Changelog

Summary
We have introduced comprehensive management for Volume Purchase Program (VPP) applications within the Swif Web App. This update enables administrators to deploy and manage self-service software for macOS, iOS, and iPadOS devices, leveraging licenses synchronized from Apple Business Manager (ABM).

Key Features

• VPP Inventory Synchronization: Automatically synchronize application licenses from ABM to populate the organization's software inventory, including app name, platform, version, and total license counts.

• Self-Service Approval Workflow: Administrators can approve VPP applications for the Store Catalog via the "Approve for Store Catalog" action in the application list or details view. A confirmation modal and success notifications ensure a streamlined approval process.

• Granular Targeting & Scoping: Support for assigning self-service applications to specific Device Groups, ensuring software visibility is restricted to relevant teams or departments.

• Real-Time License Tracking: Enhanced visibility into license availability. The system automatically tracks assigned vs. available licenses and prevents user-initiated installations when licenses are exhausted.

• Installation Lifecycle Monitoring: Administrators can track the progress of user-initiated installations through real-time status transitions: Available, Installing, and Installed.

User Experience

• Unified App Store: A consistent self-service experience across the Swif Desktop App (macOS) and Swif Mobile App (iOS/iPadOS).

• On-Demand Installation: Employees can browse approved VPP applications and initiate installations at their convenience, provided licenses are available.

Reference
For detailed configuration steps, please refer to the Managing Self-Service VPP Applications guide in the Swif Help Center.

We are excited to announce significant updates to the Swif CLI onboarding experience and the introduction of the Model Context Protocol (MCP) integration page within the Swif Webapp. These changes streamline how IT admins and engineers set up and manage their command-line tools and AI integrations.

New MCP Navigation & Page

• Centralized Integration Hub: A new MCP navigation item has been added to the main sidebar, positioned between Download App and Notifications.

• CLI Entry Point Migration: The Swif CLI setup and management have been moved from Account Settings to this dedicated MCP page for better accessibility.

• Coming Soon Integrations: We’ve added a "Coming Soon" section featuring upcoming integrations for Claude Desktop and Cursor, expanding Swif's reach into AI-driven workflows.

Enhanced CLI Setup Experience

• Dynamic Setup Modal: Clicking Setup now opens a redesigned Swif CLI Setup modal, providing clear, step-by-step instructions for terminal integration.

• Environment-Aware Authentication: The authentication commands within the setup modal now dynamically adjust to your active environment (us, eu, or dev), ensuring you connect to the correct profile immediately.

 # Example authentication command for US environment swif login --profile us

• Simplified State Management: We have removed the "Connected / Not Connected" status indicators to provide a cleaner, more focused onboarding flow.

Documentation & Resources

• Updated Guidance: The Learn More button now links directly to our comprehensive guide: Getting Started with Swif CLI.

For more information on managing your fleet via the terminal, visit our Help Center.

We are excited to announce the launch of our new In-App Notification System, designed to streamline communication between administrators and employees directly within the Swif ecosystem. This update spans both the Swif Webapp and our Desktop applications across macOS, Windows, and Linux.

📢 Admin Broadcasts & Scheduling

Administrators can now create and broadcast custom notifications to specific devices or groups. This feature includes:

• Flexible Scheduling: Send notifications immediately or schedule them for a future date/time based on your organization's timezone.

• Recurring Alerts: Set up daily, weekly, or monthly automated reminders.

• Deep Linking: Guide employees to specific actions by linking notifications directly to the Overview, AppInstalled, or AppStore pages within the desktop app.

• Delivery Analytics: Track the success of your communications with real-time metrics on "Sent," "Read," and "Failed" statuses.

💻 Enhanced Desktop Experience

The Swif Desktop App has been updated with a dedicated notification center to keep employees informed without causing "notification fatigue":

• Organized Tabs: View notifications across All, Unread, and Trash categories.

• System vs. Admin Alerts: Critical system alerts (like FileVault key rotations) are now pinned and clearly labeled to ensure they aren't missed.

• Smart Alert Logic: The app will only trigger a popup for new, unread messages to minimize interruptions during the workday.

• Cross-Platform Support: Consistent notification behavior and UI across macOS, Windows, and Linux.

For a detailed guide on how to set up and use these new features, please visit our Help Center:
Introducing the Swif In-App Notification System

Release Date: August 12, 2026

We are excited to introduce the Compliance Framework Reporting flow, a significant enhancement to the Swif.ai Compliance Center designed to streamline audit readiness and internal security reviews.

New Features & Enhancements

• On-Demand Report Generation: A new Generate Report button has been added to the framework details panel. This allows users to instantly transition from monitoring to reporting for specific frameworks, including SOC 2, NIST, ISO 27001, HIPAA, NIS2, and CIS (Level 1 & 2).

• Comprehensive Report Preview: Before exporting, users can now access a detailed visualization of their compliance posture:

  • Framework Summary: Provides an overview of the overall compliance percentage and current status (e.g., On Track, At Risk).

  • Controls Snapshot: An accordion-style interface that groups security controls by category. Each row displays the Control ID, Benchmark Name, and Compliance Percentage in a compact, scannable format.

  • Device Control Status: A granular list showing the compliance state of every managed device against the selected framework.

• Advanced Data Filtering: Refine your reports using dynamic filters for:

  • Assigned to: Filter by specific employees or view the entire organization.

  • Operating System: Segment data by macOS, Windows, Linux, and more.

  • Compliance Status: Focus on "Compliant" or "Non-compliant" devices to prioritize remediation.

• Multi-Format Export Options:

  • PDF: Generates a professionally formatted document optimized for sharing with auditors or stakeholders.

  • CSV (ZIP): Exports a structured ZIP package containing three separate tables (framework-summary.csv, controls-snapshot.csv, and device-control-status.csv) to preserve data integrity and support advanced analysis.

• Improved User Experience: Integrated real-time loading notifications ("The report will be downloaded and shared once it is ready...") to provide clear feedback during the generation of large data sets.

For more details on how to use these new reporting features, please refer to our updated Compliance Center Overview.

We are excited to announce the release of System Command Templates and a suite of security enhancements for Webhook-triggered actions. This update provides administrators with pre-defined, high-reliability commands and robust guardrails for automated device management across macOS, Windows, and Linux.

🚀 New: System Command Templates

Administrators can now utilize standardized templates for critical system operations, ensuring consistent execution across different operating systems without manual scripting.

• Supported Actions: Reboot, Shutdown, Remote Lock (Lost Mode), and Wipe Data (Factory Reset).

• Cross-Platform Support: Native execution via the Swif Agent on Windows and Linux, and MDM-level commands for macOS.

• Bulk Execution: Trigger these templates across a heterogeneous fleet of devices simultaneously.

🛡️ Enhanced Webhook Security & UX

We have significantly upgraded the security model for triggering commands via external systems (e.g., CI/CD pipelines, security scanners).

• IP Allowlisting: Restrict webhook execution to specific IP addresses or CIDR ranges, ensuring only trusted systems can trigger remote commands.

• Time-Gated Token Management: Improved visibility into webhook token validity with real-time "Expires in Xm" countdowns and clear "Expired" states.

• Targeted Execution: Webhooks now support targeting specific endpoints using deviceIDs for improved reliability on Windows and Linux systems.

⚠️ Destructive Action Guardrails

To prevent unauthorized or accidental execution of high-risk operations, we have implemented multi-layered safety checks:

• 2FA Verification: Destructive commands (such as Wipe Data) now require a mandatory 2FA verification flow before they are enqueued.

• Risk Communication: New UI banners and explicit warnings provide clear context for high-risk operations.

• Wipe Configuration: Granular control over "Wipe Data" commands, including the ability to specify Wipe Type (Partial vs. Full) directly in the configuration.

🛠️ Technical Improvements

• macOS Remote Lock: Integrated 6-digit PIN requirements for macOS lock commands to align with Apple MDM protocols.

• Reliable Targeting: Standardized on deviceIDs for webhook payloads to resolve inconsistencies with serial numbers across different hardware vendors.

For detailed configuration steps, please refer to our updated documentation: Run a Command Script | Help Center

We are excited to announce the launch of our new, consolidated Security page! This update brings all your critical security monitoring and remediation tools into a single, streamlined interface, making it easier than ever to protect your organization's devices.

The new Security page replaces several legacy views and introduces powerful new capabilities to help you stay ahead of threats.

Vulnerability Detection

Stay on top of software vulnerabilities across your fleet. This feature provides a high-level overview of detected CVEs, including severity trends and the most affected packages.

• KPI Dashboards: Track total vulnerabilities, affected devices, and unique CVEs with 30-day trend indicators.

• AI-Powered Remediation: Use Swif IQ to generate instant remediation suggestions for detected vulnerabilities.

• Detailed Event Tracking: Filter and drill down into specific CVEs by severity, OS, and time range.

Security Configuration Assessment (SCA)

Ensure your devices are configured according to industry best practices. SCA evaluates your fleet against benchmarks like CIS, NIST, and PCI-DSS.

• Compliance Scoring: Each device receives a compliance score (0–100) with color-coded badges for quick assessment.

• Remediation Commands: For failed checks, Swif Security can generate AI-suggested (Swif IQ) remediation commands that you can run directly on the device.

• Visual Results: A stacked horizontal bar chart helps you quickly visualize Pass, Fail, and Invalid check results.

File Integrity Monitoring (FIM)

Monitor changes to critical system files and Windows registry keys in real-time.

• Forensic Details: Track additions, modifications, and deletions with details like file hashes, permissions, and owner changes.

• Activity Overview: View summary KPI cards, event trends, and identify the most frequently changed files or devices.

• Response Plans: Generate AI-powered response plans to address unauthorized changes instantly.

Threat Detection

Get real-time visibility into security events, including authentication failures, system errors, and policy changes.

• MITRE ATT&CK® Heatmap: Visualize your security posture against known adversary tactics and techniques using an interactive heatmap.

• Compliance Mapping: View how security events map to regulatory frameworks like HIPAA, GDPR, and PCI DSS.

• Intelligent Remediation: Access AI-suggested remediation steps for critical alerts to resolve issues faster.

Remediation

Across all security features, Swif IQ is now integrated to provide intelligent insights and automated remediation. Whether it's generating a terminal command to fix a configuration drift or drafting a response plan for a file integrity alert, Swif IQ helps your team respond to threats with expert-level precision.

The new Security page is now live for all users. Head over to the Security tab in your sidebar to start exploring!

Learn more at Introducing the New Swif Security Page: Comprehensive Protection for Your Fleet.

We are excited to announce the launch of the Trust & Transparency page access directly within the Swif portal. This update makes it easier than ever to communicate your organization’s security posture and compliance commitments to your employees.

Here is an example:

https://trust.swif.ai/org_698770b935a42cf7cc0c7ee4/transparency

What’s New:

• Direct Navigation: You can now find the "Swif.ai MDM Trust & Transparency" link under the Resources section in your navigation menu.

  

• Instant Availability: Every organization now has a transparency page available by default. You no longer need to launch Swif GRC to access your public trust portal.

• Smart Redirection:

  • Organizations that haven't yet launched Swif GRC will automatically see a professional, system-default transparency page.

  • Organizations with active Swif GRC setups will be seamlessly directed to their custom, branded transparency portal.

• Refined Sidebar UI: We’ve updated the navigation menu for a cleaner look, featuring full-width menu items and improved icon alignment for a better user experience.

How to Access:
Log in to your Swif portal and navigate to Resources > Trust & Status. From there, you can view your page or use the "Copy Page Link" button to share it externally with auditors or prospects.

For more details on how to customize your portal, check out our Help Center article.

We are excited to announce a new update to our Android enrollment process, designed to provide more flexibility for diverse hardware environments.

What’s New?

• Manual Enrollment Tokens: You can now generate a manual enrollment code alongside the standard QR code. This is specifically designed for devices that lack a camera or have difficulty scanning QR codes.

• Revamped Enrollment UI: The "Download App" and "Device Enrollment" pages have been updated with a cleaner, more intuitive design using our new UI framework.

• Camera-less Device Support: Confirmed support for full enrollment flows on devices without cameras, ensuring no device is left unmanaged.

How to Enroll Manually

If your device cannot scan a QR code, follow these steps:

1. Connect to Wi-Fi: Ensure the device is on a stable network.

2. Enter Setup Code: On the Google sign-in screen, enter afw#setup in the email field.

3. Download Swif: The device will automatically download the necessary enrollment application.

4. Generate Code: In the Swif web app, click the new Generate Enrollment Code button.

5. Complete Setup: Enter the manual token displayed in the web app into your Android device to finish the enrollment.

This update ensures that all Android devices, regardless of their hardware capabilities, can be securely managed within your organization. https://swifteam.atlassian.net/browse/ST-8454 | Help Article