Platform

Rootshell Platform – Patch Notes September 2026

5 min read
Stay ahead of the game
Loading

click here to copy URL

September 2026

Application Features

Microsoft Word Report Exports

We’ve expanded the platform’s reporting capabilities by introducing support for Microsoft Word (.docx) report exports.

What’s New?

In addition to the existing PDF, Spreadsheet, and JSON export options, users from the testing company responsible for delivering an assessment can now download reports in Microsoft Word format.

This allows testing teams to perform additional editing, add bespoke content, and collaborate on report refinements before final delivery to clients.

Key Benefits

  • Export reports directly to Microsoft Word (.docx) format.

  • Greater flexibility for report customisation and internal review processes.

  • Supports quality assurance workflows and partner-specific reporting requirements.

  • Complements existing PDF, Spreadsheet, and JSON export capabilities.

Access Controls

Word exports are intentionally restricted to users belonging to the test company assigned to the project.

Users from the client organisation receiving the assessment will continue to have access to the existing export formats, such as PDF, Spreadsheet, and JSON, but will not be able to download reports in Word format.

This approach helps protect proprietary report content and delivery methodologies while providing testing teams with the flexibility needed to produce high-quality client deliverables.

Platform Improvements

Integration Improvement: Microsoft Defender for Endpoint Optimisation

We’ve significantly enhanced the Microsoft Defender for Endpoint integration to improve performance, scalability, and reliability for organisations managing large enterprise environments.

What’s Improved?

The integration has been extensively re-engineered to process large volumes of vulnerability and asset data more efficiently, delivering faster imports and a more resilient synchronisation process.

Key Benefits

  • Faster Imports: Large Microsoft Defender for Endpoint datasets are now processed significantly more efficiently, reducing the time required to synchronise vulnerability data.

  • Improved Scalability: The integration has been optimised to comfortably support enterprise-scale environments containing large numbers of assets and vulnerabilities.

  • Greater Reliability: Enhancements to the import workflow improve resilience and reduce the likelihood of interruptions caused by processing limits or API constraints.

  • Smarter Synchronisation: Asset correlation and processing have been streamlined to minimise unnecessary work, resulting in quicker updates and more efficient resource utilisation.

  • Enhanced User Experience: Improvements to data processing and presentation provide a smoother experience when working with Microsoft Defender for Endpoint findings within the platform.

These enhancements ensure organisations can continue to scale their Microsoft Defender for Endpoint deployments with confidence while benefiting from faster, more reliable vulnerability ingestion and reporting.

False Positive Suppression Enhancements

We have improved the false positive workflow by adding support for future-dated suppression.

What’s New?

When marking an issue as a false positive, users can now apply a date-based suppression approach, helping ensure the issue is handled appropriately in future scan results.

This brings the false positive workflow closer in line with accepted risk handling and gives users more control over how long a decision should remain in effect.

Key Benefits

  • Add future dates to false positive handling.

  • Better control whether false positive decisions should continue into future scans.

  • Improve consistency between false positive and accepted risk workflows.

  • Support clearer governance around temporary or time-bound issue decisions.

User Impact

This helps teams manage false positives more confidently, especially where scan data changes over time or where a false positive decision should be reviewed after a defined period.

Operational Features

New Feature: Partner Insights Dashboards

We’re introducing a powerful new set of Partner Insights Dashboards, designed specifically for Managed Security Service Providers (MSSPs), Managed Service Providers (MSPs), and multi-tenant organisations managing security programmes at scale.

Available from the Tenant Overview, these dashboards provide unprecedented visibility into client engagement, programme performance, platform adoption, and remediation effectiveness across an entire customer portfolio.


Partner Insights Dashboard

The new Partner Insights dashboard helps partners understand the health, growth, and value of their security services.

Platform Scale Overview

Track the growth of your managed security programme through key metrics including:

  • Total Tenants (Clients)

  • Total Users

  • Total Projects

  • Total Assets

These metrics provide a clear indication of platform adoption and customer growth over time.

Programme Performance Overview

Gain visibility into the performance of every client from a single view.

Key metrics include:

  • Resolution Rates

  • Asset Counts

  • Unique Assets

  • 30-Day Vulnerability Change

  • User Activity

  • Last Login Dates

Partners can also define custom client health statuses such as:

  • Active – regularly engaging with the platform

  • Attention Required – declining engagement levels

  • Inactive – limited or no recent activity

This provides valuable customer success insights, helping partners proactively identify clients that may require additional support or engagement.

Programme Maturity Analysis

Understand how effectively clients are adopting platform capabilities.

The dashboard tracks feature utilisation across areas such as:

  • Asset Prioritisation

  • Asset Groups

  • Asset Ownership

  • Dynamic Remediation

  • Automation Centre

  • SLAs

  • Teams

  • Additional platform capabilities

Where applicable, maturity is displayed as a percentage rather than a simple enabled/disabled state, allowing partners to understand the depth of adoption and identify opportunities to increase platform value.


Tenant Insights Dashboard

The new Tenant Insights dashboard allows partners to drill into individual clients or groups of clients without switching between tenants.

Tenant & Segment Analysis

Analyse:

  • Individual tenants

  • Groups of tenants

  • Tagged customer segments

  • Industry verticals

All from a single dashboard.

Security Performance Metrics

Monitor key vulnerability management indicators including:

  • Critical Issues

  • High Issues

  • Medium Issues

  • Exploitable Issues

  • Open Issues

  • Closed Issues

  • Resolution Rates

Trend reporting helps partners quickly determine whether a client’s security posture is improving or deteriorating over time.

Mean Time To Remediate (MTTR)

Track remediation performance across:

  • Critical Issues

  • High Issues

  • Medium Issues

  • Low Issues

  • Exploitable Issues

  • Actively Exploitable Issues

Providing a clear understanding of how efficiently vulnerabilities are being resolved.

Industry Benchmarking

Compare tenant performance against peers within the same industry vertical.

Partners can now quickly identify whether a client’s remediation performance is ahead of or behind industry averages, enabling more informed conversations and targeted service improvements.


User Impact

The Partner Insights Dashboards provide MSPs and MSSPs with a comprehensive view of customer engagement, programme maturity, platform adoption, and remediation performance. By combining operational, commercial, and security metrics into a single experience, partners can better demonstrate value, improve customer retention, identify growth opportunities, and drive stronger security outcomes across their entire client portfolio.

Picture of Jon Bellard
Jon Bellard
Jon Bellard is the Head of Product at Rootshell Security, where he leads the development of innovative cybersecurity solutions. With a strong background in security consulting and technical sales, Jon drives product strategy and client engagement to meet evolving security needs.