September Product Updates

Created by Claire Walker, Modified on Fri, 23 Oct at 2:19 PM by Claire Walker

September 2026 — Monthly Product Updates

This article summarises the key product updates from our vendor partners for September 2026. Updates include new gamified phishing training and session revocation in Check Point Avanan, a new per-user pricing model for MPaware, AI-driven security awareness training and Claude MCP integration for Guardz, delegated mailbox access in NinjaOne SaaS Backup, and Microsoft Copilot SKU changes.
Check Point AvananEmail Security & Awareness Training Updates
New

Mission: Human Firewall — Gamified Phishing Training

Check Point Avanan has introduced Mission: Human Firewall, a gamified security awareness training experience designed to engage employees through an interactive, game-like interface. Users earn badges and progress through training challenges across five threat channels.

Training channels covered:

  • Email — identifying phishing and malicious messages
  • Phone — recognising vishing and voice-based social engineering
  • Chat — spotting threats in messaging platforms
  • Social Media — understanding risks in online platforms
  • QR Codes — identifying malicious QR-based attacks

To enable: Navigate to Security Training › Training Modules policy


New

Notify Managers When Employees Fail Phishing Simulations

A new Alert Manager option is now available in the phishing simulation workflow. When enabled, a manager is automatically notified if their direct report fails a phishing simulation, enabling faster coaching and intervention without requiring admin involvement.

Configuration path:

Security Training › Phishing Simulations › Action on Failure



New Security

Session Revocation for Compromised Accounts

Avanan now supports session revocation for Microsoft 365 accounts flagged as potentially compromised. This allows active sessions to be terminated immediately — even if the attacker has already authenticated — without fully blocking the account.

Three-tier response workflow:

  • Compromised — alert admins, automatically block user, revoke sessions
  • Suspected Compromised — alert admins, revoke sessions (no full block)
  • Low-Confidence — do nothing (monitor only)

Configuration path:

Security Settings › Security Engines › Anomaly Detection › Configure
? Note: Session revocation is currently available for Microsoft 365 accounts only. This is particularly valuable for containing suspected compromises where blocking the account outright would be too disruptive.


MPawarePricing Update — New Per-User Model
Pricing Change Action Required

New Per-User Pricing from 1 November 2026

MPaware is moving to a simplified per-user pricing model from 1 November 2026, replacing the previous tiered block structure with a single flat rate.

ItemDetail
Price$1.90 per user/month (ex GST)
Platform feeNone
Tiered blocksNone — flat rate per user
Minimum contractNone
Minimum seats1 user
Effective date1 November 2026
✅ Action: Please review your current MPaware billing arrangements ahead of 1 November 2026. Contact us if you have any questions about how this change affects your account.
GuardzAI-Powered Security Awareness & MCP Integration
New

Guardz MCP — Connect Claude Directly to Your Guardz Data

Guardz has released an MCP (Model Context Protocol) integration that allows AI tools such as Claude to query your Guardz data in real time. This gives MSP admins the ability to interact with their security data using natural language, directly within supported AI platforms.

Data accessible via MCP (read-only):

  • Customers
  • Users
  • Devices
  • Issues
  • Incidents
  • Available to MSP admins on all Guardz plans
  • Read-only access — no changes can be made via MCP


New

Adaptive Security Awareness Training (SAT)

Guardz has launched Adaptive SAT, a next-generation security awareness training platform that uses AI to personalise phishing simulations and training content for each user based on their risk profile and behaviour.

Key capabilities:

  • AI-driven phishing simulations with 132 templates
  • 66 training modules across a broad range of security topics
  • 75 languages supported
  • Per-user roadmaps — personalised learning paths based on individual risk
  • Teachable moments — instant training delivered immediately after a simulation failure
  • Compliance CSV export for reporting and audit purposes
  • Supports both Microsoft 365 and Google Workspace
? Transition note: Legacy SAT will continue to run alongside Adaptive SAT until the end of the year. Existing simulations and training will not be disrupted during the transition period.
NinjaOneSaaS Backup — Delegated Mailbox Access
New

Delegated Mailbox Access

NinjaOne SaaS Backup now supports Delegated Mailbox Access, allowing temporary access to a specific mailbox to be granted without modifying the user's existing role or permissions. This is ideal for scenarios such as accessing a departing employee's mailbox or performing discovery on a specific account.

Key details:

  • Grant temporary mailbox access without changing the user's role
  • Supports external and delegated users
  • Managed via the User Management › Grant Permission tab
  • SSO supported via Azure AD (Entra ID) or Google

Navigation path:

User Management › Grant Permission tab


MicrosoftCopilot SKU Changes 
Action Required Important

Microsoft Copilot Available Without M365 Base Subscription

From 1 December 2026, Microsoft Copilot will be available as a standalone offering — customers will no longer need a Microsoft 365 base subscription as a prerequisite to purchase Copilot licences.

What is changing now (from 16 October 2026):

  • Existing Copilot offers are being renamed with an "(add-on)" suffix to reflect their current bundled nature
  • New standalone Copilot SKUs will be introduced from December 2026
⚠️ Action required by 16 October 2026: If you use scripts, automation, or catalogue mappings that reference Microsoft offer names, you must update these to use product or SKU IDs instead of offer names. Offer names are changing; product/SKU IDs will remain stable. Failure to update before 16 October 2026 may cause your scripts or mappings to break.
? Note: This change affects MSPs and customers who manage Microsoft licence provisioning programmatically. If you are unsure whether this applies to your environment, contact us to review your current Microsoft catalogue configuration.

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article