Back to home
◆ Product roadmap

Shipped continuously. Documented publicly.

SecTeer ships in small, verifiable increments across four components, the agent, the scheduling engine, the backend, and the console. Below is what landed recently, what we're building now, and what we're investigating next.

◆ Release cadence

Four components, shipped independently.

Because the backend, scheduling engine, and console version separately, a fix to inspection processing does not wait on a console release. In the last six months we published 60+ tagged releases across the stack.

Corporate console
v11.9.2

The admin UI, policies, approvals, reporting, and host detail. 14 releases in the period.

Backend
v7.37.1

APIs, authentication, inspection rules, and tenant management. 28 releases in the period.

SCHME engine
v7.52.1

Inspection processing, job scheduling, update rings, and history generation. 24 releases.

Login service
v3.4.0

Authentication, SSO handling, and tenant-level service messaging.

◆ Recently shipped

What landed in the last two quarters.

Grouped by the problem it solves rather than by version number. Every item below is live in production today.

Restart handling
Restarts you can actually enforce

A patch that never completes a reboot is never really applied. Restart policy became a first-class object with branding and real-world scheduling.

✓Restart windows can now cross midnight, matching night-shift and 24/7 environments
✓Branded restart notification dialog with your own logo, the SecTeer mark, or none at all
✓Hardened restart-policy evaluation so a policy check can no longer be skipped
Corporate v11.5.0 – v11.9.0 · Backend v7.17.0 – v7.35.0
Targeting
Tagging that scales past a few hundred hosts

Manual host grouping breaks the moment your estate grows. Tags now populate themselves.

✓Automatic “All Hosts” tag, applied to every existing and future host and impossible to detach by accident
✓Default tags applied to new hosts on enrolment, and still removable per host
✓Automatic tagging driven by installer options, so hosts self-classify at install time
Corporate v11.9.0 · Backend v7.17.0 – v7.35.0 · SCHME v7.41.0
Patch coverage
Broader catalogue, cleaner packaging

Coverage work concentrated on WinGet-sourced packages and on giving admins room to customise what ships.

✓Significant improvements to WinGet package handling
✓PatchPro installer audit pipeline reworked for reliability
✓More file types accepted when customising an update package
✓Large-file upload path fixed for sizeable custom installers
SCHME v7.49.0 · Backend v7.34.0 · Corporate v11.7.0
Scale and performance
Inspection processing, rebuilt for throughput

The scheduling engine received sustained performance work across fourteen releases, the least visible and most valuable kind of change.

✓Faster inspection processing and lower per-host overhead
✓Registry data handling reworked during inspection
✓Approvals processing performance fixed at scale
✓Dormant hosts excluded from update-ring handling so rings reflect live devices
✓History generation and site statistics corrected
SCHME v7.38.0 – v7.52.1
Platform
Modern runtime, current dependencies

Keeping the stack current is part of the security promise, not a chore deferred to later.

✓Entire backend and engine moved to Node.js v24
✓Full dependency audit and refresh
✓Expanded structured logging and inspection message prioritisation
✓Continuous inspection-rule updates shipped independent of releases
SCHME v7.44.0 · Backend v7.25.0 – v7.28.0
Console
Fewer sharp edges in daily use

A long run of fixes aimed at the screens administrators live in every day.

✓Correct version columns for suite-bundle applications on the Single Host page
✓Custom job descriptions preserved when editing an existing job
✓Jobs combining install and uninstall actions handled correctly
✓Real empty states on the Windows Updates and Approvals pages
✓Service banners can now be surfaced from the backend to console and login
Corporate v11.8.0 – v11.9.2
◆ Ahead

Now, next, and exploring.

Dated commitments only where we have them. Everything in Exploring is genuinely open, and customer input moves items between columns.

Now, in build

Actively in development, expected within the current quarter.

●Deeper Intune-native remediation
Extending agentless operation so more of the patch lifecycle runs through Intune with nothing on the endpoint.
●Restart policy reporting
Per-host visibility into pending restarts, so you can prove a patch actually completed.
●Tag-driven policy assignment
Bind patch and restart policies directly to automatic tags rather than static host lists.
Next, planned

Scoped and committed, not yet dated.

○Expanded ARM64 catalogue
Growing native ARM64 package coverage as vendor availability improves.
○NIS2 evidence export
One-click auditor-ready reporting on detection-to-remediation timing.
○Shadow AI tool discovery
Surface unsanctioned AI clients and browser extensions alongside shadow IT findings.
Exploring

Open questions where customer input carries the most weight.

·macOS and Linux endpoints
Assessing demand and catalogue depth for non-Windows estates.
·Public changelog API
Machine-readable release feed for teams that track patch tooling in their own CMDB.
·Risk-based SLA automation
Automatically tighten patch windows when exploitability signals change.
◆ Full changelog

Every release, in order.

The complete log is published for customers in the console under Help → Release notes. Recent highlights:

SCHME v7.52.1
2026-07-28
Improvements to inspection processing.
Backend v7.37.1
2026-07-28
Improvements to internal management endpoints.
SCHME v7.51.0
2026-07-27
Inspection processing performance improvements.
Corporate v11.9.2
2026-07-21
Version columns for suite-bundle applications on the Single Host page.
Corporate v11.9.0
2026-07-14
Restart-dialog logo support, “All Hosts” tag, default tags, and empty-state handling on Windows Updates and Approvals.
Backend v7.35.0
2026-07-14
Restart-dialog logo support and “All Hosts” tag support.
Corporate v11.8.5
2026-07-08
Job descriptions preserved on edit; install/uninstall jobs fixed.
SCHME v7.49.0
2026-07-01
PatchPro installer audit improvements and WinGet package handling.
Backend v7.34.0
2026-07-01
Installer audit, WinGet handling, activity logging, and site-name validation.
SCHME v7.47.0
2026-06-05
Dormant hosts excluded from update rings; PatchPro configuration handling.
Backend v7.31.0
2026-05-19
Default Tag flag on Tags; inspection rule updates.
SCHME v7.45.0
2026-04-18
Approvals performance, application security data, and service behaviour.
Corporate v11.8.0
2026-03-29
Backend-driven service banner support.
SCHME v7.44.0
2026-03-24
Upgraded to Node.js v24.
Corporate v11.7.0
2026-03-03
More file types supported when customising Updates.
Corporate v11.6.0
2026-02-16
Improved Patching Activity handling.
Corporate v11.5.0
2026-01-26
Restart windows may cross midnight.
Backend v7.17.0
2026-01-09
Automatic host tagging based on installer options; restart policy handling.

Looking for something specific, or want a feature considered? Tell us what you need.