Tanium Updates & Release Notes

LATEST · SEPTEMBER 2026

Explore what's new across the Tanium platform this month, organized by solution area.

⚑ Action recommended this month 2

A couple of this month's changes have a suggested next step. Details appear inline on each item below.

• Tanium Atlas — Atlas Web Searches: if you want Atlas to use web search, an admin needs to enable it in Atlas Settings, accept the disclosure, assign the Atlas Web Searcher role, and configure the Internet Access Policy allow/block list. (Core Platform & AI Services) · Jump to details →
• Tanium Provision — New Admin Controls for PXE Authentication: review and configure the new Provisioning Password and Technician Access Password settings in the Provision admin interface. (Endpoint Management) · Jump to details →

PLATFORM & ATLAS

Core Platform & AI Services →
32 updates, including 24 for Tanium Atlas

SOLUTION AREA

Endpoint Management →
9 updates

SOLUTION AREA

Exposure Management →
2 updates

SOLUTION AREA

Security Operations →
5 updates

SOLUTION AREA

Integrations →
1 update

NEW THIS MONTH

Lifecycle & EOSS/EOL Notices →
8 items newly noticed this month — see the full lifecycle tracker for every item that has yet to reach EOSS/EOL

Core Platform & AI Services

32 updates, including 24 for Tanium Atlas

Tanium Atlas

SEPTEMBER 17, 2026
Guided Skill Authoring with /skill-creator

What it is:
The new /skill-creator command interviews you step-by-step to build a custom Atlas skill — what it's for, when it triggers, what inputs it needs. The draft opens in the Skill Workspace for you to review before saving, and can include supporting files/scripts for logic you want deterministic rather than left to the model.

Why it matters:
Guided skill authoring makes custom automation more accessible.

SEPTEMBER 15, 2026
Atlas Web Searches

What it is:
Atlas can now search the web and read results, so questions needing outside sources (a CVE write-up, vendor advisory, patch note) aren't limited to your environment's data; answers cite what they used. An admin must enable Web Searches in Atlas Settings and grant users the Atlas Web Searcher role. Reachable sites are governed by an admin-maintained Internet Access Policy allow/block list; blocked domains are named in the response.

Why it matters:
Extends Atlas beyond internal Tanium data to real-time external context, but opens a new data-egress path — admins have to deliberately opt in and govern it via role and allow-list controls rather than it being on by default.

⚑ Suggested action:
If you want Atlas to use web search, an admin needs to enable it in Atlas Settings, accept the disclosure, assign the Atlas Web Searcher role, and configure the Internet Access Policy allow/block list.

SEPTEMBER 10, 2026
Sharing Skills with Your Content Set

What it is:
Skills can be shared by being published to a content set. Skills are private until published to a content set, after which everyone with access can run them immediately.

Why it matters:
Sharing skills supports teams sharing custom Atlas workflows instead of everyone building their own.

SEPTEMBER 10, 2026
Write Your Own Atlas Skills

What it is:
You can now author custom Atlas skills. A skill is a set of Markdown instructions Atlas follows when invoked. Skills can include .csv, .json, .yaml, .toml, .py, and .txt files alongside SKILL.md.

Why it matters:
Lets teams codify their own repeatable workflows into Atlas, including deterministic logic via Python scripts, instead of being limited to Tanium's built-in skill set.

SEPTEMBER 23, 2026
Template Favorites

What it is:
Template favorites: Allows you to favorite templates, adding them to the “Favorites” category.

Why it matters:
Makes it easier for you to find templates you commonly use.

SEPTEMBER 21, 2026
Save Any Page to the Template Gallery

What it is:
Save to Gallery: Any page you have built can now be saved to the template gallery.

Why it matters:
Saving a page to the gallery lets others in your environment reuse pages you have created.

SEPTEMBER 21, 2026
Charts Over Time in Atlas

What it is:
Atlas can chart a series of values over time, as a line or an area.

Why it matters:
Additional charts support tracking metrics over time.

SEPTEMBER 17, 2026
Detail Views Open in a Side Drawer

What it is:
Panels can now open a detail view in a right-side drawer instead of stacking it inline or opening a dialog.

Why it matters:
Keeps the underlying table/panel visible while inspecting details and lets you turn a drilled-in view into a standing panel without losing your place.

SEPTEMBER 15, 2026
Smarter Routing for Deploy Requests

What it is:
Atlas now routes a deployment request based on completeness: a vague or partial request opens a pre-filled deploy panel for you to review and submit; a fully specified request (package, target, parameters) goes straight to an inline approval card. A person reviews before anything runs either way.

Why it matters:
Cuts a step for well-specified requests while still requiring human approval, and avoids Atlas guessing at ambiguous ones without giving you a chance to adjust them.

SEPTEMBER 10, 2026
Background Agents in the Chat Rail

What it is:
The chat rail header now has a Chat/Agents toggle that allows you to toggle between background agent information and your conversation.

Why it matters:
Gives visibility into what background agents are doing and their AI credit usage without losing your in-progress chat.

SEPTEMBER 4, 2026
Atlas Avoids Authoring Sensors That Execute Arbitrary Binaries

What it is:
Atlas now avoids writing sensors that execute arbitrary binaries and flags any such sensor as maximum risk.

Why it matters:
Tightens the security posture of AI-authored content by steering away from an unrestricted execution pattern before it reaches your environment.

SEPTEMBER 4, 2026
Unsafe Standing-Grant Calls Refused in Unattended Sessions

What it is:
In an unattended session, a call covered by a standing grant that Atlas judges unsafe is now refused outright.

Why it matters:
Prevents unsafe actions from running when no human is available during unattended or scheduled runs.

Tanium Atlas MCP Server

SEPTEMBER 17, 2026
OAuth Client Registration for the Atlas MCP Server

What it is:
Tanium now supports registering OAuth clients in Atlas to connect to the Atlas MCP Server or directly to Tanium's REST/GraphQL APIs. At registration, clients choose a grant type: Authorization Code (a person signs in and approves; tokens carry the combined roles of that person and the client) or Client Credentials (machine-to-machine, no person signs in; the client authenticates with its own secret and acts as whoever registered it).

Why it matters:
Gives you a standards-based, auditable way for external tools and automations to call Tanium — with explicit control over whether access is tied to a real user or runs unattended as a service.

SEPTEMBER 1, 2026
MCP Tool Calls Table on the Atlas Audit Page

What it is:
The Audit page in the Atlas UI now includes an MCP Tool Calls table showing tool names, callers, results, and Atlas AI credit usage per call.

Why it matters:
Gives admins visibility into what MCP-connected clients are doing and how much AI credit they consume.

QUALITY-OF-LIFE IMPROVEMENTS

• Tanium Atlas — Favorite templates from a card's menu and find them under the new Favorites filter in the template gallery.
• Tanium Atlas — Duplicate a page: Duplicate a page from the page header or the sidebar menu.
• Tanium Atlas — Page Scope selectors are hidden for users who have no personas assigned.
• Tanium Atlas — Computer names, computer IDs and IP addresses in a results table are clickable, opening that endpoint's core identity in the drawer along the right edge of the page.
• Tanium Atlas — Atlas now lists every keyboard shortcut it supports, grouped by category.
• Tanium Atlas — The chat welcome screen added a Browse Templates button that opens the gallery directly.
• Tanium Atlas — Atlas now checks the skill currently open in the Skill Workspace, including unsaved edits, before answering questions or proposing changes.
• Tanium Atlas — Browse Skills in the command palette now has a Create Skill control with two paths: Create New opens a blank skill in the editor; Create with Atlas opens a chat pre-loaded with a skill-creation prompt.
• Tanium Atlas — Atlas now searches its entire available tool set before concluding a capability doesn't exist, rather than stopping after checking only part of it.
• Tanium Atlas — Page rows in the Pages sidebar now behave as real links — right-click, Cmd/Ctrl+click, and middle-click work as expected.
• Tanium Atlas — Typing “/” into an empty command palette now opens the full list of available modes, navigable with arrow keys.
• Tanium Atlas — New “Add from gallery” option in the page header menu and on any page's sidebar row opens the template gallery already scoped to that page.
• Tanium Atlas MCP Server — AI credit usage initiated via MCP is now attributed to the authenticated caller in the Conversations table on the Audit page.
• Tanium Emerging Issues Content — Added Sideloaded/Unpacked and Developer mode detections to the Guardian Spotlight – Browser Extensions dashboard.
• Tanium Endpoint Configuration Toolset — Added OS diagnostics collection for AIX and Solaris to Must Gather.
• Tanium Endpoint Configuration Toolset — Added a health check for missing/broken Windows performance counters.
• Tanium Endpoint Configuration Toolset — Added battery metrics for Linux endpoints.
• Tanium Endpoint Configuration Toolset — Added netstat output to Must Gather.

Endpoint Management

9 updates

Tanium Patch

SEPTEMBER 15, 2026
Patch Deployment Pre-Notifications Now Available to All Environments

What it is:
Deployment pre-notifications are available on any environment where Patch CX has finished rolling out through all Endpoint Configuration upgrade rings.

Why it matters:
End-user notice ahead of a patch deployment allows better communication around patching activity.

Tanium Provision

SEPTEMBER 7, 2026
Per-Deployment Token Encryption for Imaging

What it is:
Each imaging deployment now gets its own password to encrypt its provisioning tokens.

Why it matters:
Per-deployment encryption passwords limit the blast radius if one deployment's token password is compromised.

SEPTEMBER 7, 2026
New Admin Controls for PXE Authentication

What it is:
New admin settings let you set passwords and rules controlling PXE authentication and unattended imaging behavior.

Why it matters:
Configurable passwords and global settings let admins control who can PXE-boot and provision devices unattended.

⚑ Suggested action:
Review and configure the new Provisioning Password and Technician Access Password settings in the Provision admin interface to take advantage of the hardened PXE authentication.

QUALITY-OF-LIFE IMPROVEMENTS

• Tanium Provision — Added support for SDelete 2.0.6 in Provision retirement actions.
• Tanium Provision — The imaging pipeline now limits how many HTTP requests it will accept in a given time window.
• Tanium Provision — TaniumPXE and the endpoint being provisioned now cryptographically verify each other's identity before imaging starts using signed JWT tokens.
• Tanium Provision — Domain-join requests made during imaging can now only be used once and are tracked.
• Tanium Patch — After upgrading, Tanium Scan for Windows performs a one-time full metadata resync for WSUS sources to recover any patch metadata missed by earlier syncs.
• Tanium Performance — Cloud customers with the Performance Operator role can now run a sync-all of alerts, previously limited to on-prem Performance Administrators.

Exposure Management

2 updates

QUALITY-OF-LIFE IMPROVEMENTS

• Tanium Comply — On-demand rescans for TSE 7.0 now allow for a distribute-over-time (DoT) action period.
• Tanium Comply — Added support for macOS 27 vulnerability assessments.

Security Operations

5 updates

Tanium Threat Response

SEPTEMBER 23, 2026
New Generic Event Log Search Sensor

What it is:
Added a new Generic Event Log Search sensor.

Why it matters:
This sensor enables you to search Windows event logs by event ID, search term, lookback period, and event log source.

SEPTEMBER 23, 2026
Regex-Based File and Directory Filters for Index Configurations

What it is:
Index configurations now support File and Directory Filters by Regular Expression.

Why it matters:
You can exclude specific files or directories from Threat Response Index hashing and scanning using regular expressions.

QUALITY-OF-LIFE IMPROVEMENTS

• Tanium Threat Response — TAXII intel sources now accept a username-only or password-only credential.
• Tanium Threat Response — Threat Response Saved Evidence now shows the endpoint hostname for events saved from a snapshot connection.
• Tanium Threat Response — Artifact enrichment now uses a send-to-chat action instead of the Enrich button.

Integrations

1 update

QUALITY-OF-LIFE IMPROVEMENTS

• Tanium Patch Management for IT Operations — Added support for attaching Tanium Patch Lists directly to a Patch Request when using the ServiceNow Patch Management for IT Operations integration.

Lifecycle & EOSS/EOL Notices

8 items newly noticed this month. Sorted soonest to reach EOSS/EOL first.

EOSS — 2026-NOV-16
EOSS for IBM AIX 7.2 TL5, RHEL 5 / CentOS 5, and macOS X

Recommended action:
Move to a newer, currently supported OS version.
Read the TRC article ↗

EOL — 2026-DEC-31
Asset — Push Destination: Flexera

Recommended action:
Migrate to the Integrations Gallery.
Read the TRC article ↗

EOSS — 2026-DEC-31
Tanium Ask

Recommended action:
Use Tanium Atlas — all Ask functionality is available there.
Read the TRC article ↗

EOSS — 2026-DEC-31
Tanium Comply — Vulnerability Scanning Changes

Covers four Comply items reaching EOSS together: Network Drives (no replacement), Scan Timeout, Process Priority, and Shipping JREs (superseded by the new scan engine architecture; CIS-CAT engine users can upload their own JRE).

Recommended action:
Review the article for the specific change affecting each setting.
Read the TRC article ↗

EOSS — 2026-DEC-31
Tanium Trends (Cloud)

Recommended action:
Move to Reporting, then on to Tanium Atlas.
Read the TRC article ↗

EOSS — 2027-MAY-18
Core Content — Forefront Support

Recommended action:
Move to Core Content 1.6+, which supports Microsoft Defender content.
Read the TRC article ↗

EOSS — 2027-NOV-17
Tanium Client 7.7

Recommended action:
Upgrade to Tanium Client 7.8+.
Read the TRC article ↗

EOL — 2028-SEP-30
Tanium Server on Windows

Recommended action:
Tanium Cloud is recommended. If that's not possible, a cloud or virtual appliance; physical appliances are not recommended given a 12-month lead time and supply constraints.
Read the TRC article ↗

This list covers only what's newly noticed this month. For the complete, always-current list of every item that hasn't yet reached EOSS/EOL — plus what's already been deactivated — see the Tanium Product Lifecycle tracker →

Resources

Register for Titans LIVE!: Monthly Tanium Product Updates

PUBLIC

Original source

LATEST · AUGUST 2026

Explore what's new across the Tanium platform this month, organized by solution area.

Action recommended this month

5

A few of this month's changes have a suggested next step. Details appear inline on each item below.

• Tanium Client — End-of-Support: Tanium Client 7.4: upgrade all 7.4 endpoints to 7.6 or later (ideally 7.7+) before November 12, 2026. (Core Platform & AI Services) · Jump to details →
• Tanium Client — End-of-Support: Tanium Client 7.6: upgrade all 7.6 endpoints to 7.7 or later before May 18, 2027. (Core Platform & AI Services) · Jump to details →
• Tanium Emerging Issues Content — CVE-2026-65400 (Apple macOS): review the Guardian dashboard for exposure and deploy Apple's patch per your change management process. (Core Platform & AI Services) · Jump to details →
• Tanium Emerging Issues Content — ShieldBreak (Windows Defender): review the dashboard for exposure and deploy the mitigation and detection Signal. (Core Platform & AI Services) · Jump to details →
• Tanium Atlas — AI Credit Usage Warnings: review the AI Credit Usage settings page and configure your desired warning thresholds. (Core Platform & AI Services) · Jump to details →

PLATFORM & ATLAS

Core Platform & AI Services →

59 updates, including 28 for Tanium Atlas

SOLUTION AREA

Endpoint Management →

19 updates

SOLUTION AREA

Exposure Management →

4 updates

SOLUTION AREA

Security Operations →

1 update

Core Platform & AI Services

59 updates, including 28 for Tanium Atlas

Tanium Atlas

AUGUST 31, 2026

Page-Level Scope Selector in Atlas

What it is:
Page scope now lives on the page instead of the session, so each open page can be set to a different scope (persona) and changed from a selector in its header without starting a new session.

Why it matters:
Users working across multiple personas no longer need separate sessions to switch scope — they can keep several pages open side by side, each scoped differently, and Atlas's access on a page always matches what that page is set to.

Read the announcement →

AUGUST 31, 2026

Explicit Approval Required for Atlas Actions

What it is:
Creating actions and saved actions in Atlas can no longer be covered by a standing ("always allow") grant — every one now requires explicit approval.

Why it matters:
Because actions and saved actions can execute arbitrary content on endpoints, this closes a risk where a broad standing grant could let Atlas take high-impact steps without a human checking each one first.

AUGUST 24, 2026

Background Agent Access Permission

What it is:
Background agent access permission: This new permission lets administrators choose which users can use background agents.

Why it matters:
This allows for more granular control over background agent usage, rather than just enabling/disabling the capability for the whole environment.

AUGUST 19, 2026

AI Credit Usage Warnings (Environment-Wide)

What it is:
AI credit warnings: Atlas warns you as you approach an AI credit limit, with warnings arriving in the Activity Center as each threshold is crossed. Environment thresholds are configured from Configure warnings on the AI Credit Usage settings page.

Why it matters:
Lets admins get ahead of a credit shortfall instead of finding out after usage is cut off. Thresholds apply environment-wide, so every admin with usage access is notified.

⚑ Suggested action:
Review the AI Credit Usage settings page and configure your desired thresholds for credit usage warnings.

Join the discussion →

AUGUST 19, 2026

Skills in the Command Palette

What it is:
Skills in the Command Palette: The Command Palette has a Skills mode for finding skills. It lists everything available to you with each skill's author and a text filter, and opening one shows the prompt it will run.

Why it matters:
You can discover and use purpose-built Atlas skills. Using the Run on current page or Run on new page options puts the skill in the composer, so you can add arguments or adjust the wording first.

AUGUST 19, 2026

Personal AI Credit Usage Warnings

What it is:
Personal AI credit warnings: Users with a credit cap can set their own warning thresholds from the My Usage page.

Why it matters:
Lets individuals track their own usage against their personal cap instead of relying on environment-wide alerts.

AUGUST 10, 2026

Custom Sensor Creation with Atlas

What it is:
Atlas now supports building new sensors for both Windows (PowerShell) and Linux/macOS (Shell).

Why it matters:
This reduces the effort it takes to author sensors in Tanium, allowing you to use natural language to request & build a custom sensor using Atlas

AUGUST 6, 2026

AI Credit Compliance Banner on the Usage Page

What it is:
The Usage page now shows a compliance banner when the environment's AI credit consumption exceeds its limit.

Why it matters:
We’re making it easier to see when you’ve hit or exceeded your credit limit in Atlas.

Tanium Client

AUGUST 26, 2026

⚠ IMPORTANT NOTICE

End-of-Support Announcement: Tanium Client 7.4

What it is:
Tanium Client 7.4 (first released February 2020) reaches end of support on November 12, 2026.

Why it matters:
Endpoints running Tanium Client 7.4 will be unable to receive updates to endpoint tools from the Toolset manifest, and the Client on these endpoints will be in a deprecated state. Endpoints will be able to upgrade from version 7.4 to a newer Tanium Client.

⚑ Suggested action:
Upgrade all Tanium Client 7.4 endpoints to 7.6 or later (ideally 7.7+) before November 12, 2026.

Read the announcement →

Join the discussion →

AUGUST 26, 2026

⚠ IMPORTANT NOTICE

End-of-Support Announcement: Tanium Client 7.6

What it is:
Tanium Client 7.6 (first released November 2023) reaches end of support on May 18, 2027.

Why it matters:
Endpoints running Tanium Client 7.6 will be unable to receive updates to endpoint tools, and the Client on these endpoints will be in a deprecated state. Endpoints will be able to upgrade from version 7.6 to a newer Tanium Client.

⚑ Suggested action:
To avoid disruption, upgrade all endpoints to Tanium Client 7.7 or later before May 18, 2027

Read the announcement →

Join the discussion →

Tanium Emerging Issues Content

AUGUST 19, 2026

CVE-2026-65400: Apple macOS Improper Authentication Vulnerability

What it is:
New Guardian content: CVE-2026-65400 — Apple macOS Improper Authentication Vulnerability.

Why it matters:
A critical (CVSS 9.8), pre-auth flaw in macOS Screen Sharing lets a network attacker gain root access without credentials, and it's already being exploited in the wild to install cryptominers. Apple has patched it; this dashboard shows where you're exposed so you can prioritize the update.

⚑ Suggested action:
Review the Guardian dashboard for exposure and deploy Apple's patch per your change management process.

Join the discussion →

AUGUST 12, 2026

ShieldBreak: Windows Defender Zero-Day Exploit

What it is:
New Guardian content: ShieldBreak: Windows Defender Zero-Day Exploit

Why it matters:
The ShieldBreak exploit can allow local privilege escalation to SYSTEM. No patch is available yet, and this dashboard gives you visibility into where you’re impacted, as well as a potential remediation path.

⚑ Suggested action:
Review the Guardian dashboard for exposure and deploy the mitigation and detection Signal.

Join the discussion →

Tanium Jump Gate

AUGUST 31, 2026

Per-Request Ephemeral Users for Jump Gate Linux Sessions

What it is:
Jump Gate Linux terminal sessions can now run as a per-request ephemeral user instead of always landing as root, with group membership set via the new linux_groups setting (global or per-policy).

Why it matters:
This reduces standing risk from remote access sessions — users no longer get full root by default, and admins control exactly what group-level permissions a session gets, globally or per policy.

AUGUST 12, 2026

Jump Gate Approvals Integrated with the Activity Center

What it is:
Jump Gate approvals are now integrated with the Activity Center in Atlas.

Why it matters:
Managing jump requests in Atlas has become easier, as pending-approval notifications open the jump request card, where approvers can approve or reject the request from Atlas.

Tanium Connect

AUGUST 20, 2026

Export Tanium Cloud Data to On-Premises SIEM Destinations

What it is:
Introduced the ability to export data from Tanium Cloud to on-premises Socket (SIEM) destinations through satellites.

Why it matters:
Removes the on-prem export gap. Cloud data can now reach SIEM destinations like Splunk via satellite.

Tanium Certificate Manager

AUGUST 19, 2026

Expanded Inclusion/Exclusion Criteria for Certificate Profiles

What it is:
Introduced further inclusion and exclusion criteria to profiles.

Why it matters:
Customers can now build more robust and boolean-capable exclusion and inclusion filters to affect results.

Tanium Automate

AUGUST 12, 2026

Pause, Resume, and End Controls for Playbook Runs

What it is:
Introduced Pause, Resume, and End controls on the Playbook Run component in Atlas.

Why it matters:
We’ve improved the experience of running playbooks from Atlas.

AUGUST 12, 2026

Action Status Counts in Playbook Failure Emails

What it is:
Added action status counts (Completed, Failed, Running) and a direct link to Action History in email notifications when a playbook step fails.

Why it matters:
Recipients of playbook email notifications can see why a step failed without opening the run.

QUALITY-OF-LIFE IMPROVEMENTS

• Tanium Atlas — You can now open a page's actions menu (rename, move, delete) by right-clicking it in the sidebar.
• Tanium Atlas — Software anomaly and certificate findings, previously only available in Tanium Classic, now also surface as guidance and observations in the Atlas Activity Center.
• Tanium Atlas — A refresh action allows you to request fresh data on some panels without typing a prompt.
• Tanium Atlas — Additional panel types show a "Results fetched" timestamp indicating when the panel last loaded its data.
• Tanium Atlas — Background agents are automatically cleaned up from the background agent list after their final run. Run history, page conversation, and usage records are preserved.
• Tanium Atlas — Preferences: The settings previously available only in the Tanium Classic preferences modal — theme, landing page, language, sign-out after inactivity, question results notification, and others — are now available in Atlas.
• Tanium Atlas — Components Atlas adds to a page are given names describing what that particular component shows.
• Tanium Atlas — Shift-click or cmd-click to select multiple sidebar pages, then move or delete them together via right-click or drag-and-drop onto a folder.
• Tanium Atlas — Inline page rename: Click a page's name in the header to edit it.
• Tanium Atlas — Page-level refresh: Pages with data panels have a refresh button that re-runs every panel on the page at once.
• Tanium Atlas — Approval requests no longer expire.
• Tanium Atlas — Added support for bulk actions (stop, resume, and delete) for background agents.
• Tanium Atlas — Hovering a column header in a results grid shows that sensor's configured maximum age.
• Tanium Atlas — Administrators can ask Atlas what background agents are running and get an answer covering every user's agents.
• Tanium Atlas — Requests to send an email now go through the email service directly.
• Tanium Atlas MCP Server — Improved MCP server functionality to offer better coverage, accuracy, and efficiency.
• Tanium Automate — Added a No Results message to the playbook run view when a step completes with zero endpoint results.
• Tanium Automate — Added support to better view playbooks in Atlas.
• Tanium Automate — Added a View Playbook Details button and renamed View Details to View Run Details on the Playbook Run component for clearer navigation.
• Tanium Certificate Manager — Users no longer have to expand the profile views to see this criteria information.
• Tanium Console — Added the ability to filter the Client Status page by Computer ID.
• Tanium Discover — Networks management - Manage your networks directly from Atlas.
• Tanium Discover — Locations management - Add, edit, and review locations directly from Atlas.
• Tanium Discover — Create/edit Discover profiles in Atlas: Build and edit discovery profiles with guided guardrails for satellite caps, port-scan restrictions, and distributed scan bounds.
• Tanium Discover — Unmanaged asset inventory - Review your unmanaged asset inventory without leaving Atlas.
• Tanium Jump Gate — The content set applied to a request is now visible on the request details page, in the request and activity lists, and in the audit log.
• Tanium Jump Gate — The Atlas jump request card now supports closing a request and running commands directly from the card.
• Tanium Jump Gate — Access policies can now be built and edited natively in Atlas.
• Tanium Jump Gate — Sessions in Atlas open in a dedicated session panel beneath the request card. Recent terminal output is shared with the Atlas agent, so users can ask about what's happening in an active session.
• Tanium Emerging Issues Content — Added detection of sideloaded and unpacked extensions, and Developer Mode status to the Chromium Extensions Advanced Details sensor.
• Tanium Atlas — Credit limit warnings by email: You can now get an email when you approach an AI credit limit, on both personal and environment thresholds.
• Tanium Atlas — EID Last Seen column: Cached results for individual endpoints now carry an EID Last Seen column by default.
• Tanium Atlas — Bars in a bar chart are now keyboard-operable: one tab stop per chart, arrow keys between bars, and Enter or Space to activate a bar that has an action.
• Tanium Automate — Added a Scope field for OAuth 2.0 authentication configurations.
• Tanium Automate — Added playbook step summaries in Atlas for additional step types.
• Tanium Jump Gate — Access methods can now be managed from a single matrix, both globally in Settings and per-policy, with the option to override individual cells.
• Tanium Jump Gate — Jump Gate's global settings can now be viewed and edited directly in Atlas.
• Tanium Atlas — Added a filter to the Pages sidebar to narrow the list to just pages with a background agent running on them.
• Tanium Atlas — Added keyboard shortcuts (Cmd+[ / Cmd+], or Ctrl+[ / Ctrl+] on Windows/Linux) to step back and forward through recently viewed pages.
• Tanium Core Content — Updated the Installed Application sensor for macOS to detect and report Safari version information.
• Tanium Core Content — Updated Custom Tagging packages to support tagging actions on ChromeOS and Android endpoints managed by Tanium Device Management.

Endpoint Management

19 updates

Tanium Endpoint Management for Mobile

AUGUST 26, 2026

Apple Device User Sensor

What it is:
Added the "Apple Device User" sensor.

Why it matters:
This sensor allows users to identify the owner of Apple devices.

AUGUST 26, 2026

Zero-Touch Enrollment Portal for Android

What it is:
Added a "Zero-Touch Portal" to the Android Enrollment Tokens page.

Why it matters:
This portal allows admins to use Zero-touch enrollment. Zero-touch enrollment provisions company-owned Android devices automatically on first boot — no QR code or end-user setup.

AUGUST 26, 2026

Lost Mode Handling for Android Devices

What it is:
Added "Lost Mode" handling for Android devices, including a durable audit trail that keeps only the latest session location history, an "Android Lost Mode State" sensor that returns the status, a tile on the home page for lost mode devices, an updated Single Endpoint View, and enrollment restrictions added to the enterprise registration page.

Why it matters:
This release brings the workflow of handling lost Android devices into the Tanium platform, expanding support for managing mobile devices.

Tanium Enforce

AUGUST 12, 2026

New “Superseded” Enforcement Status

What it is:
Added a new "Superseded" enforcement status that appears across the Enforce API, metrics, and trends dashboards.

Why it matters:
This indicates if your Enforce policy was superseded by another policy - providing insight into why a policy might not be fully applied, and when there may be conflicting policies on an endpoint.

AUGUST 12, 2026

GPO-Based Enforcement for Windows Firewall Policies

What it is:
Windows Firewall policies can now be enforced using GPO. All new policies are automatically enforced using GPO. Existing firewall policies will display a banner with the option to update to GPO enforcement when the environment is ready.

Why it matters:
This change lets Enforce apply Windows Firewall policies via GPO instead of API/CLI, resolving the previous conflict where domain-managed GPO firewall rules would cause policies to silently fail with a "Not Applied" status.

Tanium Screen Sharing

AUGUST 7, 2026

AI Session Summaries for Screen Sharing

What it is:
Introducing AI summarization for Screen Sharing: if enabled by an administrator, a summary is generated when a screen sharing session completes

Why it matters:
Escalations, audits, and the next agent to touch that device all get the full resolution history, with no dependence on the completeness of a prior operator's manual notes.

Read the announcement →

Watch the webinar →

QUALITY-OF-LIFE IMPROVEMENTS

• Tanium Deploy — Deploy now supports Simplified Chinese for end-user notifications.
• Tanium Deploy — Added enforcement ensuring every profile software package entry specifies at least one operation (install, update, or remove).
• Tanium Deploy — Added Ubuntu 26.04 support.
• Tanium Deploy — Added SLES 16 support.
• Tanium Deploy — Added macOS 26 support.
• Tanium Deploy — Added software package catalog browsing functionality in Atlas.
• Tanium Endpoint Management for Mobile — Added support for custom tags for mobile endpoint management devices.
• Tanium Enforce — Windows Firewall rules now validate IP addresses in real time, flagging invalid addresses immediately.
• Tanium Enforce — Policies can now be targeted based on endpoint client version.
• Tanium Investigate — Added support for applying bulk updates or deletes in a single action.
• Tanium Performance — Direct Connect file downloads now stream through the browser's native download manager.
• Tanium Performance — Operators can now open the full detail of a Performance alert directly in Atlas.
• Tanium Endpoint Management for Mobile — Added a data grid to list connected workspaces with sync status, device count, and sync now capability.

Exposure Management

4 updates

Tanium External Attack Surface Management

AUGUST 10, 2026

NEW SOLUTION

Introducing Tanium External Attack Surface Management (EASM)

What it is:
Tanium External Attack Surface Management (EASM) is a new solution that gives security teams a continuously updated inventory of their organization's internet-facing hosts, web properties, and certificates, delivered natively through Tanium Atlas.

Why it matters:
Provides security teams a continuously updated inventory of internet-facing hosts, web properties, and certificates via Atlas - allowing you to easily pivot to risk assessment, investigation, and remediation.

Read the announcement →

Take the training →

AUGUST 17, 2026

Azure Support for Cloud Connector Seed Sources

What it is:
Automatic seed sources now support Microsoft Azure alongside AWS. Seeds added via a cloud connector are labeled with their origin in the Discovery Path panel.

Why it matters:
Lets you auto-feed Azure-hosted internet-facing assets into attack surface discovery the same way you already do for AWS, and the origin label makes it easy to tell automatically-added seeds from manually-added ones.

Tanium Attack Path Mapping

AUGUST 18, 2026

Expanded Attack Path Detection Coverage

What it is:
Adds coverage for on-prem AD delegation and group-membership paths to Tier 0, AWS ALB-to-EC2-instance-role paths, AADInternals/Mimikatz activity on managed endpoints, and Entra ID/Intune device-ownership paths to Tier 0.

Why it matters:
More attack paths get mapped with no added configuration, surfacing privilege-escalation routes through AD, AWS, and Entra/Intune that previously wouldn't show up in the graph.

Take the training →

QUALITY-OF-LIFE IMPROVEMENTS

• Tanium External Attack Surface Management — You can now add seeds to your attack surface directly from the Seed Configuration panel.

Security Operations

1 update

QUALITY-OF-LIFE IMPROVEMENTS

• Tanium Impact — Removed the deprecated "Impact - Coverage Status" sensor.

Resources

Titans LIVE!: The Tanium Changelog: Tanium Atlas Deep Dive

PUBLIC

Original source

JULY 2026

Explore what's new across the Tanium platform this month, organized by solution area.

⚑ Action recommended this month 1

One of this month's changes has a suggested next step. Details appear inline on the item below.

• Tanium Comply — Tanium Scan Engine 7.0 for Comply: review AV exclusions, confirm the Index shared service is healthy on endpoints, and configure Index scan settings in Configuration > Custom Settings. (Exposure Management) · Jump to details → · Join the discussion →

PLATFORM & ATLAS

Core Platform & AI Services →

29 updates, including 5 for Tanium Atlas

SOLUTION AREA

Endpoint Management →

6 updates

SOLUTION AREA

Exposure Management →

4 updates

SOLUTION AREA

Security Operations →

7 updates

Core Platform & AI Services

29 updates, including 5 for Tanium Atlas

Tanium Atlas

JULY 27, 2026

AI Credit Usage Dashboard

What it is:
Admins can now see how many AI Credits their environment has used against its total allocation, and set monthly credit caps for individual users or entire user groups from a table with sortable Monthly Cap and Cap Utilization columns.

Why it matters:
Tracking credit usage gives insight into where credits are being used, who's using them, and for what.

JULY 29, 2026

Template Gallery for Atlas Pages

What it is:
New Template Gallery lets you build Atlas pages by browsing a set of ready-made pages and panels covering common starting points — like environment health and endpoint patch status — and add them with one click, no prompting required.

Why it matters:
Common use cases now have browsable, purpose-built Atlas components, letting you build pages faster without needing to use credits in chat.

JULY 27, 2026

Slash Commands in Atlas Chat

What it is:
Atlas introduces slash commands: typing “/” in Atlas Chat brings up a picker of saved prompts you can insert directly into your message. The first available prompts cover threat response scenarios.

Why it matters:
Typing “/” in Atlas chat lets you choose from saved prompts to insert directly into your message.

Tanium Automate

JULY 16, 2026

API Step for Outbound Calls in Playbooks

What it is:
Introduced the API step, enabling playbooks to make outbound HTTP API calls to external systems.

Why it matters:
Your playbooks can now take action outside Tanium using API calls, furthering the scope of what you can automate using Tanium.

JULY 30, 2026

Endpoint Sequence Steps in Playbooks

What it is:
New playbook step type: Endpoint Sequence. This step type allows you to define a grouped set of playbook steps to run concurrently across endpoints as they complete steps.

Why it matters:
Endpoint Sequence steps improve the speed of running sequenced actions directly on endpoints.

JULY 30, 2026

New “Interrupted” Status for Playbook Runs

What it is:
Added an “Interrupted” status for playbook runs.

Why it matters:
This status makes it clear when a ring deployment stopped because its progression criteria were not met, rather than appearing paused.

Tanium Endpoint Configuration

JULY 24, 2026

Automatic Removal of Unused Endpoint Tools

What it is:
Added the automatic removal of Tanium endpoint tools that are no longer targeted or in use.

Why it matters:
You no longer have to clean up old Tanium endpoint tools that aren't in use — this is taken care of for you automatically.

Read the announcement →

Tanium Asset

JULY 23, 2026

AI-Estimated Software Costs in Atlas

What it is:
Asset now surfaces AI-estimated software costs in Tanium Atlas.

Why it matters:
Atlas can quickly provide estimates of actual savings from reclaiming software licenses.

JULY 23, 2026

Tracked Products View in Asset

What it is:
Added a new Tracked Products view (Asset > SIU > All Products) for managing tracked software fleet-wide.

Why it matters:
Provides easier visibility into tracked products in your environment.

JULY 23, 2026

Cost and Waste Estimates in the Software Inventory Grid

What it is:
Added Est. Annual Cost/Seat and Est. Annual Waste per application cost to the Software Inventory & Usage All Products grid.

Why it matters:
Lets you prioritize where your license reclamation efforts can make the most impact, by putting savings estimates inline with the relevant software usage data.

Tanium Client

JULY 15, 2026

Extended Action Status Sensor

What it is:
Added an Extended Action Status built-in sensor to the Tanium Server that reports the status, sub-status, and exit code for an action on each computer. The action reporting API gains optional sub-status and exit code fields so services can supply these values.

Why it matters:
Using this new sub-status and exit code reporting when creating or using packages enables easier troubleshooting when packages encounter issues during execution.

Tanium Endpoint Provider Service

JULY 31, 2026

Intune Remote Action Support for Platform Actions and Playbooks

What it is:
Added Intune remote action support for Tanium platform actions and Automate playbooks.

Why it matters:
With this update, you select the mobile devices you want, run a supported Intune action once, and see the result for each individual device.

Read the announcement →

Tanium Atlas MCP Server

JULY 31, 2026

Tanium Atlas MCP Server

What it is:
Introduces the Tanium Atlas MCP Server, a remote MCP server that lets AI clients query live Tanium data using the Model Context Protocol (MCP).

Why it matters:
Provides an MCP server endpoint so AI clients (like Claude and Copilot) can query Tanium endpoint data from your environment.

QUALITY-OF-LIFE IMPROVEMENTS

Tanium Atlas
— Atlas now shows a clear banner when you've hit your monthly AI credit cap.

Tanium Atlas
— The admin Audit page now supports date-range filtering and sorting conversations by credits.

Tanium Endpoint Configuration
— Added the ability to increase Change Management rings from 5 to 15.

Tanium Endpoint Configuration
— The Configurations page now displays effective targeting for each configuration item.

Tanium Deploy
— Improved load time for the Software Package Applicability panel; it now shows the same In Use status as the Deploy workbench.

Tanium Asset
— SIU tracking and Anomalous Software changes now require fleet management authority.

Tanium Emerging Issues Content
— Updated the AI Visibility and Risk dashboard with expanded MCP and AI agent visibility.

Tanium Emerging Issues Content
— Added a Configured MCP Server Details sensor to help investigate whether an MCP server is authorized.

Tanium Emerging Issues Content
— Added a Running MCP Servers panel showing state, PID, and username.

Tanium Emerging Issues Content
— Added visibility into Docker-managed MCP (MCP Toolkit and MCP Gateway).

Tanium Emerging Issues Content
— Added historical execution records for configured and known MCP servers.

Tanium Emerging Issues Content
— Added the ability to remove local model managers and AI agents on Windows and macOS.

Tanium Jump Gate
— Jump Gate policies, requests, and audit logs can now be scoped to Tanium content sets.

Tanium Jump Gate
— The connect dialog now checks RDP security posture before opening a session.

Tanium Jump Gate
— The Atlas jump request card now shows why a request was rejected or closed.

Tanium End-User Notifications
— Added Simplified Chinese (ZH) language support to the interface.

Endpoint Management

6 updates

Tanium Endpoint Management for Mobile

JULY 30, 2026

Android Device Support in Endpoint Management for Mobile

What it is:
Tanium Endpoint Management for Mobile now includes support for Android devices — management modes covering BYOD, corporate-owned with a work profile, fully managed, and kiosk enrollment; full platform support (Interact, Data Explorer, Reporting, Asset, Automate, Packages and Actions, Single Endpoint View); Android Management API policy support; and app management via a unified catalog.

Why it matters:
Extends unified endpoint management to Android — full BYOD-to-kiosk enrollment, native Tanium visibility and control, and app management.

Read the announcement →

Tanium Deploy

JULY 28, 2026

Confidence Score 2.1 for Deploy

What it is:
Confidence Score 2.1 adds a Local Data/Global Data toggle, Endpoint Readiness, and confidence score support for custom packages (not just gallery packages).

Why it matters:
Local data shows how a package performs specifically in your environment, Endpoint Readiness flags endpoints that may have health issues that could cause a deployment to fail, and support for custom packages means you can rely on the confidence score more broadly.

Read the announcement →

Tanium Performance

JULY 7, 2026

Mini-Filter Interference Analysis for Atlas

What it is:
Mini-filter Interference Analysis for Atlas is a new root-cause workflow that detects when antivirus or other minifilter drivers are degrading endpoint performance.

Why it matters:
This RCA offloads the hard work to Atlas — what used to require a senior Windows sysadmin, a specialized tool, manual trace capture, and a spreadsheet to parse now takes Atlas a few minutes and produces a specific, actionable finding.

QUALITY-OF-LIFE IMPROVEMENTS

Tanium Deploy
— AI route confidence scores now feed Atlas for more contextually aware software recommendations.

Tanium Performance
— Live Process Monitor in Direct Connect can now toggle between raw process names and friendlier product names.

Tanium Performance
— Dismiss All for alerts is now available directly as a grid action.

Exposure Management

4 updates

Tanium Comply

JULY 13, 2026

Tanium Scan Engine 7.0 for Comply

What it is:
This release introduces Tanium Scan Engine 7.0 (TSE 7.0) to Comply, a new scan engine that interacts with Tanium Index to evaluate endpoints for vulnerabilities.

Why it matters:
TSE 7.0 replaces the legacy Tanium Scan Engine, improving the performance of vulnerability scans — meaning less endpoint impact during vulnerability scanning.

⚑ Suggested action:
Comply will be using the Index shared service as a source for this new scan engine. To prepare for the rollout:
1 — Review your AV exclusions to ensure they include the Index tooling.
2 — Review your environment to ensure that the Index shared service is healthy and not blocked on endpoints.
3 — Navigate to Configuration > Custom Settings and ensure that Index settings such as scan frequency and exclusions are configured as desired.

Join the Titans Community discussion →

JULY 13, 2026

TSE Index Scan Configuration Settings

What it is:
Added a TSE index scan config section in Configuration > Custom Settings to control how TSE 7.0 builds its index of endpoint files, including scan frequency, first-scan distribution timing, and file/directory exclusions. These settings are independent of any SBOM index scan settings.

Why it matters:
As this is the first time Comply's scan engine will use Index, you will want to configure these settings to ensure Index functions in the background to support effective scanning.

JULY 8, 2026

Remote Authenticated Scanning for Palo Alto Networks

What it is:
Tanium Comply now scans Palo Alto Networks devices (PanOS 10 & 11) via Remote Authenticated Scanning.

Why it matters:
You can now run remote authenticated compliance scans on your Palo Alto Networks devices.

QUALITY-OF-LIFE IMPROVEMENTS

Tanium Comply
— TSE 7.0 is now automatically distributed to endpoints through Tanium Endpoint Configuration; no manual install or configuration is required.

Security Operations

7 updates

Tanium Threat Response

JULY 13, 2026

Create Threat Navigator Searches from Atlas Candidates

What it is:
When you're working with Atlas, the agent can surface candidate rows — suggested next steps, suspicious endpoints, or relevant data points worth following up on. Operators can now create Threat Navigator searches directly from those agent-suggested candidate rows.

Why it matters:
Having this candidate row trigger available inline means the bridge between “Atlas flagged this” and “now hunt for it at scale” is one click.

JULY 13, 2026

Support for Multiple Signal Feeds

What it is:
Threat Response now supports multiple signal feeds. Multiple signal feeds cannot point to the same URL.

Why it matters:
Previously you could have only a single Signal Source (the default Tanium Signal feed). Now you can layer Signal sources, pulling from additional sources on top of the Tanium default feed.

QUALITY-OF-LIFE IMPROVEMENTS

Tanium Threat Response
— Atlas's proposed Threat Navigator searches now require confirmation before creation, keeping a human in the loop.

Tanium Threat Response
— Atlas now displays a quick-glance scan summary panel after a Threat Navigator scan completes.

Tanium Threat Response
— Atlas now provides more accurate alert summaries and entity explanations.

Tanium Threat Response
— Improved the Atlas agent's reliability when generating Threat Navigator scans.

Tanium Threat Response
— The Create Tanium Signals Source modal now includes Name and Description fields.

Resources

• Titans LIVE!: The Tanium Changelog: Tanium Atlas Deep Dive

PUBLIC

Original source