Skip to content
← Back to release notes
v0.83.0 stable major release

Release v0.83.0

Jun 23, 2026

Manage configuration policies, SentinelOne, and patch update rings across all of a partner's organizations at once; gate remote sessions behind end-user consent; build a reusable PAM trusted-publisher catalog with mobile approvals; and work the whole app comfortably on mobile with responsive tables and a unified filter bar.

Partner-Wide Management

  • Partner-wide configuration policies. You can now author a configuration policy once at the partner level and have it apply across every organization you manage, instead of recreating the same policy in each customer account.
  • Partner-wide SentinelOne. Connect SentinelOne once for your whole partner account and have it cover all of your organizations, rather than wiring up the integration customer by customer.
  • Partner-wide patch rings & approvals. Update rings and patch approvals can now be defined independently of any single organization and applied across all of them, so a partner can run one consistent patching policy fleet-wide.

Security & Approvals

  • Reusable trusted-publisher catalog for PAM. Build a library of signer groups — trusted software publishers — once and reuse them across your privileged-access rules, instead of re-entering the same publishers on every rule.
  • Smarter PAM rule matching. Privileged-access rules can now match on command-line content and negations, with a clear default verdict for anything that doesn't match a rule, so elevation decisions are more precise and predictable.
  • Approve UAC elevations from your phone. Windows User Account Control elevation requests intercepted by Breeze are now bridged to the mobile approval surface, so an approver can review and approve an elevation from the Breeze Authenticator app.
  • Honored OAuth client blocks. When an organization blocks an OAuth client, that block is now correctly enforced for partner-scoped access tokens as well — closing a gap where a blocked client could still reach data through a partner token.
  • Safer search. Ticket and mobile search now correctly escape backslashes so search terms match exactly as typed instead of misbehaving on special characters.

Remote Management

  • End-user consent for remote sessions. Devices running the Breeze Helper now show a start notice, a persistent 'Remote session active' banner, and an optional Allow/Deny prompt before a technician's screen view begins. A new remote-access policy lets you choose Off, Notify, or Consent per your privacy needs — note that on upgrade this defaults to Notify, so previously-silent Helper devices will now show a start notice.

Visibility & Monitoring

  • Device reliability scoring. Reliability now weights uptime by device type — a laptop that sleeps overnight isn't judged like an always-on server — and excludes time before a device was enrolled. A new sortable Device Reliability column lets you rank your fleet, and each device's reliability card gains an Ask-AI button and a Mark-outcome menu to record what actually happened.
  • Virtual machine and VDI detection. The agent now identifies whether a device is running on a hypervisor and reports it as its own attribute, so virtual machines and VDI sessions are clearly distinguished from physical hardware.
  • More useful process drilldowns. Process drilldown views now show distinct empty states and drillable area charts, the device Activity pane is a faster index-backed feed of recent events, and discovered SNMP data now appears in the asset list and detail view.
  • Surface the Huntress webhook details. The inbound Huntress webhook URL and secret are now shown directly in the integration settings, so you no longer have to dig them up elsewhere to finish setup.

Billing & Ticketing

  • Quotes flow into recurring contracts. When a customer accepts a quote, its recurring (monthly or annual) lines now automatically create a draft contract, so subscription work moves from quote to recurring billing without re-entering it.
  • Contracts that auto-renew. Recurring contracts can now renew automatically and send renewal notices ahead of the renewal date, so ongoing agreements don't lapse unnoticed.
  • Edit tickets after creation. Ticket comments can now be edited or deleted (with an 'edited' badge and a tombstone for removed comments), ticket fields like subject, description, due date, tags, and linked device are editable, and a ticket can be reassigned to another organization within the same partner.

Mobile & UX

  • Tables that work on phones. A new responsive-table treatment is applied across the app, so the data-heavy tables that used to overflow on a phone now reflow into readable cards on small screens.
  • A unified filter bar. The Devices page's two separate filtering systems are merged into one chip-based filter bar with quick-preset chips, an Add-filter picker for any field, and saved Views — eliminating contradictory filter states (like an 'Online' chip plus an 'Offline' dropdown returning zero devices) and letting you save the filter sets you use most.
  • Smoother editing and navigation. The script editor keeps its theme when you navigate between scripts, the AI chat panel stays pinned to the bottom as you submit and as responses stream in, and the sidebar keeps its scroll position as you move between pages.

Reliability & Fixes

  • Reduced database pressure under load. Monitor checks are now queued outside the main database transaction and slow background work is guarded against holding a connection open, addressing a class of connection-exhaustion slowdowns under heavy load.
  • Honest download errors. Viewer and software-download paths no longer disguise a storage transport failure as a 'not found' error — a real failure now reports as a server error so it can be diagnosed instead of looking like a missing file.
  • Sharper anomaly detection. Seasonal anomaly baselines must now be fully established before a metric is scored, so anomaly alerts wait for enough history instead of firing on incomplete data.
  • Resilient Huntress sync. Transient Huntress sync failures are now retried automatically and the real sync status is shown, so a temporary hiccup no longer looks like a broken integration.
  • Patch jobs no longer get stranded. Scheduled patch jobs that were never handed off to the executor are now reconciled and run, so a scheduled patch can't quietly fail to start.
  • Self-updating Watchdog. The agent's Watchdog component now updates itself along with the agent, so it no longer stays frozen at the version it was installed with.
  • Better Windows 11 and macOS agent reporting. UAC elevation discovery now works correctly on Windows 11, and macOS devices report memory usage based on actual memory pressure for a more accurate reading.
  • Clearer device and discovery details. Devices show their friendly display name in the Device column, the network-discovery page is safely guarded in All-Orgs mode, the empty Network Changes tab explains that Alerting is a prerequisite, and warranty data re-syncs and shows refresh feedback the moment a device is first identified.

Version 0.83.0 is about managing across every customer at once. Partners can now author a configuration policy, a SentinelOne connection, and a set of patch update rings & approvals at the partner level and have them apply to all of their organizations — instead of recreating the same setup account by account. It’s the biggest step yet toward running a large fleet from a single pane of glass.

This release also tightens security and remote access. Remote desktop sessions now respect the person at the keyboard: Helper-equipped devices show a start notice, a persistent “session active” banner, and an optional Allow/Deny consent prompt, all controlled by a new policy. Privileged Access Management gains a reusable catalog of trusted software publishers, smarter rule matching, and the ability to approve a Windows UAC elevation from your phone. And an OAuth fix ensures organization-level client blocks are honored for partner tokens too.

Day-to-day work gets noticeably better as well. Device reliability is now scored intelligently by device type with a sortable column and an Ask-AI workflow, virtual machines and VDI sessions are detected and labeled, accepted quotes flow straight into auto-renewing recurring contracts, and tickets are finally editable after creation. The whole app is now comfortable on a phone thanks to responsive tables, and the Devices page gets a single chip-based filter bar with saved views. Rounding it out is a deep reliability pass — reduced database pressure under load, honest download errors, a self-updating Watchdog, and a sweep of dependency and CVE updates.