https://cybertoolchain.io/tools/mondoo New releases and features in Mondoo, tracked by The Cyber Toolchain. en Tue, 22 Sep 2026 00:00:00 GMT https://mondoo.com/docs/releases/2026-09-22-mondoo-14.0-is-out https://mondoo.com/docs/releases/2026-09-22-mondoo-14.0-is-out Tue, 22 Sep 2026 00:00:00 GMT Mondoo 14.0 adds MQL strict mode, 500+ new resources, unified IaC scanning, OpenTofu support, OCSF/InSpec/CSV output, and up to 97% fewer cloud API calls.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds OCSF, InSpec, and CSV scan output formats.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces MQL strict mode for tighter query validation. • Adds cross-version MQL support so queries work across different resource schema versions. • Adds 500+ new MQL resources covering Windows, IIS, MDM, and EDR surfaces. • Adds deep Windows and IIS coverage via new MQL resources. • Adds MDM and EDR resources for endpoint management. • Adds automatic client updates on Windows. • Adds container scanning that identifies and names hardened base images. • Adds precise OS detection for 15 more operating systems, with deep Solaris, FreeBSD, and SUSE 16 support. • Adds a unified IaC provider that discovers and scans every kind of infrastructure-as-code in a repository. • Adds first-class OpenTofu scanning. • Reduces cloud scan API call volume by up to 97%. • Adds six new out-of-the-box policies. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases/2026-07-28-analytics https://mondoo.com/docs/releases/2026-07-28-analytics Fri, 31 Jul 2026 15:56:42 GMT Mondoo Analytics is GA: self-serve security reporting with 7 built-in reports, pivots, custom reports, and PNG/PowerPoint export. • New Analytics module is generally available in the Mondoo console, offering self-serve exploration of live security data. • Includes seven built-in reports covering key security metrics out of the box. • Supports configurable pivots to slice and dice security data across different dimensions. • Enables creation of custom reports tailored to specific organizational needs. • Export individual report pages as PNG images or full reports as PowerPoint decks for stakeholder sharing. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases/2026-07-29-mondoo-mcp-server https://mondoo.com/docs/releases/2026-07-29-mondoo-mcp-server Thu, 30 Jul 2026 15:46:43 GMT Mondoo launches a hosted MCP server, enabling Claude Desktop, Claude Code, and VS Code to query spaces, findings, and policies in plain language. • New hosted MCP server lets AI tools (Claude Desktop, Claude Code, VS Code) connect to Mondoo using a read-only API token. • Enables natural-language exploration of Mondoo spaces, findings, and policies directly from AI-powered clients. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases/2026-06-17-executive-reports-ga https://mondoo.com/docs/releases/2026-06-17-executive-reports-ga Thu, 23 Jul 2026 15:49:56 GMT Mondoo's Executive Reports is now GA — export live VM data as board-ready PowerPoint or PNG slides. • Enables Executive Reports for all customers, turning live Mondoo vulnerability management data into board-ready presentations. • Supports export of Executive Report slides to PowerPoint and PNG formats. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases/2026-04-21-executive-reports https://mondoo.com/docs/releases/2026-04-21-executive-reports Thu, 23 Jul 2026 15:49:56 GMT Mondoo previews Executive Reports: board-ready ROI slides exportable to PowerPoint or PNG. • New Executive Reports feature (Preview) converts live Mondoo vulnerability management data into board-ready ROI presentations. • Supports export of individual report slides to PowerPoint or PNG formats. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases/2026-06-17-executive-reports-ga https://mondoo.com/docs/releases/2026-06-17-executive-reports-ga Wed, 17 Jun 2026 00:00:00 GMT Mondoo Executive Reports GA enables exporting slides to PowerPoint/PNG for board-ready VM chapters • General availability of the `Executive Reports` capability to all Mondoo customers Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases/2026-06-mondoo-release-highlights https://mondoo.com/docs/releases/2026-06-mondoo-release-highlights Mon, 01 Jun 2026 00:00:00 GMT Mondoo June 2026 brings smarter internet-exposure detection, AI infrastructure inspection, six new platforms, and 145 new checks. • Adds internet-exposure detection across cloud environments to surface attacker-visible attack surface. • Adds AI infrastructure inspection capabilities. • Supports six new platforms for security policy coverage. • Adds 145 new security checks across supported platforms. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases https://mondoo.com/docs/releases Mon, 01 Jun 2026 00:00:00 GMT Mondoo June 2026 adds AI infra inspection, six new platforms, and internet-exposure detection • Adds AI infrastructure inspection capability for auditing AI workloads • Implements smarter internet-exposure detection across all cloud environments • Adds support for six new platforms in Mondoo's scanning inventory Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases/2026-05-mondoo-release-highlights https://mondoo.com/docs/releases/2026-05-mondoo-release-highlights Fri, 01 May 2026 00:00:00 GMT Mondoo May 2026 debuts a redesigned UI with Risk Dimensions scoring, remediation context, new dashboards, and executive reports. • Introduces Risk Dimensions, a transparent five-dimension scoring model for evaluating security risk. • Adds remediation context alongside findings to help practitioners prioritize and act on issues. • Delivers redesigned dashboards surfacing risk data through the new scoring model. • New executive reports provide leadership-ready summaries of security posture. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases https://mondoo.com/docs/releases Fri, 01 May 2026 00:00:00 GMT New Mondoo UI featuring Risk Dimensions scoring model, redesigned dashboards, executive reports, and remediation context. • `Risk Dimensions` transparent five-dimension scoring model • Remediation context for risks • `executive reports` generation Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases/2026-04-21-executive-reports https://mondoo.com/docs/releases/2026-04-21-executive-reports Tue, 21 Apr 2026 00:00:00 GMT Preview of Executive Reports allows exporting board-ready ROI slides in PowerPoint or PNG. • Adds 'Executive Reports' preview feature to export Mondoo vulnerability management data into board-ready slides. • Enables exporting each slide from Executive Reports to PowerPoint or PNG formats. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases/2026-04-mondoo-release-highlights https://mondoo.com/docs/releases/2026-04-mondoo-release-highlights Wed, 01 Apr 2026 00:00:00 GMT Mondoo April 2026 adds shadow AI detection, seven new platforms, expanded IaC scanning, and the largest MQL update yet. • Adds shadow AI detection capabilities. • Supports seven brand-new platforms for asset scanning. • Expands infrastructure as code (IaC) scanning coverage. • Deepens cloud and network resource coverage. • Delivers the largest MQL (Mondoo Query Language) expansion to date. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases/2026-04-mondoo-release-highlights https://mondoo.com/docs/releases/2026-04-mondoo-release-highlights Wed, 01 Apr 2026 00:00:00 GMT Mondoo April 2026 adds seven new platforms, shadow AI detection, expanded IaC scanning, and MQL expansion • Adds detection for seven brand-new platforms to expand coverage beyond existing assets • Introduces shadow AI detection capabilities to identify unauthorized AI tools in the environment • Expands infrastructure as code (IaC) scanning scope with new checks and improved coverage • Deepens cloud and network coverage with updated CIS benchmarks for better compliance validation • Significantly expands MQL (Mondoo Query Language) capabilities with the largest expansion to date Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases/2026-03-10-mondoo-13.0-is-out https://mondoo.com/docs/releases/2026-03-10-mondoo-13.0-is-out Tue, 10 Mar 2026 00:00:00 GMT Mondoo 13.0 introduces a rewritten Kubernetes Operator, massive cloud resource expansion, and hundreds of new security checks. • Introduces the Mondoo Kubernetes Operator with a complete rewrite • Adds support for hundreds of new security checks across expanded cloud resources Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases/2026-03-mondoo-release-highlights https://mondoo.com/docs/releases/2026-03-mondoo-release-highlights Sun, 01 Mar 2026 00:00:00 GMT Mondoo March 2026 adds network security scanning, hundreds of new cloud resources/checks, IaC scanning for Terraform and CloudFormation variants, and new CIS benchmarks. • Adds network security scanning capabilities. • Introduces hundreds of new cloud resources and security checks. • Supports IaC scanning for Terraform and CloudFormation variants. • Expands remediation content across policies. • Adds new CIS benchmarks. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases https://mondoo.com/docs/releases Sun, 01 Mar 2026 00:00:00 GMT March 2026 release adds network security scanning support for Mondoo cyber tooling. • Adds network security scanning capabilities to the platform. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases/2026-02-mondoo-release-highlights https://mondoo.com/docs/releases/2026-02-mondoo-release-highlights Sun, 01 Feb 2026 00:00:00 GMT Mondoo February 2026 brings broader vulnerability detection, new policy checks, resource-level cloud findings, and MQL expansion. • Expands vulnerability detection coverage across infrastructure. • Adds hundreds of new policy checks. • Introduces resource-level findings for cloud assets. • Delivers the largest-ever expansion of MQL (Mondoo Query Language). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases https://mondoo.com/docs/releases Sun, 01 Feb 2026 00:00:00 GMT Mondoo adds resource-level cloud findings and a massive MQL expansion with new policy checks and vulnerability detections • Adds resource-level cloud findings to provide granular visibility into infrastructure issues • Expands MQL (Mondoo Query Language) capabilities with the largest-ever set of new queries Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases https://mondoo.com/docs/releases Thu, 01 Jan 2026 00:00:00 GMT Mondoo adds new OS support, updated CIS policies, and improved EOL asset scoring in January 2026. • Adds support for new operating systems across the cyber tooling stack • Updates existing CIS policies with new checks and rules • Improves scoring accuracy for End-of-Life (EOL) assets Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases/2025-11-mondoo-release-highlights https://mondoo.com/docs/releases/2025-11-mondoo-release-highlights Sat, 01 Nov 2025 00:00:00 GMT Mondoo November 2025 adds new security advisories, broader vuln detection, NPM supply chain coverage, and network security capabilities. • Adds new Mondoo Security Advisories to surface emerging threats. • Expands vulnerability detection coverage to additional applications and operating systems. • Includes guided remediation steps alongside vulnerability findings to accelerate patching. • Enhances NPM package detection to strengthen software supply chain security. • Introduces new network security detection capabilities. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases/2025-10-mondoo-release-highlights https://mondoo.com/docs/releases/2025-10-mondoo-release-highlights Wed, 01 Oct 2025 00:00:00 GMT Mondoo October 2025 adds end-of-life OS detections, a 'known ransomware use' risk factor, and new CIS benchmark policies. • Adds detections for end-of-life operating systems to surface legacy assets in security posture. • Introduces a new 'known ransomware use' risk factor for prioritizing vulnerability remediation. • Delivers new and enhanced CIS benchmark policies. • Expands vulnerability detections and remediations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases https://mondoo.com/docs/releases Wed, 01 Oct 2025 00:00:00 GMT Adds EOL OS detections, 'known ransomware use' risk factor, and enhanced CIS benchmarks • Adds new detections for end-of-life operating systems to identify legacy assets in your infrastructure • Introduces 'known ransomware use' as a new risk factor for prioritizing vulnerability remediation • Enhances existing CIS benchmark policies with updated checks and improved coverage Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases/2025-09-mondoo-release-highlights https://mondoo.com/docs/releases/2025-09-mondoo-release-highlights Mon, 01 Sep 2025 00:00:00 GMT Mondoo September 2025 adds new OS/app vuln detections, DORA & BSI SYS 1.5 compliance, and experimental MCP security. • Adds vulnerability detection support for new operating systems. • Adds vulnerability detection for an expanded list of third-party applications. • Supports EU/German compliance frameworks DORA and BSI SYS 1.5. • Introduces experimental MCP (Model Context Protocol) security scanning. • Streamlines listing and filtering of findings. • Makes advisory remediations easier to access. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases https://mondoo.com/docs/releases Mon, 01 Sep 2025 00:00:00 GMT Mondoo adds DORA and BSI SYS 1.5 compliance, experimental MCP security scanning, and improved finding filters. • Adds support for EU DORA compliance framework • Adds support for German BSI SYS 1.5 compliance framework Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases/2025-08-mondoo-release-highlights https://mondoo.com/docs/releases/2025-08-mondoo-release-highlights Fri, 01 Aug 2025 00:00:00 GMT Mondoo August 2025 expands vulnerability detections, adds remediation snippets for Ansible/Bash/Terraform, and ships new CIS benchmarks. • Expands vulnerability detection coverage with new findings. • Adds Ansible, Bash, and Terraform remediation snippets to speed up risk resolution. • Includes latest CIS benchmarks for updated security and compliance coverage. • Enhances Mondoo Query Language (MQL) to simplify creation of custom policies. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases https://mondoo.com/docs/releases Fri, 01 Aug 2025 00:00:00 GMT Mondoo expands vulnerability detections with CIS benchmarks and enhances MQL for custom policies • Expanded vulnerability detections including the latest CIS benchmarks to strengthen compliance coverage • Added new Ansible remediation snippets for faster threat response • Added new Bash remediation snippets for faster threat response • Added new Terraform remediation snippets for infrastructure remediation • Enhanced Mondoo Query Language (MQL) capabilities to simplify custom policy creation Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases https://mondoo.com/docs/releases Tue, 01 Jul 2025 00:00:00 GMT Mondoo July 2025 adds expanded Microsoft coverage, enhanced guided remediations and finer exception control. • Expanded coverage for critical Microsoft applications in compliance scanning • Simplified filtering on findings to narrow audit scopes • Enhanced guided remediations with more actionable remediation paths • Added more exceptions functionality to exclude specific assets or checks Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases https://mondoo.com/docs/releases Tue, 01 Apr 2025 00:00:00 GMT Mondoo adds MCP server for AI remediation, space-wide exceptions, and ticketing integration • Adds a Mondoo Model Context Protocol (MCP) server to enable AI accelerated findings remediation • Adds capability to push remediations directly into external ticketing systems • Introduces centralized exceptions management for consistent policy handling Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases https://mondoo.com/docs/releases Sat, 01 Mar 2025 00:00:00 GMT Mondoo introduces CVE detection for AIX/SQL Server/MS365, CSV exports, SLA tracking and hypervisor detection • New CVE detection engine covering AIX, SQL Server, and Microsoft 365 vulnerabilities • Exports findings to CSV format for external analysis • Adds SLA tracking capabilities to monitor vulnerability remediation timelines • Enhances hypervisor detection with advanced identification logic Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases https://mondoo.com/docs/releases Sat, 01 Feb 2025 00:00:00 GMT Mondoo adds CrowdStrike and SentinelOne integrations with priority asset customization. • Adds `integrations` for CrowdStrike and SentinelOne to connect asset data directly into Mondoo's platform. • Introduces `priority_asset_customization` settings to allow users to define which assets are treated as high priority within the dashboard views. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo https://mondoo.com/docs/releases/2024-07-02-mondoo-11.11-is-out https://mondoo.com/docs/releases/2024-07-02-mondoo-11.11-is-out Tue, 02 Jul 2024 00:00:00 GMT Mondoo 11.11 adds GitHub Enterprise support, automated IaC discovery in code repos, and EU NIS2 framework. • Adds `github_enterprise` integration for scanning GitHub Enterprise Server instances • Enables automated infrastructure-as-code (IaC) file discovery within scanned code repositories without manual path configuration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mondoo