Wegweiser

Notes

What we shipped

Release notes and product notes. The opinions live on the Old Forge blog.

  1. A clipping becomes a ticket

    Any scratchpad note can now be raised as a Zammad ticket in one press, filed under the client organisation the note came from. The preview shows where it will land before anything is written, and the note keeps the ticket number as a link.

    Read
  2. When your machines are actually in use

    Wegweiser now reads when each machine is on and when it is worked, from the CPU samples it was already collecting. Ask the chat when a PC is used, find the quiet window for a reboot, and let analyses judge a spike against the hour it happened in.

    Read
  3. Priced in pounds, with the VAT worked out

    Wegweiser bills in GBP now: packs at 399, 799 and 1,599 pounds, plans at 2, 4 and 12 pounds per endpoint per month, all net, with Stripe adding VAT from your billing address and zero-rating an EU business that supplies a VAT number. The checkout path was also rejecting Stripe's own confirmations, which is fixed.

    Read
  4. The controls your client actually asks about

    Compliance chips are now one per framework and open to show what they mean, three German frameworks are available - BSI IT-Grundschutz, NIS2 and the CyberRisikoCheck - and a tenant chooses which ones it is assessed against. Four analysers that had been quietly evidencing nothing now evidence something.

    Read
  5. Findings that become tickets

    Wegweiser now connects to Zammad: it reads your organisation list so you do not have to retype it, and files a ticket when it finds something a technician should actually do. Four conditions, one ticket per device per condition, and it never reopens work you have finished.

    Read
  6. The audit that ran no tests

    Nine machines were carrying a Linux hardening score built from zero measurements, and nothing failed. Wegweiser now checks whether its own readings mean anything, and can watch an account that exists only to never be used.

    Read
  7. The halt that could not be cleared

    An agent rollout stopped itself over a laptop that was switched off, a reprocess button offered work nothing could run, and the insights feed filed our own test traffic. Four false alarms, fixed.

    Read
  8. Wegweiser spricht Deutsch

    The pages in the language each person chooses, the analyses in the language the tenant chooses, and a German front door at wegweiser.tech/de/ with an Impressum. Nothing is re-run, and English stays the base.

    Read
  9. Agent release log

    Every Wegweiser agent release, newest first, with the headline from its build. The milestones worth reading about are in the posts; this is the reference.

    Read
  10. The Windows package enrols by itself

    Give the agent's MSI a token and a server on the msiexec command line and it registers the device, installs the service and starts it. No PowerShell, nothing to paste on the machine: the form a software distribution system or a golden image wants.

    Read
  11. Which Windows is this? Agent 0.3.96 asks the kernel, not PowerShell

    A Windows 11 PC spent six weeks listed as windows-Unknown-Unknown because the agent asked PowerShell for its identity and PowerShell would not answer. Agent 0.3.96 reads the edition, build, model, manufacturer and locale straight from the kernel and the registry, and the server no longer lets an unknown answer overwrite a known one.

    Read
  12. One line installs the agent on Linux and macOS

    The pasted install block for Linux and macOS is gone. In its place is a single command that downloads a readable installer script from your own Wegweiser server and runs it. It retires a failure where the paste stopped halfway and left the machine unenrolled.

    Read
  13. Remote control on X11 desktops, and a Control button only where it works

    Agent 0.3.95 takes the screen of any Linux desktop running X11, which is most of them: Mint, XFCE, MATE, KDE and GNOME on Xorg. It also asks the machine whether it has a screen at all, so the Control button stops appearing on headless servers.

    Read
  14. Taking a Linux desktop, and the eleven things in the way

    Remote control now works on Ubuntu, not just Windows. Agent 0.3.94. This is the honest account of what it took, including the bug that let you watch a machine but never click on it.

    Read
  15. Nobody else's code runs on your login page

    Twenty-three front-end libraries were being fetched from two CDNs, two of them at whatever version was published that morning. They are all served from us now, and reCAPTCHA is gone because three months of logs showed it blocked our own test browser and nothing else.

    Read
  16. Your findings are a document now, not fourteen modals

    The device page held 28,206 characters of analysis and showed you 2,814 of them. The rest was behind fourteen cards you opened one at a time. It is one document with a reading rail now, and the hardware tables that were empty for a year are full.

    Read
  17. Two kinds of problem, and only one of them is yours

    Findings are now split by who can act on them. When the platform is the reason a check is wrong, it says so, tells you your half, and files the rest against itself.

    Read
  18. Analyse what you need, as often as you need it

    Per-device analysis policy and a collection cadence control, both asked for by name on a customer call. The same fleet that cost $110 a machine each month on the daily default costs about $5 on monthly.

    Read
  19. We spent a day attacking ourselves

    An adversarial review of Wegweiser, from the source and from the outside. Everything it found was fixed and shipped the same day. Agent 0.3.87 carries the endpoint half.

    Read
  20. Three months of the agent, in nine releases

    Eighty-nine agent builds since May. These are the ones where something actually changed: remote control, a scanner, code signing end to end, and the release where the fleet first updated itself.

    Read
  21. Ask a machine how it feels, and watch it answer

    Charts in chat, ten-second live sampling with per-process attribution, and a real bandwidth test. Every one of them reads. None of them write.

    Read