Arctic Wolf Product Updates
Learn about new features, updates, and enhancements for Arctic Wolf® products.
October 6, 2026
- Added Arctic Wolf Resolve as a data source to the Aurora Security Assistant.
For more information, see Aurora Security Assistant.
October 1, 2026
- Updated the Last Successful Scan field to be separated by Agent, External Vulnerability Assessment (EVA), and Internal Vulnerability Assessment (IVA) sources.
For more information, see Assets table.
-
Added full-screen mode, conversation history, and additional data sources to the Aurora Security Assistant:
- Risks
- Assets
- SPiDRs
For more information, see Aurora Security Assistant.
- Improved Aurora Security Assistant to answer questions about Security Focuses from anywhere in the Unified Portal.
For more information, see Aurora Security Assistant.
- Improved the investigation timeline to show queries that Arctic Wolf ran during an investigation.
For more information, see Review security investigations.
- Added support for security monitoring for these integrations:
- Added support for Active Response for these integrations:
-
Added support for Gmail, Google Meet, Google Calendar, SAML Audit Activities, and Alert Center events to the Google Workspace security monitoring integration.
To enable the collection of Alert Center events for existing Google Workspace sensors, you must update the sensor configuration to enable the Google Workspace Alert Center API. For more information, see Step 2: Enable APIs in Configure Google Workspace cloud for Arctic Wolf monitoring.
-
Added a natural language query engine to Data Explorer. You can now type plain language queries instead of using the dropdown Query Builder. The Query Builder remains available as an alternative.
For more information, see Create and run a query.
-
Updated Data Explorer with log source filtering. You can now filter log data by selecting log sources directly from the query interface, making it easier to target specific data without having to build complex search queries manually. When you select log sources, associated fields are highlighted in the Query Builder to help you identify relevant fields quickly.
For more information, see Create and run a query.
September 28, 2026
-
Added a new Risk Evidence Data field that you can include when you export risk data. You can also still use the existing Risk Evidence URL field.
For more information, see Export risk data.
- Changed the number of risks that display for each tab on the Risks page to match the filters that you apply. Previously, it showed the number of risks in the entire organization regardless of the filters that you set.
For more information, see Risks table.
- Renamed the tabs on the Risks page for clarity.
September 24, 2026
- Improved External Vulnerability Assessment (EVA) webserver scanning. There may be increased scanning activity and differences in webserver scan results, especially if using a Web Application Firewall (WAF) or other firewalls.
September 22, 2026
-
Added the Exploration de données role for MSP-managed users. MSP can assign this role to give users read and write access to all menus and submenus within Exploration de données in the Unified Portal, without requiring a Customer Directory account.
For more information, see Data Explorer, Analyze traffic flow data, and Raw Log Search.
September 17, 2026
-
Improved Aurora Security Assistant to answer questions about Threat Intelligence bulletins.
For more information, see Aurora Security Assistant.
September 15, 2026
-
Launched Aurora MDR Connect. Built on the Aurora Superintelligence Platform, MDR Connect gives MSP customers immediate access to Arctic Wolf security operations and integrations.
For more information, see Aurora MDR Connect.
September 3, 2026
-
Improved Aurora Security Assistant to answer questions about tickets from anywhere in the Unified Portal.
For more information, see Aurora Security Assistant.
September 2, 2026
- Added a new endpoint to the Ticket API to create tickets in the Unified Portal and improved the Ticket API to align statuses and types with the Unified Portal.
For more information, see Arctic Wolf Ticket API.
August 28, 2026
-
The Arctic Wolf mobile app is now available for iOS. The app is available for both Android and iOS, allowing you to access core Unified Portal features from your mobile device.
The app supports secure sign-in with SSO and MFA, and is available for devices running Android 12 or later, or iOS 17.4 or later.
For more information, see Arctic Wolf mobile app.
August 27, 2026
-
Launched the beta for a redesigned Unified Portal experience. The beta release introduces improved navigation, a consistent design language, and dark mode support. The first phase of the beta includes:
- Home
- Action Center
- Data Explorer
- Analytics
For more information, see Arctic Wolf Portal beta.
August 20, 2026
-
Introduced the Arctic Wolf mobile app for Android. You can now access core Unified Portal features from your mobile device.
The app supports secure sign-in with SSO and MFA, and is available for devices running Android 12 or later.
Note: The mobile app for iOS will be available soon for iOS 17.4 and above.For more information, see Arctic Wolf mobile app.
August 6, 2026
-
Added User Management, which allows MSP administrators to invite users, assign roles and organizations, and manage user access. Users receive an email to verify their address and set a password, then can sign in to the Unified Portal with limited access based on their assigned role.
For more information, see User Management.
-
Added support for the 1Password Active Response integration.
For more information, see Configure 1Password for Arctic Wolf Active Response.
July 24, 2026
-
Added the ability to resize dashboard widgets. Widgets can now be set to quarter, half, three-quarter, or full width, depending on widget type.
For more information, see Create a dashboard widget.
-
Added Markdown widgets for self-service dashboards to add formatted text content, including headings, paragraphs, dividers, and tables.
For more information, see Create a Markdown widget.
-
Added the ability to filter and refine Data Explorer search results without modifying the original query. You can add or exclude field values as filters, and create visualizations such as group-by charts.
For more information, see Filter and refine search results.
July 21, 2026
-
Added the ability to add comments to risks.
For more information, see View and add risk comments.
- Added an Age column to the risk table for unresolved risks that allows you to filter and sort by risk age.
For more information, see Risks table.
- Added the ability to cancel a scheduled patch job.
For more information, see Cancel a scheduled patch job.
- Added the ability to delete assets so that they do not appear in future scans.
For more information, see Delete assets.
- Added the ability to exclude assets from specified sources and IP addresses from the Assets page.
For more information, see Create asset exclusion rules.
-
Added support for the TrendAI Vision One Email and Collaboration Security integration for security monitoring and Active Response.
For more information, see Configure TrendAI Vision One Email and Collaboration Security for Arctic Wolf monitoring and Configure TrendAI Vision One Email and Collaboration Security for Arctic Wolf Active Response.
-
Added support for the Delinea Platform and Delinea Secret Server integrations for security monitoring and Delinea Platform Active Response.
For more information, see Configure Delinea for Arctic Wolf monitoring and Configure Delinea Platform for Arctic Wolf Active Response.
-
Added support for the Check Point Email Security integration for security monitoring and Active Response.
For more information, see Configure Check Point Email Security for Arctic Wolf monitoring and Configure Check Point Email Security for Arctic Wolf Active Response.
-
Added support for the Cisco Catalyst Center syslog integration for security monitoring.
For more information, see Configure Cisco Catalyst Center to send logs to Arctic Wolf.
-
Added support for the VMware ESXi and VMware vCenter syslog integrations for security monitoring.
For more information, see Configure VMware to send logs to Arctic Wolf.
-
Added the ability for MSP customers to download Managed Security Awareness® (MA) CSV reports directly from the MSP Portal Reports page.
For more information, see Generate customer reports.
July 16, 2026
- Improved risk evidence gathered from device scanning to display only relevant evidence.
July 2, 2026
- Added the ability to run self-serve SPiDRs.
For more information, see Run a self-serve SPiDR.
June 29, 2026
-
Added support for Arctic Wolf Resolve on macOS and Linux. If you have an Arctic Wolf Resolve subscription, you can use the feature to manage and review patches across your endpoints.
For more information, see Arctic Wolf Resolve.
- Added a Patch Jobs page. If you have an Arctic Wolf Resolve subscription, you can review patches that were applied to your endpoints.
For more information, see View patch jobs.
- Added the ability to select which columns you want to include in risk data exports.
For more information, see Export risk data.
- Added Data Explorer Lite entitlement for MSP organizations with an active MDR subscription.
For more information, see Data Explorer license options.
- Released Agent version 2026.02.28 for Linux and version 2026-03_12 for macOS.
For more information, see Agent release notes.
June 24, 2026
-
Added the Add Summary button to Data Explorer, which allows you to create summaries and visualizations directly from search results. This feature helps you understand large datasets more effectively by generating visual representations and summarized insights from your query results.
For more information, see Data Explorer
June 23, 2026
- Launched the TAXII 1.1 API for configuring Threat Intelligence feeds.
For more information, see Threat intelligence.