Changelog - Ally Security

Reports with broken MITRE inject links can be edited again without losing their attack-chain analysis.

New client accounts inherit your data retention settings, and you can apply a change to existing client accounts too.
Tabletop report timelines now show who asked each question and suggested each idea, when the speaker is clear.
Scenario genre and duration choices use consistent cards with clear selection states and keyboard support.
Dropdown menus use consistent colors and focus styles across reports, knowledge base, and team settings.
Exercise control panel buttons share one quieter style, so Next stands out.
Choose a far more specific industry — the full LinkedIn industry list is now available everywhere you pick one.
The threat group list now covers every group MITRE ATT&CK publishes, including recently added ones.
Threat groups named by a nickname now match the right group in profiles and tabletop reports.
Scenarios sent from the library now match the recipient’s size and regulators, not the original company’s.
Error alerts are easier to spot, and tooltips, popovers and dialog titles now look consistent across the app.
Stress levels now read the group’s pressure per inject instead of individual moments.
Collaboration, lessons, and scoring now measure the team rather than the facilitator.
Success, warning and error toasts now carry their colour on the border and shadow, so they stand out at a glance.
Asking for a scenario in another language now shows a clear message instead of failing generation.
Asa can now suggest edits while a decision poll is open in the Inject Designer, instead of failing with an error.
Report timelines use consistent text colors to make titles, descriptions, and timestamps easier to scan.
The built-in internal account no longer completes the “create your first client” step.
When saving report edits fails, the improved report editor now explains what went wrong and what to do next.
AI assistants connected to Ally now get only the finished report and follow the same report access rules as the app.
Newly generated tabletop reports can always be edited after generation.
Participants keep their session through connection interruptions and automatically reconnect to the exercise.
Long industry names no longer push the organization size field out of the Create client account dialog.
Pressing Enter while editing an inject no longer adds an unintended blank inject.
Personalized scenarios no longer repeat parts of the recipient’s name back into the text.
Saving a quest while editing quickly no longer occasionally fails with an error.
In the dark Ruby and Amethyst themes, info messages and alerts now use the theme colour instead of blue, with readable titles.
A playing sound no longer covers the pressure timer in the facilitator header on smaller screens.
Speaking time stays with the correct participant when report speakers are renamed, including matching names.
Reports now name participants consistently so you can hide or rename anyone.
Report text no longer shows internal transcript markers or mislabels which inject it describes.
Quest personalization updates now reach the person who sent the template, including when they arrive after it finishes.
A failed personalization no longer leaves a progress notification spinning indefinitely.

Tabletop reports that failed to save edits can be edited again.

Give Quest scenario generation more room to finish detailed exercises without reaching the response limit.

Connect Vanta and send tabletop reports directly to the evidence destination you choose.

Every organization can securely share tabletop reports with external recipients.
File upload areas throughout the app now reliably support drag-and-drop, including profile and logo uploads.
If a page fails to load, you now see a clear error screen with a reload button instead of a raw error message.
Copy your Asa invite email from Settings or the sidebar, not just the Report page.
Report share emails now say who shared the report and which organization it belongs to, so recipients know it’s genuine.
Tabletop reports now list attack-chain assets as short, scannable names.
Failed and error badges use the error colour reserved for states, and are easier to read.
Status badges read more clearly, with a stronger label colour on a slightly deeper background.
Difficulty labels on exercise injects are darker and easier to read.
Labels across the scenario library now read as distinct kinds of information.
Continue from an incident to scenario templates after signing in, signing up, or completing onboarding.
Removable items in the quest builder and report editor now look like something you can take off.
Add Asa to Zoom meetings directly from Reports or the live Quest lobby.
Tabletop report inject summaries read more naturally and no longer repeat the facilitator’s name in every entry.
Reports and shared client reports now have one inject filter in a sticky header that stays in reach and fits neatly on phones.
Your new report now appears on the Reports page as soon as the upload dialog shows it’s ready.
Status badges across the console now read at a glance, with emphasis matching how much each state matters.
Grade gems appear right under the title when a grade card is viewed on a narrow screen.
The attack chain says when no potential threat group was identified instead of leaving it blank.
Lists of frameworks, threats and industries now read as quiet tags rather than competing for attention.
When saving report edits fails, the message now explains what went wrong instead of always blaming your network connection.
Role and participant names now show correctly in the report’s stress chart hover tooltip.
Reports now fit phone and tablet screens, with score cards, tables and charts staying inside their sections.
Opening a preparedness score card expands it smoothly once, and each area’s grade breakdown opens above the row.
Long asset names in tabletop reports now wrap inside their labels instead of running past the attack chain card.
On phones, the demo report header no longer covers the app logo and menu button.
The demo report’s inject filter now fits on phone screens instead of running off the edge.
Error toasts are no longer see-through, so the page behind them cannot be read through the message.
The Scenario Framework step no longer shows an error when a news item lists more than one source.
Checkmarks and partial-selection indicators remain readable in multi-select menus across themes.
Toggles on settings pages are now all the same size.
Suit Mode now hides animated backgrounds and Digitals characters on participant waiting screens.
The attack chain stays side by side on medium-width screens instead of stacking into empty space.
Long attack-chain tactic names and multi-line asset tags no longer get cut off.

Every customer can browse the Scenario Library and create exercises for their clients from ready-made scenarios.

Quest Builder selectors keep consistent spacing above selected tags and custom objective fields.

The Scenario Framework step no longer shows an error when a news item lists more than one source.
Deleting a tabletop report from the report actions menu works again.

Editing a report no longer fails with an inject timing error when the last inject ends at the very end of the recording.

Opening a link to a report in another account now explains why you can’t see it and which account it belongs to.
Choose a far more specific industry for your organization, and type to search the list.
Dialogs no longer stretch past the screen edge when they show a long email address or link.
Email footers now show the current year instead of 2025.
Personalized exercises no longer replay completion notices for exercises that finished long ago.
Personalized exercise cards now show their genre tag, matching every other exercise card.

Reports that reference a participant in an unexpected way now open instead of showing a load error.

Reports with a minor formatting glitch in AI-written text now open instead of showing a load error.

A quick jewel-runner game appears while scenarios are generating, so the wait has something to do besides watch a spinner.
Sending a template to a client account now tells you in that account when the Quest is still personalizing and again when it is ready.
Explore the CVS-Criteo digital privacy settlement in the public incident catalog.
Correct inject analysis, grades, decisions, and attack mappings with expanded report editing when enabled for your account.
Your first scenario change in the Inject Designer now offers to have Asa update whatever that change made stale.
Asa can now update the scenario summary, description and Recap & Attack Path TTPs when an edit makes them stale.
Edit tabletop reports through AI tools with validated batches, permission checks, and section or full-report restoration.
Table row actions look sharper in the new themes, and removing a member or invite is now a single click.
Toast notifications now stay until you dismiss them with the X, stack as a readable column, and never appear over a live run.
Tabletop exercise reports are shorter and easier to scan, with each section stating what the team did and the evidence behind it.
Scenario edits in the Inject Designer now save as you make them instead of waiting for Next or Save & Exit.
Asa’s proposed changes are now listed one line per change, with a count, and the buttons read Dismiss and Apply changes.
Dismissing Asa’s proposed changes now tells Asa, so its next reply knows they were turned down.
Asa now sees exactly what your edit changed, including the previous wording, before it updates the rest of the scenario.
Asa’s scenario updates now read as a short list of what changed, and a proposal stays a proposal until you apply it.
Manage IR Plan Gaps from familiar status cards while editing a report.
A personalized scenario is now labelled with its incident type and attack vector.
Personalization now reaches the attack narrative, so the whole exercise names your organization.
Total exercise duration stays read-only while you edit report content in place.
Focus on your report with a simpler editing toolbar and fewer competing messages.
Review report injects in a focused workspace with section navigation, draft indicators, and scoped recovery.
Save report edits in place, including IR Plan Gaps module changes and individual category restores.
Everyone on your team can now browse the Scenario Library and open any template.
The Scenario Library only offers the client accounts you administer, in both the client filter and the send picker.
Multi-choice pickers now look and work the same everywhere, with clearer default and prompt text.
Dropdown and popover menus now match their trigger button’s width and shadow instead of a narrower panel.
Exercise report timelines now show one decision per inject instead of several competing ones.
Report cards now show the same participant count as the report, without unnamed Unknown Speakers.
Quest status toasts no longer repeat progress you can already see in the Inject Designer.
Quest cards and the Inject Designer now always name the incident type and attack vector a scenario rehearses.
Decision, reason, and outcome text no longer gains punctuation that the user did not enter.

Pressing Enter in inject designer list fields now reliably adds a new bullet.

Explore 100 landmark cyber incidents with source-backed evidence in the incident catalog.
On mobile, the report inject filter stays usable while scrolling and no longer hides the Back and Actions controls.
View Sources on the organization profile now lists only the research sources the profile actually cited.
Organization profiles now check the company’s LinkedIn and Crunchbase pages for identity facts.
Organization profiles now read company story and contact pages, so founding details are found more often.
Expired report recordings and transcripts can no longer be viewed or downloaded.
Organization profile sources no longer list pages about unrelated look-alike companies.
Founding year, CEO, and headquarters are left blank instead of being guessed from vague wording.
Run now appears in the middle of the Quest Lobby’s top ready-to-run row.

Generated tabletop injects now advance on realistic incident time, so forensics and legal steps span hours or days instead of compressed minutes.
Prevent accidental loss of authored injects by confirming before they are discarded.
Buttons now use consistent colors and interactions across themes.
The Run action is centered and highlighted in the quest lobby so facilitators can find it faster.
Switch controls are larger and easier to read and operate.
Links now use consistent styling and interaction behavior throughout Ally.
Shared Quest links now preserve their destination through sign-in and clearly explain missing account access.
Organization profile details are no longer lost when saving and exiting during quest creation.
Creating and opening quests no longer fails with a server error, which could also create duplicate quests.
Success alerts now meet WCAG contrast requirements and are easier to read.
Dropdown menu buttons no longer lift unexpectedly when hovered.
Hovered links remain visible and use the theme’s emphasis text color.
Sign-in now explains that verification codes are sent only to existing Ally accounts.
Quest editors no longer see a false autosave error when opening the Inject Designer.
Quest risk assessments again show NIST maturity choices in a compact, scannable layout.
SAML users launching Ally from their identity provider now land in the application.

Organization profiles now read the company’s own website for founding date, leadership, and compliance details.
Organization size, industry, and public listing status are now normalized consistently wherever a profile is saved.
View-only accounts now see who to contact for more access on the Reports page.
Post-exercise recap and attack path can now be included in a quest presentation independently.
Frameworks and standards no longer come back empty when regulated data such as payment card data is identified.
Restore organization theme colors in quest and facilitator guide PDF exports.
View-only users editing reports are now told to ask an owner for access instead of seeing an account upgrade prompt.
The Reports “contact support to enable management” prompt now shows only on free accounts; view-only users see a “View your reports” subtitle instead.
New client accounts now open on the Build page when first entered.
The Clients page “contact support to enable management” prompt now shows only on free accounts, not to view-only users on paid accounts.
View-only users on the Clients page now see who to contact to create or manage client accounts, instead of a free-account upgrade prompt.
Clients and Reports “contact support to enable management” messaging now shows for any role on a free account, including view-only users.
View-only users on the Clients and Reports pages now see one consistent notice about contacting an owner to change their access level.
The Reports “Invite Asa is not available, contact support” note now shows only on free accounts, not to view-only users on paid accounts.
View-only users on the Reports page are now told an account owner can enable Asa meeting invites, instead of a free-account upgrade prompt.

The Outro slide now shows the attack narrative beside the MITRE ATT&CK table in a split-screen layout.
The exported scenario PDF mirrors the Outro split-screen, with the narrative left and MITRE ATT&CK right.
Inject headers now stay pinned to the top while scrolling through an open inject, so it’s clear which inject you’re in and easy to collapse it.
The sign-up form no longer shows a “Couldn’t find a logo” message when a domain has no auto-fetched logo.
Percentage dice results once again celebrate with falling crown-jewel gems.
Quest dice rolls now use two percentile dice and reveal the percentage to everyone.
Background context media now accepts PDFs, MP4/MOV video, and YouTube links.
Allow names as short as two characters, such as AJ and RJ.
Checkboxes now use theme-aware role colors and shadows for clearer visual states.
Switch controls now use clearer on/off labels and theme-aware visual states.
Typing in inject text fields that contain a timeline timestamp no longer jumps the cursor back to the start.
The Inject Designer AI now edits the inject you name instead of drifting to a neighbour after an inject is added or reordered.
Long participant role descriptions now wrap inside the Inject Designer instead of overflowing past the panel edge.
The account switcher now shows client accounts you joined directly, even when you are not a member of their parent account.
Meeting bots with a very long organization name no longer fail to be created; the bot’s display name is now capped to the meeting provider’s limit.
Outro narrative and Background slides now render scenario reference-time tags and timestamps as formatted dates.

Organization and client logos can now be uploaded as SVG files, which are sanitized on upload to strip any embedded scripts.
Uploaded logos and avatars are now typed from their contents, so files are no longer stored mislabelled or misnamed.
Onboarding now has a Back button for returning to the previous step.
Upload JSON or CSV files in the AI inject editor to build injects or update your scenario from their contents.
Owners can rename the meeting bot from organization settings — customers set a default name and each client can override it for their own account.
Guide client-account users through their first action and help them add Asa to a meeting.
SVG logos can now be uploaded when creating a new client account, matching the other logo upload screens.
Internal accounts now always show their parent account’s logo.
Quest session activity can now be counted accurately by date in connected agent tools.
Corrected the login page header wording to “Log Into Your Account”.
Resetting onboarding now replays the customer welcome and client getting-started experiences.

Every customer organization now gets an internal client organization, identified by an “Internal TTX” badge.
Opening a client account now starts you on Build instead of an empty report. If you only have report access, you still land on Report.
The quest builder now says plainly when it cannot make a change you asked for, and no longer refers to media that does not exist.
Long names and roles in Talk Time are shortened with the full text on hover, instead of overflowing the line.
New accounts now open to a one-time welcome screen with a short product demo and a link to the docs.
The getting-started checklist shows how many tasks you have completed, starts minimized, and covers three steps: build a scenario, invite your team, and set your data retention policy.
Smaller touches: branded quest coin, shimmering account logos, tidier threat-group cards, neutral sign-in copy for SSO, tooltips only where text is actually cut off, and a clients grid that adapts to narrow windows.

Quest action cards now show an animated arrow to make next steps easier to spot.
Improved mobile experience for participants joining a quest.
Inject media now scales properly to fit the screen.

Adds client dashboards to manage clients.
Can add, edit, and delete action items
Can edit overview and outcome of the report
Can edit lessons learned section of the report
Can edit next TTX recommendation section of the report
Can edit name and participant’s role in the report
Can see recorded media in the platform
New export report now has organization logo in cover page