July 30, 2026

ThreatDown AI

Feature

ThreatDown AI brings a conversational AI tool directly into Nebula. Ask questions in plain language and receive clear, contextual answers across the security environment, without requiring deep expertise or manual investigation.

Key capabilities include natural-language question-and-answer, guided actions, conversational data exploration, and inline KB article links.

ThreatDown AI is available on five Nebula pages: Security Advisor, Audit Logs, Endpoints, Vulnerabilities, and Detection Center. It is enabled by default for Ultimate bundle customers and can be managed by Super Admins under Account > Configurations.

July 29, 2026

Exclusion guardrails

Feature

Exclusions now have a risk level, so you can see at a glance when an exclusion could weaken protection. When you create an exclusion that matches a known high-risk pattern (broad file system paths, risky command-line patterns, Living Off the Land Binaries, or remote access tools), the console displays a warning and prompts you to acknowledge the risk before saving the exclusion.

This helps you keep exclusions intentional and scoped without slowing legitimate work. You can still proceed after acknowledging the risk. Existing exclusions are never blocked or disabled automatically, and no new configuration is required.

Redesigned Quick Filters

Feature

We've standardized the filtering experience across the Patch Management, Endpoints, Vulnerabilities, Drive Encryption, AI Detection & Response, Managed Services, Email Security, and Identity Threat Detection & Response pages.

July 28, 2026

Non-human identities in ITDR

Feature

ITDR now discovers and inventories every non-human identity, such as service accounts and API tokens, across connected identity providers like Entra ID and Okta, surfacing them in a new tab alongside human identities on the Identity page.

Exclude identities from ITDR

Feature

Added the ability to exclude human identities from Identity Risk Score calculations and Posture Management checks. Useful for shared mailboxes or accounts where MFA or password resets are not enforced.

July 22, 2026

AI Visibility: See Every AI Tool in Your Environment 

Feature

AI Detection & Response gives you complete visibility into what AI is running across your fleet, who's using it, how it's being accessed, and what risk it introduces. Our new AI visibility automatically detects AI tools across your managed endpoints using software inventory and web traffic data, then classifies each tool by governance status and endpoint distribution.    

July 21, 2026

Drive Encryption: Centralized Windows BitLocker management

Feature

Added a new feature called Drive Encryption for Advanced bundles and higher. This allows admins to enforce automatic encryption, monitor encryption status, and securely manage recovery keys from Nebula. 

July 13, 2026

Android policy settings

Improvement

Added policy options to control Real-Time Protection and Web Protection status on Android agents. Previously, these settings were enabled by default and could not be disabled.

July 2, 2026

Security Advisor score ranges update

Improvement

The Security Advisor score range thresholds, labels, and descriptions have been updated in Nebula. The new ranges and labels are stricter, more consistent, and designed to give administrators a clearer, more realistic view of their security posture, so teams can prioritize the right actions with confidence.