What's New

March 10, 2026

Dashboards

• KPI Detail View: Drill into the accounts behind any KPI. Open a KPI definition to see a full risk breakdown — MFA status, password age, stale account counts, privileged account exposure, and other risks — broken down for every account the KPI matched. An account distribution chart shows the mix by status (active, disabled, suspended) and type (user, service, admin). A Top Risk Accounts list highlights accounts most in need of action.

March 5, 2026

User Access Reviews

• Query-Based Campaigns: Build access review campaigns using dynamic filters instead of a fixed target list. Combine inclusion and exclusion conditions across accounts, owners, groups, roles, and classifications. Preview matching accounts before launch with the Test Query feature.
• Entitlements in Review Panel: See all group memberships and application role assignments for each account directly in the review detail panel. High-privilege groups are flagged for quick identification.
• Previous Decisions in Review Panel: View the full review history for each account across past campaigns — including decision, reviewer, date, and comments. Spot repeat flags or reversals at a glance.

Preferences

• Review Column Customization: Choose which columns appear in the campaign review table. Select from 80+ fields across six categories (Review, Identity, Organization, Account, Security, Risk). Save and reset to defaults.
• Detail Panel Section Control: Choose which sections appear in the account detail panel. Toggle AI Recommendations, Owner Details, Entitlements, Previous Decisions, Audit Trail, and more.
• Cross-Device Preferences: Preferences — including theme and review layout — now sync to your account. They apply on every device you sign in from.

February 26, 2026

Data Exports

• Application Exports: Export account data from any application to CSV format for offline analysis, compliance reporting, or integration with external governance tools. Files are stored securely and available for download for 7 days.
• Campaign Exports: Export all review decisions and account details from completed campaigns. CSV includes reviewer information, decision timestamps, and comments.
• Bulk Export: Generate exports for all applications in a single operation with background processing and status tracking.

Application Roles

• Role Visibility: View application entitlements synced from Hydden Discovery. See role names, display names, providers, and member counts for each application.
• Role Membership Sync: Application role memberships are now synchronized from Hydden Discovery, providing visibility into which accounts hold which entitlements.

February 23, 2026

Provisioning

• Automated Account Lifecycle: Configure SCIM-based provisioning to external identity systems. Connect to Microsoft Entra ID for account creation, modification, and group membership management. Connect to Jira or Zendesk for automated ticket creation from access review decisions.
• Provisioning Rules: Define automated responses to data changes. Rules trigger on account lifecycle events, group membership changes, role assignments, or ticket lifecycle events.
• Temporary Credentials: Securely deliver initial passwords for provisioned accounts via email, in-app notification, or self-service password reset links.

Campaign Review Improvements

• KPI Status Cards: Clickable status cards at the top of the review interface showing Pending, Approved, Rejected counts and overall progress. Click a card to filter the account list.
• Enhanced Keyboard Navigation: Comprehensive keyboard shortcuts for review actions (A/R/F/S), navigation (J/K or arrows), batch selection (Space, Ctrl+A), and batch actions (Ctrl+Shift+A, Ctrl+Shift+R).
• Batch Action Bar: Visual toolbar when multiple accounts are selected, showing selection count and batch action buttons.

February 17, 2026

Custom Dashboards

• Custom Dashboards: Build visual identity risk reports with pre-configured widget templates, custom KPI metrics, and AI-generated insights. Choose from six dashboard templates (Identity Risk Reduction, PAM/Vaulting Impact, Privileged Account Hygiene, Executive Summary, Progress & Goals, Operations & Monitoring) or create from scratch.
• Widget Library: 18 pre-built widgets covering high-risk accounts, vaulting progress, password hygiene, MFA coverage, anomaly detection, and campaign progress. 15 visualization types including time series, health scores, heatmaps, radar charts, and impact timelines.
• KPI Settings: Define and manage custom KPI definitions with configurable aggregations, filters, calculation schedules, and bucket ranges. KPIs recalculate automatically after each data sync.
• Platform Filtering: Filter all dashboard widgets by platform (Active Directory, Azure, Linux, etc.) to compare risk across environments.

Classifications

• Account Classifications: View and analyze account groups by classification with pre-calculated risk metrics including MFA coverage, password hygiene, account staleness, privileged account statistics, and platform distribution.

Visualization Engine

• Upgraded charting engine from Recharts to Apache ECharts for improved performance, richer visualizations, and support for advanced chart types (heatmaps, treemaps, radar, funnels, gauges).

September 2025

Preview availability release of Hydden.Control.