What's New 2026.4

In addition to using Intel vPro Chip-to-Cloud integration for remote operations, you can perform provisioning, unprovisioning, or long-running discovery operations that identify all devices eligible for Intel Chip-to-Cloud provisioning for multiple devices in bulk. Ivanti Neurons also displays notifications when devices are provisioned, unprovisioned, or discovered. You can access them under Notifications.

Learn more about Intel vPro Chip-to-Cloud enhancements in Device Actions.

AI features in this release are Tech Preview and OFF by default. AI features are available to named design partners on request.

Contact your account team to participate. Administrators can enable each feature per-tenant under Admin > Settings.

Ivanti Neurons now exposes Model Context Protocol (MCP) servers, allowing customers to connect MCP capable AI agents including GitHub, Copilot (CLI and VS Code), and Claude Desktop directly to Neurons data through an open, industry-standard protocol.

MCP domains such as Device, Patch, Exposures, Software Inventory, Software Distribution, Reporting, and Edge Intelligence are available.

The recommended authentication uses OAuth with a Client ID from an AI Agent app registration under Admin > App Registrations. A legacy JWT token method is available for clients that does not support OAuth-based MCP connections yet.

User access is enforced based on the active Neurons entitlements of the authenticated account. Any MCP conformant AI client and custom AI agents can connect.

Recommended clients include Copilot, GitHub Copilot CLI, GitHub Copilot for VS Code, and Claude Desktop.

Neurons now displays AI-generated Insights and Recommendations directly in the administrator dashboard, proactively highlighting notable patterns, risks, and remediation opportunities prioritized based on business risks and in context. It provides a clear explanation of why each insight was surfaced and what actions are available. Insights are drawn from data across the Neurons products enabled in your tenant including Devices, Patches, Exposures, Software, and DEX and complies with the existing role-based access controls.

AI Reporting is a conversational assistant for building federated reports in Ivanti's Unified Reporting platform. Administrators describe the report they need in English including filters, columns, joins, names, formats, and recipients. The assistant then walks them through assembly, showing a small sample for review before the report is submitted.

Initial data coverage includes Device Patch Scans and Device Patch Deployment History, with additional domains planned for subsequent releases.

Learn more about AI reporting in Reports.

The new stages for both on-premise AD and cloud based Entra ID allow Bots to safely interact with Microsoft provided identity services for user management. Abilities include:

• User Group Membership

• User Detail Updates

• Enable / Disable User

• Lock / Unlock Account

• Delete User

• Restore User (Entra Only)

• Get User Group / Details / Manager (Entra Only)

Use cases include triggering via external systems as part of user change management, onboarding and off-boarding workflows, and service desk analyst actions.

What to Know

To use the new stages, you must set up the appropriate connector with an action credential. It is recommended to keep Bot workflows with identity stages controlled – limiting access using the sharing functionality within the new Object Ownership functionality.

The stages is available within both People and Universal contexts.

Learn more about Bot Identity Changes in Bots Stages.

Variables have been enhanced to allow for list types, as well as being flagged as Bot outputs. This enables better transfer of results out of Bots for use through API and future use cases.

Learn more about Variable List Type and Bot Outputs in Bots editor.

A JavaScript stage type has been added to User Stages to enable reusable scripts between workflows. As part of these changes clearer instructions have been added on how to include parameters in User Stages.

• ITSM CMDB Integration – Phase 2: The ITSM CMDB connector now supports Business Criticality, Asset Compliance, and Custom Table Query, providing richer asset context for risk-based prioritization and broader CMDB coverage. This release also addresses scenarios deferred from the initial connector release.

• Cortex Xpanse Service API Integration: The Cortex Xpanse connector now ingests service-level vulnerability data through the Cortex Xpanse Service API, including Inferred CVEs. A separate finding is created for each CVE on a service and associated with the corresponding asset and service. Services without CVE information are skipped, duplicate findings for the same asset, service, and CVE are prevented, and finding status stays aligned with Cortex Xpanse through full scanner synchronization.

• Hierarchical Scanner-Based Column Selection: Scanner-specific columns in the Show Columns menu are now grouped under their scanner. You can expand or collapse groups, and selecting the scanner name or checkbox selects or hides all columns in that group. The checkbox shows a partial state when only some columns are selected, and matching groups expand automatically when you search. Existing options, including Hide All and reset to default, are unchanged.

• Overdue and Recent Findings KPI Filters: The Overdue Findings and Recent Findings KPIs in the Host Findings and Application Findings views now include <30 Days and All Time filter options, alongside the existing >30, >60, and >90 day options. KPI tiles now display the selected operator, making it easier to identify findings that have recently moved out of SLA.

• Select All Groups in Playbook Rules: When creating a Playbook rule with the Add to Groups or Remove from Group action, you can now select all groups in a single step using Reset to All Groups. The selection includes all groups in the tenant at that time; newly created groups are not added automatically and can be included by selecting Reset to All Groups again or adding them manually.
  

Sorting is now supported across the Exposures and Assets views, including the Business criticality column in the Assets view, so teams can order large result sets by the columns that matter most.

The Insights page now shows KPI tiles at the top of the page for an at-a-glance view of asset and exposure posture:

• Exposed assets / Total assets

• Assets without vulnerability scans

• Assets with exposure for ransomware

• Critical & High risk exposures

• Exposures with Patch / Total Exposures

Learn more about Remediation Insights

Predictive Remediation now supports Ivanti Neurons access control scopes. The assets a user can see match their visibility in Devices, and exposures are displayed only when the underlying asset is within the user's scope.

Users with restricted access see an information message in the Predictive Compliance flyout, the Exposures view, and the Insights page, explaining that scopes configured by an administrator may reduce the number of assets and exposures they can see. Each message links to the Scopes documentation, which opens in a new browser tab.

Learn more about Scopes

When you add exposures to a patch group from the Exposures view, you can now select Save, Save and make active, or Cancel when the change takes effect.

This lets you stage the patch group changes and decide when they go live.

What to know

• Save and make active is available to users with the Deploy Patch Configurations permission (Admin > Access Control > Roles > Permissions > Patch Management > Patch Settings > Deploy Patch Configurations).

Learn more about adding exposures to Patch Group at Exposures.

Device scopes now apply across Software Inventory, Software Insights, Software Usage, and landing page tiles. Device scopes control access to device-related data, while people scopes control access to SaaS Management data. Users can view only the data included in their assigned scopes.

License Manager access is restricted for scoped users. License Manager cannot calculate license positions for a scoped user.

Learn more about Software