CHANGELOG

What's new in FreNiMiGuard

Features, fixes and agent releases, newest first. Agents update themselves to each signed release, so there is nothing to reinstall.

October 28, 2026

NewA status page with live checks and 90 days of uptime history.
NewA vulnerability disclosure policy and a standard security contact file at /.well-known/security.txt.
NewThe Security and trust page: what the agent collects and can do, how approvals work, where data is stored and who processes it.
NewIndependent scanner grades on the Security and trust page: A+ from Qualys SSL Labs and A+ from Mozilla HTTP Observatory, with links to re-run them.
NewUbuntu computers are checked against Ubuntu's own security data. Problems Ubuntu has already patched are no longer reported, and problems Ubuntu hasn't released a fix for yet are listed as "Waiting for vendor fix" instead of asking you to install an update that doesn't exist.
NewThe Monday summary email now lists what still needs you.
FixThe setup checklist explains why a second administrator doesn't count yet, and "Add an administrator" opens the form with Admin chosen.
FixDisk encryption advice for Linux computers names LUKS instead of Windows' BitLocker.
RemovedSAML single sign-on. Sign-in uses a password with multi-factor authentication or an emailed code for each new browser. An account first created through single sign-on signs in once an administrator sets its password under Users.
NewThis changelog.
FixFreNiMiGuard moved to its own server in the United States, separate from other websites.

NewA "Needs you" list on the dashboard: the few things that need a person, in plain English.
NewA setup checklist for new workspaces, with presets for home, small office and organisation.
NewA price estimator on the homepage, and a live count of actively exploited vulnerabilities.
FixThe "used in ransomware" flag now stays in step with CISA's catalogue.

NewA plain-English security health check for every computer, and email alerts for low disk space, overdue restarts, and antivirus or firewall turned off.
NewThe FreNiMi Expert Engine explains each finding in plain English: what it is, why it matters for that computer, and what to do.
NewA monthly plain-English security report, and updates to install shown as a to-do list.
NewManaged Security packages you can subscribe to in the app, plus cancelling, closing a workspace and deleting your account yourself.
NewMicrosoft Defender Vulnerability Management import, including government clouds.
NewEach client's security health in the managed service provider console.
NewPages for churches and small businesses, and FreNiMiGuard's own contact form.

Agent 1.0.16Each agent's sign-in token is replaced automatically every 30 days.
Agent 1.0.15Passkey approvals: a computer runs a script or install only when an approver's passkey signed that exact command.
Agent 1.0.14Each computer enforces its own limits: report only, updates only, or approved actions, with a cap per hour.
Agent 1.0.13Agents check their own file against the signed release.
NewTenable and Nessus import, Jira issues for remediation tasks, and readable Slack and Microsoft Teams alerts.
NewEvidence records include the passkey approval and the exact command. See the sample record.
NewApple's own fix data for macOS, warnings for computers on an unsupported operating system, and a fleet health view.
NewAdministrators are emailed when computers stop checking in. A free plan for up to 100 assets.
FixFar fewer false findings on Windows Insider builds and for extension-only vulnerabilities.

Agent 1.0.12A Windows installer (MSI) for deploying with Intune or Group Policy.
Agent 1.0.10 to 1.0.11Signed automatic updates on Windows, macOS and Linux. An agent installs a new version only if FreNiMi's offline release key signed it.
Agent 1.0.9Fuller device inventory, Mac installer-package apps, and 25 more reports.

Agent 1.0.5 to 1.0.8Third-party app updates, device inventory, USB devices, network discovery and macOS packages.
NewEach software deployment is checked against the computer's next inventory, so you see verified, not just "sent".
NewA script library, a 90-package software repository, a Windows updates view, and 43 built-in reports.
NewDashboard drill-downs and saved table views.

NewPatch policies with maintenance windows, restarts inside the window, and never-update exclusions.
NewA signed remediation evidence report for auditors and insurers.
NewA console for managed service providers, with a cross-client report.
NewSelf-service sign-up, sign-in with email, and per-asset plans.
NewEvery customer's records are separated in the database itself, not only in the application.
FixWindows findings now come from Microsoft's own fixed builds, which removed most false matches.

NewThe optional endpoint agent, with remote actions that a person approves and that are verified afterwards.
NewVulnerability management: installed software checked against CISA, NVD and Microsoft data, with deadlines and alerts.
NewInventory import from Microsoft Intune, Jamf Pro and spreadsheets, and the in-app assistant.

Earlier work covered NIST SP 800-53 controls, OSCAL documents and the compliance checklists.