Whats new in the AppControl.AI Portal

==== 12th of November 2025 ====

This release contains mostly back-end changes to prepare for those new features we are working on. That being said, there are a few quality of life features added in this release.

• We introduced a client health dashboard allowing you to easily managed devices that are not working as expected

  • Clients that have not reported to the portal since x-days (you can set the timeframe) can now archived with the click of a button

  • Clients that are sending data to the portal, but not a heartbeat are highlighted. These clients are potentially missing a deny rule in the WDAC Policy

• Policies and managed installers now also contain a tab for devices that don't have a certain policy or MI configured. This is useful for finding devices that may not be properly configured. These devices can be exported to a CSV.

• We added a filter for unsigned security catalogs.

==== 12th of September 2025 ====

This is a milestone release! With the features that we added in this build you gain full end-to-end overview of what's going on in your environment with regards to your WDAC implementation. We now offer insights in the 3 major components that generate WDAC events : Win32 Applications, Modern Applications and script executions.

See below what we added as of today:

• Managed installers

  • A new dashboard is available showing you the managed installers found in your environment and on how many devices we see them configured.

• Security catalogs

  • The WDAC results now show an aggregated view of all deployed security catalogs (including their signing information)

  • Security catalogs that are not signed are highlighted in red as this is probably a mistake because unsigned catalogs are not taken into account for WDAC.

• Script executions

  • The WDAC results also show any scripts (Powershell/VBS) that generated a WDAC event (audit/enforced).

  • Each script entry will also give you insights if these were ran from a user-writeable location.

==== 23rd of July 2025 ====

• Packaged Apps Management

  • Packaged app (Appx, Msix) related data is now visible in the portal (Requires at least version 1.1.0.3 of the device client)

  • Each device will send a list of all installed packaged apps and all relevant event-data

  • Packaged apps can be marked as trusted or untrusted either individually or in bulk

  • A bulk status update will automatically add a note to the app indicating who changed the status at a specific date/time

  • Packaged app with a signature kind of 'System' are automatically marked as trusted because they are required for proper OS functionality

  • A supplemental policy can be generated for each trusted packaged app.

  • Multiple filters and sorting options are available for packaged apps.

• The devices list can now be exported

  • A CSV list will be generated with the available device tags separated by a '|' sign

• The policy distribution chart is now ordered from most distributed policies to least distributed policies.

www.linkedin.com

🚀 𝐌𝐚𝐣𝐨𝐫 𝐔𝐩𝐝𝐚𝐭𝐞: 𝐀𝐩𝐩𝐂𝐨𝐧𝐭𝐫𝐨𝐥.𝐀𝐈 𝐏𝐨𝐫𝐭𝐚𝐥 𝐍𝐨𝐰 𝐒𝐮𝐩𝐩𝐨𝐫𝐭𝐬 𝐏𝐚𝐜𝐤𝐚𝐠𝐞𝐝 𝐀𝐩𝐩𝐬 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭 | AppControl.AI

🚀 𝐌𝐚𝐣𝐨𝐫 𝐔𝐩𝐝𝐚𝐭𝐞: 𝐀𝐩𝐩𝐂𝐨𝐧𝐭𝐫𝐨𝐥.𝐀𝐈 𝐏𝐨𝐫𝐭𝐚𝐥 𝐍𝐨𝐰 𝐒𝐮𝐩𝐩𝐨𝐫𝐭𝐬 𝐏𝐚𝐜𝐤𝐚𝐠𝐞𝐝 𝐀𝐩𝐩𝐬 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭 We're excited to announce a game-changing enhancement to our AppControl.AI portal that makes managing packaged applications simpler than ever before. 𝘞𝘩𝘺 𝘗𝘢𝘤𝘬𝘢𝘨𝘦𝘥 𝘈𝘱𝘱𝘴 𝘔𝘢𝘯𝘢𝘨𝘦𝘮𝘦𝘯𝘵 𝘔𝘢𝘵𝘵𝘦𝘳𝘴 The Microsoft Store ecosystem presents unique security challenges that traditional blocking methods can't solve. While the Store contains legitimate business applications, it also hosts potentially unwanted tools like Sysinternals (PsExec) and Python interpreters that could bypass your security policies. Here's the problem: Even when companies block the Store app itself, Microsoft continues introducing new installation methods - from apps.microsoft.com to PowerShell commands. Playing whack-a-mole with these access points isn't sustainable. 𝐓𝐡𝐞 𝐬𝐨𝐥𝐮𝐭𝐢𝐨𝐧? Proper application allowlisting that manages Store apps at the policy level, eliminating the need for additional tools or constant rule updates. 𝘞𝘩𝘢𝘵'𝘴 𝘕𝘦𝘸? ✅ 𝐂𝐨𝐦𝐩𝐥𝐞𝐭𝐞 𝐕𝐢𝐬𝐢𝐛𝐢𝐥𝐢𝐭𝐲 - Full visibility into all installed packaged apps (Appx, Msix) across your device fleet with comprehensive event data ✅ 𝐒𝐦𝐚𝐫𝐭 𝐀𝐮𝐭𝐨𝐦𝐚𝐭𝐢𝐨𝐧 - System-critical apps are automatically marked as trusted, reducing manual overhead while maintaining security ✅ 𝐁𝐮𝐥𝐤 𝐎𝐩𝐞𝐫𝐚𝐭𝐢𝐨𝐧𝐬 - Mark multiple apps as trusted or untrusted with automatic audit trails showing who made changes and when ✅ 𝐎𝐧𝐞-𝐂𝐥𝐢𝐜𝐤 𝐏𝐨𝐥𝐢𝐜𝐲 𝐆𝐞𝐧𝐞𝐫𝐚𝐭𝐢𝐨𝐧 - Generate supplemental policies for trusted packaged apps with unprecedented simplicity ✅ 𝐀𝐝𝐯𝐚𝐧𝐜𝐞𝐝 𝐅𝐢𝐥𝐭𝐞𝐫𝐢𝐧𝐠 - Multiple sorting and filtering options to help you find exactly what you need, when you need it 𝘛𝘩𝘦 𝘎𝘢𝘮𝘦 𝘊𝘩𝘢𝘯𝘨𝘦𝘳: 𝘚𝘪𝘮𝘱𝘭𝘪𝘧𝘪𝘦𝘥 𝘗𝘰𝘭𝘪𝘤𝘺 𝘊𝘳𝘦𝘢𝘵𝘪𝘰𝘯 Creating supplemental policies for packaged apps used to be a complex, time-consuming process. Now? It's literally one click. This means faster deployment, reduced administrative burden, and more time focusing on what matters most - securing your environment. Whether you're managing dozens or thousands of devices, our enhanced portal scales with your needs while maintaining the granular control security teams demand. Ready to see how simple packaged app management can be? #CyberSecurity #ApplicationControl #ITManagement #DeviceManagement #Security #AppControl

==== 4th of June 2025 ====

• Policies can now be hidden in the portal.

  • If you no longer wish to see data for a certain policy, clicking the eye icon on the policy tab will hide it from the portal and dashboard. A filter is available to view hidden policies and change their status back to un-hidden.

• A 3rd status has been added to the Win32 apps in the WDAC Results

  • You can now also assign a 'In progress' status to win32 apps instead of just trusted and untrusted. This new status can be used to indicate that you are working on making a certain app trusted.

  • Each status has been given a distinct color to make them easier to identify

  • You can now use the filters to show multiple statuses at once.

==== 14th of May 2025 ====

• We added WDAC Policy details to the Portal.

  • A new dashboard will show what policies are active in your environment and on how many devices they are found.

  • A Policies tab is added to the WDAC results with additional details such as the rule options that are set in that specific policy.

• The Users and Invite tabs have been merged into 1 single view

• The thumbs up/down in the WDAC results page for Win32 apps have been updated to a Set Status button as a more intuitive way of interaction.

• Various performance improvements were made.

==== 23rd of April 2025 ====

• Win32 apps that show up in the WDAC Results node have a default status of 'Unknown'. Using the thumbs up or down buttons on a Win32 app will mark the application as trusted or untrusted. This will remove the app from the global WDAC results node but filters are available to review both trusted and untrusted apps.

  • Marking an application as untrusted does not alter the WDAC policy on a device in any way. It is a way for you to filter the WDAC results page and hide applications that you have no intend on making trusted.

  • Once you have taken the necessary actions in your environment to make sure that a particular application can run in Enforcement mode, you can mark the app as trusted in the AppControl.AI portal. This will remove the application from the overview page. However, if we still get events from devices for this application after you marked it as trusted. We will highlight the application again in the overview page to indicate that your actions may not have been successfully applied on all devices. After corrective measures have been taken, you can mark the application as trusted again.

• Devices can now be marked as 'Archived'. If a device is no longer in use in your environment, marking them as Archived hides the device from the portal. A filter on the status field allows you to view the Archived devices again and revert the status if needed.

• The WDAC Results / Win32 apps node now supports a filter for device-tags. This allows you to see only results for a specific set of devices instead of all devices.

• When downloading a logfile from devices / logs node, the filename will include the log type to make it easier for admins to keep track of what type of file was downloaded.

• The devices node contains a refresh button to update the devices list without reloading the entire page.