Feature Requests

Feature Request Create a comprehensive Shadow IT Discovery and Application Governance Report that not only identifies cloud applications being used throughout an organization, but also allows IT teams and MSPs to manage the entire application lifecycle from discovery to approval, monitoring, and decommissioning.Feature Request Create a comprehensive Shadow IT Discovery and Application Governance Report that not only identifies cloud applications being used throughout an organization, but also allows IT teams and MSPs to manage the entire application lifecycle from discovery to approval, monitoring, and decommissioning. Business Problem Organizations struggle with: Unauthorized SaaS applications Employee adoption of AI tools Shadow IT growth Compliance documentation Software inventory management Maintaining approved application lists Offboarding and application access reviews Many organizations have no centralized record of: Which web applications are being used Who approved them When they were approved When they should be reviewed Whether they are still sanctioned for use DNSFilter is uniquely positioned to solve this problem because it already has visibility into application usage patterns and DNS activity. Proposed Solution Shadow IT Discovery Dashboard Automatically identify and catalog: SaaS Platforms Salesforce HubSpot Dropbox Box Google Workspace QuickBooks Online AI Platforms ChatGPT Claude Gemini Perplexity Copilot Collaboration Platforms Slack Zoom Discord Teams Notion File Sharing Services Dropbox Box WeTransfer Mega Google Drive Application Governance Status Allow administrators to assign a status to every discovered application. Approved Application has been reviewed and approved for organizational use. Approved with Restrictions Application is approved with specific policies or business limitations. Under Review Application has been discovered and is awaiting assessment. Denied Application is not approved for use. Blocked Application is actively blocked by DNSFilter policies. Retired / Decommissioned Application was previously approved but has been removed from production use. Field Description Application Name - Product Name Vendor - Company Status - Approved / Blocked / Review Approved By - Administrator Approval Date - Date commissioned Removal Date - Date decommissioned Review Date - Next scheduled review Business Owner - Responsible department Risk Rating - Internal risk score Notes - Governance comments Commissioned and Decommissioned Dates Track lifecycle dates including: Commissioned Date The date the application was formally approved for organizational use. Decommissioned Date The date the application was officially removed from service. This creates an audit trail useful for: Cyber insurance SOC audits HIPAA compliance Legal discovery Internal governance reviews Identify Associated Login Accounts Where technically possible, leverage CyberSight and application activity telemetry to identify: Login email addresses User identities User accounts associated with applications This functionality would significantly improve: Employee offboarding License recovery Security investigations SaaS inventory documentation If exact login identification is not available, provide confidence scoring or inferred associations based on user/device activity. One-Click Actions from the Report Allow administrators to take action directly within the Shadow IT Report. Approve Application Mark application as approved. Block Application Generate DNS filtering policy immediately. Add to Watch List Continue monitoring usage. Schedule Review Set future governance review dates. Flag for Security Assessment Create an internal governance task. Automated Quarterly Shadow IT Review Create scheduled reports that automatically generate: Quarterly Shadow IT Summary Includes: Newly discovered applications High-risk applications Applications pending approval Inactive applications Applications without business owners AI platform usage growth Reports could be delivered: Monthly Quarterly Annually via: Email PDF CSV MSP Portal Automated Ticket Creation Integrate with common PSA and ticketing platforms. When a new application is discovered: Automatically create a ticket in: Autotask ConnectWise HaloPSA Kaseya BMS Freshservice ServiceNow Example: New Shadow IT Application Detected Application: Claude AI Users Detected: 5 Risk Level: Medium First Seen: July 15, 2026 Recommended Action: Review and determine approval status. This ensures every newly discovered application receives governance review. Executive Dashboard Provide a high-level summary showing: Total applications discovered Approved applications Unapproved applications High-risk applications Newly discovered applications AI applications in use Applications pending review Applications blocked MSP Benefits This feature would provide immense value during: Quarterly Business Reviews Security assessments Cyber insurance audits Employee offboarding Compliance reviews Incident response engagements Vendor management projects Value Statement DNSFilter already has visibility into the applications users access every day. Extending that visibility into a full Shadow IT Governance Platform would give customers the ability to discover, govern, approve, review, block, and document application usage throughout the organization while providing MSPs with a powerful new security and compliance service offering.

Feature Request Add a SaaS Offboarding Report that allows administrators to enter an employee's: Name Email address Directory identity (Azure AD / Entra ID integration when available) The system would then generate a report showing all SaaS, cloud, and web applications the user has potentially accessed while protected by DNSFilter. Business Problem: When an employee leaves an organization, IT staff often struggle to identify every SaaS application the user accessed over time. Organizations may have hundreds of cloud services in use, including: Microsoft 365 Salesforce Dropbox Box Asana Monday.com QuickBooks Online ChatGPT Claude AI Zoom Slack Industry-specific applications Many of these applications may be unknown to management and may still contain company data after the employee departs. The offboarding process currently requires manual review of browser history, DNS logs, security tools, expense reports, and interviews with managers to determine where access may exist. Proposed Solution Create a new report: SaaS Access Discovery Report Administrator enters: User Name Email Address Time Range DNSFilter provides: Observed SaaS applications First Seen date Last Seen date Frequency of access Risk Category Application Category Direct login URL (when known) This would help organizations: Improve employee offboarding Recover unused SaaS licenses Find shadow IT Meet compliance requirements Perform insider threat investigations Support legal discovery requests Reduce data loss risk MSP Benefits Managed Service Providers could run this report during: Employee terminations Software Usage analsys Customer security reviews Cyber insurance assessments Compliance audits Mergers and acquisitions Incident response engagements Nice-to-Have Enhancements Application Confidence Score Show confidence level: High Confidence Medium Confidence Possible Usage Export Options Export to: PDF CSV Excel Automated Offboarding Report Direct to customer delivery Generate automatically when: Entra ID user is disabled Google Workspace account is suspended HR termination workflow triggers Multi-Tenant MSP Dashboard MSPs can run SaaS Offboarding Reports across any customer without leaving the partner portal. Additional Related Feature Request "Show Users of a SaaS Application" Allow administrators to select an application (such as ChatGPT, Claude, Dropbox, Salesforce, Zoom, etc.) and see: All users accessing the service First Seen Last Seen Usage frequency Devices used This would be extremely valuable for discovering unauthorized AI usage and shadow IT. As an MSP owner, I'd vote for this immediately because it turns DNSFilter from being only a DNS security platform into a valuable SaaS governance and offboarding tool.

DNS filtering catches a lot—but the most dangerous threats have learned to hide in plain sight. A phishing link in an email that routes directly to an IP. Malicious content tucked inside Google Drive or Microsoft 365. These aren't edge cases; they're exactly where attackers go when they know DNS is watching. We're building full URL and IP scanning directly into the CyberSight browser extension—an added layer of protection that catches what DNS alone was never designed to stop, without the headaches of a proxy. Admins will also get a level of precision that DNS can't offer—the ability to allow a domain while blocking specific content within it , putting real policy control back in their hands. What This Means for You Blocks phishing and malicious content hiding inside trusted domains like Google Drive and Microsoft 365 Granular path-level control—allow a site broadly, block the parts that don't belong Proxy-level protection without the proxy: no added complexity, no performance trade-offs Fuller visibility into what users are actually encountering, not just what DNS resolved

Automatic alert when a threat/malicious activity is detected by DNSFilter at one of your sites.

require flexibility to generate reports in excel, CSV, by site, by client, by device type, etc.

Scribe is a widely used AI-powered documentation and workflow platform that enables users to automatically create step-by-step guides from their actions. As adoption continues to grow across businesses for process documentation, training, and knowledge sharing, adding Scribe to AppAware would provide organizations with greater visibility into its usage, helping them enforce acceptable use policies, monitor AI-related applications, and strengthen governance over SaaS and AI tools within their environments. Primary Domains are . scribe.com and . scribehow.com

I'd like to see a report of all clients, listed by client, top category usage. End-goal -> a list of all clients using GenAI and an amount. As of now, I need to drill down to each company. Set the range to 60 days. Set the category to GenAI. Since there is no EXPORT button, I need to record the amounts into a spreadsheet. It took me 2 hours to do this for 15 organizations. I have 65 to go. This is silly.

Insights reporting was developed to better connect the dots from user to query. It is finally live. However, that does not mean we're done with reporting. We have a few ideas on how to improve Insights and would love to hear your suggestions.

CyberSight user behavior analytics transformed visibility for Windows deployments—and we want to bring that same capability to macOS. Mac-heavy teams will now have the same depth of user-level visibility across their entire fleet, without gaps in coverage based on operating system. What This Means for You Visibility and user-level activity logs extended to macOS devices Consistent behavioral insight across mixed Windows and Mac environments Faster investigations and incident response without switching between tools

Summary Allow MSP administrators to control whether CyberSight is visible to client-level administrators within sub-organizations. Problem CyberSight provides visibility into user activity and application usage. Some MSP partners allow their clients to administer DNSFilter within their sub-organizations but do not want those client admins to access company-wide analytics that could expose sensitive user activity (e.g., CEO/CFO browsing or application usage). Currently, CyberSight data can only be controlled by enabling or disabling data collection for specific Roaming Clients. There is no option to hide the CyberSight dashboard or restrict access to its analytics for certain administrative roles. Requested Capability Allow MSP administrators to hide or disable the CyberSight dashboard for client-level admins. Provide MSP-level controls to determine which roles can view CyberSight analytics. Maintain CyberSight data collection while restricting visibility when needed. Optionally support role-based permissions (custom roles) to control access to analytics features. Customer Value Allows MSPs to provide dashboard access to clients without exposing sensitive user activity data. Supports privacy and internal policy requirements for organizations with executive or sensitive roles. Provides better role-based control for MSP-managed environments.