Client analyses move to Claude Opus 5.5
Device checks, roll-ups and the Security Audit reading on Wegweiser's AI now run on Claude Opus 5.5. From 12 October an analysis on Opus costs one and a half times its standard wegcoin price, rounded up, and the Standard plan includes 90 wegcoins per endpoint instead of 60, so a full monthly pass still fits. Macs have their own checks again: security posture, hardware age and log health. Settings now describes and prices every check correctly.
Every analysis that runs on Wegweiser's AI now runs on Claude Opus 5.5: each device check, the group and client roll-ups, and the reading of the Security Audit. The chat stays on the model it was on.
If your tenant has its own AI key, nothing changes for you.
Why Opus
We ran Opus 5.5 against the checks on our own machines before choosing it. It found things the cheaper models had read past: on a Linux server, that ports Docker publishes skip the firewall's rules, and a cache listening on every network interface.
Its recommended actions carry the exact command to run. It takes seven to eight seconds per check, and every answer it gave across 58 analyses on three customer machines was well formed.
A low score is checked a second time, by a stronger model with live queries against the machine, before it stands. Until today that second look went to Sonnet 4.6 whatever had scored it, so an Opus analysis was re-checked by an older, weaker model. Now it only goes up.
What it costs, from 12 October
An analysis billed in wegcoins that runs on Opus costs one and a half times its standard price, rounded up:
| Standard price | On Opus |
|---|---|
| 1 wegcoin | 2 |
| 2 wegcoins | 3 |
| 4 wegcoins | 6 |
| 5 wegcoins | 8 |
| 8 wegcoins | 12 |
A full pass of a Windows machine is 44 wegcoins at the standard price and 69 on Opus. The Standard plan included 60 wegcoins per endpoint, sized for one monthly pass. It now includes 90 at the same £4 per endpoint, so the pass still fits with room for chat.
Continuous's 400 still covers roughly weekly analysis. Bring your own key is unchanged: you pay your provider, and no wegcoins are deducted.
Until 12 October you pay today's prices for Opus analyses. To stay on the standard price after that, choose Sonnet 5.5 or Haiku 4.5 for analyses under AI provider, in the Analyses section.
Settings says which price your tenant is on, and every price it shows is the one you'll be charged.
Macs have their own checks again
No Mac-specific check had run since June, when the old agent's pipeline was removed. A Mac got the cross-platform checks and nothing that looked at macOS itself. Three are back, built and tested against a real one: a 2015 MacBook Pro running Sequoia through OpenCore Legacy Patcher, a release Apple doesn't support on that model.
- Mac Security Posture reads System Integrity Protection, FileVault, Gatekeeper, the firewall, every sharing service and the update settings, and says where each switch is in System Settings. On a patched Mac it explains why System Integrity Protection is partly off, instead of telling you to turn it back on: the Mac wouldn't start.
- Mac Hardware Age reads the model, the processor and the macOS it runs against Apple's support. On a patched Mac it also reads the patcher's own record: which parts of macOS it replaced with files from older releases, and whether those patches still match the installed build after an update.
- Mac Log Health reads a day of the unified log three ways: errors, security subsystems and crash reporting. A healthy Mac logs tens of thousands of errors a day; ours logged more than 70,000, and the fifty most frequent all came from Apple's own processes. So the check is told what routine noise looks like, and reports what a technician can act on.
The first reading of that MacBook found FileVault off, the firewall off, Remote Login on and security responses not installing automatically. Its Wi-Fi runs on files the patcher took from macOS 13, which don't get the fixes Sequoia's updates ship.
Two of the five old checks didn't come back. Mac OS Version and Mac Applications read what patch compliance and installed software already read on a Mac: the pending macOS updates, and the app list with each app's signer. Running them again would charge twice for the same finding.
The new checks need no agent update and are on by default. At the standard price, posture costs 4 wegcoins, hardware age 2 and log health 6.
What Settings got wrong
The analysis switches in Settings were wrong in three ways. All three are fixed:
- Five macOS checks said "No description available" and cost 1 wegcoin, because none of them had run since June. The three that run again have their switches, descriptions and real prices; the other two are gone.
- Windows Security Posture ran on every Windows machine with no switch to turn it off. It has one now.
- The Security Audit was listed at 10 wegcoins. It isn't charged, and it shows 0.
Every check now carries a description in your language, written for the person deciding whether to run it.