Changelog
What shipped, release by release.
What each GraphnAI release brings, newest first, in plain language.
GraphnAI v0.5.1-rc.3October 21, 2026
Full-Auto acts only on evidence for its purpose
Full-Auto removes access only with proof it is unused, and contains an account only for a confirmed compromise. Select Fire and each receipt show the evidence, or why an action stays at Semi-Auto.
Licenses can count enabled user accounts
A license can cap enabled user accounts in Active Directory and Microsoft Entra ID. A user synced between them counts once.
Posture grades match their counts
Each Security Posture category grades all connectors together, so the grade agrees with its counts. A card names the lowest connector, one click away.
Workload identity checks
Security Posture checks service principals, app registrations and service accounts for tenant takeover, credential backdoors, illicit consent and unowned apps, with the fix named.
See which domain controllers audit what
An Audit coverage card in Platform Health shows, for each domain controller, which audit event streams GraphnAI has proven are arriving. The Bridges page shows which bridge checks.
GraphnAI v0.5.1-rc.2October 20, 2026
Microsoft Entra ID and hybrid posture checks
Twenty Security Posture checks cover Entra ID tenant settings, admin roles and hard-match takeover between Entra ID and Active Directory, each with the fix named.
Check now proves a permission went unused
Check now reads an object’s change history on every writable domain controller, so a permission can show that nothing changed through it in 90 days.
Decision models earn promotion with evidence
Admins calibrate each decision question on their own data, attack-test it and watch it for drift. A question moves past shadow mode only on that evidence.
See which permissions are used
The edge panel marks each Active Directory permission in a grant as seen in use, with the date and who used it, from your Windows audit events.
Group Policy logon restrictions block access
When Group Policy denies an account the right to log on to a computer, its admin, Remote Desktop and remote management access there is marked blocked, and paths through it rank last.
Removing an app permission revokes every grant behind it
When Select Fire removes delegated permissions between Entra apps, it revokes every OAuth2 grant behind them, not only the first.
Group Policy security checks
New checks find who can edit or link Group Policy, passwords stored in Group Policy Preferences (cpassword), and weak NTLM and LLMNR settings in SYSVOL.
Certificate Services (AD CS) escalation paths
Certificate templates and certification authorities join the graph, with the ESC1, ESC3, ESC4, ESC5 and ESC13 paths to Domain Admins, posture checks and simulated fixes.
Graphne’s work, sealed and checked
Graphne’s audit record is tamper-evident. Its answers are checked against their evidence and by a second model, and a mismatch becomes an AI incident to review.
Decision models screen for prompt injection
Small decision models screen text an attacker can write, such as directory descriptions, for prompt injection before AI features read it.
Who can add credentials to Entra apps
The graph shows which accounts can add credentials to Entra apps and service principals, and so act as them.
Upgrades that apply themselves
Data upgrades run on their own when the server starts. They are safe to interrupt, and a failed one stops the server instead of running on a half-upgraded database.
GraphnAI v0.5.1-rc.1October 13, 2026
Full-Auto respects each action’s own limit
In a Full-Auto plan, each action gets only as much autonomy as its own safety score allows.
Update notices
GraphnAI tells administrators when a new release is out on the channel they follow.
Graphne keeps its evidence
Graphne records the evidence behind each answer, so you can check its work.
A read-only database account for Graphne
Graphne reads your graph through its own read-only account, treats directory text as untrusted data, and is rate limited per user.
Stop, Disable AI, and a spending ceiling
Stop any chat or investigation mid-run, switch AI off for everyone at once, and cap what model calls can spend.
Connect Entra ID with one browser sign-in
Automatic Microsoft Entra setup now uses a normal browser sign-in instead of a device code.
Every page uses the full window
Tables, graphs and flyouts now use the full width of wide screens.
A setup link protects first-run setup
A new install can only be set up through the setup link it prints, so nobody else on the network can claim it first.
GraphnAI v0.5.0-rc2October 8, 2026
DCSync detection on real domain controller events
DCSync detection now matches the replication events real domain controllers write, and names the target object.
Alerts arrive with their evidence
Detections group into incidents and carry their decoded evidence, logon source and MITRE ATT&CK technique. Password spray alerts say when a guess worked.
See it on your own directory.
The Public Preview is free for 30 days from your first sync, on your own server.