Notes
What we shipped
Release notes and product notes. The opinions live on the Old Forge blog.
-
A clipping becomes a ticket
Any scratchpad note can now be raised as a Zammad ticket in one press, filed under the client organisation the note came from. The preview shows where it will land before anything is written, and the note keeps the ticket number as a link.
Read -
When your machines are actually in use
Wegweiser now reads when each machine is on and when it is worked, from the CPU samples it was already collecting. Ask the chat when a PC is used, find the quiet window for a reboot, and let analyses judge a spike against the hour it happened in.
Read -
Priced in pounds, with the VAT worked out
Wegweiser bills in GBP now: packs at 399, 799 and 1,599 pounds, plans at 2, 4 and 12 pounds per endpoint per month, all net, with Stripe adding VAT from your billing address and zero-rating an EU business that supplies a VAT number. The checkout path was also rejecting Stripe's own confirmations, which is fixed.
Read -
The controls your client actually asks about
Compliance chips are now one per framework and open to show what they mean, three German frameworks are available - BSI IT-Grundschutz, NIS2 and the CyberRisikoCheck - and a tenant chooses which ones it is assessed against. Four analysers that had been quietly evidencing nothing now evidence something.
Read -
Findings that become tickets
Wegweiser now connects to Zammad: it reads your organisation list so you do not have to retype it, and files a ticket when it finds something a technician should actually do. Four conditions, one ticket per device per condition, and it never reopens work you have finished.
Read -
The audit that ran no tests
Nine machines were carrying a Linux hardening score built from zero measurements, and nothing failed. Wegweiser now checks whether its own readings mean anything, and can watch an account that exists only to never be used.
Read -
The halt that could not be cleared
An agent rollout stopped itself over a laptop that was switched off, a reprocess button offered work nothing could run, and the insights feed filed our own test traffic. Four false alarms, fixed.
Read -
Wegweiser spricht Deutsch
The pages in the language each person chooses, the analyses in the language the tenant chooses, and a German front door at wegweiser.tech/de/ with an Impressum. Nothing is re-run, and English stays the base.
Read -
Agent release log
Every Wegweiser agent release, newest first, with the headline from its build. The milestones worth reading about are in the posts; this is the reference.
Read -
The Windows package enrols by itself
Give the agent's MSI a token and a server on the msiexec command line and it registers the device, installs the service and starts it. No PowerShell, nothing to paste on the machine: the form a software distribution system or a golden image wants.
Read -
Which Windows is this? Agent 0.3.96 asks the kernel, not PowerShell
A Windows 11 PC spent six weeks listed as windows-Unknown-Unknown because the agent asked PowerShell for its identity and PowerShell would not answer. Agent 0.3.96 reads the edition, build, model, manufacturer and locale straight from the kernel and the registry, and the server no longer lets an unknown answer overwrite a known one.
Read -
One line installs the agent on Linux and macOS
The pasted install block for Linux and macOS is gone. In its place is a single command that downloads a readable installer script from your own Wegweiser server and runs it. It retires a failure where the paste stopped halfway and left the machine unenrolled.
Read -
Remote control on X11 desktops, and a Control button only where it works
Agent 0.3.95 takes the screen of any Linux desktop running X11, which is most of them: Mint, XFCE, MATE, KDE and GNOME on Xorg. It also asks the machine whether it has a screen at all, so the Control button stops appearing on headless servers.
Read -
Taking a Linux desktop, and the eleven things in the way
Remote control now works on Ubuntu, not just Windows. Agent 0.3.94. This is the honest account of what it took, including the bug that let you watch a machine but never click on it.
Read -
Nobody else's code runs on your login page
Twenty-three front-end libraries were being fetched from two CDNs, two of them at whatever version was published that morning. They are all served from us now, and reCAPTCHA is gone because three months of logs showed it blocked our own test browser and nothing else.
Read -
Your findings are a document now, not fourteen modals
The device page held 28,206 characters of analysis and showed you 2,814 of them. The rest was behind fourteen cards you opened one at a time. It is one document with a reading rail now, and the hardware tables that were empty for a year are full.
Read -
Two kinds of problem, and only one of them is yours
Findings are now split by who can act on them. When the platform is the reason a check is wrong, it says so, tells you your half, and files the rest against itself.
Read -
Analyse what you need, as often as you need it
Per-device analysis policy and a collection cadence control, both asked for by name on a customer call. The same fleet that cost $110 a machine each month on the daily default costs about $5 on monthly.
Read -
We spent a day attacking ourselves
An adversarial review of Wegweiser, from the source and from the outside. Everything it found was fixed and shipped the same day. Agent 0.3.87 carries the endpoint half.
Read -
Three months of the agent, in nine releases
Eighty-nine agent builds since May. These are the ones where something actually changed: remote control, a scanner, code signing end to end, and the release where the fleet first updated itself.
Read -
Ask a machine how it feels, and watch it answer
Charts in chat, ten-second live sampling with per-process attribution, and a real bandwidth test. Every one of them reads. None of them write.
Read