Secure Endpoint 10.0 release notes

This topic describes the software updates included Secure Endpoint 10.0, along with subsequent hotfixes and upgrades. In addition to the specific changes detailed here, each release also includes broader system enhancements designed to strengthen security, optimize performance, and enhance overall stability.

To view the software updates that apply to the Secure Endpoint Agent, see the Secure Endpoint Agent release notes - Version 10.0 hotfixes.

Depending on the Absolute product licenses associated with your account, some of the following features, enhancements, and fixes may not be available to you.

  • July 2025 update
  • Release 10.0 (June 2025)

The following features, enhancements, improvements, and fixes were introduced in the July 2025 update of Secure Endpoint 10.0.

Features and enhancements

A new dashboard feature is now available. This feature lets you to create and fully customize the widgets included on your dashboard. You can also create multiple dashboards and organize your widgets to best suit your needs.

To get you started, each user account is preconfigured with three dashboards:

  • Asset management
  • At risk
  • Compliance (default)

Each dashboard includes a collection of widgets that show the current state of your devices, at a glance. Learn more

These three dashboards are fully editable. For example, you can:

  • Edit, add, move, or remove widgets
  • Set a dashboard as the default
  • Duplicate or delete a dashboard

Alternatively, you can create new dashboards and add widgets to them.

Learn more about the new Dashboard feature

Application usage

You can now collect application usage information from your Windows and Mac devices and show it in a dashboard widget.

To enable this feature, view the Installed Applications policy in a policy group and select its Include Usage data checkbox. You can then view the collected information by creating a dashboard widget based on the Application usage data source.

A device's application usage information is available only when an Absolute Resilience license is assigned to the device.

Administrators can use the console's new AI Assistant to quickly and easily find the device information they're most interested in.

AI Assistant uses the power of AI to query the data stored in the Absolute database. Note that your device data is not used to train the AI model, nor is it shared externally, or with other Absolute accounts.

In the current release, AI Assistant can respond to questions about all data available in the new Dashboard area, including:

  • Device hardware and software information
  • Device location
  • Applications
  • Application usage
  • Device usage
  • Web usage

To open AI Assistant, click the icon on any console page.

Note that to use AI Assistant:

  • It needs to be enabled in Account Settings. If a icon isn't visible in the bottom right of each console page, AI Assistant isn't enabled.

  • Your user role needs to be granted the following permissions:

    • View permission for AI Assistant
    • View permission for Dashboard - Inventory

    All default Administrator roles are granted these permissions.

Assigning device groups to users

When adding new console users, or editing existing user accounts, you can now:

  • Grant device access by selecting a smart group

  • Select multiple device groups

For example, you can now select multiple static groups, multiple smart groups, or a combination of smart and static groups.

Learn more

Permission groups

Device groups that are assigned to at least one user are now designated as permission groups.

Learn more

Note the following:

  • Permission groups can't be deleted

  • To edit a permission group, the Edit permission groups permission for Device groups and folders is now required. All default Administrator roles are granted this new permission.

    To grant this permission to your custom roles, update each role's permissions.

The following enhancements have been added to bulk actions:

  • You can now submit bulk requests for the following actions:
    • Change license
    • Run playbook
    • Wipe

  • The following identifiers can now be used in the uploaded device list file:

    • Device name
    • Chromebook Annotated ID
  • For some actions, you can now include more devices in a bulk action request than you could in previous releases. Learn more
  • When you click the icon in the quick access toolbar to create a bulk action request, the option's label has been updated from Upload Bulk Device File to Upload device list.
  • You can now drag the device list file into the dialog to upload it.
  • After the device list file is uploaded, its devices now populate a temporary report, allowing you to select the devices you want to include in the bulk action request.
  • If any invalid device identifiers are included in the device list file, you can now view them in a separate report, which you can export. The report includes the reason each identifier is invalid.

Learn more

The following event is now logged to Event History:

  • Unfreeze code unmasked

This event is logged when a user clicks the icon in the Unfreeze code field or report column. If desired, you can create an Alert or Action rule based on this new event.

To support the new features and enhancements introduced in this release, the following permissions have been added:

  • Device groups and folders - Edit permission groups
  • AI Assistant

These permissions have been granted to the appropriate default roles. To grant these permissions to any custom roles you've created, update each role's permissions.

Improvements and fixes

Feature/Area Details
Absolute APIs

  • The Agents resource has been added to the API. Learn more
Absolute Community

  • A new and improved Absolute Community is now available.

    Absolute Community is the unified hub for knowledge sharing across customers, partners, and Absolute. The new hub integrates the existing Knowledge Base and Support areas with the added features of discussion groups, webinars, and product updates. Go to this online space to collaborate with other members, find answers to product questions, and grow your knowledge.
Applications

  • In the Applications area, an application's Installations chart erroneously limited total installations to a maximum of 1000, which may have caused incorrect data to be shown in the chart. This issue is now fixed.

  • Previously, when viewing a device's Application Health, if the installed version of an application didn't match the expected version, the two versions may have been displayed as dates instead of version numbers. This issue is now fixed.
Application Resilience

  • Application Resilience now supports Eclypsium. Learn more

  • Application Resilience policies for Omnissa Horizon Client now support version 8.15.x or higher (VMware Horizon Client was renamed to Omnissa Horizon Client in version 8.15).
Chromebook support

  • A new version of the Chromebook extension has been released. Version 2.6.6.2 of the extension updates the format of the Chromebook extension version number shown in the console to x.x.x.x.

  • In some rare cases, a blank screen showing the text [object Object] was displayed on a frozen Chromebook device instead of the configured Freeze message. This issue is now fixed.
Device Details

  • Following the release of Secure Endpoint 10.0, the interface elements on a device's Device Details page may have been slower to load. This issue is now fixed, and the page now loads as expected.
Device groups
  • To help improve the performance of smart device groups, data fields that are not in use by any Absolute account have been removed from smart group filters. In addition, the following filter fields are no longer available for selection:

    • Application Resilience:

      • Became unhealthy
      • Events last 30 days
      • Failures last 30 days
      • Last updated
      • Status checked

    • Geolocation technology

      • Accuracy (meters)

    To view the complete list of filter fields that are currently available:

    1. Go to the Devices page and open an existing smart device group.
    2. Click the icon.
    3. Click the first field and scroll through the list of available fields.
Freeze

  • When you submit a Remove Freeze request, the system no longer checks to confirm that a valid product license is assigned to each device. Devices can now be unlicensed.
Geolocation

  • A new checkbox, Show IP locations, is now available on the Location History page in Device Details. If the timeline includes IP locations, you can clear this checkbox to show only Wi-Fi and OS locations. Note that IP locations are always included when you export the page.
History > Actions

  • Previously, on a device's History page, if you set the Start date and End date in the date range filter to the same date, the date's events may have failed to be displayed on the timeline. This issue is now fixed.
License management

  • Since the Devices page in the License management area does not support scheduling a report of the page, the (Schedule...) icon has been removed.
Playbooks

  • When deleting a custom policy group that is assigned a higher agent version than the Global Policy Group, the PER component on each moved device is now successfully downgraded to the lower version. Note that this action prompts a device to restart three times to complete the downgrade process.
Reports

  • Previously, when many values were specified in a single report filter, the filter may not have been displayed correctly if the report was saved as a new report. This issue is now fixed.
Secure Endpoint Agent

  • If you are signed in to a Windows device as an Administrator, you can now successfully run the Full agent or Core agent installer without extracting (unzipping) the installer zip file first. Note that if you are logged in as a Standard user, or you want to run the installer at the command line, you still need to extract the zip file. Learn more
Time zone support

  • When the Date & Time setting on a Windows device is set to one of the Co-ordinated Universal Time options, such as Co-ordinated Universal Time-08, the console now loads as expected upon login.
User profile

  • Your name is now always visible at the top of the Settings menu, regardless of the resolution of your display or the size of your device's screen.
Web Usage

  • Previously, clicking a link in the Webpage title column on the Web Usage (Trending) report failed to open its usage information if the webpage's URL contained a space character. This issue is now fixed.

The following features, enhancements, improvements, and fixes were introduced in Secure Endpoint 10.0.

Features and enhancements

You can now activate Device Compliance policies, which use data collected from your Windows and Mac devices to determine their state of compliance based on conditions you set. If any of these conditions are not satisfied, devices are flagged as non-compliant. Equipped with this information, you can:

  • Track any key performance indicators (KPIs) related to the compliance of your devices

  • Initiate remedial actions on devices that become non-compliant

  • Prevent devices from accessing the corporate network if they are at risk, unhealthy, or not compliant with your organization's requirements

Learn more

A license summary area is now available at the top of the Devices and Products pages in the License Management area.

The license summary includes two features:

  • Quick filters, which allow you to filter the report to focus on the Base license information you're most interested in.

  • Bar charts, which show the status of your base and add-on licenses, at a glance.

    The charts on the Products page show the count of all in use, available, and expiring licenses, while the charts on the Devices page show counts of devices with a license, with an expiring license, or with no assigned license (unlicensed). Clicking a bar filters the report.

Learn more

When configuring an Action rule, you can now base it on the following device states:

  • Custom Data-<data point name>

    The rule will be triggered when a Custom Data field updated event is logged for the selected data point name. Note that disabling or deleting the data point automatically deactivates the Action rule.

  • Custom field-<field name>

    The rule will be triggered when a Custom field updated event is logged for the selected field name. Note that deleting the custom field automatically deactivates the Action rule.

  • OS >
    • Build
    • Edition ID
    • Version

    The rule will be triggered when an Operating system updated event is logged for the specified build, edition, or version.

Learn more

The Extended Resilience policy is now the Playbooks policy. As a result:

  • In Policies > Policy Groups, you now activate the Playbooks policy to enable users to run playbooks on supported Windows devices.
  • The Extended Resilience field is now labeled Playbooks on a Windows device's Details > Summary page.

The following enhancements have also been added:

  • You can now track the progress of system-initiated Run Playbook requests in Action History. Specifically, Run Playbook requests are now shown on the following pages:
  • You can now select multiple devices on a report or page and submit a single Run Playbook request for all devices. Learn more
  • To help configure Run Playbook requests, you can now use variables to specify device specific information in playbook parameters. The following variable data types are supported:
    • Hardware (select fields only)
    • Custom Fields
    • Custom Data Points

    This enhancement is particularly helpful when submitting a Run Playbook request for multiple devices. Learn more about using variables

The following events are now logged to Event History:

  • Custom Data field updated

  • Device became compliant

  • Device became non-compliant

  • Device compliance reason updated

If desired, you can create Alert or Action rules based on these new events.

Improvements and fixes

Feature/Area Details
Absolute APIs
Absolute Community

  • A new and enhanced Absolute Community is now available.

    Absolute Community is the unified hub for knowledge sharing across customers, partners, and Absolute. The new hub integrates the existing Knowledge Base and Support areas with the added features of discussion groups, webinars, and product updates. Go to this online space to collaborate with other members, find answers to product questions, and grow your knowledge.
Account settings

  • To work with the Script signature validation configuration, the following permissions are now required:

    • To view the configuration, the View permission for Reach Script is required.

    • To enable or disable the configuration, the Manage permission for Reach Script is required.
Agent management

  • After clicking the Copy ID button on the Absolute for Chromebooks extension dialog, a tooltip now confirms that the ID is copied.
API management

  • After clicking the Copy ID button on the Create API token dialog, a tooltip now confirms that the ID is copied.
Application Resilience

  • Application Resilience now supports Okta Verify. Learn more

  • For Microsoft BitLocker, the Location of the MBAM Status reporting service endpoint field is now optional to allow for instances where a reporting service endpoint is not set up in a BitLocker with standalone MBAM environment.
Bulk device actions

  • On the Upload File for Bulk Device Action dialog, you can no longer select IMEIs under File List Types.
Geolocation

  • When you select Show geofences in map view, any geofences that are associated with a location-based Action rule are now shown on the map and in the rule list.

  • A new method for detecting when public IP addresses are associated with a proxy or VPN has been introduced. As a result, IP locations are now more accurate.

  • When any of the following device location fields are used to filter a smart group, they are now re-evaluated whenever a location change occurs:

    • City

    • Country

    • State/Province
History > Actions

  • On the Actions page:

    • If an Action rule created the request, the Requester column now shows the name of the rule. For users with the View permission for Rules, click the linked name to view the rule details.
    • When filtering actions by Requester, you can now select Action rules.
History > Action Requests
  • In the Status details column, the value Pending request has been updated to Previous request pending to better convey the reason for the failure.
  • Previously, the Ready action status was not displayed in the progress chart. This status is now shown, and the clockwise order of the statuses is now Completed, Ready, Processing, Pending, Failed, and Canceled.
Reports

  • Since you can't add filters to the Web Usage (Trending) report, the icon has been removed from this report.

  • You can now successfully select a location in Antarctica in the Exported time zone field.
Rules

  • When creating or editing an Alert rule, you can now add multiple IP addresses for the following System information updated events when the condition is set to is or is not:

    • Local IP address
    • Public IP address
    • Local IPv6 address
    • Public IPv6 address
  • The On/Off toggle has been removed from the dialog that shows when you're creating, copying, or editing a rule. Now, click Save and activate to activate the rule.
User Management and permissions

  • If your user account is assigned to a single device group, you can now assign a user to All active devices when adding or editing users.
User profile

  • The following enhancements have been added to the Time zone field in the User profile dialog:

    • The value selected in the field now sets the default time zone for scheduling and exporting reports.
    • You can now select a new option, Set time zone automatically, which allows dates and times in the console to update automatically when you travel. Learn more
    • You can now successfully select a location in Antarctica.
Web Usage

  • On the Web Subscriptions report, the Time period filter has been redesigned so that only one time period can be selected.