Telivy gives partners a clearer, more efficient security monitoring experience this week. Alert Policies now show every alert category in a single, filterable list. Complete and Legacy Reports include a linked table of contents for faster navigation. Microsoft 365 recommendations are now normalized into canonical Cloud findings for partners in Early Access, and PSA-side ticket resolutions automatically mark findings resolved in Telivy (Early Access). Reliability improvements round out the release.

What's New

• Alert Policies now show a single, complete list of every alert category with enable/disable toggles and status filtering, so partners can manage monitoring coverage without paging through partial views.
• Complete and Legacy Reports now include a linked table of contents, making it faster to navigate and audit security findings across long reports.
• The Top Actions overview no longer shows resolved findings as critical, and the DMARC Critical Problems investigation link now works correctly.
• The Document Type dropdown on the Reports page now opens reliably when the arrow icon is clicked.
• Center for Internet Security (CIS) mappings have been updated with new scan findings, improving security compliance reporting accuracy.
• Frontend delivery and performance improvements make the platform faster and smoother across all partner workflows.
• Microsoft 365 recommendations are now normalized into canonical Cloud findings, giving partners a clearer and more consistent view of cloud security risks (Early Access).
• PSA-side ticket resolutions are now detected automatically, marking the corresponding findings resolved in Telivy so partners avoid manual reconciliation (Early Access).

Why You'll Love It

Partners spend less time managing monitoring noise and more time acting on accurate, prioritized findings. A single alert policy list with toggles and filters replaces fragmented views, making it easier to see what is monitored and what is not. Report navigation is faster with the new linked table of contents, reducing time spent scrolling through long assessments. Partners on Early Access benefit from cleaner Microsoft 365 security data and a tighter PSA workflow where resolved tickets automatically close the corresponding Telivy findings.

How to Access It

Alert policy improvements, report navigation, the Top Actions fix, the Document Type dropdown fix, updated CIS mappings, and frontend performance improvements are live now in Telivy and are automatically applied. No action is required.

The Microsoft 365 findings normalization and PSA ticket resolution sync are available in Early Access. Early access features are available right in the product to opt-in. Use these instructions to get started.

Telivy now provides partners with clearer vulnerability prioritization, more reliable PSA integration, and targeted reliability improvements that strengthen scan accuracy and reporting stability. Risk Prioritization scoring is now available to all partners, with refined signal weighting and comprehensive Known Exploited Vulnerability (KEV) coverage, so partners can focus remediation efforts on the threats that matter most.

What's New

Risk Scoring & Prioritization

• Risk Prioritization now available to all partners (feature flag removed; admins can trigger manual score recompute).
• Risk Prioritization scoring v1.1: likelihood floors for KEV/ransomware-associated vulnerabilities, rebalanced signal weights, corrected exposure calculations.
• KEV sync now covers the full historical catalog (previously 49 of 1,655; all now flagged).
• Risk score recomputation scales across the full partner fleet with delta-driven processing and reduced write overhead.

Accuracy & Reliability Fixes

• PSA sync no longer fails with "priority not found" on custom priority tables.
• Data security risk report generation no longer runs out of memory on large assessments.
• CIS compliance no longer marks training as compliant when no supporting data is present.
• Typosquatting alerts correctly identify lookalike domains and no longer go permanently silent after first detection.
• DNS health scan failures now reported accurately (previously indistinguishable from clean results).
• Security Data tab pagination arrows now advance the page correctly.
• Stale Astra widget instances no longer persist after the widget is closed.

Integrations

• PSA integration: updated configuration modal, bulk sync for CVE and device data, Microsoft 365 sync support.
• Cloud setup cards now show connection status, last sync time, and a refetch action.

Alerting & Assessments

• Alert Policies: bulk deletion, bulk recipient overrides, one-click setup for recommended configurations.
• Email security assessments now reflect RFC 9989 DMARC standards with explicit DMARC/SPF/transport findings and remediation guidance.

Usability & Navigation

• Explanatory tooltips on hover for vulnerability risk signals and asset criticality indicators.
• Security and application categories moved into the Inventory module.
• Search box added to the Microsoft 365 Improvement Recommendations view.

Why You'll Love It

Risk Prioritization reaching all partners means clearer, more actionable rankings that help focus remediation on the highest-risk exposures rather than noise. The PSA integration improvements reduce manual steps during setup and bulk operations, so partners spend less time configuring and more time acting on findings. Accuracy improvements across KEV sync, DNS scans, and compliance reporting reduce false signals and help partners trust what they see in the platform.

How to Access It

These updates are live now in Telivy and are automatically applied. No action is required.

Telivy now gives partners a more streamlined PSA integration experience alongside more accurate risk data. PSA configuration modals stay open during edits, bulk sync operations reduce manual steps, and clearer status indicators help partners identify when a PSA sync needs attention. Several reliability improvements round out the release, including corrected Antivirus findings, a stable Astra (the helpful AI agent within Telivy) widget, and more accurate labelling of network-asset CVE findings in the Risk view.

What's New

• The PSA integration configuration modal and company mapping modal no longer close when clicking outside them, preventing accidental loss of in-progress configuration changes.
• Multiple Alert Policy rows can now be selected and have PSA sync enabled or disabled in a single bulk action, reducing repetitive configuration steps.
• Microsoft 365 account sync and CVE/device bulk sync are now available directly from the risk view, making it faster to push findings into PSA workflows.
• PSA sync now distinguishes between a finding that was never synced and one where a sync attempt failed, giving partners clearer visibility into integration status.
• Alert Policies now support a PSA delivery filter, letting partners control which policies push findings to their PSA platform.
• "No Antivirus Present" findings now clear correctly once antivirus or EDR protection is detected, reducing false-positive alerts in the Risk view.
• Astra widget authentication is now stable. Partners can open CVE finding detail drawers and ask Astra questions without encountering errors.
• Network-asset CVE findings are now correctly labelled as network assets rather than devices, and hostnames display accurately instead of "Unknown" in the Risk view.
• OneDrive PII scan targets now display the correct device selection after a MAC address change, preventing repeated reconfiguration (Early Access).

Why You'll Love It

Cleaner PSA workflows mean less time spent on manual sync steps and more confidence that findings are reaching the right places. Accurate Antivirus and network-asset labelling reduce noise in the Risk view so partners can focus on genuine threats. With Astra back to reliable operation, partners get fast AI-powered context on CVE findings when they need it most.

How to Access It

These updates are live now in Telivy and are automatically applied. No action is required.

The OneDrive PII scan target fix is available in Early Access. Early access features are available right in the product to opt-in. Use these instructions to get started: Early Access Setup.

Telivy now completes primary domain changes when the corrected domain was already listed as an additional target, so partners can fix domain typos without receiving an error.

What's New

• Changing a primary domain no longer fails when the new domain is already listed as an additional target, allowing domain updates to complete reliably.

How to Access It

These updates are live now in Telivy and are automatically applied. No action is required.

Telivy now gives partners cleaner security data, richer threat context, and clearer monitoring scope. Typosquatting detection, which identifies lookalike domains that could be used to impersonate a client's brand, is now easier to triage. Common Vulnerabilities and Exposures (CVE) detection is also more accurate across desktop applications and document platform components, and the new Accounts Usage view helps partners understand monitored assets and billing controls. These updates reduce false-positive noise, improve PSA integration reliability, and help partners manage monitoring scope with less guesswork.

What's New

• The Typosquatting view now displays decoded lookalike domains, a fuzzer type legend, DNS resolver statuses, risk-level indicators, and a ranked table sorted by threat priority.
• Typosquatting findings are now enriched with internationalized domain name decoding, readable resolver error statuses, registration data, and risk scores for faster triage.
• The Accounts > Usage view is now available, listing active monitored endpoints and user accounts per assessment with controls to pause monitoring for selected Microsoft 365 and Google Workspace accounts.
• The Data-Risk false-positive interface has been redesigned with batch selection, interactive filtering by personally identifiable information type and status, and sorting by match count.
• CVE alerts for already-fixed vulnerabilities in a widely used document platform component are now attributed correctly to the detected installed version, reducing false-positive risk alerts.
• Desktop application CVE matching is now more accurate. Inherited browser-variant mismatches and garbage version strings no longer generate false-positive vulnerability findings.
• PSA task sync-status now displays correctly. A frontend issue that caused the sync-status endpoint to return errors for all users has been resolved.
• Risk History filtering now works correctly when opening a CVE group, showing only the severities and components relevant to the selected group.

Why You'll Love It

Partners get cleaner, more actionable security data across typosquatting, CVE detection, and Data-Risk workflows. Richer typosquatting findings make it easier to assess lookalike domain threats at a glance, while improved CVE accuracy means fewer follow-up investigations into false alerts. The new Accounts Usage view helps partners stay in control of monitoring scope and avoid unexpected billing charges. PSA sync reliability improvements reduce friction in ticket management workflows, keeping remediation activity visible and up to date.

How to Access It

These updates are live now in Telivy and are automatically applied. No action is required.

Telivy now retrieves partner statistics, security findings summaries, and breach data more efficiently across account sizes. These performance improvements reduce slowdowns and timeouts for partners managing large or complex client environments.

What's New

• Partner statistics now load faster across agencies, improving responsiveness when reviewing partner-level data.
• Security findings summaries now process large applications more reliably without timing out or running out of memory.
• Breach data now responds faster when partners review scan results and related security information.

How to Access It

These updates are live now in Telivy and are automatically applied. No action is required.

Telivy now gives partners a clearer path from vulnerability discovery to remediation. Improved CVE guidance helps partners focus patching effort on the right applications and devices, while risk prioritization updates, asset criticality scoring, and expanded reporting make it easier to identify the findings that need attention first.

What's New

• CVE remediation now identifies the correct application to patch when a vulnerability affects components embedded in multiple products.
• Actionable remediation guidance now appears alongside CVE findings directly in the dashboard, reducing the need to consult external advisories.
• The Risk view dashboard now sorts CVE findings by risk priority score (RPS) by default and includes unified tabs for faster triage.
• Inline Accept and Resolve controls are now available in the Risk view dashboard, helping partners manage vulnerability decisions without switching views.
• Partners can now accept or resolve individual vulnerability findings directly in the Risk tab, keeping remediation workflows consistent across Findings and Dashboard views.
• Per-device patch status is now visible for each CVE vulnerability, so partners can verify which devices have been remediated and prioritize the ones still outstanding.
• A new Asset Criticality Service scores assets based on personally identifiable information (PII) signals and device role, with support for manual overrides.
• QBR and CSRA reports now include a "Top Critical Assets & Why" section, giving partners a structured view of high-priority assets for client audits and reviews.
• Mobile-exclusive CVEs for iOS and Android no longer appear on desktop devices, eliminating false positives for Windows and macOS endpoints.

Why You'll Love It

Partners managing vulnerability programs can now move from finding to fix with less guesswork. More accurate remediation targeting helps patching effort go to the right application, per-device patch visibility shows what still needs work, and risk priority scoring helps teams focus on the most important findings first. Asset criticality and report updates also give partners stronger context for client conversations, audits, and reviews without manual preparation.

How to Access It

These updates are live now in Telivy and are automatically applied. No action is required.

Telivy now keeps agents up to date automatically across agencies, improves vulnerability detection accuracy, and resolves several reporting and navigation issues across security views. These updates reduce manual administration, cut down on false-positive CVE alerts, and make device, Microsoft 365, Dark Web, and Google Workspace Security data easier to review.

What's New

• Agent auto-updates are now enabled by default for all agencies, so new and existing agency configurations stay current without manual intervention.
• Common Vulnerabilities and Exposures (CVE) detection is now more accurate for a widely used document and design platform component, reducing false-positive alerts on patched installations.
• Version-string normalization is now consistent between storage and query time, preventing erroneous CVE alerts caused by mismatched version formats.
• Phantom installer version strings for the same platform component are now filtered out, reducing repeated false-positive CVE entries in vulnerability reports.
• The Network Security tab now shows the correct scan completion status on Windows devices when operating system version data is missing, rather than incorrectly displaying "Not started."
• The Devices search bar in the Inventory > Network section now filters the device list as expected.
• The industries dropdown in the assessment creation modal now displays and functions correctly.
• Microsoft 365 policy compliance checks are more accurate, and the "Admin consent required" check no longer flags compliant settings as non-compliant.
• Dark Web timeline year links now populate the breach table for the selected year.
• Google Workspace Security summary tiles now show totals across all accounts rather than only the current page of results.
• Google Workspace Security account table sorting now works correctly for all sortable columns.
• The CIS Controls Passing progress bar on the Overview tab now stays within its column.

How to Access It

These updates are live now in Telivy and are automatically applied. No action is required.

Telivy now delivers more reliable security alerting by ensuring typo-squatting domain notifications are delivered and alert history is easier to navigate. These improvements help partners stay aware of suspicious domain activity and review past alerts without interruption.

What's New

• Email notifications for typo-squatting domain alerts are now delivered reliably, so partners are notified when suspicious domain activity is detected.
• Alert history pagination now loads correctly, allowing partners to browse past alerts without missing pages or data.

How to Access It

These updates are live now in Telivy and are automatically applied. No action is required.

Telivy now provides cleaner, more reliable alerting by preventing duplicate alerts for the same security finding, restoring typo-squatting email notifications, and improving access to alert history. Partners can also acknowledge or resolve alerts directly to keep recurring findings from generating repeated helpdesk activity.

What's New

• Partners can now acknowledge or resolve alerts, marking findings as actioned and preventing the same alert from firing again.
• Alert deduplication now prevents multiple alerts from being created for the same security finding, such as identical Common Vulnerabilities and Exposures (CVEs) on the same host.
• Email notifications for typo-squatting domain detections are now delivered reliably, restoring alert coverage for this category of security finding.
• Alert history pagination now works correctly, giving partners full access to alert history without missing records.

How to Access It

These updates are live now in Telivy and are automatically applied. No action is required.