State Policies provide advanced device-side evaluation capabilities that allow administrators to detect conditions directly on devices, such as whether a device is inside a geofence, out of contact, returning a specific script result, or meeting custom criteria. These states can be referenced in Signal Policies, Compliance Policies, search, dashboards, and are tracked over time. State Policies help organizations accelerate troubleshooting, strengthen compliance, and increase automation through real-time condition monitoring.

Signal now supports group-level aggregation that allows administrators to trigger a single alert when a defined number of devices in a group meet the same condition. This prevents alert flooding, improves situational awareness, and accelerates resolution of sitewide outages and incidents. 

Aggregation-based monitoring allows actions to trigger only when conditions persist or occur repeatedly within a defined time window. This reduces noise, highlights true fleet-wide issues, and helps teams focus on meaningful problems that require attention.

Deployment Center now provides a centralized view of all profile, policy, and file synchronization jobs with real-time progress updates, scheduling visibility, and filtering capabilities. Administrators can reschedule deployments and quickly identify conflicts or failures. This improvement enhances visibility, accelerates troubleshooting, and improves coordination across teams during largescale rollouts.

This update introduces a customizable unlock experience for authenticated lockdown, allowing users to securely log out directly from the unlock screen and enable fast device handoff in authenticated lockdown environments. This enhancement helps organizations improve operational efficiency, reduce IT intervention, and deliver a consistent and polished user experience across shared devices. 

Administrators can now customize Windows operating system (OS) image deployments with disk partitioning, driver selection, and deployment-specific configuration options. This enhancement supports flexible and efficient provisioning by enabling tailored partition layouts and component inclusion directly from a golden image. This improves scalability, reduces manual post deployment steps, and ensures devices arrive optimized for their specific operational roles. 

This update introduces centralized firmware update management for major Windows device OEMs, allowing administrators to deploy BIOS Firmware updates remotely and at scale. It streamlines update workflows, supports scheduled deployments, and ensures consistent firmware versions across device fleets. This functionality boosts device reliability, enhances security posture, and significantly reduces manual intervention for IT teams.

A comprehensive security dashboard now provides real-time insights into malware detections, scan results, and device health across Windows Modern environments. Administrators can now analyze threats by severity, source, type, and status to support faster mitigation and compliance requirements. The enhanced visibility strengthens proactive defense, reduces exposure to threats, and enables informed security decision-making. 

Administrators can now deploy and manage iOS apps using Apple’s Declarative Device Management (DDM) capabilities, enabling devices to proactively maintain compliance and manage their own app state. This reduces network load, improves performance at scale, and accelerates device readiness. Organizations benefit from more reliable app deployment, stronger policy enforcement, and improved operational efficiency. 

SOTI MobiControl now provides secure, high-performance connectivity for macOS devices through its integrated Virtual Private Network (VPN) solution. It eliminates reliance on third-party VPN tools, simplifies deployment, and optimizes bandwidth through split tunneling. Organizations benefit from stronger security, reduced complexity, and more efficient management of expanding macOS fleets.

Migration of Apple devices between SOTI MobiControl instances or from third-party Mobile Device Management (MDM) platforms is now supported, while preserving apps, configurations, and security controls. By ensuring devices are fully configured before Setup Assistant completes, it prevents security gaps and minimizes user disruption. This streamlined migration experience reduces postmigration support needs and ensures devices remain secure and operational throughout the transition.

SOTI MobiControl introduces a labeling system for profiles, policies, and other artifacts, enabling structured organization, filtering, and bulk operations. Administrators can categorize items by team, region, workflow, or purpose to improve discoverability and reduce errors. This capability enhances clarity and streamlines day-to-day configuration management in large environments.

This update introduces a centralized Script Management page that consolidates all scripts and their references into one unified view. Administrators can now search, filter, audit, and manage script relationships more easily, with stronger integrity controls that prevent editing or deletion of referenced scripts. This streamlined experience enhances governance, reduces overhead, and improves operational clarity.

SOTI MobiControl now enables role-based permissions at the individual script level, including None, Read Only, and Read and Write access levels. This strengthens governance by restricting access to sensitive or high-impact scripts while enabling broader delegation for routine tasks. Organizations managing complex or multi-tenant environments benefit from improved security controls, reduced risk, and greater operational efficiency.

SOTI MobiControl now enables role-based permissions at the individual artifact level for Policies and Enterprise Apps, including None, Read Only, and Read and Write access levels. This capability strengthens governance by restricting access to sensitive items while enabling broader delegation for routine administrative tasks. Organizations now benefit from improved separation between environments, enhanced security controls, and improved operational efficiency across different deployments.

This feature lets administrators halt profile deployments in real time, preventing further distribution of incorrect or undesired configurations. It helps reduce downtime, avoid largescale rollbacks, and supports faster delivery of corrected updates. With immediate intervention capabilities, teams gain better control and responsiveness during profile rollout cycles.

This enhancement now expands the Profile Change Approval workflow to include package and assignment updates, giving administrators a complete view of requested changes. Side-by-side comparisons and audit logging improve validation and reduce the risk of accidental deployments. This feature improves governance, accuracy, and confidence in high impact configuration changes.

SOTI MobiControl now adds bulk deletion of profiles and commonly used policies, supported by safeguards, exception lists, and audit logging. Administrators can quickly remove outdated configurations while ensuring accuracy through automated checks and warnings. This significantly reduces cleanup time and improves overall system hygiene.

The new Notification Center consolidates alerts, requests, system messages, and news into a single, easily navigable hub. Users can filter by date, priority, or status, access linked Signal policies for Alerts, and act on approvals more efficiently. This unifies operational visibility and accelerates responses to critical events across SOTI MobiControl.

This feature introduces device evaluated attributes for inactivity and disconnection, enabling automated actions, even offline, based on real-time conditions. It helps optimize device utilization during idle periods, supports automated maintenance, and reduces operational overhead.

SOTI MobiControl now expands Signal capabilities with support for additional events, macros, and properties to enable broader automation coverage. New supported events include Device Renamed and Device Deleted, while new macros include IP Address, OS Version, MAC Address, and Personal Name. A new property, Failed Password Attempts, is also now available within Signal policies.

This update streamlines Signal policy creation through dynamic filtering of categories, device families, conditions, and actions. It eliminates incompatible selections and ensures administrators can build valid policies quickly. The improved workflow reduces configuration time, improves accuracy, and enhances overall usability.

An enhanced API documentation portal with an all-new UI delivers categorized navigation and advanced search. With improved authentication flows and access controls, developers can build integrations faster and with fewer support dependencies. This enhances usability, accelerates onboarding, and strengthens workflow integrations.

This feature introduces OAuth-based Microsoft Entra application support for sending outbound email notifications from SOTI MobiControl, replacing soon to retire Basic Authentication. It ensures continuity of critical workflows like alerts, system notifications, and exports while aligning with Microsoft’s modern security standards. Organizations benefit from improved reliability, stronger authentication, and long-term compatibility with Microsoft 365.

SOTI MobiControl now enables administrators to define and manage multiple File Sync root paths directly within the web console, without requiring support assistance. This feature supports both local and network paths, offering greater flexibility for distributed file repositories. This enhancement accelerates workflows, increases customer autonomy, and reduces IT overhead for on-premises customers with diverse storage environments.

This update enables administrators to fully edit both existing and newly imported packages directly within the SOTI MobiControl web console, eliminating the need to rely on the legacy Package Studio. Administrators can now modify files, scripts, and versions with improved visibility through new saving and publishing progress indicators. This feature boosts efficiency, simplifies cross-instance workflows, and ensures consistent package management across environments.

Generic SCEP configurations now allow multiple certificate templates to use the same Certificate Authority (CA) identifier. This enables administrators to create multiple certificate templates in MobiControl under a single CA configuration, simplifying certificate management and removing the need to create duplicate CAs for different device or use-case requirements.

Administrators can now review and approve enrollments for Windows Classic Desktops/Servers, Windows Classic VPN Server, and Windows Classic SOTI XTreme Hub, ensuring that only authorized devices are enrolled and that configurations are applied only after approval.

SOTI MobiControl now enables administrators to automate device password change reminders with configurable skip limits, ensuring users update their device passwords within defined security timelines. It helps reduce password related vulnerabilities, strengthens compliance, and lowers IT overhead by eliminating manual follow-ups. The result is a more secure and efficient device security experience across Android deployments.

SOTI MobiControl now enables administrators to assign delegated administrative permissions to Android applications directly through App Policies, removing the need for scripting. It simplifies setup by providing a single, intuitive interface to grant or block permissions for Managed Google Play and Enterprise apps. The update enhances efficiency, reduces errors, and makes advanced permission management accessible to all IT teams.

This feature provides administrators with the ability to include multiple CA certificates in a single Wi-Fi payload, ensuring devices stay connected during certificate transitions. It supports seamless phased migrations by allowing authentication with both existing and new certificates. This reduces service disruptions, minimizes IT workload, and strengthens secure connectivity across large device fleets.

This update introduces network aware download control, enabling administrators to specify which network types are allowed for app downloads. It helps optimize deployment speeds, limit data costs, and ensure downloads occur only on approved, secure networks. By aligning downloads with business priorities, organizations improve predictability, reduce administrative oversight, and enhance overall deployment efficiency.

This feature allows administrators to upgrade the Gmail Android Enterprise binding to use the company domain email. This transition is seamless, with zero impact on existing devices. It will allow for stronger security, better IT compliance, and enables the management of multiple enterprises through a single domain account.

Administrators can now centrally manage Safari settings on iOS, iPadOS and macOS devices using SOTI MobiControl configuration profiles. This feature provides seamless deployment of corporate bookmarks, homepage settings, and browsing controls, ensuring a consistent and compliant experience across the Apple ecosystem. It helps users access key corporate resources faster while improving policy enforcement and reducing support requests.

This feature now allows administrators to manage local macOS user accounts directly from the SOTI MobiControl web console. It streamlines password resets, privilege updates, and account lifecycle tasks, reducing the need for manual intervention on individual devices. This improves operational efficiency, strengthens security, and helps maintain a consistent user environment across the macOS fleet.

This update introduces Account Driven Enrollment for iOS and macOS, allowing users to enroll devices using Managed Apple IDs and integrated identity providers. The capability simplifies onboarding for both COPE and BYOD scenarios by reducing manual setup steps and aligning enrollment with modern Apple workflows. It improves clarity, enhances user experience, and accelerates deployment across diverse device environments.

With this new feature, administrators can now run pre and post install scripts as part of macOS enterprise application deployments. This enables automated environment checks, configuration tasks, and cleanup actions without the need for third party packaging tools. The functionality helps increase deployment reliability, reduce manual workload, and ensure consistent configuration across devices.

This update introduces advanced declarative app and package management for macOS, giving administrators precise control over app deployment, updates, and configuration. It supports version pinning, secure Managed App configuration, and detailed installation reporting to maintain consistency and strengthen security. The feature empowers organizations to streamline IT operations while offering users a modern, self‑service experience.

This update allows administrators to simplify Account Driven User Enrollment by enabling automatic hosting of the required discovery file within SOTI MobiControl. The feature also provides fallback URL support, ensuring reliable enrollment even when the organization’s primary domain is unavailable. It reduces manual hosting effort, increases enrollment success rates, and improves automation across Apple deployments.

This feature helps organizations securely route app specific traffic on iOS and iPadOS using SOTI’s native Per-App VPN client. It centralizes configuration within SOTI MobiControl, eliminates third-party VPN dependencies, and enhances performance through selective tunneling. Customers gain stronger security, simplified management, and reduced licensing costs across mobility deployments.

Bootstrap tokens for macOS devices are now automatically escrowed to the MDM server during enrollment, aligning with Apple’s recommended approach. Previously, bootstrap token configuration required manual enablement through Advanced Configurations. With this update, newly enrolled devices automatically escrow their bootstrap token, and existing enrolled devices will also have their tokens escrowed to the server, ensuring consistent availability across managed macOS devices.

This update introduces support for Windows 11 multi app kiosk profiles, allowing administrators to configure approved applications and design guided user experiences using Microsoft’s Cloud Solution Provider. This feature helps streamline kiosk deployments, reduce reliance on scripts, and strengthen security through centrally managed restrictions. It enables consistent, task focused workflows across retail, healthcare, education, and other shared device environments.

This update expands peripheral visibility across device groups, enabling administrators to view connected and disconnected peripherals such as printers, scanners, keyboards, mouse, and cameras directly from the Peripherals tab within Group Details. With search, status filtering, and export capabilities, organizations can now gain clearer insight into peripheral adoption and performance.

This feature lets administrators safely revert to problematic Windows updates and schedule patch rollbacks directly from the Platform Updates Dashboard. The update helps reduce downtime and improve visibility by enabling markers for failed uninstallation and detailed reporting for rollback actions. It strengthens patch management workflows and improves compliance tracking across Windows Modern devices. 

This feature provides administrators with the ability to update the Windows Modern agent independently from server releases, enabling faster delivery of agent specific fixes and improvements. With direct agent downloads available in the SOTI MobiControl console, teams can quickly resolve issues without waiting for full platform upgrades. This increases agility, enhances troubleshooting capability, and improves operational efficiency.

With this new feature, administrators can now easily inject custom JavaScript into specific URLs within SOTI Surf for Windows to adjust rendering behavior or automate repetitive actions. This functionality empowers administrators to optimize web workflows such as autologin, screen navigation, or display adjustments without modifying the underlying web application. By enabling tailored script execution, organizations can streamline web-based tasks, improve usability, and reduce reliance on external browser tools.

The following REST APIs were introduced in SOTI MobiControl 2026.1.0:

MacOS metadata extraction for app policy

Fetching CVE details for an update