https://cybertoolchain.io/tools/conductorone New releases and features in ConductorOne, tracked by The Cyber Toolchain. en Sat, 31 Oct 2026 23:28:10 GMT https://www.c1.ai/docs/product/release-notes#october-30-2026 https://www.c1.ai/docs/product/release-notes#october-30-2026 Sat, 31 Oct 2026 23:28:10 GMT ConductorOne adds MCP server discovery, Slack `/c1` shortcut, IPv6 allowlists, and campaign exclusions alongside six breaking API and permission changes⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Access review campaign filtering has been improved: campaigns can be filtered on resource attributes and entitlement annotations using custom selectors, combinable with app, resource type, risk level, and compliance framework filters, and grant usage filters can now be set to 'Used in the last [timeframe]' or 'Unused in the last [timeframe]' when building campaigns.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Exclude specific entitlements or everything matching a custom selector from campaigns and templates. • C1 groups gain new capabilities: review C1 group memberships — including automated groups — inside access review campaigns, and create a C1 group from an existing group or entitlement, with C1 proposing a membership rule, inclusion and exclusion lists, and flagging anyone who cannot be adopted. • MCP gateway visibility and error reporting have been improved: AI agents connected through the MCP gateway now see every MCP server available to them, with access status and toolsets listed per server, and MCP gateway error responses now report whether a rejected token expired, was revoked, or is malformed, returning error code `-32010` when a server credential requires reauthorization. • Admins can now assign automatic tool access per MCP server by choosing a preset ('Read tools', 'All tools') or creating a named toolset, and can connect external MCP servers manually by choosing 'Configure manually' to supply custom OAuth client credentials or use a public client. • Start an access request from anywhere in C1 using the new sidebar 'New request' button, which opens a right-side panel without leaving the current view. • Route approvals by compliance framework or app annotation — policies, approver steps, entitlement routing rules, account provisioning, and forms can now check compliance frameworks and app annotations. • Type `/c1` in Slack to open the access request form directly, the same as `/c1 request`. • Get AI-suggested owners for unowned non-human identity findings via 'Remediate with AI', which shows up to three candidates with confidence levels. • Turn on 'Use resource descriptions' in an app's Entitlement management settings to show source-system descriptions instead of connector-generated text. Breaking changes: • Failed client credentials token requests now always return `invalid_client` instead of a specific reason — scripts or SIEMs matching on `invalid_grant` to detect deleted, disabled, or expired credentials must match `invalid_client` instead. • Reading, updating, or creating a credential for a deleted service principal now returns 'not found' instead of succeeding — update any scripts or Terraform that relied on the old behavior. • Updating a personal API key's roles or allowed source IPs through the API now returns an error for fields that cannot be changed, instead of silently ignoring them. • System log entries for failed token requests now record the real failure reason, and MCP tool calls refused by authorization are recorded as 'denied' instead of a generic failure with code 500 — update SIEM rules or alerts that matched the old status details. • The `email capabilities` gRPC method on the provider service is removed — clients must move to the capabilities service (`GET /api/v1/settings/email-capabilities` is unchanged). • Application Administrators who do not own an app can no longer change an entitlement's owners, automations, or manual membership unless they are also Super Administrators; Basic Users can no longer list or download app population reports; only Super Administrators and Read-Only Administrators can read email provider settings and email activity. • Policies are now limited to 16 conditional rules — existing policies above the limit remain editable but cannot grow beyond their current size. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#role-mining-suggestions https://www.c1.ai/docs/product/release-notes#role-mining-suggestions Thu, 29 Oct 2026 20:26:06 GMT ConductorOne adds role mining suggestions that surface groups worth analyzing and automate membership enrollment for new roles.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • ConductorOne now surfaces role mining suggestions showing each group's size, shared entitlements, and confidence score based on attributes such as department, job title, or manager, so analysts have a starting point instead of a blank filter bar.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Selecting a suggestion opens the analysis page with the group's filters pre-filled, letting reviewers filter by user attribute or by access held and limit the scope to specific apps. • Turn on membership automation for a role so users who match the group's filters — including new hires — receive the role's access automatically. • Any earlier role mining analysis can be resumed from the start page. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes https://www.c1.ai/docs/product/release-notes Thu, 29 Oct 2026 07:55:02 GMT ConductorOne adds a user-scoped review type, three access profile types, and a new Browse page for requestable access⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Start access review campaigns scoped to specific people — by user list, selection criteria, or CEL expression — using the new 'By users' review scope type, which also works on campaign templates to trigger reviews when a user changes roles or leaves.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Access profiles now come in three types: 'Catalog' (self-service requestable), 'Role' (automatic all-or-nothing grants with explicit membership), and 'Hybrid' (the previous behavior — requestable or condition-based); all existing profiles become Hybrid automatically. • A new Browse page consolidates everything a user can request in one place, with a dedicated AI tools tab, while the Requests page now holds only task queues. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#campaign-scope-by-users https://www.c1.ai/docs/product/release-notes#campaign-scope-by-users Fri, 23 Oct 2026 21:33:06 GMT ConductorOne adds a 'By users' review scope so campaigns start from people, not entitlements.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a new 'By users' review scope type to access review campaigns, letting reviewers target specific users, user criteria, or a CEL expression instead of selecting individual apps and entitlements.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports excluding entitlements and narrowing which accounts and grants are in scope within a 'By users' campaign. • Extends 'By users' scope to campaign templates, enabling automations to trigger a review of a user's current access on role change or departure. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#browse-page https://www.c1.ai/docs/product/release-notes#browse-page Wed, 21 Oct 2026 22:24:27 GMT ConductorOne adds a dedicated Browse page with tabs for Apps, Profiles, AI tools, and Actions — centralising all requestable access in one place.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Moves app accounts to `My resources > Accounts`, out of the Requests page.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Refocuses the Requests page to task queues only: `Assigned to me`, `My requests`, and `Temporary`, opening by default on `Assigned to me`. • Managers can still browse on behalf of another user via the existing `Manage` view. Breaking changes: • Requestable access (previously on the Requests page) has moved to the new Browse page; existing bookmarks and links to the old Requests tabs are redirected automatically. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#access-profile-types https://www.c1.ai/docs/product/release-notes#access-profile-types Tue, 20 Oct 2026 21:05:28 GMT ConductorOne access profiles now come in three distinct types: Catalog, Role, and Hybrid, each with purpose-built access behaviour.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces 'Catalog' access profile type: a collection of entitlements users can self-service request from the catalog.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces 'Role' access profile type: grants entitlements automatically based on a membership condition, with membership that can be granted, revoked, and requested like other entitlements — access is all-or-nothing with no piecemeal grants. • Introduces 'Hybrid' access profile type: the original C1 behaviour — entitlements requestable or auto-granted on a condition — now explicitly named; all existing profiles migrate to this type automatically. • Prompts users to choose a profile type on creation and allows changing the type later from the profile's details page. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes https://www.c1.ai/docs/product/release-notes Tue, 20 Oct 2026 07:55:09 GMT ConductorOne adds AI-driven finding remediation, custom campaign selectors, local policies, Slack-native C1AI, and a new secure secrets-sharing feature.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `DELETE /api/v1/apps/{app_id}/resource_types/{resource_type_id}/resources/{id}` now returns an error for connector-synced resources and exposes a read-only `isManuallyManaged` field on app resources returned by the API.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds batch `Add template entitlements` and `Remove template entitlements` API calls, each accepting up to 200 entitlements, so campaign template selections can be built incrementally without overwriting earlier choices. • Adds a `Remediate with AI` button on findings that opens `C1AI` with the finding's type and target pre-filled and follows a built-in remediation playbook for unowned service accounts, non-human identities, shadow apps, and connector sync failures, plus a new Findings tab on application detail pages listing open and in-progress findings with target, assignee, and filters for severity, type, and assignee. • Adds C1AI as an assignable workflow step in request and review policies, letting the agent evaluate each request using C1's built-in guidance plus custom instructions. • Adds secure secrets-sharing directly from C1: content is encrypted in-browser before upload, recipients authenticate via SSO or a one-time magic link, and administrators can view metadata and audit logs for all secrets across the tenant. • Adds C1AI assistant natively in Slack with rich interactive responses — buttons, forms, and pickers — so users can complete tasks without leaving the conversation. • Adds custom selectors for campaign scoping that filter by app, resource type, risk level, and compliance framework, automatically pulling in newly matching entitlements when a campaign is prepared. • Adds shadow apps as triageable findings, enabling assign, snooze, suppress, accept risk, reopen, and 'Remediate with AI' actions from the Shadow apps page. • Adds local policies that can be created directly from the policy menu on an app or entitlement and remain bound to that single app or entitlement, outside the global policy library. • Adds optional character-limit setting on `Text` and `Text area` fields in request forms, preventing submission of values that exceed the limit. Breaking changes: • `DELETE /api/v1/apps/{app_id}/resource_types/{resource_type_id}/resources/{id}` now returns an error when called on connector-synced resources; previously it deleted them and they reappeared on the next sync. Any automation that depended on this deletion succeeding must be updated. • Access request links (including older auto-submit links from Copilot or Jira) no longer submit requests automatically — they now only prefill the form. Jira templates, runbooks, or automations that expected a link to create a request must be updated to expect an explicit user submit. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#october-16-2026 https://www.c1.ai/docs/product/release-notes#october-16-2026 Sat, 17 Oct 2026 00:42:17 GMT ConductorOne adds AI-guided finding remediation, custom campaign scoping, local approval policies, and batch API for campaign templates.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Add template entitlements` and `Remove template entitlements` API calls, each accepting up to 200 entitlements per call, to build or trim campaign template selections in batches without overwriting earlier choices, and introduces custom selectors for access review campaign scoping — filtering by app, resource type, risk level, and compliance framework — so new matching entitlements are pulled in automatically when a campaign is prepared.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • The `DELETE /api/v1/apps/{app_id}/resource_types/{resource_type_id}/resources/{id}` endpoint now returns an error for connector-synced resources instead of silently deleting them, and app resources returned by the API now include a read-only `isManuallyManaged` field. • Adds 'Remediate with AI' on findings, opening C1AI with the finding's type and target pre-filled and following built-in playbooks for unowned service accounts, non-human identities, shadow apps, and connector sync failures. • Shadow apps are now surfaced as findings, enabling assign, snooze, suppress, accept-risk, reopen, and 'Remediate with AI' actions on discovered apps. • Adds a Findings tab to application detail pages, listing open and in-progress findings with target, assignee, and filters for severity, type, and assignee. • Enables creation of local approval policies scoped to a single app or entitlement directly from the policy menu, keeping them out of the global policy library. • Adds optional character-limit settings to Text and Text area fields in request forms, preventing submission of over-length answers. • The validate-scope report's 'User grants' sheet now includes the review policy, first approval step type, and expected reviewers for each review task. • Approvers now see custom form responses, including clickable links such as Jira tickets, directly in Slack and Microsoft Teams notifications. • Reviewers can open entitlement or resource details in a drawer from within an access review table without leaving the review. Breaking changes: • `DELETE /api/v1/apps/{app_id}/resource_types/{resource_type_id}/resources/{id}` now returns an error when called on connector-synced resources; previously it deleted them and they reappeared on the next sync. • One-click access request links (such as those from Copilot or Jira) no longer submit requests automatically — they now only prefill the form, requiring an explicit user submit. Jira templates, runbooks, or automations that expected auto-submit behaviour must be updated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#october-2-2026 https://www.c1.ai/docs/product/release-notes#october-2-2026 Mon, 05 Oct 2026 18:18:10 GMT ConductorOne adds shadow app findings, public API endpoints for attribute mappings and scope-role bindings, and c1i v0.8.0 with seven new command groups.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `GET /api/v1/catalogs/{catalog_id}/scope_role_bindings` to the public API to read access profile scope-role bindings.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds full CRUD + list for user attribute mappings to the public API, including Terraform generation metadata. • Adds `mcp classifiers` command group to c1i v0.8.0 for MCP gateway AI governance. • Adds `access-reviews` command group to c1i v0.8.0 for managing campaigns and reports. • Adds `findings` command group to c1i v0.8.0 for public security findings and their governance rules. • Adds `role-mining` command group to c1i v0.8.0 covering analysis through access-profile creation. • Adds `entitlements proxy-bindings` command group to c1i v0.8.0. • Adds `service-principals` (alias `sp`) command group to c1i v0.8.0 for managing tenant-owned non-human identities end to end. • Extends `access-profiles` in c1i v0.8.0 with full request-catalog lifecycle management — updating or soft-deleting a profile and managing its requestable and visibility entitlements and bundle automation. • Introduces shadow app findings, surfacing unsanctioned apps and cloud services employees sign into with company credentials; Application Administrators can view and search all findings tenant-wide and can turn detection off. • Adds `GetDelegates` and `HasDelegate` CEL functions so approval policies can route requests to a user's delegate or fall back to the skip-level manager when no delegate is set. • Adds a search box on the Findings page that matches any substring in the Target or App columns, persists in the URL for shareable filtered views, and is respected by bulk 'select all matching' actions. • Promotes Access Request Administrators' owned access profiles to the My Resources page with adjustable columns. • Adds timezone and start-time configuration to campaign templates so scheduled campaigns no longer always begin at 8 AM Pacific. Breaking changes: • In the Grants and Standing Privileges CSV exports, the `AccountUserName` column now reports the account username instead of display name, and a new `AccountDisplayName` column was inserted before it — any consumer reading either export by column position rather than header name must account for this one-column shift. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.conductorone.com/docs/product/release-notes/ https://www.conductorone.com/docs/product/release-notes/ Sat, 26 Sep 2026 07:48:41 GMT ConductorOne: Removes `GET /api/v1/tasks/{task_id}/spend-remedy-status`; JS/TS clients must handle spend-control revision values as strings and handle new `TYPE_SPEND_REMEDY = 7` task action type. • Renders entitlement request forms directly in the Slack modal when requesting or extending access through the C1 app for Slack. • Groups now display member count at the top of the group detail page. Breaking changes: • A revoke criteria scoped only by a legacy resource-type name now fails the step instead of silently matching every app sharing that name — re-scope any automation still relying on name-only matching. • `DELETE /api/v1/secrets/{vault_id}` now deletes only the secret and no longer also revokes its credential; use the new `POST /api/v1/app-secrets-admin/revoke` to queue a credential revoke separately. Service SDK methods named Revoke are renamed to Delete. • `GET /api/v1/tasks/{task_id}/spend-remedy-status` has been removed — migrate to the task APIs. JS/TS clients must handle spend-control revision values as strings, and integrations with a closed list of task action types must handle the new `TYPE_SPEND_REMEDY = 7` value. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.conductorone.com/docs/product/release-notes/ https://www.conductorone.com/docs/product/release-notes/ Fri, 25 Sep 2026 07:51:44 GMT ConductorOne adds EU data residency, AI task diagnostics, public REST API for AI governance, and new MCP Terraform resources alongside breaking API changes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `POST /api/v1/app-secrets-admin/revoke` to queue a credential revoke separately from secret deletion, after `DELETE /api/v1/secrets/{vault_id}` is scoped to delete-only.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Exposes classifiers, tool gates, classifier bindings, templates, and the agent classifier policy through the public REST API for AI governance management. • Adds Terraform resources for hosted and external MCP sources, covering details, authentication, and tool enablement policy via C1's Terraform provider. • Introduces an EU data residency instance with region-scoped login, redirect URIs, API and webhook endpoints, MCP server, and CLI configuration — selected at domain registration. • Adds a `Set assignee` step to Transformation rules so findings can be auto-assigned to a specific person (manual assignment takes precedence). • Adds `Platform > Reporting` page where saved C1AI reports can be refreshed, edited with the Report assistant, or inspected for data sources. • MCP access now requires an explicit toolset grant on the server — app membership or admin role alone no longer implies access. • Adds a `Change history` icon to connectors, policies, entitlement routing rules, SSO and branding settings, and AI Gateway spend controls, showing a before-and-after timeline per field. • Connectors can now require a justification whenever their configuration changes, captured alongside change history. • Super Admins can now ask C1AI to diagnose a stuck, failed, or waiting task, tracing approvals, provisioning, access-profile origin, and connector handoff. • Access-review revoke tasks now automatically include the reviewer's justification in ticketing system output, with new template variables available for custom templates. • Adds Apps and Entitlements tabs to the `My resources` page alongside existing groups, vaults, credential stores, and secrets. • Registered MCP integrations — catalog and external — now share a single guided setup flow for connection, access, tool approval, and authentication. • Campaigns can now include users with pending account invitations instead of silently dropping them. • Customer agents connected to the C1 MCP endpoint can now discover and converse with c1aw agents, with admin session management. • Conflict monitors now support groups of very different sizes (e.g., 90 and 11) as long as the total stays under 1024. • Request forms configured on entitlements now render and submit directly in the Slack modal for the C1 app for Slack. • Adds a Resource description column to access-review tables, showing custom descriptions or connector-synced metadata as a fallback. • Introduces `TYPE_SPEND_REMEDY = 7` as a new task action type value in the task APIs. Breaking changes: • A revoke criteria scoped only by a legacy resource-type name now fails the automation step closed instead of silently matching every app sharing that name — re-scope any automation still relying on name-only matching. • `DELETE /api/v1/secrets/{vault_id}` now deletes only the secret and no longer also revokes its credential; use the new `POST /api/v1/app-secrets-admin/revoke` to queue a credential revoke separately. Service SDKs rename Revoke to Delete to match. • `GET /api/v1/tasks/{task_id}/spend-remedy-status` has been removed — migrate to the task APIs. JS/TS clients must handle spend-control revision values as strings, and integrations with a closed list of task action types must handle the new `TYPE_SPEND_REMEDY = 7`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.conductorone.com/docs/product/release-notes/ https://www.conductorone.com/docs/product/release-notes/ Thu, 24 Sep 2026 07:52:23 GMT ConductorOne: Adds a single guided setup flow for creating apps and adding connectors. • Adds searchable step and trigger-type search by name or description in the automation builder. • Adds faceted, searchable resource-type pickers with real counts to Grant Found, Grant Deleted, and revoke criteria. Breaking changes: • A revoke criteria scoped only by a legacy resource-type name now fails closed (fails the step) instead of silently matching every app sharing that name — re-scope any automation still relying on name-only matching. • `DELETE /api/v1/secrets/{vault_id}` now deletes only the secret and no longer also revokes its credential; use the new `POST /api/v1/app-secrets-admin/revoke` to queue a credential revoke separately. Service SDK `Revoke` method is renamed to `Delete`. • `GET /api/v1/tasks/{task_id}/spend-remedy-status` has been removed — migrate to the task APIs. JS/TS clients must handle spend-control revision values as strings, and integrations with a closed list of task action types must handle the new `TYPE_SPEND_REMEDY = 7`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.conductorone.com/docs/product/release-notes/ https://www.conductorone.com/docs/product/release-notes/ Wed, 23 Sep 2026 07:43:59 GMT Breaking changes: • A revoke criteria scoped only by a legacy resource-type name now fails closed (the step fails) instead of silently matching every app sharing that name — re-scope any automation still relying on name-only matching. • `DELETE /api/v1/secrets/{vault_id}` now deletes only the secret and no longer also revokes its credential; use the new `POST /api/v1/app-secrets-admin/revoke` to queue a credential revoke separately. Service SDKs rename `Revoke` to `Delete` to match. • `GET /api/v1/tasks/{task_id}/spend-remedy-status` has been removed — migrate to the task APIs. JS/TS clients must handle spend-control revision values as strings, and integrations with a closed list of task action types must handle the new `TYPE_SPEND_REMEDY = 7`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.conductorone.com/docs/product/release-notes/ https://www.conductorone.com/docs/product/release-notes/ Tue, 22 Sep 2026 07:44:58 GMT ConductorOne adds EU data residency, saveable AI reports, REST API for AI governance, MCP Terraform support, and a `POST /api/v1/app-secrets-admin/revoke` credential-revoke endpoint.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `POST /api/v1/app-secrets-admin/revoke` endpoint to queue credential revokes separately from secret deletion, replacing the previous combined behavior of `DELETE /api/v1/secrets/{vault_id}`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Exposes classifiers, tool gates, classifier bindings, templates, and the agent classifier policy through the public REST API for AI governance management. • Introduces `TYPE_SPEND_REMEDY = 7` as a new task action type; JS/TS clients must handle spend-control revision values as strings. • Adds Terraform resources for managing hosted and external MCP sources — including details, authentication, and tool enablement policy — as code via C1's Terraform provider. • Launches EU data residency instance, selectable at domain registration, affecting all tenant-specific URLs including login, redirect URIs, API and webhook endpoints, MCP server, and CLI configuration. • Adds `Save report` action and a `Platform > Reporting` page where saved C1AI reports can be named, described, refreshed, and edited with the `Report assistant`. • Enables Super Admins to ask C1AI to diagnose a stuck, failed, or waiting task — tracing approvals, provisioning, access-profile origin, and connector handoff. • Adds a `Change history` icon to configuration object detail pages (connectors, policies, entitlement routing rules, SSO, branding settings, AI Gateway spend controls) showing a before-and-after timeline of every change. • Adds optional justification requirement for connector configuration changes, captured alongside change history. • Adds a `Set assignee` step to Transformation rules for automatically assigning a finding to a specific person. • Adds Apps and Entitlements tabs to the `My resources` page, consolidating groups, vaults, credential stores, secrets, apps, and entitlements in one view. • Adds agent-to-agent discovery: customer agents connected to a C1 MCP endpoint can now discover and converse with c1aw agents. • Changes MCP access control to require an explicit toolset grant on the MCP server — app membership or admin role alone no longer implies access. • Unifies registered MCP integrations (catalog and external) into a single guided setup flow covering connection, access, tool approval, and authentication. • Renders entitlement request forms inline in the Slack modal when requesting or extending access via the C1 app for Slack. • Includes access-review revoke-task reviewer denial reasons in ticketing system templates automatically, with new template variables available for custom templates. • Expands campaign scope to include users with pending (unaccepted) account invitations. • Allows conflict monitors to handle groups of very different sizes (e.g., 90 and 11) as long as the combined total stays under 1,024 members. • Adds a `Resource description` column to access-review tables, showing custom descriptions or connector-synced metadata as a fallback. Breaking changes: • `DELETE /api/v1/secrets/{vault_id}` now deletes only the secret and no longer revokes its credential — use the new `POST /api/v1/app-secrets-admin/revoke` to queue a credential revoke separately. Service SDKs rename Revoke to Delete to match. • `GET /api/v1/tasks/{task_id}/spend-remedy-status` has been removed — migrate to the task APIs. JS/TS clients must handle spend-control revision values as strings, and integrations with a closed list of task action types must handle the new `TYPE_SPEND_REMEDY = 7`. • A revoke criteria scoped only by a legacy resource-type name now fails the step instead of silently matching every app sharing that name — re-scope any automation still relying on name-only matching. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#september-18-2026 https://www.c1.ai/docs/product/release-notes#september-18-2026 Fri, 18 Sep 2026 23:56:22 GMT ConductorOne adds C1AI task diagnostics, finding assignment, MCP Terraform resources, and a public REST API for AI governance⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `POST /api/v1/app-secrets-admin/revoke` endpoint to queue a credential revoke separately from secret deletion.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Exposes classifiers, tool gates, classifier bindings, templates, and the agent classifier policy through the public REST API for AI governance management. • Adds Terraform resources for hosted and external MCP sources, covering details, authentication, and tool enablement policy. • Adds a `Set assignee` step in Transformation rules to automatically assign a finding to a specific person. • Super Admins can now ask C1AI to diagnose a specific stuck, failed, or waiting task, tracing approval history, provisioning logs, access-profile origin, and connector handoff. • Adds Apps and Entitlements tabs to the 'My resources' page, consolidating groups, vaults, credential stores, secrets, apps, and entitlements — including secrets shared with you — in one view. • Adds a single guided setup flow for creating apps and adding connectors, replacing the multi-page form. • Admins can now require a justification whenever a connector's configuration changes, with a secret-safe configuration history. • Customer agents connected to your C1 MCP endpoint can now discover and converse with c1aw agents, with admin-managed sessions. • MCP access now requires an explicit grant on a server's toolset — app membership or admin role alone no longer implies access. • Registered MCP integrations (catalog and external) now share a single guided setup flow for connection, access, tool approval, and authentication. • Access-review revoke tasks now automatically include the reviewer's denial justification, surfacing it in ticketing-system templates via new template variables. • Campaigns can now include users with pending (unaccepted) account invitations in their scope. • Conflict monitors can now handle groups of very different sizes as long as the total stays under 1,024 members. • Reviewers can now see a 'Resource description' column in review tables, showing custom descriptions or connector-synced metadata. • Resource-type filters in Grant Found, Grant Deleted, and revoke criteria now use a faceted, searchable picker with real counts and name disambiguation. • Automation builders can now search available steps and trigger types by name or description. Breaking changes: • A revoke criteria scoped only by a legacy resource-type name now fails the step instead of silently matching every app sharing that name — re-scope any automation relying on name-only matching. • `DELETE /api/v1/secrets/{vault_id}` now deletes only the secret and no longer revokes its credential; use the new `POST /api/v1/app-secrets-admin/revoke` to queue a credential revoke separately. Service SDKs rename `Revoke` to `Delete` to match. • `GET /api/v1/tasks/{task_id}/spend-remedy-status` has been removed — migrate to the task APIs. JS/TS clients must handle spend-control revision values as strings, and integrations with a closed list of task action types must handle the new `TYPE_SPEND_REMEDY = 7`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#eu-instance https://www.c1.ai/docs/product/release-notes#eu-instance Mon, 14 Sep 2026 16:41:25 GMT ConductorOne adds an EU data residency instance with region-specific URLs for login, API, webhooks, MCP, and CLI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Microsoft Teams as a notification and interaction surface is not yet supported on the EU data residency instance.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.conductorone.com/docs/product/release-notes/ https://www.conductorone.com/docs/product/release-notes/ Mon, 14 Sep 2026 07:43:30 GMT ConductorOne: Adds per-section overview dashboards across all major admin nav sections, replacing what previously lived in the single Product digest view. Breaking changes: • Automation expressions that reference the bare workflow context, or pass it directly to a function, no longer compile — expressions must name the step and field directly. Any automation using an indirect-reference expression will fail to save on next edit until rewritten to a static path. • The 'Owner' column, filter, detail field, API field, and audit-log event names on Findings are renamed to 'Assignee' — integrations consuming the Finding object via API, webhook, or SIEM audit log must update to the new field and event names. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.conductorone.com/docs/product/release-notes/ https://www.conductorone.com/docs/product/release-notes/ Sun, 13 Sep 2026 07:42:34 GMT ConductorOne adds agent classifiers, four session-policy API endpoints, MCP resource governance, and new system log event classes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds agent classifiers that evaluate private-data sensitivity, untrusted-content exposure, and exfiltration capability at call time, routing matches to a hook, human approval, or outright block — with an Observe mode that logs what a rule would catch before it can deny anything. • Adds bulk and individual reprocessing of findings against current transformation and routing rules, with the option to keep or reset manual changes. • Adds a configurable bulk request limit (1–100, default 10) for the maximum number of entitlements a user can request at once, set from `Governance > Forms`. • Adds entitlement binding support within the same app (e.g. Salesforce Admin -> Salesforce Editor) via the entitlement binding picker. • SSO applications now honor OIDC silent and fresh authentication requests, and SAML passive requests, returning an error instead of silently reusing a session when a request cannot be completed safely. • Adds a guided step-by-step flow for registering MCP servers, covering server identity, hosting location, URL, access policy, tool discovery defaults, and authentication. • Duration limits are now shown up front in access request forms, suppressing the 'Indefinite' option when a max is set and auto-adjusting invalid existing durations. • Access request flows now surface account suspension status for the target user or the holder of already-granted access. • Revokes on connectors that cannot deprovision a given entitlement now route to manual deprovisioning instead of closing the task as 'Revoked' while leaving the source unchanged. • The app details page 'Edit owners' picker adds an 'All users / Owners' toggle so admins can see and manage the full owner list, including suspended or filtered-out users. • External Slack accounts (including Slack Connect members) can no longer be linked to a C1 user account by email match; notifications for affected users are skipped with a warning rather than silently bound. Breaking changes: • Automation expressions that reference the bare workflow context, or pass it to a function, no longer compile — expressions must name the step and field directly. Existing running automations are unaffected until next saved, at which point indirect-reference expressions must be rewritten to a static path before saving. • The 'Owner' column, filter, and detail field on findings are renamed 'Assignee'. API consumers, webhook consumers, and SIEM integrations reading the Finding object or audit log must update to the new field and event names. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.conductorone.com/docs/product/release-notes/ https://www.conductorone.com/docs/product/release-notes/ Sat, 12 Sep 2026 07:43:17 GMT ConductorOne: Adds four new read-only API endpoints to preview which session policy applies to a given user (by direct assignment, group membership, or tenant default) and list every user a policy applies to — direct and group-conferred, with the conferring group named.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `groups[]` field and `correlation_uid` to system log events, plus four new Identity & Access event classes: Account Change, Entity Management, User Access Management, and Group Management; machine identities now reported as 'Service' account type. • Adds Agent Classifiers to evaluate AI agent risk at call time — writing rules over private-data sensitivity, untrusted-content exposure, and exfiltration capability, then routing matches to a hook, human approval, or block; includes Observe mode to log what a rule would catch before enforcement. • Admins can now set a custom bulk request entitlement limit (1–100, default 10) from Governance > Forms. • Registering a new desktop device now auto-creates a full-access API credential displayed on the success screen. • MCP server registration now uses a guided step-by-step flow covering server identity, hosting location, URL, access controls, tool discovery behavior, and authentication. • Adds a Resources tab for MCP servers where admins can review and approve static resources and URI templates discovered by C1; each approved resource gets its own read entitlement governed separately from tool and toolset access. • Adds a 'Connector sync failing' finding type that triggers after two consecutive failed full syncs and auto-resolves on the next successful sync; can be disabled per tenant. • Entitlement binding picker now includes entitlements from the same app, enabling same-app bindings (e.g. Salesforce Admin -> Salesforce Editor). • Access-request flows now display the entitlement's duration limit up front and flag when the target user or holder of already-granted access is suspended. • Provisioning steps on an entitlement can now be reordered in place (moved up or down directly) without removing and re-adding them. • Role mining gains a shared-access threshold setting, pre-action entitlement list fine-tuning, and optional routing of automatic profile enrollments through an access request task for approval. Breaking changes: • Automation expressions that reference the bare workflow context, or pass it directly to a function, no longer compile — each expression must name the step and field directly. Automations already running are unaffected until next edited and saved, at which point indirect-reference expressions must be rewritten to a static path. • The 'Owner' column, filter, and detail field on Findings are renamed to 'Assignee' in the UI, API, webhooks, and audit log — consumers of the Finding object via API, webhook, or SIEM integrations must update field and event-name references accordingly. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.conductorone.com/docs/product/release-notes/ https://www.conductorone.com/docs/product/release-notes/ Fri, 11 Sep 2026 07:38:46 GMT ConductorOne adds agent classifiers, four session-policy API endpoints, system log event classes, and bulk request limits in this release.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds four read-only API endpoints to preview which session policy applies to a given user and why (direct assignment, group membership, or tenant default), and to list every user a policy covers — direct and group-conferred, with the conferring group named.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Admins can now set a max number of entitlements a user can request at once in bulk (1–100, default 10) from `Governance > Forms`. • Adds a `Resources` tab in MCP server management where admins can approve static resources and URI templates discovered on a server; each approved resource gets its own read entitlement governed separately from tool and toolset access. • SSO applications now honor OIDC requests for silent or fresh authentication and SAML passive requests; unsafe requests return an error instead of silently reusing an existing session. • Every admin nav section (except one) now has its own dashboard page breaking apart what previously lived in a single Product digest view. Breaking changes: • Automation expressions that reference the bare workflow context, or pass it to a function, no longer compile — expressions must name the step and field directly. Any automation using an indirect reference will need to be rewritten to a static path before it can be saved again. • The `Owner` column, filter, detail field, and corresponding API and webhook field on findings are renamed to `Assignee` — consumers of the Finding object via API, webhook, or audit log (e.g. a SIEM) must update field and event-name references. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.conductorone.com/docs/product/release-notes/ https://www.conductorone.com/docs/product/release-notes/ Thu, 10 Sep 2026 10:38:44 GMT ConductorOne adds agent classifiers, MCP resource governance, new system log event classes, and four session-policy API endpoints.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a bulk request limit setting in `Governance > Forms` letting admins cap the number of entitlements a user can request at once (1–100, default 10). • Adds a dedicated tab for MCP static resources and URI templates discovered on a server, where admins can approve them; each approved resource gets its own read entitlement governed separately from tool and toolset access. • Adds per-section dashboard pages that break apart what previously lived in the single Product digest view. • Adds `Graph` explorer to the reorganized admin navigation. • Supports OIDC silent and fresh authentication requests and SAML passive requests in SSO applications, returning an error instead of silently reusing a session when a request cannot be completed safely. • Adds a guided one-question-at-a-time flow for connecting MCP servers, covering server identity, hosting, URL, access policy, tool discovery behavior, and authentication. • Allows entitlement binding within the same app (e.g. Salesforce Admin → Salesforce Editor) via an updated binding picker. • Adds role mining improvements: configurable shared-access threshold, pre-action entitlement list refinement, and optional access request task routing for automatic profile enrollments. • Findings can now be reprocessed individually, in bulk, or from a finding's detail view against current transformation and routing rules, with the option to keep or reset manual changes. • Same-app entitlement bindings are now possible through an updated picker that shows other entitlements from the same app. • Revokes on connectors that cannot deprovision a given entitlement now route to manual deprovisioning instead of closing as 'Revoked' with no source change. Breaking changes: • Automation expressions consisting of the bare workflow context, or that pass it to a function, no longer compile — expressions must reference the step and field directly. Existing running automations are unaffected until next edited and saved, at which point indirect-reference expressions must be rewritten to a static path. • The 'Owner' column, filter, detail field, and corresponding API/webhook field and audit-log event names on findings are renamed to 'Assignee'. Consumers of the Finding object via API, webhook, or SIEM audit log must update to the new field and event names. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#updated-navigation https://www.c1.ai/docs/product/release-notes#updated-navigation Thu, 10 Sep 2026 00:45:00 GMT ConductorOne reorganizes admin nav and adds per-section Overview dashboards across all major areas.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a new `Platform` section housing `Policies`, `Forms`, `Task log`, and `Integrations` (excluding `Connectors`).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a per-section Overview dashboard for every nav section except `Apps`, replacing the single Analytics page. • Moves `Connectors` into the `Apps` section to co-locate it with app governance. • Moves `Automations` into the `Governance` section alongside onboarding and offboarding flows. • Renames the `Directory` nav section to `Identities`. • Renames the `Identity security` nav section to `Security`, which now also houses `Decoys` and the `Graph explorer`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.conductorone.com/docs/product/release-notes/ https://www.conductorone.com/docs/product/release-notes/ Wed, 09 Sep 2026 14:52:27 GMT ConductorOne adds agent classifiers, four new session-policy API endpoints, MCP resource governance, and four new system-log event classes. • Adds four new read-only API endpoints to preview which session policy applies to a given user (by direct assignment, group membership, or tenant default) and list every user a policy covers — including the conferring group. • Adds `groups[]` field and `correlation_uid` to system log events, plus four new Identity & Access event classes: Account Change, Entity Management, User Access Management, and Group Management. • Adds agent classifiers that evaluate private-data sensitivity, untrusted-content exposure, and exfiltration capability at MCP tool-call time, routing matches to a hook, human approval, or block. • Adds Observe mode for agent classifiers, which logs what a rule would have caught before it can deny anything. • Adds a new tab in MCP server management where admins can approve discovered static resources and URI templates, with each approved resource receiving its own read entitlement. • Admins can now set a tenant-wide bulk request limit (1–100, default 10) from `Governance > Forms`. • Adds a 'Connector sync failing' finding type that fires after two consecutive failed full syncs and auto-resolves on the next successful sync. • Reprocessing findings against current transformation/routing rules is now available individually, in bulk, or from a finding's detail view, with the option to keep or reset manual changes. • Entitlement binding picker now shows other entitlements from the same app, enabling same-app bindings (e.g. Salesforce Admin → Salesforce Editor). • Registering a new desktop device now auto-creates a full-access API credential shown on the success screen. • Adds a guided step-by-step flow for connecting MCP servers, replacing the previous single multi-step form. • Improved role mining experience adds a shared-access threshold control, entitlement list fine-tuning before acting, and optional routing of automatic profile enrollments through an access request task. • Access-request flows now flag when the target user — or the holder of 'already granted' access — is suspended. • Provisioning steps on an entitlement can now be reordered in place (moved up or down) without removing and re-adding them. • SSO applications now honor OIDC requests for silent or fresh authentication and SAML passive requests, returning an error instead of silently reusing a session when a request cannot be completed safely. • The 'Edit owners' picker on an app's details page now includes an 'All users / Owners' toggle so admins can see and manage the complete owner list, including suspended users. • Duration limits for entitlements are now displayed up front in request forms; 'Indefinite' is hidden when a max is set and invalid existing durations are auto-adjusted. Breaking changes: • Automation expressions that reference the bare workflow context — or pass it to a function — no longer compile; each expression must name the step and field directly. Existing running automations are unaffected until next edited and saved, at which point indirect-reference expressions must be rewritten to a static path. • The 'Owner' column, filter, and detail field on findings are renamed to 'Assignee'. API or webhook consumers of the Finding object and audit-log/SIEM pipelines must update to the new field and event names. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#september-4-2026 https://www.c1.ai/docs/product/release-notes#september-4-2026 Thu, 03 Sep 2026 23:01:45 GMT ConductorOne adds AI agent classifiers with Observe mode, MCP resource governance, reprocessable findings, and four new system log event classes. • Adds `correlation_uid` field to system log events linking paired events produced by a privilege change, plus a `groups[]` field listing each actor's platform roles at the time of the event. • Adds four new system log Identity & Access event classes: Account Change, Entity Management, User Access Management, and Group Management. • Adds four new read-only API endpoints to preview which session policy applies to a given user and why (direct assignment, group membership, or tenant default), and to list every user a policy covers — direct and group-conferred — with the conferring group named. • Introduces Agent classifiers for AI access profiles: write rules over private-data sensitivity, untrusted-content exposure, and exfiltration capability, then route matches to a hook, human approval, or a block. • Adds Observe mode for agent classifiers, which logs what a rule would have caught before it can deny anything — safe rollout before enforcement. • New Resources tab in MCP server management where admins can approve static resources and URI templates discovered on a server; each approved resource gets its own read entitlement governed separately from tool and toolset access. • Adds guided step-by-step flow for registering an MCP server (server identity, hosting, URL, access policy, tool discovery behavior, authentication) replacing a single multi-step form. • Adds bulk request limit configuration under Governance > Forms — admins can set the max number of entitlements a user can request at once in bulk (range 1–100, default 10). • Findings can now be reprocessed against current transformation and routing rules — individually, in bulk, or from a finding's detail view — with the option to keep or reset manual changes. • New 'Connector sync failing' finding type raised after two consecutive failed full syncs on a connector; auto-resolves on the next successful sync and can be disabled per tenant. • Registering a new desktop device now auto-creates a full-access API credential displayed on the success screen. • Role mining adds a shared-access threshold control to focus results on entitlements a cohort actually has in common, plus optional routing of automatic profile enrollments through an access request task for approval. • Access request forms now display an entitlement's duration limit up front — 'Indefinite' is hidden when a max is set, and invalid existing durations are auto-adjusted. • Access request flows now flag when the target user or holder of 'already granted' access is suspended. • Entitlement binding picker now shows entitlements from the same app, enabling same-app bindings (e.g. Salesforce Admin -> Salesforce Editor). • Provisioning steps on an entitlement can now be reordered in place (move up/down) without removing and re-adding them. • Machine identities (connectors, tunnels, functions) are now reported in system log events with the standard 'Service' account type instead of 'Other'. • SSO applications now honor OIDC requests for silent or fresh authentication and SAML passive requests; a request that cannot be completed safely returns an error instead of silently reusing an existing session. • App details page 'Edit owners' picker adds an 'All users / Owners' toggle so admins can see and manage the complete owner list including suspended or filtered-out users. • The 'Access profile enrollments' chart on the AI & MCP analytics tab now counts only enrollments in profiles that include at least one MCP tool or toolset. • External Slack accounts (including Slack Connect members) can no longer be linked to a C1 user account by email match; affected users have notifications skipped with a warning instead. Breaking changes: • Automation expressions that consist of the bare workflow context, or that pass it to a function, no longer compile — expressions must reference the step and field directly. Already-running automations are unaffected until next edited and saved, at which point indirect-reference expressions must be rewritten to a static path before saving. • The 'Owner' column, filter, and detail field on the Finding object (API, webhook, and audit log) are renamed to 'Assignee' — consumers feeding findings via API, webhook, or a SIEM must update field and event-name references. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.conductorone.com/docs/product/release-notes/ https://www.conductorone.com/docs/product/release-notes/ Wed, 26 Aug 2026 09:09:16 GMT ConductorOne adds smart revocation chains, Copilot Studio/Gemini MCP integrations, push-rule execution history, and c1i v0.5.0 with new CLI commands. • Adds `--server-url` flag on `mcp servers register`, `mcp servers test-connection`, and `mcp servers update-credentials` commands in `c1i`, replacing the previous `--url` flag on those subcommands so the global `--url` can now correctly select the C1 tenant. • Adds `apps create`, `apps delete`, and `apps set-owners` subcommands to `c1i` v0.5.0, rounding out app-management API coverage from the CLI. • Adds `auth token` subcommand to `c1i` v0.5.0. • Adds `mcp gateway list-tools` and `mcp gateway call` subcommands to `c1i` v0.5.0. • Adds `policies` command family to `c1i` v0.5.0, guarding against a silent deny-all default. • New public API endpoints to list connector-discovered applications and their managed state, and to promote an unmanaged application to managed (returning HTTP 409 on a repeat promotion with the managed application ID readable from the binding). • Each record returned by the public API's past-grants search now includes a unique `id` field, making individual grant history entries directly addressable. • Adds `Grant source` setting (value: `Direct`) on automation revoke steps to scope revocation to only direct grants, preventing collateral removal of group-inherited access. • New 'Revoke inherited access' per-app setting enables smart revocation that traces access to upstream sources — direct grants, nested groups, role hierarchies, delegated provisioning — before an approver commits; off by default with a downstream-effects banner shown pre-confirmation. • Push rules now record full execution history per connector: accessible via the `Push rule` page (all connectors) or 'View execution history' in a push rule's row menu (single connector), with each entry showing who was pushed, when, which attributes changed, and the target system's rejection reason on failure. • Automation circuit-breaker system-log events now include the standard OCSF time field, enabling direct SIEM ingestion without a parsing workaround. • Campaign admins can now configure up to 10 reviewer-visible app user attribute columns (job title, department, cost center, etc.) in the access review table, available once the campaign's `Default access review view` is set to something other than `None`. • MCP servers are now searchable from global search (Cmd+K) by name, with recently opened servers appearing under 'Your recent searches'. • Supports connecting Copilot Studio agents to the C1 MCP gateway, with every tool call authorized and logged under the calling user's identity and publishable to Microsoft 365 Copilot and Teams. • Supports Gemini Enterprise as a C1 MCP gateway tool source, with every tool call attributed to the individual user rather than a shared service account. • C1AI assistant can now answer access history queries — grants and revocations over a time period ordered by most recent — not just current access state. • C1AI assistant now returns the reason behind each grant (access request, group automation, catalog membership, uplift, etc.) alongside who has access. • An app's task list tab can now be filtered to show `Request` tasks, and the 'Open revocations' stat card on the app's `Overview` tab links directly to that filtered view. • Any assigned reviewer can now open a read-only entitlement/resource details drawer from within a review task without requiring additional permissions. • Pages containing role-hidden information now display a toast — 'Some information on this page is hidden based on your permissions' — instead of showing a blank field with no indication. • `c1i` v0.5.0 list commands now emit properly-typed Booleans, counts, and nullable fields instead of stringified or inconsistent JSON, and all responses map onto a single predictable exit-code scheme. Breaking changes: • `c1i` now requires a full `https://` tenant URL; the bare short-name shortcut is retired and a non-HTTPS URL is rejected instead of silently upgraded. • On `mcp servers register`, `mcp servers test-connection`, and `mcp servers update-credentials`, the external MCP server URL flag is renamed from `--url` to `--server-url`; scripts or configs passing `--url` to select the MCP server on these commands will break. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#august-21-2026 https://www.c1.ai/docs/product/release-notes#august-21-2026 Fri, 21 Aug 2026 23:57:36 GMT ConductorOne adds smart revocation chain tracing, automation grant-source scoping, policy reuse, MCP gateway integrations, and a major c1i CLI expansion. • Adds `apps create`, `apps delete`, `apps set-owners`, `auth token`, `mcp gateway list-tools`, `mcp gateway call`, and a `policies` command family to the `c1i` CLI, rounding out API coverage for agent-focused automation. • Adds `--server-url` flag to the `c1i` `mcp gateway` command, replacing the former `--url` flag, so the global `--url` flag consistently selects the C1 tenant across all commands. • New `Grant source` setting (`All` or `Direct`) on automation revoke steps lets automations scope revocations to only direct grants, avoiding collateral removal of group-inherited access. • Automation circuit-breaker system-log events now include the standard OCSF `time` field, enabling SIEM ingestion without a custom parsing workaround. • Public API can now list connector-discovered applications, inspect their managed state, and promote an unmanaged application to managed; returns `409` on a repeat promotion and exposes the binding to recover the managed application ID. • Each record returned by the public API's past-grants search now includes a unique `id` field, making individual grant history entries directly addressable. • Smart revocation traces access through direct grants, nested groups, role hierarchies, and delegated provisioning — enable `Revoke inherited access` per-app on the app details page; off by default, with a pre-commit downstream-effects banner. • Campaign admins can now display app-user attributes (job title, department, cost center) as dedicated columns in the access review table — up to 10 per campaign. • Task reviewers can open a read-only entitlement/resource details drawer directly from the task page, with no special role required. • An app's Requests tab can now be filtered to `Request` or `Revoke` tasks; the 'Open revocations' stat card on the app Overview tab links directly to that filtered view. • Policies can now be created local to a single app or entitlement, with inline creation alongside the global option on each configuration slot. • A policy rule or baseline can now reference another policy of the same type, enabling a shared approval flow (e.g. manager-then-owner chain) to be updated once and automatically reflected everywhere it is reused. • Copilot Studio agents can now call IT-approved tools through the C1 MCP gateway, with every call authorized and logged under the calling user's own identity, publishable to Microsoft 365 Copilot and Teams. • Gemini Enterprise can now call the C1 MCP gateway as a tool source, with every tool call attributed to the individual user rather than a shared service account. • MCP servers are now searchable from global search (`Cmd+K`), with recently opened servers appearing under 'Your recent searches'. • Push rule executions now appear in an execution history — accessible via `Directory sources > Executions` for all connectors or `Show execution history` in a push rule's row menu — recording who was pushed, when, which attributes changed, and the reason for any failure. • When a page contains information hidden by the user's role, C1 now displays a toast: 'Some information on this page is hidden based on your permissions.' • Task lists and access review tables now size columns to fit content and scroll horizontally instead of compressing all columns to the same width; long entitlement names truncate with an ellipsis and reveal the full name on hover. • `c1i` list commands now emit properly-typed Booleans, counts, and nullable fields instead of stringified or inconsistent JSON, and all responses map onto a single predictable exit-code scheme. Breaking changes: • `c1i` now requires a full `https://` tenant URL — bare short-name shortcuts are rejected, and a non-HTTPS URL is rejected instead of silently upgraded. • The `mcp gateway` command's `--url` flag is renamed to `--server-url`; any script passing `--url` to `mcp gateway` must be updated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#findings-and-decoys https://www.c1.ai/docs/product/release-notes#findings-and-decoys Tue, 18 Aug 2026 02:45:54 GMT ConductorOne adds Findings (automated access-risk detection) and Decoys (tripwire credentials) with triage routing and dashboard integration. • New Findings capability automatically checks every connector sync for access risks — unowned service accounts, exposed credentials, misclassified identities — without requiring manual review. • New Decoys feature lets teams plant tripwire credentials that look real but grant no access; any use attempt raises a Critical finding while showing the actor only an ordinary authentication failure. • Findings surface on the Identities & NHI dashboard, with every inventory table now filterable to identities with open findings. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.conductorone.com/docs/product/release-notes/ https://www.conductorone.com/docs/product/release-notes/ Mon, 10 Aug 2026 09:55:08 GMT • New `Identities & NHI` dashboard (under the main navigation) provides a unified, filterable, searchable, and exportable inventory of human users, service accounts, API secrets, agents, and other non-human identities across all connected apps, with credential-to-identity linking and unowned NHI flagging. • TypeScript typing and autocomplete for `@c1/functions-sdk` and `@c1/test` now available in the function editor, surfacing misspelled methods and wrong argument types at edit time rather than runtime. • Task details drawer now shows what the reviewed resource has access to inline, so reviewers no longer need to leave the task to gather context. • Notification settings updated: 'your access request was created' confirmation is now toggleable per channel (email, Slack, Teams), on by default; provisioning notifications moved under a dedicated section; always-on system notifications no longer shown as a toggle. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#august-7-2026 https://www.c1.ai/docs/product/release-notes#august-7-2026 Sat, 08 Aug 2026 00:32:31 GMT ConductorOne adds an NHI dashboard, AI campaign assistant, public API campaign reports, and date/user form fields in its August 7 release. • New `Identities & NHI` dashboard (under Identity security) provides a unified, filterable, searchable, exportable inventory of human users, service accounts, API secrets, agents, and other non-human identities across all connected apps — with credentials automatically linked to their owning identity and unlinked credentials flagged separately. • AI agents (both ConductorOne-managed and app-discovered) now appear as a first-class category in the NHI dashboard, with context on where they live. • Bulk-revoke is now available for denied reviews: select multiple denied items from a campaign's Access reviews tab and revoke all at once. • Paused MCP servers now show an inline `Resume` button in the MCP servers list, replacing the overflow-menu sync action. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.conductorone.com/docs/product/release-notes/ https://www.conductorone.com/docs/product/release-notes/ Fri, 31 Jul 2026 16:20:18 GMT ConductorOne adds AI agent policy steps, group/role access reviews, per-user MCP auth, and scope-limited API keys in its July 2026 release. • Assigns AI agent (C1 AI) to workflow steps in request or review policies, with custom instructions, audit-log attribution to a C1 System identity, and reviewable evaluation conversations. • Extends request catalog search to surface an 'Entitlements matching' section — showing entitlements that indirectly grant access to the searched resource — plus a 'View access graph' link showing the full grant chain. • Adds a 'Grant types' selector to access review campaigns so reviews can now target grants held by groups or roles, not just users (options: Users only, Resources only, Users and resources). • Enables custom recurrence intervals (e.g., every two days, every three months) and configurable campaign durations on campaign templates. • Renders IAM policy documents as a collapsible JSON tree via a 'View policy' button on resource-level access reviews and task details, replacing raw unformatted JSON. • Makes C1 groups requestable — they can be added to a request catalog or access profile and go through the same approval flow as other access. • Queues requests for entitlements created ahead of connector sync (e.g., via Terraform), shows the wait reason, and auto-resumes after sync, with a 24-hour fallback to manual provisioning. • Adds a 'Retry failed provisioning' action on failed access tasks, preserving previously collected approvals without restarting the task. • Enables step-up (MFA) approvals that simultaneously require a comment, prompting identity-provider verification before completing. • Adds 'View lineage' to AI-generated reports, exposing the exact queries behind each number, verification against the execution log, and a copy action for audit workpapers. • Renders multiple AI-requested charts as an aligned grid with per-chart export and sources; supports composed reports combining stat cards, trend charts, and data tables in a single response. • Adds a 'Generate' action in the CEL editor that converts a plain-English description directly into a CEL expression. • Supports per-user authentication on external MCP servers (OAuth2, bearer token, custom header, or basic auth), replacing the shared admin credential model. • Adds per-MCP-server tool enablement settings, letting admins configure whether tools require manual enablement or are auto-enabled independently of the tenant-wide AI governance default. • Allows any user to restrict a personal API key to a narrower role (e.g., read-only) via the 'Limit Scopes' selector at creation time, without requiring Super Admin access. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#july-24-2026 https://www.c1.ai/docs/product/release-notes#july-24-2026 Mon, 27 Jul 2026 21:42:57 GMT ConductorOne adds AI agent policy steps, group/role access reviews, per-user MCP auth, and scoped personal API keys. • Assign a workflow step in a request or review policy to the C1 AI agent, which evaluates each request using built-in guidance plus custom instructions; every evaluation is attributed to the C1 System agent identity, labeled as an AI-agent action in the audit log, and recorded as a reviewable conversation. • Request catalog search now includes an 'Entitlements matching' section showing entitlements that indirectly grant access to a searched resource (e.g., a GitHub team whose repo permissions include the target repo), with a 'View access graph' link showing the full grant chain. • Access review campaigns can now review grants held by groups or roles in addition to users, using a new 'Grant types' selector (Users only, Resources only, or Users and resources) on the Scope tab. • Campaign templates now support custom recurrence intervals (e.g., every two days, every three months) and configurable campaign durations, beyond the previous fixed presets. • IAM policy documents on AWS resources now render as a readable, collapsible JSON tree via a 'View policy' button on resource-level access reviews and in task details. • C1 groups can now be added to a request catalog or access profile, making group membership requestable through the standard approval flow. • Requests for entitlements created ahead of a connector sync (e.g., via Terraform) now queue and wait rather than fail, display a status reason, resume automatically after the next sync, and fall back to manual provisioning after 24 hours. • A new 'Retry failed provisioning' action on access tasks lets admins retry connector provisioning in place without canceling the task and losing collected approvals. • Step-up (MFA) approvals that also require a comment now prompt for identity-provider verification in a single flow and complete once verified. • C1 AI assistant reports now include a 'View lineage' button showing the exact queries behind each number, verified against the execution log, and copyable for audit workpapers. • C1 AI now renders multiple requested charts as an aligned grid with individual export and source links, and can respond with composed reports combining stat cards, a trend chart, and a data table. • A new 'Generate' action in the CEL editor converts a plain-English description directly into a CEL condition expression in one step. • Admins can now require per-user authentication (OAuth2, bearer token, custom header, or basic auth) for external MCP servers instead of sharing a single admin credential. • Tool enablement settings (require enablement or auto-enable) can now be configured per MCP server, independently of the tenant-wide AI governance default. • Any user can now restrict a personal API key to a narrower role (e.g., read-only) using the 'Limit Scopes' selector at key creation, without requiring Super Admin access. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#july-24-2026 https://www.c1.ai/docs/product/release-notes#july-24-2026 Mon, 27 Jul 2026 21:42:57 GMT ConductorOne adds AI agent policy steps, group/role access reviews, per-user MCP auth, and scoped personal API keys. • Assign a workflow step in a request or review policy to the C1 AI agent, which evaluates each request using built-in guidance plus custom instructions; every evaluation is attributed to the C1 System agent identity, labeled as an AI-agent action in the audit log, and recorded as a reviewable conversation. • Request catalog search now includes an 'Entitlements matching' section showing entitlements that indirectly grant access to a searched resource (e.g., a GitHub team whose repo permissions include the target repo), with a 'View access graph' link showing the full grant chain. • Access review campaigns can now review grants held by groups or roles in addition to users, using a new 'Grant types' selector (Users only, Resources only, or Users and resources) on the Scope tab. • Campaign templates now support custom recurrence intervals (e.g., every two days, every three months) and configurable campaign durations, beyond the previous fixed presets. • IAM policy documents on AWS resources now render as a readable, collapsible JSON tree via a 'View policy' button on resource-level access reviews and in task details. • C1 groups can now be added to a request catalog or access profile, making group membership requestable through the standard approval flow. • Requests for entitlements created ahead of a connector sync (e.g., via Terraform) now queue and wait rather than fail, display a status reason, resume automatically after the next sync, and fall back to manual provisioning after 24 hours. • A new 'Retry failed provisioning' action on access tasks lets admins retry connector provisioning in place without canceling the task and losing collected approvals. • Step-up (MFA) approvals that also require a comment now prompt for identity-provider verification in a single flow and complete once verified. • C1 AI assistant reports now include a 'View lineage' button showing the exact queries behind each number, verified against the execution log, and copyable for audit workpapers. • C1 AI now renders multiple requested charts as an aligned grid with individual export and source links, and can respond with composed reports combining stat cards, a trend chart, and a data table. • A new 'Generate' action in the CEL editor converts a plain-English description directly into a CEL condition expression in one step. • Admins can now require per-user authentication (OAuth2, bearer token, custom header, or basic auth) for external MCP servers instead of sharing a single admin credential. • Tool enablement settings (require enablement or auto-enable) can now be configured per MCP server, independently of the tenant-wide AI governance default. • Any user can now restrict a personal API key to a narrower role (e.g., read-only) using the 'Limit Scopes' selector at key creation, without requiring Super Admin access. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#july-24-2026 https://www.c1.ai/docs/product/release-notes#july-24-2026 Sat, 25 Jul 2026 00:41:04 GMT ConductorOne adds AI agent policy steps, access-graph search, group/role reviews, MCP per-user auth, and scoped API keys. • Adds AI Agent steps to request and review policies — configure agent mode (comment-only, full control, or policy-step changes), failure action (reassign or skip), and free-text approval instructions; evaluations appear in audit log and AI > Conversations. • Extends request catalog search to surface entitlements that indirectly grant access to a searched resource, with a 'View access graph' link showing the full grant chain. • Access review campaigns can now scope to groups and roles (not just users) via a new Grant types selector with 'Users only', 'Resources only', or 'Users and resources' options. • Campaign templates support custom recurrence intervals (e.g. every 2 days or every 3 months) and configurable campaign run duration. • IAM policy documents on AWS resources now render as a readable, collapsible JSON tree via a 'View policy' button in resource-level access reviews and task details. • Requests for entitlements created ahead of connector sync (e.g. via Terraform) now queue and auto-resume after sync, instead of failing immediately. • C1 groups can now be added to a request catalog or access profile, making group membership requestable through standard approval, duration, and revocation flows. • Adds 'Retry failed provisioning' action on access tasks, allowing provisioning retries without canceling or losing collected approvals. • Step-up (MFA) approvals that also require a comment can now be completed together in a single flow. • Per-user authentication for external MCP servers now supports OAuth2, bearer token, custom header, or basic auth — replacing shared admin credentials. • New Data lineage view for AI-generated reports shows exact queries behind each number and lets users copy lineage for audit workpapers. • C1 AI now renders multiple requested charts as an aligned grid and can produce composed reports combining stat cards, trend charts, and data tables in one response. • New Generate action in the CEL editor converts plain-English descriptions directly into CEL expressions without requiring iterative AI chat. • Tool enablement (require enablement vs. auto-enable) can now be set per MCP server, independent of the tenant-wide AI governance default. • Admins can now register MCP servers that fail relaxable OAuth discovery checks (e.g. issuer mismatch, cross-host authorization server) by reviewing and acknowledging flagged findings. • Hosted MCP servers without an admin-set tool prefix now default to the prefix declared by the connector itself, keeping tool names recognizable to AI clients. • Any user can now use the Limit Scopes selector when creating a personal API key to restrict it to a narrower role (e.g. read-only), without requiring Super Admin access. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#july-24-2026 https://www.c1.ai/docs/product/release-notes#july-24-2026 Sat, 25 Jul 2026 00:41:04 GMT ConductorOne adds AI agent policy steps, access-graph search, group/role reviews, MCP per-user auth, and scoped API keys. • Adds AI Agent steps to request and review policies — configure agent mode (comment-only, full control, or policy-step changes), failure action (reassign or skip), and free-text approval instructions; evaluations appear in audit log and AI > Conversations. • Extends request catalog search to surface entitlements that indirectly grant access to a searched resource, with a 'View access graph' link showing the full grant chain. • Access review campaigns can now scope to groups and roles (not just users) via a new Grant types selector with 'Users only', 'Resources only', or 'Users and resources' options. • Campaign templates support custom recurrence intervals (e.g. every 2 days or every 3 months) and configurable campaign run duration. • IAM policy documents on AWS resources now render as a readable, collapsible JSON tree via a 'View policy' button in resource-level access reviews and task details. • Requests for entitlements created ahead of connector sync (e.g. via Terraform) now queue and auto-resume after sync, instead of failing immediately. • C1 groups can now be added to a request catalog or access profile, making group membership requestable through standard approval, duration, and revocation flows. • Adds 'Retry failed provisioning' action on access tasks, allowing provisioning retries without canceling or losing collected approvals. • Step-up (MFA) approvals that also require a comment can now be completed together in a single flow. • Per-user authentication for external MCP servers now supports OAuth2, bearer token, custom header, or basic auth — replacing shared admin credentials. • New Data lineage view for AI-generated reports shows exact queries behind each number and lets users copy lineage for audit workpapers. • C1 AI now renders multiple requested charts as an aligned grid and can produce composed reports combining stat cards, trend charts, and data tables in one response. • New Generate action in the CEL editor converts plain-English descriptions directly into CEL expressions without requiring iterative AI chat. • Tool enablement (require enablement vs. auto-enable) can now be set per MCP server, independent of the tenant-wide AI governance default. • Admins can now register MCP servers that fail relaxable OAuth discovery checks (e.g. issuer mismatch, cross-host authorization server) by reviewing and acknowledging flagged findings. • Hosted MCP servers without an admin-set tool prefix now default to the prefix declared by the connector itself, keeping tool names recognizable to AI clients. • Any user can now use the Limit Scopes selector when creating a personal API key to restrict it to a narrower role (e.g. read-only), without requiring Super Admin access. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#july-10-2026 https://www.c1.ai/docs/product/release-notes#july-10-2026 Fri, 10 Jul 2026 23:50:06 GMT ConductorOne adds real-time access provisioning, catalog indirect-access search, bulk revoke, visual condition builder, and Terraform connector ownership resources. • Adds real-time streaming of access profile grants and removals to connected apps, replacing hourly sync cycles. • New rolling-hour anomaly detector for membership removals, with a viewable and adjustable threshold in automation settings. • Request catalog now surfaces the role, team, or group that grants access to a searched resource, even when the entitlement name doesn't match the search term. • Enables bulk revoke of entitlements directly from the App Accounts page — select one or more accounts and remove specific entitlements or all access at once. • New visual condition builder for Directory source import filters replaces raw CEL expressions, with a built-in Data Preview to verify match counts before saving. • New top-level navigation sections: 'AI' (with MCP server config and C1 Gateway) and 'Identity security' (with Inventory). • C1 AI assistant in Slack now sends rich interactive responses — buttons, forms, and pickers — enabling task completion without leaving Slack. • Agentic AI Conversations page adds separate Web and Slack tabs for full cross-surface agent activity visibility. • MCP servers supporting OAuth Dynamic Client Registration can now be connected without entering a client ID or secret. • Adds per-user authentication for external MCP servers, supporting OAuth2, bearer token, custom header, or basic auth instead of a shared admin credential. • Toolset contents are now visible on hover in the task view, without navigating to entitlement detail pages. • Conflict monitors now support an 'Is not in' condition for Group B, enabling detection of sensitive access held without a required compensating entitlement. • Column configurator extended to 23 additional pages — including Findings, Automations, Policies, MCP Servers, Secrets, and Webhooks — with preferences saved across sessions. • Entitlements table and CSV export now include an Owners column per application. • Row-by-row drawer navigation adds next/previous controls so users can move through list-view rows without reopening drawers. • Markdown (links, bold, lists) now supported in requestable form field helper text. • New System management setting lets admins disable connector anomaly pauses across all connectors tenant-wide. • System Owners now see service principal credentials expiring within 30 days (or already expired) in the daily digest email, with a countdown and direct link. • Admins can now edit post actions on the built-in 'App owner certification' policy directly in the UI, without using the API. • Breaking change: Terraform provider v1.4.0 introduces two new resources — `conductorone_connector_owner_user` and `conductorone_connector_owner_entitlement` — to replace the deprecated `user_ids` field on all `conductorone_integration_*` resources; existing `user_ids` configs will cause drift. Breaking changes: • The `user_ids` field on all `conductorone_integration_*` Terraform resources will no longer be returned by the Terraform provider starting in provider v1.4.0; if `user_ids` is configured in your Terraform files, this will cause drift and requires migration to the new `conductorone_connector_owner_user` and `conductorone_connector_owner_entitlement` resources and removal of the `user_ids` field. • In the C1 navigation, `User data sources` in the Directory section is renamed to `Directory sources` and `Groups` is renamed to `Dynamic groups`; `Inventory` has moved from Explore to the new top-level `Identity security` section; `MCP server` configuration and `C1 Gateway` settings have moved under the new top-level `AI` section. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#private-bridge-for-mcp-servers https://www.c1.ai/docs/product/release-notes#private-bridge-for-mcp-servers Fri, 26 Jun 2026 23:26:56 GMT ConductorOne now governs private/air-gapped MCP servers via an outbound bridge agent — no inbound firewall rules required. • Adds private MCP server connectivity via a lightweight `bridge-client` agent that maintains an outbound connection to C1, eliminating the need to open inbound firewall rules or expose servers to the public internet. • Enables full C1 entitlement governance (access requests, approvals, reviews, and auditing) for MCP tools running on-prem, in air-gapped clusters, or behind firewalls. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#private-bridge-for-mcp-servers https://www.c1.ai/docs/product/release-notes#private-bridge-for-mcp-servers Fri, 26 Jun 2026 23:26:56 GMT Adds `bridge-client` agent and private MCP server governance via outbound connection • Introduces the `bridge-client` lightweight bridge agent to connect on-prem or air-gapped MCP servers to ConductorOne without inbound firewall rules. • Enables governing tools for private MCP servers through C1 with standard entitlement requests, approvals, reviews, and audits. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#june-26-2026 https://www.c1.ai/docs/product/release-notes#june-26-2026 Fri, 26 Jun 2026 23:22:49 GMT ConductorOne adds single-page role mining, custom email providers, bulk role assignment, and flexible table exports. • Redesigns role mining as a single-page experience with a token-based filter bar, inline cohort refinements, and a floating action bar for creating or updating access profiles without navigating away. • Adds early-access custom email provider support (Google Workspace, AWS SES, Microsoft 365, SendGrid) so C1 notifications send from your own domain instead of no-reply@conductorone.com. • Enables bulk role assignment — select multiple users on the Users page and apply a role change to all of them at once. • Introduces customizable, reorderable columns (saved per table) and targeted CSV export for the Apps, App accounts, Entitlements, and Resources tables. • Adds outcome-based filtering on campaign task lists (granted, denied, revoked, certified, error, canceled, timed out) to quickly surface tasks needing attention. • Publishes step-by-step setup guides for 38 catalog MCP servers, covering credential creation, authentication, and tool discovery. • Adds an 'Access was inappropriate' pre-written reason to access removal, revocation, and certification comment dialogs. • Shows the complete inbound webhook URL in the trigger drawer, ready to copy, eliminating manual URL construction from a listener ID. • Introduces a 'Current step' filter on the task log to surface tasks awaiting approval or awaiting provisioning directly. • Enables sorting of the MCP server Tools table by tool name, visibility, classification, state, and last updated. • Adds CSV export of policy rules directly from a policy's detail page or the policy list page for easier auditing. • Replaces inline owner entry when creating apps with the full Select owners modal, including search, filtering, and Users/Entitlements tabs. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#june-26-2026 https://www.c1.ai/docs/product/release-notes#june-26-2026 Fri, 26 Jun 2026 23:22:49 GMT Role mining refresh, custom email provider early access, bulk role assignment, CSV exports, and campaign task filtering • Adds `Role mining` interface with token-based filter bar, inline recommendations, and floating action bar for refined cohort analysis. • Early access to `Custom email provider` allowing C1 notifications to be sent from your own domain (Google Workspace, AWS SES, Microsoft 365, SendGrid). • Adds `Bulk role assignment` capability via the `Change role` action on the Users page to select and assign roles to multiple users at once. • Enables customizable columns and CSV export for Apps, App accounts, Entitlements, and Resources tables via the `Download to CSV` drawer. • Adds filtering for campaign task lists by outcome (granted, denied, revoked, certified, error, canceled, timed out). • Provides setup guides for 38 catalog `MCP servers` covering credential creation, authentication, and tool discovery. • Adds `Export policy rules to CSV` directly from a policy's detail page or the policy list page. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#product-digest-june-26-2026 https://www.c1.ai/docs/product/release-notes#product-digest-june-26-2026 Fri, 26 Jun 2026 00:00:00 GMT ConductorOne adds role mining UI refresh, custom email providers, bulk role assignment, CSV exports for tables and policy rules, and task filters. • Adds 'custom email provider' setting to send C1 notifications from your own domain (Google Workspace, AWS SES, Microsoft 365, SendGrid) • Adds `Bulk Change role` action on the Users page for assigning roles to multiple users at once • Adds CSV export via the 'Download to CSV' drawer with customizable column selection for Apps, App accounts, Entitlements, and Resources tables • Adds filtering of campaign task lists by outcome (granted, denied, revoked, certified, error, canceled, timed out) • Adds a `Current step` filter in the Task log to find tasks awaiting approval or provisioning • Enables export of policy rules to CSV from a policy's detail page or the policy list page Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#ask-c1-ai https://www.c1.ai/docs/product/release-notes#ask-c1-ai Wed, 24 Jun 2026 16:26:06 GMT ConductorOne launches Ask C1AI: a floating AI chat assistant for querying access data and taking action from anywhere in the platform. • New Ask C1AI floating chat panel available on every page lets practitioners query org access data and take action without navigating away from their current view. • AI assistant ingests page context — the application, entitlements, or policy currently in view — to deliver more precise answers, with a toggle to include or exclude that context per conversation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#ask-c1-ai https://www.c1.ai/docs/product/release-notes#ask-c1-ai Wed, 24 Jun 2026 16:26:06 GMT Ask C1AI floating chat panel launched to query org access data without leaving the page • Adds a floating chat panel (`Ask C1AI`) accessible via bottom-right UI toggle on every page for context-aware querying of org access data Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#enterprise-managed-authorization https://www.c1.ai/docs/product/release-notes#enterprise-managed-authorization Thu, 18 Jun 2026 22:04:19 GMT ConductorOne adds enterprise-managed authorization for AI agents, issuing short-lived scoped tokens via the open XAA standard. • New early-access Enterprise-managed authorization enables AI agents (Claude, VS Code, etc.) to access organization-run MCP servers using short-lived, scoped tokens — no per-tool prompts, no persistent secrets. • Agents receive tokens only after entitlement checks, with every token request recorded for auditability. • AI agent access follows the same request, approval, review, and revocation workflows used for all other access in ConductorOne. • Built on the open Cross-App Access (XAA) standard for interoperability. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#enterprise-managed-authorization https://www.c1.ai/docs/product/release-notes#enterprise-managed-authorization Thu, 18 Jun 2026 22:04:19 GMT Early access to Enterprise-managed authorization for AI agents via XAA standard • Adds `Enterprise-managed authorization` feature enabling AI agents (e.g., Claude, VS Code) to reach MCP servers using short-lived scoped tokens instead of per-tool auth prompts or persistent secrets Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#june-12-2026 https://www.c1.ai/docs/product/release-notes#june-12-2026 Fri, 12 Jun 2026 23:49:46 GMT ConductorOne adds Slack AI assistant for actions, MCP server verification, annotation-based routing, customizable campaign columns, and multi-recipient credential delivery. • Adds AI assistant integration to discover and trigger requestable actions directly from Slack • Adds connection verification for external MCP servers via `Test auth config` button and pre-filled recommended authentication configs • Allows assigning any entitlement (group, role) as a resource owner so ownership tracks membership changes automatically • Enables acting on object annotations in policies, approver rules, and entitlement routing rules using CEL expressions like `entitlement.annotations["team"]` • Adds customizable columns for Campaigns screens including On-time status, Time remaining, and Due date via the column picker Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#product-digest-june-12-2026 https://www.c1.ai/docs/product/release-notes#product-digest-june-12-2026 Fri, 12 Jun 2026 00:00:00 GMT New AI-triggered actions via Slack, resource owners as entitlements, annotations in policies, and multi-recipient credential delivery. • Adds `Test auth config` button to verify MCP server connections before saving • Enables assigning any entitlement (group, role) as a resource owner instead of individuals Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone https://www.c1.ai/docs/product/release-notes#cloud-infrastructure https://www.c1.ai/docs/product/release-notes#cloud-infrastructure Thu, 11 Jun 2026 17:36:56 GMT ConductorOne adds hierarchical cloud access modeling, inheritance-scoped reviews, and CEL-based entitlement rules. • Adds support for hierarchical access modeling in early access to represent cloud infrastructure access as principal-role-scope bindings with breadcrumb navigation. • Adds a new 'By inheritance' scope type for access review campaigns that resolves inherited access from parent resources and group membership. • Adds entitlement configuration rules evaluated via CEL expressions to automatically apply request policies, emergency grant behavior, and max duration to cloud infrastructure apps. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/conductorone