Kaseya Release Notes

INKY AI Recommendations now suggests allow list, block list, trusted-sender and cleanup changes based on your team’s mail flow. Admins can promote what comparable tenants have already allowed or blocked in one click, review policy health for wildcard suppressions and stale entries, and quarantine across tenants with the ability to restore.

Each recommendation states what it would change, why, how confident INKY is and whether it applies org-wide or to one team. When LLM assistance is on, an LLM reviews them and can only keep, demote or drop a recommendation.

AI Recommendations is available in beta and enabled per team.

Learn more here.

Datto AV now supports SHA-256 hash-based exclusions on Windows, giving you a more precise way to manage false positives. Unlike path-based exclusions, the exclusion continues to apply even if the file is renamed or moved.

You can create a hash exclusion directly from the Alert Detail page by selecting Create Exclusion and choosing Hash from the Type drop-down. Datto AV automatically populates the file’s SHA-256 value, reducing manual steps and helping ensure the correct file is excluded.

This gives MSP technicians a more reliable way to handle known safe files while keeping exclusions tightly scoped. Hash-based AV exclusions are supported on Windows operating systems only.

Connect to remote devices more reliably when local DNS issues prevent the target device from resolving the WebRTC server. Web Remote 2.0 now automatically falls back to public DNS when local DNS resolution fails, extending the existing DNS fallback mechanism to WebRTC connections.

This completes the DNS fallback chain across Web Remote transport types, helping technicians establish remote sessions in environments where DNS resolution issues would previously prevent the video connection from starting. Web Remote continues to use WebRTC where available, with additional transport fallback mechanisms designed to maintain connectivity when the preferred connection method is unavailable.

Learn more about Web Remote 2.0 DNS fallback here.

The Datto Linux Agent now supports the latest versions of several widely used Linux distributions, including Red Hat Enterprise Linux 10, Rocky Linux 10, AlmaLinux 10, Debian 13 and Ubuntu 26.04.

As organizations modernize Linux environments, backup and recovery shouldn’t dictate which operating system versions they can deploy. Expanded Linux compatibility gives MSPs and IT teams greater flexibility to protect evolving Linux environments while keeping systems current.

This update extends Datto BCDR protection across more modern Linux deployments, helping partners standardize resilient backup and recovery across diverse computing environments.

Manage files and folders on remote devices through a reimagined Storage Browser in the Device Card. The updated experience supports directories containing more than 10,000 files, with optimized pagination, search, and filtering to make large file systems easier to navigate. Technicians can also perform improved bulk operations such as copying files and folders.

Technicians can pop the Storage Browser out into a separate browser tab to work across multiple devices concurrently. It can also be added as a favorite and accessed directly from the Device Management grid, providing quicker access to background file management without starting a remote desktop session.

Learn more about the Enhanced Storage Browser for VSA 10 here.

Review audit activity through a modernized interface built on the current VSA 10 UI framework. Administrators can search and filter audit events more efficiently and show, hide, or reorder columns to focus on the information most relevant to compliance checks, investigations, and administrative reviews.

The updated Audit Log also introduces standardized naming, formatting, and date presentation across entries. Server-side pagination moves data processing to the back end, improving the experience when navigating large audit datasets.

Learn more about VSA 10.29 updates here.

Enable technicians to view the remote user’s mouse cursor alongside their own during shared Remote Desktop sessions on Windows and macOS devices. Administrators can control access through the Allow technician to view remote mouse setting in Remote Desktop configuration profiles.

When enabled by policy, technicians can show or hide the remote cursor directly from the Remote Desktop client toolbar during a session. Cursor positioning is supported across multi-monitor setups, helping technicians follow user actions and collaborate more effectively during troubleshooting. The feature is disabled by default at both the policy and session level.

Learn more about Remote Control in VSA 10 here.

KaseyaOne now lets you schedule or cancel eligible Professional Services sessions directly from the platform, without coordinating with a project manager.

Integrated calendar links make it easier to manage session timing, giving you more flexibility and clearer visibility into upcoming Professional Services engagements.

This self-service experience reduces back-and-forth communication and helps your team keep projects moving with less administrative effort.

Learn more about self-serve booking for Professional Services sessions for KaseyaOne here.

Unitrends now supports Microsoft Resilient Change Tracking (RCT) for Hyper-V backups, providing more reliable change tracking as virtual machines move between cluster nodes and help prevent unnecessarily large incremental backups. RCT supports full, incremental and incremental forever backups, along with full, instant, file-level and virtual disk recovery.

Hyper-V virtual machines can also now be recovered directly to Cluster Shared Volumes (CSVs), removing the previous dependency on local host storage. Together, these enhancements make backup and recovery more efficient and practical across modern clustered Hyper-V environments.

Learn more about Unitrends enhancements for Hyper-V backup and recovery here.

Unitrends now supports WireGuard for secure replication tunnels to hot backup copy targets (Unitrends Cloud and/or Unitrends appliance(s)). WireGuard runs in the Linux kernel, reducing CPU and protocol overhead by up to 40% compared to OpenVPN, improving backup copy throughput and helping data move faster over the same network connection.

WireGuard is used for eligible new replication configurations running Unitrends 11.2.0-1 or later, while OpenVPN remains fully supported. Existing OpenVPN configurations can be transitioned to WireGuard where eligible; partners can contact Support to begin the migration process.

Learn more about WireGuard support in Unitrends here.

The Analysis section formerly named “Smart Insights” is now “LLM Assistance,” which is what the setting has always governed, covering Smart Insights deep dives, a closer look at borderline messages and review of AI Recommendations.

The description now names the managed LLM service used, states that requests are processed in the region your tenant is deployed in, and notes that US and EU tenants are served by separate INKY instances. It also makes clear that turning LLM assistance off leaves the rest of detection running: machine learning, computer vision, sender profiling, and URL and attachment analysis are unaffected.

Learn more about LLM Assistance in the Smart Insights feature guide here.

Previously called Triage, the new INKY Threat Center brings queues that need a decision into a unified workspace including reported mail, in-flight message deletions, burst activity and account takeover enforcements. Each with a live count in the tab bar, so you can quickly jump to the specific queue that needs attention.

Depending on what your team has enabled, Threat Center can show these tabs:

Reported Mail

A queue for reviewing user-reported emails, seeing how they were reported and remediating them.

• Reported emails are grouped by message rather than listed one report at a time. A message several people reported now appears on a single row you act on once.
• Emails with the same message ID and sender are also grouped together, too, and can be remediated as a single group.
• Learn more about Reported Mail.

Message deletions

In-flight message deletion requests, with their status.

Burst management

Shows users that are currently in inbound or outbound burst mode and users that have been prevented from entering burst mode.

Outbound protection

Provides a view for monitoring and managing both active and historical account takeover (ATO) enforcements. The count of Active Enforced Users is shown on this tab and requires the outbound protection analysis entitlement.

• Includes account takeover (ATO) detection, monitoring users’ sending behavior for signs of a compromised account
• It scores outbound mail from each user on three signals: message bursts, dangerous links and spam or phishing content and puts a user into enforcement mode when their score crosses the low-risk threshold and ATO enforcement approvers are notified so they can review the messages and release the user.
• When a user is in enforcement, their outbound messages are delivered, quarantined or discarded according to the action set for that risk level.
• Learn more: Account Takeover (ATO) Detection

By bringing these security decisions into one workspace, Threat Center helps your team triage suspicious activity faster, reduce duplicate remediation work and respond more consistently to email threats and compromised accounts. This gives you clearer visibility across active risks while making day-to-day security operations easier to manage.

IT Glue now automatically syncs contacts imported from Microsoft to Autotask, helping you keep contact information current across both platforms.

When the Enable automatic pushing of Microsoft contacts setting is enabled under Two-Way Sync Settings, imported Microsoft contacts are automatically pushed to Autotask.

This reduces manual contact management and helps your team maintain consistent customer information across connected systems.

Learn more about automatic Microsoft contact sync to Autotask for IT Glue here.

This update gives partners deeper visibility into Endpoint Backup asset health and backup activity directly from the Datto Backup Portal Dashboard in UniView. The new Asset Details view brings together key information, including protection status, assigned policy, storage usage and recovery-point history. Technicians can quickly understand the state of a protected endpoint without piecing information together across multiple views.

Each recovery point now provides clearer insight into backup success, file changes and errors. Technicians can see how much of a backup completed and download detailed CSVs showing changed files or specific backup errors, helping them move from identifying a problem to troubleshooting it faster.

Learn more about Datto Endpoint Backup Asset Details here.