Skip to main content

Huntbase Endpoint Control — May 2026

New Features

  • Added single sign-on support so users can log in through their organization's identity provider, with proper session handling on logout.
  • Introduced a redesigned admin interface for managing your fleet, users, and permissions with a more modern, streamlined experience.
  • Added fine-grained, per-environment permission controls — admins can add or remove users, reset passwords, and grant access across all environments at once.
  • Queries and file collection requests now default to all active endpoints when no specific targets are chosen, and support bulk actions.

Improvements

  • Simplified the login flow by removing unnecessary environment requirements.
  • Improved the endpoint picker used when targeting queries and file collection, with combined hostname/UUID search, typeahead suggestions, and support for entering multiple endpoints at once.
  • Streamlined the layout for creating new file-collection requests to match the query creation experience.
  • Refined navigation and controls to better respect each user's role and permissions.
  • Session tokens are now rotated on every login for stronger session security.
  • Expanded compatibility with the latest endpoint agent version.

Bug Fixes

  • Fixed an issue where logging out didn't fully clear session state in some cases.
  • Fixed an issue where the audit log page could trigger unnecessary repeated loading.
  • Fixed environment name validation so renaming an environment can no longer collide with an existing one.
  • Fixed a race condition that could cause inaccurate query execution counters.
  • Fixed an issue preventing macOS endpoint agents from reloading correctly during quick enrollment for non-root users.
  • Fixed handling of oversized requests so they now return a proper error instead of failing unexpectedly.
  • Closed several security gaps related to authentication, session handling, and cross-environment data access, and resolved a rate-limiting bypass and a user-enumeration timing issue.