic for failed Streamer installs caused by temporary issues like network interruptions or antivirus interference.

    2 details in Everything

15. New Exclusion Window Blocked Activities Section: Policy Execution & Device Scans (2026-09-10) Sep 10, 2026 · issue 071

    Automox Exclusion Windows now independently block Device Scans or Policy Execution, with API support and new UI indicators.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    ⤢ ⤢
    └──▷ HOW TO FIND IT
    Suppress device scans during a maintenance window without halting policy executions — configure the scope via the Exclusion Window UI.
    📍In the Automox Console, open or create an Exclusion Window, locate the Blocked Activities section, check Device Scans only (uncheck Policy Execution), then save the window.
    • Adds API endpoint support for blocked activities / scope configuration payload parameters on Exclusion Windows, enabling programmatic control over whether Policy Execution, Device Scans, or both are suppressed per window.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Introduces a Blocked Activities section to the Exclusion Window configuration page, letting administrators independently select Policy Execution, Device Scans, or both as the operational scope of a window.
    • New Device Scans blocking scope for Exclusion Windows suppresses intensive scan routines during critical business windows without halting scheduled policy executions.
    • Adds a Scan Blocked status to the Scan Result Tile with a yellow warning shield icon and an info tooltip naming the active Exclusion Window when a scheduled scan is suppressed.
    • Appends a timestamped audit log entry — 'Scan was blocked due to exclusion window: [Window Name]' — to Device Activity Logs when a scan is suppressed.

    +2 more show less

    • Triggers a warning confirmation modal when a manual scan is initiated via Device Details > Scan or the bulk Devices Table > Scan action while an active Exclusion Window is present.
    • Displays a yellow warning icon and Last scan was blocked secondary text in the Connection Tile when a scan is suppressed by an active Exclusion Window.
    • Adds API endpoint support for blocked activities / scope configuration payload parameters on Exclusion Windows, enabling programmatic control over whether Policy Execution, Device Scans, or both are suppressed per window.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • New Device Scans blocking scope for Exclusion Windows suppresses intensive scan routines during critical business windows without halting scheduled policy executions.
    • Adds a Scan Blocked status to the Scan Result Tile with a yellow warning shield icon and an info tooltip naming the active Exclusion Window when a scheduled scan is suppressed.
    • Appends a timestamped audit log entry — 'Scan was blocked due to exclusion window: [Window Name]' — to Device Activity Logs when a scan is suppressed.
    • Triggers a warning confirmation modal when a manual scan is initiated via Device Details > Scan or the bulk Devices Table > Scan action while an active Exclusion Window is present.

    +1 more show less

    • Displays a yellow warning icon and Last scan was blocked secondary text in the Connection Tile when a scan is suppressed by an active Exclusion Window.

    1 more in Everything

16. New Exclusion Window Blocked Activities Section: Policy Execution & Device Scans Sep 10, 2026 · release notes

    Automox adds granular control to Exclusion Windows, allowing admins to block Device Scans independently of Policy Execution via UI or API.

    • Adds a Blocked Activities selection section in the Exclusion Window configuration page where administrators can independently choose to block Policy Execution, Device Scans, or both.
    • Introduces new API payload parameters for managing the blocked activities scope (policy execution and device scans) on exclusion windows.

    2 details in Everything

17. Local Exclusion Window Scheduling & Targeted Warnings (2026-09-01) Sep 1, 2026 · issue 062

    Automox Exclusion Windows now support local device time scheduling and per-device conflict warnings to eliminate false positives.

    └──▷ HOW TO FIND IT
    Set a maintenance exclusion window to run at 2:00 AM in each device's local time zone, so globally distributed endpoints all get their local off-hours window without calculating per-region UTC offsets.
    📍In the Automox console, go to Manage › Exclusion Windows › New Exclusion Window, set your start time to 2:00 AM, then toggle the time zone selector to Local time of device before saving.
    • Adds a toggle in the Exclusion Window builder to switch between Local time of device and UTC scheduling, so a window set for 2:00 AM fires at 2:00 AM in each endpoint's own time zone without manual UTC conversion.
    • Adds an interactive time preview in the Exclusion Window builder that shows the equivalent wall-clock time when toggling between Local and UTC, based on the current browser time zone.
    • Exclusion window warning modals now show per-device conflict counts (e.g., '3 of 12 selected devices are currently in an exclusion window') instead of group-level alerts, eliminating false-positive warnings.

    3 details in Everything

18. Local Exclusion Window Scheduling & Targeted Warnings Sep 1, 2026 · release notes

    Updated Exclusion Windows to use local device time and provide per-device conflict warnings.

19. Remote Tools: System Tools & Screen Recording Controls (2026-08-19) Aug 19, 2026 · issue 050

    Automox Remote Tools gains Windows System Tools access and org-level Screen Recording Controls for Remote Control sessions.

    ⤢
    └──▷ HOW TO FIND IT
    Restart a stalled Windows service on an end user's device without taking over their screen.
    📍In the Automox console, open Device Details for the target device › click Remote Tools › select System Tools — Service Manager opens in a new tab, running in the background.
    Ensure every Remote Control session is recorded and cannot be stopped by technicians, to satisfy audit requirements.
    📍In the Automox console, go to Remote Tools Settings tab › enable Auto-record all sessions › enable Lock Recording.
    • New System Tools option under the Remote Tools button on Device Details opens Task Manager, Registry Editor, Device Manager, and Service Manager on managed Windows devices in a background session — no desktop takeover required.
    • On macOS, System Tools surfaces Activity Monitor as the native equivalent of Task Manager for background process triage.
    • New Auto-record all sessions setting on the Remote Tools Settings tab automatically begins recording every Remote Control session at the organization level.
    • New Lock Recording setting on the Remote Tools Settings tab prevents technicians from stopping a recording mid-session, supporting audit and compliance requirements.

    4 details in Everything

20. Remote Tools: System Tools & Screen Recording Controls Aug 19, 2026 · release notes

    Automox Resolve adds System Tools for background Windows/macOS admin utilities and organization-level Screen Recording Controls for Remote Control sessions.

    • Adds System Tools (Task Manager, Registry Editor, Device Manager, Service Manager on Windows; Activity Monitor on macOS) that open in a new tab without desktop takeover, accessible via the Remote Tools button on Device Details.
    • Adds organization-level Auto-record all sessions and Lock Recording settings to the Remote Tools Settings tab for controlling Remote Control session recording.

    2 details in Everything

21. New Software Status for a Device: "Pending Application Restart" (2026-08-11) Aug 11, 2026 · issue 043

    Automox adds Pending Application Restart status to Device Details Software Table for Chrome, Edge, and OBS Studio on Windows.

    ⤢
22. New Software Status for a Device: "Pending Application Restart" Aug 11, 2026 · release notes

    Automox adds Pending Application Restart status in Device Details > Software Table for Windows Chrome, Edge, and OBS updates.

23. Now live: Partial Policy Success and Per-Package Visibility in the Policy Results Report (2026-07-20) Jul 20, 2026 · issue 021

    Automox Policy Results Report gains Partial status, per-package failure reasons, and raw log side panel.

    ⤢ ⤢
    └──▷ HOW TO FIND IT
    Spot runs that need attention after a patch cycle by filtering the Policy Results Report for Partial outcomes, then expanding a device row to see which package failed and why.
    📍In the Policy Results Report, use the Results filter and select Partial to isolate mixed-outcome runs. Expand any device row to view per-package results and failure reasons. Click View Raw Logs on a failed package to open the full log in the side panel.
    • Adds Partial as a new policy run result status when some patches succeed and others encounter errors, replacing a single pass/fail outcome.
    • Adds per-package breakdowns in the device table for Successful, Failed, or Partial runs, showing plain-language failure reasons (e.g., The application is currently running, Pending system restart).
    • Raw logs for individual packages now open in a side panel via View Raw Logs, keeping detail accessible without cluttering the table.
    • Replaces the stacked bar chart and legend in the Results column with a direct count of each status, with definitions moved to filter tooltips.

    4 details in Everything

24. Now live: Partial Policy Success and Per-Package Visibility in the Policy Results Report Jul 20, 2026 · release notes

    Partial Policy Success status and per-package visibility in Automox Policy Results Report

    • Adds Partial result status for policy runs where some patches applied successfully while others encountered errors, replacing the previous collapsed pass/fail view.
    • Enables expandable device rows in the Policy Results Report to show per-package breakdowns with plain-language failure reasons (e.g., The application is currently running).
    • Moves raw logs into a side panel via View Raw Logs instead of cluttering the main table, improving accessibility by replacing stacked bars with direct status counts.

    3 details in Everything

25. Introducing Remote Tools: Remote Command & File Transfer (2026-06-29) Jun 29, 2026 · issue 014

    Automox adds Remote Command and File Transfer to its new Remote Tools umbrella, enabling shell access and file I/O without a full desktop session.

    ⤢ ⤢ ⤢
    └──▷ HOW TO FIND IT
    Run a diagnostic command on a managed endpoint during an incident without interrupting the end user's active session.
    📍In the Automox console, navigate to a managed device › Remote Tools › Remote Command, open an interactive shell session, and run your diagnostic commands in real time.
    Push a remediation script or pull back logs from a device without starting a full screen-sharing session.
    📍In the Automox console, navigate to a managed device › Remote Tools › File Transfer, then upload a script or download log files as a targeted action.
    • Introduces Remote Tools — a unified remote support hub that consolidates Remote Control, Remote Command, and File Transfer in one place.
    • New Remote Command capability opens an interactive shell session on a managed Windows or macOS device in the background, without taking over the end user's screen.
    • New File Transfer capability lets practitioners push scripts, configs, or installers to — and pull logs or diagnostic output from — a managed device without launching a full remote control session.

    3 details in Everything

26. Introducing Remote Tools: Remote Command & File Transfer Jun 29, 2026 · release notes

    Automox adds Remote Command and File Transfer capabilities within the Remote Tools umbrella for targeted device actions.

    • Adds Remote Command capability to open interactive shell sessions on managed Windows or macOS devices without taking over the screen
    • Adds File Transfer capability to push scripts, config files, or installers and pull logs from managed Windows or macOS devices

    2 details in Everything

27. Slack for Windows has moved to MSIX - how Automox supports the transition (2026-06-19) Jun 19, 2026 · issue 014

    Automox adds native Slack MSIX detection and patching plus a migration Worklet for Windows MSI-to-MSIX transitions.

    └──▷ HOW TO FIND IT
    Migrate Windows endpoints from legacy Slack MSI or EXE installations to MSIX in a single controlled action without waiting for a scheduled patch window.
    📍In the Automox console, go to Worklets, search for Windows - Software Lifecycle - Migrate Slack to MSIX, assign it to the target device group, then click Run Now.
    • Adds native detection and patching support for Slack MSIX packages on Windows, reported under the existing Slack catalog title with no policy reconfiguration required.
    • Supports Slack MSIX on both x64 and ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead. Windows devices.
    • Introduces the base Worklet Windows - Software Lifecycle - Migrate Slack to MSIX, available to all customers (including non-Worklet Catalog subscribers), to remove legacy MSI/EXE installs and provision the current MSIX package in a single controlled action.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Existing Slack MSI installs on Windows will no longer receive newer MSI updates through routine Automox patching, as Automox has deprecated the legacy MSI as a patch target following Slack's retirement of its Windows MSI installers.
28. Slack for Windows has moved to MSIX - how Automox supports the transition Jun 19, 2026 · release notes

    Automox adds native detection and patching for Slack via MSIX on Windows arm64

    • Adds native detection and patching support for the Slack MSIX package under the standard Slack title
    • Includes Windows arm64 support for Slack MSIX deployments
    • Provides base Worklet Windows - Software Lifecycle - Migrate Slack to MSIX available to all customers

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Legacy MSI installs are deprecated as a patch target; Automox will no longer treat the legacy MSI as the package to update
29. Target patching by real-world risk: KEV & EPSS now on Windows OS and in Advanced Patch policies (2026-06-16) Jun 16, 2026 · issue 014

    Automox adds KEVKEVCISA's Known Exploited Vulnerabilities catalog, a list of vulnerabilities with evidence of exploitation in real attacks. It helps teams prioritize fixes for problems attackers already use. & EPSSEPSSExploit Prediction Scoring System, an estimate of the probability that a published vulnerability will be exploited in the next 30 days. It helps prioritize investigation and patching. exploit-risk targeting to Windows OS patching and Advanced Patch policies.

    ⤢ ⤢
    └──▷ HOW TO FIND IT
    Automatically patch Windows OS CVEs that are actively exploited in the wild without manual triage, by targeting KEV-flagged vulnerabilities in an Advanced Patch policy.
    📍In the Automox console, go to Policies › Advanced Patch › create or edit a policy, then under Patch Filters enable KEV to scope patching to CISA Known Exploited Vulnerabilities on Windows OS endpoints.
    Prioritize Windows OS patches most likely to be exploited in the next 30 days by filtering on EPSS score within an Advanced Patch policy.
    📍In the Automox console, go to Policies › Advanced Patch › create or edit a policy, then under Patch Filters enable EPSS and set a probability threshold to automatically target high-risk Windows OS packages.
    • Extends KEV (CISA Known Exploited VulnerabilitiesCISA Known Exploited VulnerabilitiesA catalog maintained by the US Cybersecurity and Infrastructure Security Agency listing CVEs confirmed to have been actively exploited in the wild, which cyber tools use as a high-signal prioritization feed for patching and scanning.) and EPSS scoring to Windows OS packages, visible on Software and Device Details pages.
    • Enables automated remediation targeting by KEV and EPSS status inside Advanced Patch policies, eliminating manual CVE triage.
    • Surfaces exploited and high-probability-of-exploitation vulnerabilities alongside third-party titles for unified risk-based prioritization.

    3 details in Everything

30. Automox MCP Server 2.0.0: Per-Tool Safety Gates, Device Deletion, and File Uploads Jun 2, 2026 · release notes

    Automox MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. 2.0 adds per-tool safety gates, device deletion/upload tools, and full API coverage.

    • Adds AUTOMOX_MCP_ALLOW_APPLY_REMEDIATION_ACTIONS environment variable to gate remediation execution.
    • Adds AUTOMOX_MCP_ALLOW_SPLASHTOP_BULK_INSTALL_UNINSTALL=true flag to allow bulk Splashtop install/uninstall actions.
    • Adds delete_device tool for irreversible single-device deletion, gated by AUTOMOX_MCP_ALLOW_DELETE_DEVICE.
    • Adds update_device tool to set name, group, tags, exception state, or IP addresses for a single device.
    • Adds upload_policy_file tool to upload local installers to Required Software policies with directory allowlist and size cap.

    +2 more show less

    • Updates upload_action_set to accept raw CSV from Qualys, Tenable, CrowdStrike, Rapid7, or generic sources via multipart data.
    • Adds list_webhook_deliveries tool to surface recent delivery attempts with status, latency, and errors.

    7 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !AUTOMOX_MCP_ALLOW_REMEDIATION is renamed to AUTOMOX_MCP_ALLOW_APPLY_REMEDIATION_ACTIONS; leaving the old name prevents the tool from registering.
    • !Bulk Splashtop actions now require AUTOMOX_MCP_ALLOW_SPLASHTOP_BULK_INSTALL_UNINSTALL=true in addition to write mode.
31. Automox MCP Server 1.1.0: One-Click Install and Remote Control with Splashtop May 29, 2026 · release notes

    Automox MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. 1.1.0 adds Splashtop remote control, one-click Claude Desktop install, and bulk policy assignment

    • Adds automox-mcp package to PyPI and a one-click desktop extension for Claude Desktop
    • Exposes Automox Remote Control with Splashtop tools to check session status and start remote sessions
    • Adds Saved-search management and bulk policy assignment capabilities for Device Explorer

    3 details in Everything

32. Closed Loop Endpoint Management Inside Zendesk May 26, 2026 · release notes

    New Automox for Zendesk sidebar app enables real-time device visibility and in-ticket endpoint remediation.

    • Adds a sidebar app to Zendesk that automatically displays requester device details including patch status, missing updates, last reboot time, and hardware information.

    1 detail in Everything

33. Spot the highest-risk third-party titles with KEV and EPSS May 14, 2026 · release notes

    Spot the highest-risk third-party titles with KEVKEVCISA's Known Exploited Vulnerabilities catalog, a list of vulnerabilities with evidence of exploitation in real attacks. It helps teams prioritize fixes for problems attackers already use. and EPSSEPSSExploit Prediction Scoring System, an estimate of the probability that a published vulnerability will be exploited in the next 30 days. It helps prioritize investigation and patching.

    • Adds KEV List column on the Software page to flag third-party titles with actively exploited CVEs.
    • Adds EPSS column showing the highest exploit-probability score for third-party titles as a percentage.
    • Adds KEV filter to narrow software views to titles with at least one KEV-listed CVE.

    3 details in Everything

34. Remote Control Deployment Management — Greater Visibility and Flexibility Apr 30, 2026 · release notes

    Automox adds flexible Remote Control deployment scope and health visibility via redesigned UI

    • Adds ability to install or uninstall the Splashtop Streamer to One or more groups or 'A selected set of devices from the table' for Remote Control.
    • Adds a filterable device table in Remote Control settings showing per-device Streamer status, last install attempt, and last result.

    2 details in Everything

35. New Status Available Now: Say Goodbye to "False Failures" During an Exclusion Window Apr 6, 2026 · release notes

    Automox adds Blocked status and filter to Policy Results Report for exclusion windows

    • Adds Blocked status to the Policy Results Report for policy executions during an active Exclusion Window, replacing the previous Failed label.
    • Adds a new Blocked filter in the sidebar of the Policy Results Report to isolate scheduled blocks from technical failures.
    • Updates UI status indicators with unique visual patterns and high-contrast shapes to distinguish Blocked, Failed, and Success states.

    3 details in Everything

36. New Device Statuses: See When End Users Are Blocking Policy Progress Mar 5, 2026 · release notes

    Adds Pending User Install and Pending User Restart device statuses and corresponding columns to the Devices table in the Automox console.

37. New Policy Catalog: Create Best-Practice Policies in Seconds Mar 4, 2026 · release notes

    Automox adds a Policy Catalog with curated best-practice templates for OS and application management

    • Adds the Policy Catalog tab in the Automox console under Policies for browsing curated best-practice policy templates
    • Enables one-click policy creation from template selections, auto-populating configuration logic while allowing customization of scheduling, device targeting, and group assignments

    2 details in Everything

38. Improved Third-Party Vulnerability Severity Data Feb 27, 2026 · release notes

    Automox expands third-party vulnerability severity data to all supported apps using VulnCheck, enabling version-aware CVE mapping.

    • Enables version-aware CVE mapping in the console to display only CVEs remediated by a specific package installation.

    1 detail in Everything

    └──▷ BREAKING ON UPGRADE

    • !Severity-based policies may behave differently as CVE counts, severity levels, and in-scope items change due to refined and expanded vulnerability data.
39. Automox Webhooks: Real-Time Event Notifications are Now Available via API Feb 12, 2026 · release notes

    Automox adds webhooks for real-time HTTP POST notifications of policy and device events via API

    • Adds webhook delivery that pushes real-time HTTP POST notifications to custom endpoints instead of polling the API
    • Supports subscribing to specific event types including policy evaluations, device status changes, and user updates
    • Ensures data authenticity with HMAC-SHA256HMAC-SHA256A keyed hash that proves a message came from someone holding a shared secret and was not altered. Webhooks and API request signing commonly use it. signature verification on every payload
    • Provides reliable delivery via exponential backoff retry mechanism and 14-day message replay capability
    • Handles up to 100 webhook deliveries per minute per endpoint with native queuing for event spikes

    5 details in Everything

40. Remote Control (Splashtop): More Consent Control, Clearer UI, Quicker Access Feb 5, 2026 · release notes

    Remote Control adds Required - deny/allow consent options and UI layout changes

    • Adds Required — if user doesn’t respond, deny as a consent behavior option for Remote Control sessions
    • Adds Required — if user doesn’t respond, allow as a consent behavior option for Remote Control sessions
    • Updates the Remote Control section layout to separate status, actions, and settings
    • Improves agent-to-platform communication during session startup, reducing connection initiation time by approximately 4 seconds

    4 details in Everything

41. Streamlined Deadline-Based Interface Update for Policies Jan 28, 2026 · release notes

    Automox v2.1+ policies now use a single Deadline field (default 9 hours) replacing deferral/snooze inputs.

    • Replaces multiple deferral and snooze fields with a single Deadline field in the policy creation interface for agents running version 2.1.x or newer
    • Sets the default deadline value to 9 hours for new policies (previously 48 hours)

    2 details in Everything

42. Software Lifecycle: Remove Legacy Remote Control Application (Windows & macOS) Jan 23, 2026 · release notes

    New Worklets added to remove legacy Automox Remote Control components on Windows and macOS

    • Adds a new base Worklet Software Lifecycle- Remove Automox Remote Control Application for Windows devices to clean up legacy Automox Assist components.
    • Adds a new base Worklet Software Lifecycle- Remove Automox Remote Control Application for macOS devices to clean up legacy Automox Assist components.

    2 details in Everything

43. Automox Resolve powered by Splashtop — Now Generally Available Jan 14, 2026 · release notes

    Automox Resolve powered by Splashtop is GA, adding secure remote desktop access directly within the Automox console.

    • Adds remote desktop sessions launchable directly from Device Details in the Automox console
    • Adds role-based access controls and audit logging for remote sessions
    • Supports attended and unattended remote access modes
    • Allows Splashtop Streamer deployment at organization level or per device
    • Adds Windows and macOS endpoint support for remote control

    +1 more show less

    • Unlocks advanced features like file transfer, chat, multi-monitor support, and session recording via the Premium add-on

    6 details in Everything

44. New Base Worklets: Intune Install OS Updates & Intune Deploy macOS Automox Agent Jan 5, 2026 · release notes

    Adds two new base worklets for macOS: Intune OS updates via DDM and automated agent deployment.

    • Introduces Intune Install OS Updates base worklet to initiate macOS first-party updates via Intune DDM with escrowed Bootstrap Token
    • Adds Intune Deploy macOS Automox Agent base worklet for automated device syncing and policy assignment

    2 details in Everything

45. New Base Worklets: JAMF List Software Plans and JAMF Install OS Updates Dec 18, 2025 · release notes

    Automox adds two new base worklets for macOS: JAMF Install OS Updates and JAMF List Software Plans to handle Secure Token constraints and visibility.

    • Adds the JAMF Install OS Updates base worklet that initiates first-party macOS updates via JAMF's MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. workflow using an escrowed Bootstrap Token, bypassing local Secure Token requirements
    • Adds the JAMF List Software Plans base worklet to list executed JAMF software update plans for validation and visibility

    2 details in Everything

46. Windows Update Title Changes Dec 11, 2025 · release notes

    Automox console now reflects Microsoft's new Windows 24H2 update title format (Security Update).

    • Updates displayed in the Automox console now use Microsoft's updated naming convention for Windows updates (e.g., Security Update instead of Cumulative Update).
    • Patch policies relying on name-based criteria may require adjustment to accommodate the new metadata format.

    2 details in Everything

47. The Rollout has Officially Started for our New and Improved Device Explorer! Dec 11, 2025 · release notes

    New Device Explorer with unlimited query criteria, new API endpoints, and direct device management actions in the UI.

    • Adds read and manage permissions for the new query capability
    • Removes the previous limitation of 10 criteria per query, enabling unlimited search criteria
    • Breaks out attributes by scope (Device, Disks, NICNICA network interface card or adapter, the hardware that connects a computer to a network. It sends and receives packets over the link., IP Address, Software, Tags) with smart type-ahead
    • Adds ability to apply tags, remove tags, 'assign to a group' and delete a device directly from the results table

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Existing device explorer queries will not be migrated and will be removed with the enablement of the new enhancements
    • !Custom roles created prior to the release need to be manually updated to include the new query permissions if desired
48. Organization Table Verbiage Consistency Update Nov 17, 2025 · release notes

    Automox renames Organizations table columns Organization ID to Organization UUID and Legacy ID to Organization ID.

    • Renames the Organization ID column label in the Setup & Configuration > Organizations tab to Organization UUID.
    • Renames the Legacy ID column label in the Setup & Configuration > Organizations tab to Organization ID.

    2 details in Everything

49. Exclusion Windows are now Available! Nov 11, 2025 · release notes

    Adds Exclusion Windows feature to block automated policy activity during scheduled periods.

    • Adds Scheduled Windows menu item to display a table for managing exclusion windows
    • Enables creation of one-time or recurring exclusion windows in UTC time to associate with server groups
    • New API endpoints: API: Get Scheduled Window, API: Update Scheduled Window, API: Delete Scheduled Window, API: Get All Scheduled Windows, API: Create Scheduled Window, API: Is Window Active, API: Check Groups Window Status, API: Get Next Scheduled Window Dates by Group, API: Get Next Scheduled Window Dates by Device

    3 details in Everything

50. New Policy Filters are Now Available Nov 10, 2025 · release notes

    Adds Policy Type, OS, Groups, and Patch Policy Status filters to the Policies table in Automox console.

    • Adds filtering by OS in the Policies table UI.
    • Adds filtering by Groups in the Policies table UI.

    2 details in Everything

51. PatchAI in the Console Oct 6, 2025 · release notes

    The Automox service introduces a new in-console AI assistant (PatchAI) to help users answer questions faster.

    └──▷ HOW TO FIND IT
    Get quick answers to Automox questions directly in the UI.
    📍Look for PatchAI in the bottom-right corner of the Automox console.
52. Action Required: Policy Report Endpoint Change + Policy Updates Sep 29, 2025 · release notes

    New policy history API endpoint and updated PowerShell execution worklets; old endpoints deprecated.

    • Integrations must switch from https://policyreport.automox.com to the new GET /api/policy-history endpoint under the main console subdomain
    • Policy creation now supports updated worklets for PowerShell Execution Policy (AllSigned and RemoteSigned) using the new signing API

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The endpoint https://policyreport.automox.com is being decommissioned on November 24th, breaking integrations that rely on it without migration to console.automox.com/api/policy-history
    • !Worklets referencing the decommissioned endpoint worklet-signing.prod.automox.com will fail unless policies are recreated with updated worklets pointing to console.automox.com/api/signing
53. Base Worklets Now Included for All Customers! Sep 8, 2025 · release notes

    Automox adds free access to a curated set of Base Worklets for all customers.

    • Base Worklets are now available at no additional cost to all Automox customers
    • Base Worklets enable restarting or upgrading the Automox Agent on Windows, macOS, or Linux

    2 details in Everything

54. New Global API Keys are now Available! Sep 5, 2025 · release notes

    Adds Global API Key management via UI and a future public API endpoint for cross-organization access in Automox.

    • Adds the ability to create Global API Keys from the global organization management page for users with global permissions

    1 detail in Everything

55. Meet Patch AI! Aug 19, 2025 · release notes

    Adds Patch AI chatbot widget in Help Center and Automox University

56. New Automox Supported Operating System - Windows 11 ARM Aug 8, 2025 · release notes

    Automox adds support for Windows 11 ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware. with Agent v2.3.34+ requirement.

    • Adds official support for the Windows 11 ARM operating system to Automox.

    1 detail in Everything

57. Increased Attachment Size Limit for Policies Aug 7, 2025 · release notes

    Increased maximum policy attachment size from 1 GB to 10 GB

    └──▷ BREAKING ON UPGRADE

    • !The Package Version, Package Name and Install Command fields are no longer auto-filled for .msi, .deb and .rpm files.
58. Two New Columns Added to the Organization Table Aug 5, 2025 · release notes

    Adds Account ID and Global Organization ID columns to the Organization table in Console.

59. New Automox Supported Operating System - CentOS Stream 10 Aug 1, 2025 · release notes

    CentOS Stream 10 is now a supported operating system for the Automox agent.

    • CentOS Stream 10 is added to the list of officially supported operating systems.

    1 detail in Everything

60. New Role Deletion Capability Jul 25, 2025 · release notes

    Adds Delete Role UI action in Automox console for deleting custom RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. roles

    • Adds a Delete Role option in the Roles table's Actions menu for deleting custom roles via a guided confirmation modal
    • Automatically removes all role assignments when a custom role is deleted

    2 details in Everything

61. New Automox Supported Operating System - Windows Server 2025 Core Jul 17, 2025 · release notes

    Automox now supports Windows Server 2025 Core with the latest agent.

    • Adds support for Windows Server 2025 Core as a supported operating system
    • Updates agent compatibility to include Windows Server 2025 Core

    2 details in Everything

62. We’re currently rolling out the newly redesigned Device Details page with added Inventory Data! Jul 15, 2025 · release notes

    Automox adds a redesigned Device Details page and a public-facing API to expose expanded inventoried data for CMDBCMDBA Configuration Management Database: a repository that stores records of IT assets and the relationships between them, giving cyber tools a single authoritative source for infrastructure context. and automation.

    • Redesigns the Device Details UI page with comprehensive inventory data (Linux: 261, Darwin: 287, Windows: 322 attributes)

    1 detail in Everything

63. New Analytics Boards are Now Available! Jun 30, 2025 · release notes

    Automox adds three new Analytics boards (Policy Execution, Organization Insights, Health and Device Status) with over 45 reports.

    • Adds Policy Execution analytics board with granular policy execution, success/failure rates, and detailed result breakdowns
    • Adds Organization Insights analytics board showing OS distribution, licensing, and connection status snapshots
    • Adds Health and Device Status analytics board providing device health details, update readiness, and patching needs

    3 details in Everything

64. Saving Analytic Board Filters! May 23, 2025 · release notes

    Adds the ability to save and delete custom filtered views on Analytic boards in Automox

    • Adds a new dropdown option on Analytic boards allowing users to save current filter and view modifications as a named view
    • Enables management of saved views, including the ability to delete them

    2 details in Everything

65. Custom Roles is now Live for All Customers! May 19, 2025 · release notes

    Custom Roles feature now live for all customers, enabling granular RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. and multiple role assignments per user.

    • Enables creation of custom Account and Global roles with granular read, write, edit, and delete permissions for every Automox feature
    • Allows assigning multiple roles to a single user, tailored to individual needs and specific organizations

    2 details in Everything

66. Easily Schedule Policies with our new Patch Tuesday Feature Release! May 19, 2025 · release notes

    Automox adds Patch Tuesday policy scheduling with configurable offset (0–14 days).

67. New Automox Supported Operating Systems May 14, 2025 · release notes

    Automox adds support for Windows Server 2025, CentOS Stream 9, and Fedora Linux 41/42.

68. A NEW Patch Impact and Performance Analytics Board is Live! May 14, 2025 · release notes

    Automox adds a new Patch Impact and Performance analytics board with 20+ reports to assess patch activity and environment impact.