> For the complete documentation index, see [llms.txt](https://docs.cloudcyte.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cloudcyte.com/release-notes/v4.4.9.md). # v4.4.9 Published: 05.10.2026 **New Features** * Added Vulnerability data import to Vulnerability Scan Results: the new Import menu next to Export lets you download a CSV import template with sample data and upload your own scan results. * Added in-product API documentation with usage examples under Help, and organization API keys are now shown on the API usage page. * Added the Windows Services Analysis artifact under Windows Artefacts in Artefact Analysis: Windows Autoruns & Process Analysis now also collects installed services, including name, display name, status, start type, path and account. **Improvements** * Improved the Endpoint Health Analysis dashboard: it now defaults to "Last 1 Day" and shows active device counters (total, AD/Intune, Windows and Linux/macOS devices and agents). Top Resource-Consuming Devices are sorted by CPU, Machine Health Summary by state, and disk space widgets cover drive "C:" only. * Improved the Infrastructure Health dashboard with updated device, EDR agent and patch health counters and new Security, EDR and DLP Software Summary charts; "Devices by Tag" was removed. * Added "Health State" for repository integrations, showing whether the last poll succeeded, failed to connect or ran into an error while collecting data. * Improved Endpoint Security Software Analysis to also detect security products by their monitored service names and record running products in the Security Center Summary. * Improved Microsoft Defender Analysis with "Defender Status", MAPS connection state and details, stale Security Center entry detection and removal, enforced signature updates for outdated signatures ("Outdated Signature Interval (Days)", default 3), and automatic repair of mandatory Defender modules. All actions are recorded in Remediation Logs. * Improved Deep Hunting: activity matching the "Global Allow List" is no longer sent to the server. * Improved the display of long command lines: they are now truncated to 400 characters in Windows Threat Monitoring Events, Object and Honeypot Access Events and File Activity Events. * Improved the default view of Windows Object and Honeypot Access Events: "Command Line", "IP Address", "Is Signed" and "Signature Status" columns are now hidden by default. * Improved the performance of Windows Security Control Remediation and Security Center Analysis by reducing repeated database updates. * Improved User Management: an email address can no longer be used by more than one user. * Improved Shadow IT "Add to List": "Trusted Organization Artifacts List" is now preselected. * Improved the GRC menu structure: it is now organized into Overview, Context & Scope, Risk Management, Compliance & Audits, Integrated Management and Settings. * Added linking of GRC Activities to GRC controls, and synchronization of GRC Activities and Activity Types to organizations from the central catalog. * Improved the GRC Activities grid with a "State" column and "Set State", "Enable", "Disable", "Set Owner", "Set Last Review Date" and "Set Next Review Date" actions; "Display Deleted Activities" was renamed to "Display Disabled Activities". * Added a control standard filter to the GRC Activities top grid. * Improved GRC Activities: related control activities now show the standard name and ID, and relationships of global activities are editable. * Improved GRC Assessment Activities with "Set Next Review Date", a Late Reviews count in Stage 6 and an "x of y applicable" value in Stage 3; Stage 6 findings were removed. * Improved the Risk Registry with new default columns, "Set Risk Status" and "Set Next Review Date" actions, search in the related filter tab, clearable dates, and empty implementation and completion dates for new risks. * Improved the Treatment Plan: risk titles open in a new tab, and new bulk actions "Set Risk Owner", "Set Target Date", "Set Treatment Option", "Set Inherent Risk Level" and "Set Residual Risk Level" are available. * Added "Monitor" and "Reduce/Modify" risk treatment options; "Reduce/Modify" replaces "Modify/Mitigate". * Improved GRC risk import: risk owners are matched by first and last name, and an existing risk with the same title is updated instead of duplicated. * Improved the Statement of Applicability: control names open the edit view in a new tab, and a "Set Applicability" action is available. * Improved the Control Review Queue with a "Not Reviewed" / "All" selector, back and forward navigation, owner and group change, risk, document and business activity linking, a required reason for non-applicable controls, and a control picker colored by compliance state. * Added TPM vendor actions "Link to Organisation Internal Maturity", "Link to Questionnaire", "Send Questionnaire" and "Request Access to Shared Questionnaire", plus a questionnaire selector next to the organization maturity summary in the vendor detail view. * Improved TPM vendor management: vendor edit includes a messaging history tab, vendor names open the edit view, built-in responses moved to Questionnaire Management, and "Link Shared Response" was removed. * Improved TPRM maturity sharing settings: they moved to "TPM Settings" and now have a "Save" button. **Bug fixes** * Fixed the "Forensics Auto AI Analysis Exclusions Execution" scheduled job failing with a server error. * Fixed new scheduled jobs, including GRC Activities, not being created automatically for organizations. * Fixed duplicate entries in the Windows Security Center summary. * Fixed agent uninstall jobs failing when the installation folder no longer exists; the registry and related services are now cleaned up and the job succeeds. * Fixed handling of users disabled in Active Directory when entity creation from AD polling is enabled. * Fixed an error during Windows registry values collection. * Fixed the CISO Dashboard graphs ignoring the selected date range. * Fixed "Windows Hardening" links on the CISO Dashboard and Artifact Summary not opening the grid with the correct filters. * Fixed an error when filtering the Risk Registry by "Risk Owner User". * Fixed "Update Assessment Based on Surveys" writing the response instead of the comment as the answer. * Fixed Reputeo synchronization. * Fixed appending aggregated values to a classification rule from the aggregation window.