Changelog

We are excited to announce a new update to our Android enrollment process, designed to provide more flexibility for diverse hardware environments.

What’s New?

• Manual Enrollment Tokens: You can now generate a manual enrollment code alongside the standard QR code. This is specifically designed for devices that lack a camera or have difficulty scanning QR codes.

• Revamped Enrollment UI: The "Download App" and "Device Enrollment" pages have been updated with a cleaner, more intuitive design using our new UI framework.

• Camera-less Device Support: Confirmed support for full enrollment flows on devices without cameras, ensuring no device is left unmanaged.

How to Enroll Manually

If your device cannot scan a QR code, follow these steps:

1. Connect to Wi-Fi: Ensure the device is on a stable network.

2. Enter Setup Code: On the Google sign-in screen, enter afw#setup in the email field.

3. Download Swif: The device will automatically download the necessary enrollment application.

4. Generate Code: In the Swif web app, click the new Generate Enrollment Code button.

5. Complete Setup: Enter the manual token displayed in the web app into your Android device to finish the enrollment.

This update ensures that all Android devices, regardless of their hardware capabilities, can be securely managed within your organization. https://swifteam.atlassian.net/browse/ST-8454 | Help Article

We are excited to announce the release of Data Loss Prevention (DLP) for Web Email, providing an essential layer of security for your organization's communications. This feature ensures that sensitive information stays protected by monitoring and blocking policy-violating emails before they leave the browser.

What’s New?

• Real-Time Email Protection: Swif now inspects outgoing emails in real-time when using web-based mail clients. If a message violates your organization's data security policies, it is blocked instantly at the moment you click "Send."

• Seamless Integration: The feature works directly within your browser via the Swif extension. There is no need for complex mail server configurations or additional software installations.

• Supported Applications: Full support for Gmail and Outlook web applications on macOS, Windows, and Linux (via Chrome and Edge).

• Admin Control Center: A new dedicated settings page allows administrators to easily manage DLP enforcement at the team level.

How It Works

1. Compose: Write your email as usual in Gmail or Outlook web.

2. Inspect: When you click Send, Swif performs a lightning-fast inspection of the email body and subject line.

3. Protect:

   • If no violations are found, the email is sent normally.

   • If a violation is detected, the send action is blocked, and you will receive an immediate notification within the mail app. Your draft is preserved so you can remove the sensitive content and try again.

How to Enable (For Admins)

DLP is OFF by default to give you full control over its rollout. To enable it:

1. Navigate to Organization Settings in your Swif dashboard.

2. Go to Settings → Team.

3. In the sidebar under the Shadow IT section, select Data Loss Prevention.

4. Switch the DLP Toggle to ON.

For more detailed information on policy configuration and supported platforms, please visit our Help Center.

We've completely revamped how you provision and deprovision employee accounts in SaaS applications. Powered by Swif IQ, our new AI-assisted flow intelligently identifies form fields and automates the process — directly from the Swif browser extension.

What's new

• AI-powered form filling — Swif IQ uses semantic understanding of web pages (via the accessibility tree) to accurately identify input fields and map employee information. No more brittle, hard-coded automation scripts.

• Provision with one click — Select an employee from the dropdown, click Provision, and the AI fills in their name and email into the app's invite form and submits it.

• Deprovision just as easily — Select an employee, click Deprovision, and the AI locates their account and initiates removal.

• Two execution modes — Exploration Mode (default) lets the AI autonomously navigate the app to find where to provision or deprovision. If it can't find the path, it falls back to Manual Mode and prompts you to navigate to the correct page before completing the action.

• Real-time activity visibility — Expand "View Activity" to see exactly what the AI is doing step by step, with a fade animation for active-running feedback.

• Smart button states — The Provision button is automatically disabled if the employee already exists in the app. The Deprovision button is disabled if the employee doesn't exist.

• Success confirmation — A persistent success state and toast notification confirm when the action completes.

Who can use this

Team Admins with the Swif browser extension installed. The list of supported AI-assisted apps is managed in your Admin Console under Shadow IT > AI-Assisted Apps.

Learn more

Read the full guide: AI-Assisted Provisioning and Deprovisioning

You can now block entire categories of domains at once — no more manually entering hundreds or thousands of individual domains.

What's new

When adding domains to your blocklist, a new "Select from Categories" option is available alongside the existing manual entry and file upload methods. Choose from 8 pre-populated domain categories:

How it works

1. Open Manage Blocklist and select Domain as the blocklist target.

2. Choose "Select from Categories" as the domain selection mode.

3. Select one or more categories using the checkboxes — each shows the number of domains included.

4. Click "+ Add to Blocklist Queue" and assign to your target devices or device groups.

Category blocks appear in Device Details → Apps → Blocked with a "Category" block type badge, making them easy to distinguish from per-domain or file-upload blocks.

Additional details

• The "Block Sign-Up Only" toggle works with category selection — allow website access while preventing sign-ups to apps within blocked categories.

• Category and per-domain blocks can coexist on the same device.

• Subdomains within a category are automatically covered with wildcard rules.

• Remove individual category blocks with "Allow," or clear everything with "Allow All."

This is especially useful for organizations enforcing compliance standards (ISO, SOC2, NIST) that require broad domain filtering policies.

📖 Learn more about managing your blocklist →

Released June 27, 2026

We've added new visibility into policy deployment status across your fleet. You can now see at a glance which devices are running the latest policy version and which are still pending.

What's New

Two new columns — Version and Policy Status — are now available in both the Device Details and Policy Details views.

Version shows the installed version vs. the latest available version:

• 2 / 2 — device has the latest

• 1 / 2 — device is behind

• – / 1 — policy has never been installed on the device

Policy Status gives you a quick read on each device:

• Up to date — running the latest policy version

• Pending — a newer version exists or the policy hasn't been installed yet

Where to Find It

• Device Details → Policies tab — see version and status for every policy assigned to a specific device

• Policy Details → Devices tab — see version and status for every device targeted by a specific policy

Both views stay in sync — the same device-policy pair shows consistent values regardless of which direction you're looking from.

Additional Details

• Status updates in real time when you publish a new policy version

• Works with device groups — each device in a group shows its own version and status

• Fully compatible with search and filtering

• No changes to existing columns or policy management features

Why This Matters

Previously there was no easy way to confirm whether a policy had actually been applied to a device. Now you can instantly identify which devices are behind and take action — no guesswork needed.

Learn more at Understand Policy Deployment Status and Version Reporting.

What's New

Agentic Security is now available for enterprise Swif organizations. Existing customers can set up Agentic Security directly from their Swif dashboard — no separate account or sign-up needed.

Highlights

• Install Agentic Security card on Dashboard — A new card on the enterprise Home Dashboard provides a quick entry point to download and install the Agentic Security agent.

• FTUX Setup Guide integration — A new optional step, "Monitor OpenClaw Activity with Agentic Security," has been added to the first-time user experience Setup Guide. This step is optional and does not block the completion of other setup tasks.

• One-click installer modal — Clicking Setup Agentic Security from the Setup Guide (or the dashboard card) opens a modal where you can select your OS and download the Agentic Security installer.

• Org-level completion tracking — Once any user in your organization clicks Download Installer, the setup step is marked as completed for all users across the org. The state persists across sessions and page refreshes.

How to Get Started

1. Log in to your Swif enterprise workspace.

2. Click the Install Agentic Security card on your Home Dashboard, or open the Setup Guide and find the Agentic Security step.

3. Click Setup Agentic Security → select your OS → click Download Installer.

4. Run the installer and follow the on-screen instructions.

For a full walkthrough, see our help article: Getting Started with Agentic Security for Enterprise

Not an Enterprise Customer?

Individual users can sign up for Agentic Security as a consumer — no Swif organization required. Get started here →

Released: June 10, 2026

We're excited to introduce the Agentic Security onboarding experience for consumer users — a guided setup flow that gets you from sign-up to monitoring AI agent activity on your device in just a few minutes.

New Features

Dedicated Agentic Security Registration

Consumer users can now sign up for Agentic Security through a dedicated registration URL. New accounts are automatically identified as Agentic Security users and redirected to the onboarding flow — no manual configuration needed. Existing Swif business customers are unaffected and continue using their current sign-in flow.

Guided 4-Step Onboarding Flow

Step 1 — Onboarding Questions
A short questionnaire collects the information needed to personalize your Agentic Security experience. The Continue button activates only after all required fields are completed, so nothing gets missed.

Step 2 — Install the Agentic Security Agent
Select your platform from the installer dropdown, download the agent, and confirm installation. Smart button states guide you through the process — Download Installer is disabled until you pick a platform, and I've Installed Agentic Security activates only after you've started the download. A Skip Setup option lets you jump straight to the dashboard if you'd prefer to install later.

Step 3 — Enable Monitoring Policies
Quickly enable the required monitoring policies with simple toggle switches — no need to navigate the full policy creation workflow:

• OpenClaw Logging Policy — Enables audit logging for AI agent activity.

• OpenClaw Config Tools Policy — Enables configuration and tool monitoring with a minimal profile.

The Continue button activates once the required toggles are enabled.

Step 4 — Success & Dashboard Redirect
A confirmation page lets you know setup is complete. Click View Agentic Security to go directly to your Agentic Security dashboard and start monitoring.

Technical Notes

• Agentic Security consumer onboarding is independent of the existing Swif B2B sign-up flow. Existing Swif customers will receive Agentic Security access through a separate mechanism in a future update.

• The installer currently supports macOS. Additional platform support is planned.

• Policies are created on toggle — they do not require manual device assignment during onboarding.

For a full walkthrough, visit our help article: Getting Started with Agentic Security

You can now include Extension Attributes as additional columns when exporting your device inventory reports.

What's new

• Extension Attribute option added under Additional Device Data in the Report Export dialog

• Attribute picker lets you select exactly which extension attributes to include — such as Asset Tags, Disk Size, or any custom attributes your organization has defined

• Selected attributes appear as additional columns in both CSV and PDF exports, appended after the standard device columns

• Column order matches your selection order

Persistence & scheduling

Your extension attribute selections are automatically saved as part of your report configuration. This means they carry over to:

• Scheduled reports (daily, weekly, monthly)

• Email-delivered reports

• Slack-delivered reports

Re-opening the export dialog will restore your previous selections — no need to reconfigure each time.

Supported device categories

• ✅ Computers (Laptops & Desktops)

• ✅ Smartphones (Phones & Tablets)

How to use it

1. Go to Inventory → select your device category

2. Open the Report Export dialog

3. Under Additional Device Data, enable Extension Attribute

4. Select the specific attributes you want included

5. Click Download — your report will include them as separate columns

📖 Full guide: Exporting Device Report to CSV — Extension Attributes