Control D Release Notes

Added

• Added endpoint groups to the Endpoints page. Create, rename and delete groups from the Endpoints menu, move several endpoints at once, or pick a group when editing an endpoint.
• Added Export to CSV to the Endpoints menu. The file lists every endpoint with its name, ID, device type, app version, comments, profile and status.
• Your dashboard theme is now saved to your account and follows you across browsers.
• Sub-organizations can now forward an unblock request to their parent organization when a domain is blocked by the parent organization's profile.
• Fixed issues in endpoints, schedules, the IPs and Clients pages, the Activity Log, CSV exports, sub-organization settings, provisioning codes, API tokens, plan changes, locked profile settings, accessibility and some minor UI/UX issues.

Added

• Added bulk add for Internal Domains on Network Settings.
• Added a new DNS Exfiltration Blocking feature page.
• Added a live Control D service status badge to the Status page.
• Mandatory 2FA can now only be turned on by an owner who already has 2FA on their own account, so owners can no longer lock themselves out. Organizations that require 2FA now block members until they enroll, from the first page load, after a reload and on direct links.ded.
• Domain Test now handles internationalized domain names correctly.
• Fixed issues in single sign-on, Copy Rule, Profile Options (including Branded block response), Services overrides for sub-organizations, Clients and IPs selection, bulk endpoint editing, Activity Log pagination, Identity & Access member removal and returning from maintenance mode, plus some minor UI/UX issues.

Improved

• Split My Organization into separate Network Settings, Data & Retention and Identity & Access pages.
• Added Internal Domains to Network Settings. You choose domains that managed ctrld and Control D apps should resolve through your local network or VPN DNS, or through specific resolver IPs. A parent organization can also share its Internal Domains with all of its Sub-Organizations.
• Added an “Including Sub-Organizations” toggle to Statistics and Activity Log for parent organizations, so you can see traffic from all your Sub-Organizations in one place.
• Profile imports are now stopped once you reach your organization’s profile limit, with a clear message explaining why.
• Added a Tailscale setup guide for endpoints.
• Renamed the Status page to Config.
• When you search Activity Log for a full domain, the results now show only that domain and its ubdomains, not other domains that happen to contain the same text.
• Fixed issues in checkout, subscription cancellation, billing, two-factor authentication, password changes, profile imports, Custom Rules, Spoof IP, endpoint analytics, Statistics, Activity Log, Admin Logs, Domain Insights and Barry, plus some minor UI/UX issues.

Improved

• Upgraded Barry, the Control D assistant. After you confirm, he can now make changes to your Profiles and settings for you, and he highlights what changed in the Dashboard.
• Added Domain Insights for Organizations, which classifies your domain lists in bulk with Dragonfly and gives you a downloadable report for each domain. To request access, contact [email protected].
• Added a new AI Agent Security solutions page and updated the homepage.
• Added a new demo experience at controld.com/demo.
• Added a new dialog when uploading a folder in Custom Rules. You can choose to add only new rules or also update existing ones, and you see how many rules were added, updated and skipped.
• Shared Profiles now show endpoints from sub-organizations.
• New ctrld provisioning now defaults to DNS Intercept mode.
• Improved performance and responsiveness across the Dashboard and website.
• Laid the groundwork for Filter Preview, which will let you see how a Filter change affects your traffic before you apply it.
• Fixed issues in checkout, two-factor authentication, organization member invites, page reloads and accessibility, plus some minor UI/UX issues.

Refreshed the Network page with an interactive 3D globe, continent shortcuts, location status and latency details.

Improved website loading performance, refreshed Quick Setup guidance, and made tools and resources easier to find.

Added an experimental “Block DNS Exfiltration” option to help block DNS patterns used for data theft and payload smuggling, with blocked activity visible in Activity Log and Statistics.

Statistics now remembers your Line/Bars preference, and dragging the map no longer changes country filters.

Profiles now highlight the active scheduled profile. Improved Safe Search and Restricted YouTube settings while keeping them independent of Service selections.

Fixed DNS profile generation on macOS and iOS, and restored access to community blocklist details on the Free DNS page.

Improved login and logout security, made session storage respect “Remember me,” and strengthened protection for sensitive authentication data and unsafe links.

Fixed Billing layout issues, input background flickering, and other visual inconsistencies.

Improved Statistics charts, loading states and error handling; added current endpoint usernames to Activity Log entries and CSV exports.

Added web-request and STUN connectivity diagnostics, clearer DNS verification results and troubleshooting help to the Status page.

Removed the three-country Home Countries limit, expanded supported country selections and improved flag previews.

Added retry and cancel controls for pending ctrld updates.

Organizations:

Improved provisioning-code availability indicators and added invalidation confirmation.

Organizations:

Renamed Microsoft SSO to Entra ID and fixed redirect validation for valid Okta configurations.

Fixed checkout discounts disappearing and selected billing periods resetting during pricing refreshes.

Improved profile-import validation, Custom Rules search stability, email-verification resends and dashboard navigation.

Improved Statistics charts, loading states and error handling; added current endpoint usernames to Activity Log entries and CSV exports.

Added web-request and STUN connectivity diagnostics, clearer DNS verification results and troubleshooting help to the Status page.

Removed the three-country Home Countries limit, expanded supported country selections and improved flag previews.

Added retry and cancel controls for pending ctrld updates.

Organizations:

Improved provisioning-code availability indicators and added invalidation confirmation.

Organizations:

Renamed Microsoft SSO to Entra ID and fixed redirect validation for valid Okta configurations.

Fixed checkout discounts disappearing and selected billing periods resetting during pricing refreshes.

Improved profile-import validation, Custom Rules search stability, email-verification resends and dashboard navigation.

Added a setting to turn off onboarding hints across sessions and devices.

Added the ability to resend verification emails from the email confirmation screen.

Added the ability to copy a day’s schedule to other days directly from the schedule editor.

Refreshed the website navigation and simplified the organization signup flow.

Fixed Change Plan calculations, Admin Logs navigation, and organization pages for accounts using SSO.

Fixed issues with Custom Rules search, Folder Rule settings, and inactive-client cleanup.

Fixed Traffic Categories readability in light mode and several minor website content and visual issues.

Added configurable inactivity thresholds for automatically removing old IPs, endpoints, and clients.

Added bulk reporting for incorrectly blocked or allowed domains.

Added the ability to choose Block, Bypass, or Redirect, and a redirect location, when adding Services in bulk.

Added a new Resources page and moved the DNS Filtering guide into it.

Added bulk ctrld updates across an organization’s sub-organizations, with clearer failure reporting.

Added a new Enterprise DNS Security guide.

Added custom analytics-retention settings for consumer accounts.

Endpoints now show which scheduled profile is currently active.

Custom Rules now clearly differentiates between geo rules and domain rules.

Fixed incorrect total and redirection counts on the Statistics page.

Improved the presentation of Benign Blocks on Statistics page so healthy results are clearer.

Fixed issues with rule counts in folders, upgrade banner disappearing, personal page redirect for logged in users, incorrect totals on Statistics page and some minor UI/UX issues.

Updates

Added flexible Endpoint Schedules with multiple profiles, customizable time windows, overnight scheduling, and minute-precise times.

Added configurable analytics data retention for organizational customers.

Added the DNS Cost Calculator to the Control D homepage with shareable results and a smoother experience. It is also available as a standalone tool.

Added related security resources to the DNS Leak Test.

Improved the Contact page with clearer support options for personal and organizational customers.

Improved organization account management with Tax ID validation, better Analytics Report recipient suggestions, and fewer unnecessary data requests.

Improved mobile navigation, responsive layouts, loading indicators, illustrations, and visual styling across the website.

Fixed various issues affecting Endpoint setup and editing, Profile controls, Custom Rules, alerts, email counts, scroll positions, and Activity Logs.