23 posts tagged with "Dashboard"

Three new dashboard surfaces this week, and a new device check.

A guided way to secure your company

The new Getting Started page helps you get more out of XFA. It lays out four tracked steps, from discovering every device to staying secure and compliant, so you always know what to set up next.

See where Discovery, Awareness and Enforcement stand

The Devices page now opens with a card for Discovery, Awareness and Enforcement, so you can see at a glance where your organization stands. Each card says whether that pillar is running or waiting on you, with the number behind it: devices discovered, alerts sent, successful sign ins. See the Devices overview

Statistics trends, rebuilt and out of BETA

Trends are now a single card: four tiles act as tabs above one chart, with the period, the operating system filter and the chart type on the card instead of in a fullscreen modal. Custom date ranges are supported, and the BETA labels are gone.

Unattended remote access, visible on the device

The device detail view now reports whether a device allows unattended remote access, and explains what the check looks for. You can act on it in your policy; XFA does not change the setting on the device. See your device policy

This week strengthens what XFA checks on mobile devices at sign-in, and makes the dashboard feel lighter and more responsive.

Mobile devices bring more to the sign-in check

The checks that flag a jailbroken, rooted or developer-mode device, or one that was just rebooted, already ran in the XFA app and showed in your dashboard. They now also reach the access decision at sign-in for mobile devices, so a risky mobile device is warned or blocked at login per your policy, the same way it already is on desktop. Nothing new is installed: the mobile app simply reports these signals when it verifies the device at sign-in. See your device policy

This week is about making setup clearer: you can see exactly when an Enforcement policy warns or blocks, and adding a Discovery connection is simpler.

See exactly when a device is warned or blocked

Setting up an Enforcement policy no longer means guessing what will happen. The policy settings now show a threshold timeline and a live timing summary as you edit, plus suggestion chips for common warn and block windows. You can see precisely when a device would be warned, and when it would be blocked, before you save. Enforcement stays configurable: a policy can warn or block, with or without an Awareness notification. Set up a policy

A simpler way to connect Discovery

Discovery has a redesigned two-column overview and a clearer way to add a connection. Selecting Add connection now opens a provider picker for Microsoft, Google or Okta and takes you straight to a step-by-step setup page for the one you chose. Discovery reads the devices in your organization from a connected identity provider, so adding one is the first step to seeing every device in use. Connect Discovery

Administrators now get a clearer signal when a device with the XFA agent stops reporting a verified status. The Devices overview highlights these devices as Lost connection, making it easier to spot endpoints that need to reconnect and complete verification again.

You can filter by the new status in both the Devices and People views, then request verification from the Dashboard to help the user reconnect the XFA app and resume sharing device security status.

Learn more about device verification statuses

Policy detail pages now include a compliance summary next to the policy settings.

The summary helps administrators understand the current state of a policy while editing it:

• See how many devices are compliant, non-compliant, or missing information for the selected policy.
• Keep the compliance overview visible while reviewing or updating policy settings.
• Quickly understand whether a policy is already broadly satisfied or still needs attention.

Review your policies

The dashboard now includes a clearer compliance status bar for policy-based device security.

The new view helps administrators quickly understand how devices are progressing against their security policy:

• See which devices are already compliant and which still need attention.
• Distinguish devices that are warned, blocked, or not yet covered by an action.
• Identify devices with missing information that may need verification before their status is complete.

This gives teams a faster way to review policy health and decide where to focus next.

Open the dashboard

Administrators can now snooze individual devices from the dashboard when a device needs a temporary exception.

Snooze is available from the device action menu in the Devices overview and from the device detail page. Choose a preset or custom date and time for each device, optionally add a reason, and remove or update the snooze later from the same menu.

Snoozed devices are hidden from overviews and analytics by default, but remain available through the Show snoozed devices filter. During the snooze period, device checks and awareness notifications are paused for that device.

MFA remains active by default. Admins can explicitly include MFA in the snooze when they need to pause MFA for Enforcement sign-ins as well.

Manage your devices

Add your own message to the bottom of XFA's onboarding and sign-in cards. Configure two separate messages — one shown during device onboarding, one during sign-in — from the Applications page in your Dashboard to reinforce your policies, link to an internal runbook, or add a bit of your own voice where end users will actually see it.

XFA now integrates with Noru, a GRC platform that makes compliance manageable for modern teams.

Once connected, XFA automatically syncs your device security data to Noru, giving you:

• Automated compliance - Device security checks are continuously exported as security findings, eliminating manual compliance verification.
• Risk mapping - Each security check is linked to a risk in Noru's risk registry, providing a clear overview of your organization's risk posture.
• Real-time visibility - Findings are synced as they happen, so your compliance dashboard always reflects the current state.

XFA exports 23 security checks across endpoint posture, compliance, configuration, and identity & access categories.

To get started, create an API key in Noru with Write Assets and Write Risks scopes, and connect it from the Integrations page in your XFA dashboard.

Read the announcement | Set up the integration

Three new AI-related security checks are now available in your policies:

• Secrets in environment — Detect and prevent exposed secrets in environment variables or runtime context to reduce credential leakage risk.
• Autonomous agents — Detect autonomous agents and require approved controls before allowing access.
• Unguarded elevation — Detect and prevent unguarded privilege elevation that can lead to unauthorized high-privilege actions.

Each check can be configured with warning and blocking actions, just like all other policy checks.

Configure your policies

Policies now support compliance goals, giving you granular control over how and when devices are warned or blocked.

For each security check, you can now configure three separate actions:

• Set your compliance goal — Define the time period in which devices should become compliant (e.g., 30, 60, or 90 days). This goal is only visible to administrators.
• Warn users — Choose when users are informed about a risk: before the compliance goal or on the due date.
• Block a device — Determine when non-compliant devices are blocked from access: before the compliance goal or on the due date.

For version-based checks (OS, browser, reboot), the device detail page now shows timeline badges with the configured goal, warning, and blocking thresholds in days, so you can see at a glance how close a device is to each deadline.

Configure your policies

You can now add notes and tags to devices directly from the dashboard to better organize and track your device inventory.

Notes allow you to add custom descriptions or important information about specific devices. Whether it's tracking device assignments, maintenance schedules, or special configurations, notes help you keep all relevant device information in one place.

Tags provide a quick way to categorize and filter devices based on your organizational needs. Create custom tags for departments, locations, device types, or any other classification system that works for your team.

Both features are accessible from the device details view and can help streamline your device management workflow.

Manage your devices

Visibility is everything when it comes to security. Our latest XFA Dashboard update makes it even easier to have an overview of devices connected to the business apps and a confirmation that your organization is secure.

This update brings a more detailed view of each device’s security health, a centralized overview of device checks that have been performed, and improved visibility across your team, designed to make device security simpler and your team’s productivity higher.

Take a look at what’s new

XFA now includes Trends in the dashboard, so administrators can track how device security changes over time. See how your fleet's compliance has evolved, spot patterns, and act on them before they turn into risk.

Trends plots your OS out-of-date rate — the share of devices running an outdated operating system — over time, giving you a clear read on whether your fleet is getting more secure or less.

Open Trends in your dashboard →

XFA now identifies potential vulnerabilities on your devices.

We’ve introduced an easy way to see which high and critical vulnerabilities your devices might be exposed to. Right at the top of your dashboard, you’ll find three components that organize potential threats into clear categories:

1. Data Breach
2. Ransomware
3. Phishing

By clicking on any of these categories, you can see exactly which devices are affected. This makes it easier to prioritize and address security risks before they escalate.

Why it matters

• Protect sensitive information – Unaddressed vulnerabilities can lead to unauthorized access or data leaks.
• Stay ahead of ransomware – Outdated systems are prime targets for malicious attacks.
• Prevent phishing attempts – Recognize and mitigate exposure points to keep users safe.

Next steps

• Review each category at the top of your dashboard to see potential vulnerabilities.
• Identify affected devices and request that your employees or colleagues update their devices.

Have questions or feedback? Our support team is here to help.

In the Awareness tab, you can configure which devices and groups receive awareness emails. Before you can configure which emails to send and the frequency, you need to define the scope for the devices and groups that will receive these emails.

Scoping Options

When setting up the scope, you can choose between:

1. All Devices: Emails will be sent to all discovered or enforeced devices within your organization.

2. Limited Scope: Fine-tune which devices and users receive emails by configuring the following options:

   • Ignore Managed Devices: Exclude devices managed by your IT team from receiving emails.
   • Ignore Desktop Devices: Exclude desktop devices from receiving emails.
   • Ignore Mobile Devices: Exclude mobile devices from receiving emails.

   If your organization has completed a discovery integration (e.g., with Google Workspace, Microsoft, or Okta), you can also configure group-based scoping:

   • Groups: Select specific groups to receive emails. These groups are managed within the integration application (e.g., Google Workspace Admin Console).

Learn more about scoping.

You can now choose which notifications you want to receive. We may still send you important information about your account outside of your notification settings.

Manage your notifications.

You can now accept beta versions or major versions on your policy. This will allow you to have more flexibility when enforcing security rules for your organization’s devices. This is only possible on the OS version or the browser version for now.

Learn more about Policies.

It's now possible to see the managed devices in your dashboard. This will give you a better overview of which devices are managed by an MDM and which are not. You can see that managed devices have an extra tag in the overview. This tag is dependent on the MDM you are using to manage your devices.

See your devices in the XFA Dashboard.

We've added the statistics based on the device checks you have selected in your policy on your dashboard and in your weekly email. This will give you a better overview of the devices that are compliant with your policy.

Get started in the XFA Dashboard.

Our dashboard is now mobile-friendly! You can now access the XFA dashboard from your mobile device and ensure device security on the go.

Get started in the XFA Dashboard.

When creating an account on the XFA dashboard, you can now use social login to sign up with your Microsoft, Google, or Apple account.

We've improved the devices overview to now include more information about the device, visualized with clear indications about its security status.