Cytracom Product Updates logo

Product Updates

Check back here for the latest Cytracom product announcments.

Subscribe to Updates

Labels

  • All Posts
  • Desktop
  • ControlOne
  • Mobile
  • PBX
  • Partner Portal
  • Telivy
  • Tentacle
  • PO

Jump to Month

  • June 2026
  • May 2026
  • April 2026
  • March 2026
  • February 2026
  • January 2026
  • December 2025
  • November 2025
  • October 2025
  • September 2025
  • August 2025
  • May 2025
  • March 2025
  • January 2025
  • August 2024
  • July 2024
  • June 2024
  • May 2024
  • April 2024
  • March 2024
  • February 2024
  • January 2024
  • December 2023
  • November 2023
  • October 2023
  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • May 2023
  • February 2023
Telivy
a week ago

Telivy Update: Cleaner Alerting and Improved Alert History

Telivy now provides cleaner, more reliable alerting by preventing duplicate alerts for the same security finding, restoring typo-squatting email notifications, and improving access to alert history. Partners can also acknowledge or resolve alerts directly to keep recurring findings from generating repeated helpdesk activity.

What's New

  • Partners can now acknowledge or resolve alerts, marking findings as actioned and preventing the same alert from firing again.
  • Alert deduplication now prevents multiple alerts from being created for the same security finding, such as identical Common Vulnerabilities and Exposures (CVEs) on the same host.
  • Email notifications for typo-squatting domain detections are now delivered reliably, restoring alert coverage for this category of security finding.
  • Alert history pagination now works correctly, giving partners full access to alert history without missing records.

How to Access It

These updates are live now in Telivy and are automatically applied. No action is required.

Avatar of authorRob McDonald
Telivy
2 weeks ago

Telivy Update: Expanded Browser Password Analysis, Risk Register, and Multi-User Assessments

Telivy now gives partners broader browser security coverage, clearer accepted-risk tracking, and more flexible collaboration on assessments. Firefox data is now included in browser risk analysis, vulnerability details are easier to prioritize, and a new Risk Register helps partners track accepted risks, review dates, compensating controls, and audit history in one place.

What's New

  • Firefox browser history, installed extensions, and saved passwords are now collected on Windows and macOS, expanding browser risk coverage across leading desktop browsers.
  • Common Vulnerabilities and Exposures (CVE) details now include Exploit Prediction Scoring System (EPSS) scores, helping partners prioritize remediation based on exploitation likelihood.
  • CVE detail views are now consistent across all vulnerability sources, making risk assessment and remediation planning easier to follow.
  • The dashboard now includes a "Due for Review" widget that shows risk decisions nearing review or overdue.
  • The new Risk Register tab compiles accepted risks, compensating controls, review dates, and audit history in one place.
  • Assessments now support multi-user sharing, allowing partners to invite teammates to view or collaborate on specific security assessments without changing broader role assignments or ownership.
  • Saved password scanning for Chrome version 137 and later has been restored using the Windows Key Storage Provider, giving partners visibility into Chrome-stored credentials on supported devices.
  • Chrome password decryption is now more reliable when API calls are slow or time out.
  • Personally identifiable information (PII) scanning has been improved for South African ID numbers and common identifier variants across countries.

Why You'll Love It

Partners managing mixed-browser environments now have broader, more reliable browser risk data across Chrome and Firefox without additional configuration. The Risk Register and "Due for Review" widget help partners stay ahead of audit cycles by showing accepted risks that need attention, while multi-user assessment sharing makes it easier for teams to divide security review work without changing role assignments or assessment ownership. CVE detail improvements also make it easier to prioritize remediation based on consistent context and exploitation likelihood.

How to Access It

These updates are live now in Telivy and are automatically applied where supported. No action is required.

Avatar of authorRob McDonald
Telivy
a month ago

Telivy Update: Crosswalk Mapping for Multi-Framework Compliance Review

Crosswalk Review gives partners a faster path through multi-framework compliance assessments by mapping completed answers from one framework to related controls in others. Partners can reduce repetitive questionnaire work, keep compliance data more consistent, and move more efficiently across overlapping regulatory requirements.

What's New

  • Crosswalk Review is now available to Early Access partners in Telivy.
  • A new overlay highlights potential control mappings across compliance frameworks, so partners can review suggested matches before applying them.
  • Partners can accept or reject suggested mappings and apply completed answers to additional frameworks rather than re-entering them manually.

Why You'll Love It

Crosswalk Review helps partners manage clients with overlapping compliance requirements more efficiently. By mapping answers across frameworks, partners can reduce duplicate effort, keep multi-framework assessment data consistent, and shorten the time needed to move from one compliance program to the next.

How to Access It

Crosswalk Review is available in Early Access through the Telivy console. Use the Enable Early Access Features instructions to get started: Enable Early Access Features

Avatar of authorRob McDonald
Telivy
a month ago

Telivy Update: Vulnerability Views, Endpoint Security Monitoring, and Microsoft 365 Policy Improvements

Telivy now makes vulnerability data easier to review, export, and share with clients. Endpoint Security monitoring gives partners a clearer view of antivirus, firewall, and disk encryption coverage, while Microsoft 365 policy improvements help Early Access partners move from connection to prioritized remediation with less manual effort.

What's New

  • The Threats & Vulnerabilities dashboard now includes tabbed vulnerability views by endpoint, user, and Common Vulnerabilities and Exposures (CVE), letting partners review risk from multiple perspectives without switching tools.
  • Vulnerability exports now generate a multi-sheet Excel file with separate sheets for CVE, device, and user data, creating a richer client reporting artifact than the previous flat CSV export.
  • The Endpoints tab in Inventory now shows security posture across managed endpoints, including antivirus, firewall, and disk encryption status.
  • The Overview tab now includes an Endpoint Security summary card with monitored endpoint counts and antivirus, firewall, and disk encryption coverage.
  • The Overview tab now includes a prioritized Top Actions table that sorts remediation steps by projected impact on client CIS scores.
  • Browser password results now sort by whether passwords exist rather than by nickname, making it easier to identify accounts with stored credentials.
  • Microsoft 365 policy management now fetches policies automatically on connect for Early Access partners, removing the need for a separate manual policy check.
  • The Microsoft 365 Policy Management table now shows inline recommendations beneath each policy name for Early Access partners.
  • The Microsoft 365 Policy Management table now includes per-policy links to official Microsoft documentation for Early Access partners.
  • The Configure tab now includes a post-connect Remediate call to action for Early Access partners, directing them to policy remediation tasks after connecting Microsoft 365.
  • Fixable findings now sort to the top of the Risk tab table for Early Access partners, with the "Fix Available" badge promoted within the severity column.
  • The Microsoft 365 Policy Inspect drawer now includes a "Learn more" block for Early Access partners, bringing recommendations, CIS references, Microsoft documentation links, and admin portal navigation into one place.

Why You'll Love It

Vulnerability reporting now matches how partners review and explain risk, with dedicated views for each perspective and a multi-sheet export that is easier to share with clients. Endpoint Security monitoring makes antivirus, firewall, and encryption coverage visible without manual cross-referencing, while the Top Actions table helps partners focus on remediation work with the highest projected score impact. For Microsoft 365 policy management in Early Access, automatic policy ingestion, inline guidance, and contextual documentation reduce the steps between finding a policy gap and resolving it.

How to Access It

Vulnerability views, the Endpoints tab, the Endpoint Security summary card, the Top Actions table, and browser password sorting improvements are live now in Telivy and are automatically applied where supported. Microsoft 365 policy management enhancements, including automatic policy fetch, inline recommendations, per-policy documentation links, the post-connect Remediate call to action, fixable findings sorting, and the Policy Inspect "Learn more" block, are available in Early Access through the Telivy console. Use the Enable Early Access Features instructions to get started: Enable Early Access Features

Avatar of authorRob McDonald
Telivy
a month ago

Telivy Update: Microsoft 365 Remediation Visibility and Framework Crosswalk Improvements

Telivy now makes it easier to identify actionable Microsoft 365 security gaps, understand which fixes can improve assessment scores, and avoid duplicate compliance work across related frameworks. Cloud token reliability improvements also reduce unnecessary reconnection noise and provide clearer guidance when action is needed.

What's New

  • The Microsoft 365 Overview dashboard now shows a reliable count of available automated fixes and the potential score uplift if those fixes are applied.
  • The Risk tab now shows a "Fix Available" badge on Microsoft 365 findings that can be remediated from the interface for Early Access partners.
  • Framework similarity scores are now visible on the frameworks screen for Early Access partners, showing the percentage of overlap between compliance frameworks.
  • Microsoft 365 multifactor authentication (MFA) enforcement and legacy authentication blocking now report correctly for Early Access partners on tenants where Security Defaults are enabled.
  • Cloud token health checks are more reliable, with improved token refresh handling and disconnect emails that explain why reconnection is needed.

Why You'll Love It

Clearer Microsoft 365 remediation signals help partners focus on the findings they can act on directly and understand which fixes may have the greatest impact. Framework similarity scores make it easier to identify overlap across compliance programs, reducing duplicate control work across related frameworks. More reliable cloud token handling and clearer disconnect emails also help partners resolve connectivity issues faster without unnecessary interruptions.

How to Access It

Microsoft 365 Overview updates and cloud token reliability improvements are live now in Telivy and are automatically applied where supported. The Risk tab "Fix Available" badge, framework similarity scores, and Microsoft 365 policy reporting corrections are available in Early Access through the Telivy console. Use the Enable Early Access Features instructions to get started: Enable Early Access Features

Avatar of authorRob McDonald
Telivy
a month ago

Telivy Update: Large Assessment Performance, HIPAA Compliance Reporting, and Unified Remediation Tracking

Telivy now performs more reliably across large assessments, makes compliance evidence easier to share, and keeps remediation work coordinated across Telivy and Tentacle. Mandatory review dates for accepted and resolved risks also help partners keep client compliance programs on schedule.

What's New

  • HIPAA Compliance Reports are now available in Telivy. These point-in-time reports map scan results to HIPAA Security Rule safeguards and show whether each control is documented and implemented.
  • Assessment creation now includes a primary industry vertical selector, with more than 20 options such as healthcare, finance, and government.
  • Telivy uses the selected industry vertical to identify relevant compliance frameworks and tailor report content automatically.
  • Companies can now be deleted or archived in Telivy, making it easier to keep workspaces organized as client records change.
  • Accepted and resolved risk decisions now require review dates, with preset intervals that support consistent reassessment across client environments.
  • Scan completion emails now include finding counts, severity breakdowns, and an AI-generated summary, giving partners a clearer view of results before they log in.
  • Server-side pagination is now live across major assessment data views, helping large assessments load faster and more reliably without browser slowdowns or timeouts.
  • Pagination improvements apply to installed applications, internal vulnerabilities, network hosts, security findings, browser history, browser passwords, scan targets, Microsoft 365 users and audit logs, and risk analysis.

Why You'll Love It

Large assessments are now smoother to review, with performance improvements that reduce browser stalls and timeouts in data-heavy environments. HIPAA Compliance Reports give partners a structured artifact they can share with auditors and clients, while mandatory review intervals keep risk decisions from going unmanaged. Richer scan completion emails also make it easier to understand results and prioritize follow-up before opening Telivy.

How to Access It

These updates are live now in Telivy and are automatically enabled for all partners. No action is required.

Avatar of authorRob McDonald
Telivy
a month ago

Telivy Update: Agent Autoupdate and Company Management Improvements

Keeping agents current is now easier, company records are more flexible to manage, and scan notifications provide clearer context before you log in. Reliability improvements also restore more complete password scan coverage and reduce alert noise across managed environments.

What's New

  • Delete or archive companies in Telivy to keep workspaces organized as client records change over time.
  • Tag assessments with a primary industry vertical from more than 20 options, including healthcare, finance, and government. Telivy uses this information to identify relevant compliance frameworks and tailor report content automatically.
  • Scan completion emails now include richer context, with finding counts, severity breakdowns, and an AI-generated summary giving partners a clearer picture of results before they log in.
  • Agent Autoupdate is available to Early Access partners. Telivy agents on Windows and macOS automatically check for and apply updates hourly, keeping deployments current without manual intervention. Partners can opt in through the Telivy console.
  • Browser-stored password scans now run reliably again. The agent signs in to user profiles as expected during scans, restoring comprehensive password vulnerability detection in Telivy Agent v30.3.6.1 for Windows and v3.3.4.0 for macOS.
  • Agent status descriptions are now accurate after in-place upgrades, resolved in Telivy Agent v30.3.6.1 for Windows and v3.3.4.0 for macOS.
  • Repeated password scan alerts triggered by disabled user accounts no longer fire, resolved in Telivy Agent v30.3.6.1 for Windows and v3.3.4.0 for macOS.

Why You'll Love It

Agent Autoupdate removes a recurring maintenance task for partners managing larger deployments, while company archive and delete options make workspaces easier to maintain as client rosters change. The expanded assessment form and richer scan emails help teams act faster with better context, and Tentacle workflow support reduces duplicate remediation work across products.

How to Access It

Company management improvements, the assessment operations form, Tentacle task and POA&M workflow support, and enriched scan completion emails are live now in Telivy and automatically enabled. Agent reliability and alerting fixes are live now in Telivy Agent v30.3.6.1 for Windows and v3.3.4.0 for macOS.

Agent Autoupdate is available in Early Access through the Telivy console. Use these instructions to get started: Enable Early Access Features

Avatar of authorRob McDonald
Telivy
2 months ago

Telivy Update: Tasks and POA&M Tracking in Tentacle and Richer Executive Reports

Partners can now manage remediation activity and risk decisions across Telivy and Tentacle with less duplicate work. Executive Reports also now make client-facing security reviews easier with a first-page severity breakdown.

What's New

  • Tasks and POA&M tracking now work across Telivy and Tentacle. Partners can manage remediation activity, compliance work, and risk decisions in one place without duplicating entries or switching between systems.
  • Executive Reports now include a first-page severity breakdown. High-severity, Medium-severity, and Low-severity issue counts appear on the first page, making it faster to walk clients through security posture without digging through the full report.

Why You'll Love It

Bringing Tasks and POA&M tracking across Telivy and Tentacle helps partners manage compliance activity with a clearer view of each client's status across products. The updated Executive Report layout also makes it easier to present security posture to clients and auditors without manually pulling details from multiple places.

How to Access It

Both updates are live now in Telivy and require no configuration.

Avatar of authorRob McDonald
Telivy
2 months ago

Telivy Update: HIPAA Compliance Reports, Microsoft 365 Policy Enforcement, and Smarter Scan Notifications

HIPAA Compliance Reports give partners an auditor-ready artifact built from scan data, making it easier to share compliance evidence with healthcare clients. Microsoft 365 policy enforcement helps partners detect and remediate critical security gaps across managed tenants from a single interface, while richer scan-complete emails provide faster context for triaging findings before logging in.

What's New

  • HIPAA Compliance Reports map completed scan results to HIPAA Security Rule safeguards and show whether each safeguard is documented and implemented, making it easier to share evidence with auditors and clients.
  • A new industry selector during assessment creation lets partners tag clients across more than 20 verticals, including healthcare, finance, and government, so Telivy can identify relevant compliance frameworks and tailor report content automatically.
  • Microsoft 365 policy enforcement detects and remediates security gaps across managed tenants from a single interface (Early Access), including multi-factor authentication (MFA) enforcement, legacy authentication blocking, admin consent workflows, and guest access controls.
  • Microsoft 365 security policy baselines can be applied directly to client tenants from Telivy (Early Access), so partners can move from detection to enforcement rather than opening the Microsoft admin center or configuring each tenant individually.
  • Bulk PSA task sync creates and syncs all remediation tasks in a single action (Early Access), replacing manual ticket-by-ticket creation and keeping task status centralized across client assessments.
  • Scan-complete emails now include finding counts, severity breakdowns, and an AI-generated summary, giving partners more context from the inbox before they log in.
  • Teammates who open a Telivy risk assessment link are now provisioned automatically in Tentacle with the correct project access, removing manual setup and helping teams start collaborating faster.
  • Inactive sessions now expire after 20 minutes, with a one-minute prompt to extend, improving account security across active sessions.

Why You'll Love It

HIPAA Compliance Reports make it easier to share scan-based compliance evidence without manually assembling documentation. Microsoft 365 policy enforcement turns a tenant-by-tenant manual process into a more centralized workflow, helping partners save time across managed environments. Richer scan-complete emails provide useful context right away, and automatic Tentacle provisioning helps teammates start collaborating without manual setup.

How to Access It

Open any completed scan in Telivy and use the Reports section to generate a HIPAA Compliance Report. The industry selector, richer scan-complete emails, automatic Tentacle provisioning, and session timeout enforcement are live now. Microsoft 365 policy enforcement, Microsoft 365 baseline application, and bulk PSA task sync are available through Early Access.

Early access features are available right in the product to opt-in. Use these instructions to get started: Enable Early Access Features

Avatar of authorRob McDonald
Telivy
2 months ago

Telivy Update: HIPAA Compliance Reports and Smoother Unity Platform Integration

HIPAA Compliance Reports give partners an auditor-ready artifact built from scan data, making it easier to share compliance evidence with healthcare clients. Navigation and provisioning across the Unity Platform, Telivy, and Tentacle are also more seamless, with automatic workspace routing and emails notifying partners of completed scans that help them review findings faster.

What's New

  • Generate HIPAA Compliance Reports from completed scans. Reports map scan results to HIPAA Security Rule safeguards and show whether each safeguard is documented and implemented.
  • Move from a customer tenant in the Unity Platform into the correct Tentacle workspace automatically, without manual navigation.
  • Improve provisioning between the Unity Platform, Telivy, and Tentacle by linking Telivy clients to the correct Unity Platform tenants and providing guidance when Tentacle access still needs to be set up.
  • Emails notifying partners of completed scans now include finding counts, severity breakdowns, and an AI-generated summary to help partners review results faster.

Why You'll Love It

HIPAA Compliance Reports make it easier to share scan-based compliance evidence with healthcare clients and auditors without manually assembling documentation. Smoother navigation and provisioning across the Unity Platform, Telivy, and Tentacle reduce workspace confusion and make onboarding easier. Emails notifying partners of completed scans now provide useful context right away, helping partners understand results faster without logging in first.

How to Access It

Open a completed scan in Telivy to generate a HIPAA Compliance Report from the Reports section. Workspace routing, provisioning improvements, and updated completed-scan email notifications are live now and automatically enabled.

Avatar of authorRob McDonald