🚀 New features

🎨 Platform - UX

• 🔍 New access type: Auditor

Now you can give someone read-only access to the entire platform. A user with Auditor access sees everything —campaigns, courses, statistics, settings— and can't modify anything: creation buttons don't appear and actions are disabled with the notice "Your access is read-only, so you can't make this change.". It's assigned from Settings → Users, in the Access type dropdown, and the Access column in the table shows you who has it.

Access is read-only for the entire platform: it can't be limited by section. The only thing an Auditor can do is change their own password and set up their second factor. Exporting and downloading still work: taking the information with you is part of the role.

🎓 Awareness - Academy

• 🧭 The Agent now starts with a plan overview

When you have an active plan, Awareness → Agent no longer takes you straight to the schedule: it opens with an overview showing overall plan progress, the objectives it covers, how much of each activity type you've completed, and what's coming up next. If there's no plan yet, the screen guides you through creating one.

This only appears for companies that already have an active Agent plan.

• 📙 New course: Secure Development, now also in Portuguese

The Portuguese version of Secure Development is now in the catalog, titled "Desenvolvimento Seguro". If you have teams that work in Portuguese, you can assign them this version instead of the Spanish or English one. You assign it like any other course, from Academy → Courses.

✨ Improvements

🎓 Awareness - Academy

• ⚡ Course enrollments now open in large companies

In Academy → Courses → the course → Enrollments, the table now loads rows by page instead of downloading them all at once. In courses with a lot of enrolled people, that was the difference between the screen loading and not loading at all. What changes for you: the total at the bottom of the table is the actual course total and not the number of loaded rows; the search box and the Status, Department, Group, and Date range filters search across all enrollments in the course, so if you're looking for someone on page 8, you'll find them starting from page 1; sorting by Employee is preserved when you change pages; CSV and PDF exports download everything that matches the current filters; and if you turn on row selection and switch pages, what you've already checked stays checked.

The Date range filter now filters by the enrollment's start date. Before, it filtered by the due date, so the same range may give you a different result than before.

• 📨 The complete enrollment history now arrives by email

The Export complete history (XLSX) option no longer makes you wait with a frozen screen. Now you request it, the platform lets you know it's being prepared, and the file arrives by email with a download link that lasts 48 hours.

This is the complete history export, the one that includes all enrollments without a date filter. The CSV and PDF exports of what you're currently viewing on screen haven't changed: they still download instantly.

• 📅 Bulk due date extension is back

In Academy → Courses → the course → Enrollments you can once again extend the due date for several people at once. There's a Select rows icon in the upper right: clicking it shows a checkbox on each row, you check the ones you want, and on the bar that appears above the table you click Extend due date. You can build the batch across several pages: what you've checked isn't lost when you change pages, search, or filter.

Only Pending or Overdue enrollments can be selected; a Completed one has already met its goal, so its checkbox is disabled. Extending a batch updates existing enrollments: it doesn't create new enrollments or leave duplicates. The one-by-one action, from each row's three-dot menu, hasn't changed.

🐛 Fixes

🛡️ Threats

• 🔗 Links in a reported email are now analyzed clean

Links in a reported email arrived with the email add-on's markup stuck to the address, so the reputation service query was run against an address that wasn't the real one. Now they're cleaned before being queried and before being saved, and the verdict you see in Inbox → the email → Domain & URLs corresponds to the actual address. Links from which an address can't be recovered are still shown in the list.

This applies to reported emails from now on: reports that already existed keep the address as it was originally saved. And cleaning the address doesn't change the verdict itself — a domain registered yesterday can still come back as "Clean".

• 🏷️ "Delete when reporting" is now called "Junk when reporting"

The option said the email would be deleted, but what it actually does is move it to the junk mail folder. In Settings → Report Button the option has been renamed and now includes a note explaining exactly what it does.

This is a name change: the report button's behavior hasn't changed. Moving to junk mail works on Microsoft accounts (Outlook / Microsoft 365).

📊 Insights

• 🗂️ Exporting a very long dashboard to PDF no longer fails

Exporting the dashboard for a company with many departments used to cut off the download. Now the file is generated properly.

🎨 Platform - UX

• 🇧🇷 The roster template now accepts Portuguese

The template you download from Collaborators → Import → Load manually offered a language code that the import would later reject, so rows in Portuguese wouldn't go through. This has now been fixed in the template.

If you have a template downloaded from before, download it again: the old one still has the code that doesn't work.

• 🧩 The smart group preview no longer repeats people

The smart group preview used to show the same person multiple times, and the counter showed the sample size instead of how many people the group actually reaches. Both issues are fixed.

The group's membership was never wrong: what was failing was what the preview displayed.