This update builds on Release 950 and brings Teramind Next-Gen to your on-premises deployment. It runs on your existing server and works with your existing data.

Next-Gen is Teramind's redesigned console for dashboards, reports and administration. It comes with this update, so there's nothing extra to install, no new server, and no data to migrate. Next-Gen and Teramind Legacy run side by side on the same server and use the same data.

New Teramind capabilities are built in Next-Gen, including the AI Usage dashboard, KPI metrics, the new report exporter, and many other improvements. With this update you get them on your own infrastructure and you don't need additional infrastructure. All new features would be enabled on the next-gen only.

Your settings and data are already there. Both consoles use the same database, so everything you've set up is in Next-Gen from the first login. A change made in one console shows up in the other.

Custom BI dashboards. Every custom dashboard built in Legacy shows up in Next-Gen automatically with a "Teramind Legacy" badge, and opens in view mode. The first time you edit one, you pick:

Shared dashboards can only be cloned, so nobody else loses access to them. Dashboards you create in Next-Gen are only available in Next-Gen.

This release delivers a crucial update for Protected Agent - it eliminates the limitation on Major Windows update.

The Protected mode of Teramind Agent blocks access to its own critical components, including the service registry key and the service object. During a Windows in-place feature upgrade, Windows Update must read and copy every service's registration data into the migrated registry. Because it cannot read the Teramind service's data, it silently skips it. Once the upgrade completes, the service no longer exists in the registry and therefore never starts.

Please note that this affects full in-place feature upgrades that rebuild the registry (i.e. 24H2, 25H2, 26H1, etc.).

We are adjusting the Agent's protection to grant the minimum access Windows Update needs during migration: read/write for SYSTEM and read-only for Administrators, on the service object and its registry key. The service registration is then preserved and the service starts normally after the upgrade.

Administrators will be able to see the Teramind service. They will still not be able to configure, stop, or delete it. No other protection is relaxed.

The Teramind agent for Ubuntu 24.04 now captures remote SSH sessions established to the monitored endpoint.

Complete Session & Screen Recording: Automatically captures all activities performed during remote SSH sessions - recording both the user's input commands and the full terminal output as-is, exactly like a standard screen recording.

Track and review remote activity directly through the Console Commands and Keystrokes reports.

Resolved a critical agent crash on macOS 27, ensuring stable operation and seamless compatibility for fleets running both Stealth and Revealed agent editions.

Earlier versions terminate immediately at startup on both Stealth and Revealed editions: the agent will not start, the computer shows as offline in the Dashboard, and all monitoring stops (no screen recording, activity tracking, behavior rules, or alerts). Reinstalling the old agent does not help.

Update all Mac endpoints to Agent 26.30 before rolling out macOS 27 (MDM fleets: push the agent ahead of the OS upgrade). Machines already upgraded to macOS 27 can be restored by installing Agent 26.30.

Added comprehensive AI Usage monitoring support for Microsoft Copilot Web (copilot.microsoft.com) across Enterprise, Commercial, and Personal accounts. The agent captures bidirectional prompt and response interactions as AI Usage events, while also tracking and archiving all uploaded and downloaded file attachments directly linked to their corresponding chat sessions. This provides complete visibility into generative AI adoption, supporting corporate usage-policy enforcement and Data Loss Prevention (DLP) efforts by recording every prompt, response, and file attachment for review, and forensic investigation.

Select Copilot Web from your AI Usage monitoring settings. The results are displayed on the AI Usage Control dashboard.

Added two new configuration parameters to agent configuration file (agent.conf*) allowing administrators to exclude specific directories and process names from Endpoint Security (ES) file system tracking. This allows organizations to bypass high-frequency, noisy workflows, such as local build targets, developer dependencies, and IDE caches - substantially reducing CPU/disk I/O overhead and preventing false-positive alerts on developer machines.

The agent.conf file is located in your Agent installation folder, for example:

Overhauled the certificate and private key architecture used for HTTPS/TLS traffic inspection by encrypting the agent's private key and root certificate.

The Employee count measure, previously available only in the Insights data source, is now available in every BI data source - making it easy to compare activity across teams of different sizes without custom calculations.

Every release makes the platform stronger. This one includes general security hardening and stability improvements across the platform, keeping your deployment secure and running smoothly.