6 November 2026
CitadelGate: Linux agent and Microsoft 365 fixes Deployed · in testing
- Linux agent: a hardened system service for 64-bit Intel and ARM machines that runs only signed Bash jobs, with .deb and .rpm packages. Not yet tried on a real Linux machine.
- Microsoft 365 fixes with approval: the AI can propose typed changes such as revoking sessions, blocking or allowing sign-in, resetting MFA registration, and licence or group changes. Each needs a technician's approval and a separate per-client permission that is off by default.
- Daily AI budgets per client and limits on how many tools the AI can call in one investigation.
Security
- Every database query is now limited to one client by default. If no client is set, nothing is returned.
- Tamper-evident audit log: each entry is chained to the one before it, and the application's database account can add entries but cannot change or delete them.
- Stored secrets such as recovery keys and notification settings are encrypted at rest.
- The key that signs jobs is now held only by the background service that signs them; old signed jobs can't be replayed; changing an approved script needs a second approver.
5 November 2026 (evening)
CitadelGate: signed fixes, approvals and Microsoft 365 Deployed · in testing
- Signed script dispatch: every job is signed, and the agent checks the signature, content fingerprint, expiry and target device before running anything.
- Technicians can approve, edit or reject the AI's proposed fixes from a new AI panel on the ticket page.
- Per-client automation policy, off by default: when switched on, only approved ReadOnly or Low risk fixes can run without a technician, one device at a time, inside maintenance windows and a daily limit. Each run is checked afterwards, and failures go to a technician.
- Read-only Microsoft 365 / Entra investigations: users, sign-ins, licences, service health, conditional access and Intune devices.
Security
- Completed an internal security review of CitadelGate and fixed what it found.
- Multi-factor authentication is now required for every technician, administrator and owner.
- Removed a server-side plugin upload feature, fixed tenant-isolation gaps, added a per-account sign-in throttle and stricter security headers, and moved services into read-only containers with no extra privileges.
5 November 2026
CitadelGate: AI operator, first release Deployed
- Technicians can start an AI investigation from a ticket or a plain-language description. The AI uses read-only tools only: devices, health, services, event logs, software changes, alerts, the ticket and the script library.
- Reports are posted to the ticket as an internal note, with proposed fixes that point at approved library scripts. Nothing is run automatically in this release.
- Scripts now carry a platform, a reviewer-assigned risk level and a description for the AI. Existing scripts were classed as high risk until reviewed.
- Every request is tenant-checked and audited.
citadelframe.com rebuilt
- New site with honest status labels on every feature, structured data, a sitemap and faster pages.
- New Free Anti-Virus section for CitadelLite, with a waiting list.
- CitadelFrame repositioned as our premium, paid AI protection.
- New privacy policy and terms of use, a contact form, a status page and security.txt.
- Thirteen free guides on laptop security, scams, ransomware, RMM and PowerShell.
Operations
- Daily verified backups and five-minute health checks for all Citadel services.
- Server storage expanded.
In progress
The CitadelLite app, a new accounts and billing service, the signed Windows installer and macOS support. Track them on the roadmap.