
Mondoo Release Highlights December 2025
It's that time of year when it's more fun to snuggle up with a cup of cocoa by the fireplace instead of your laptop, but despite the shorter month and holiday distractions, our engineers managed to slip in some great new features and fixes before heading out for the holidays. Even as the year winds down, we're still working hard to deliver valuable updates to help you secure and manage your environment. Dive into this month's release notes to see what the team accomplished!

Mondoo Release Highlights November 2025
November has already flown by, and it’s time to take a look at all the enhancements we accomplished. This month we added new Mondoo Security Advisories designed to keep you ahead of emerging threats. We also expanded our vulnerability detection to include more applications and operating systems, as well as guided remediation steps to help you patch quickly. We beefed up our NPM package detection to bolster supply chain security, and added new network security capabilities. Dig in to find out more!

Why Exceptions Management is Key to an Enterprise Vulnerability Program
Security and IT teams deal with an overwhelming ‘sea’ of security alerts every day. Prioritizing issues helps teams focus on the most important issues so these can be addressed first. However, even when vulnerabilities are critical and need to be prioritized, there may still be valid reasons for not remediating them immediately. In these cases, it’s important to be able to set exceptions in your vulnerability management program. This helps teams remain focused on the issues they can actually fix, without getting distracted by the ones they can’t. However, while exceptions are essential, they can also become dangerous loopholes if not managed properly.

Mondoo Release Highlights October 2025
With October in the rearview mirror, we hope your Halloween was filled with more treats than tricks! This month at Mondoo we’ve been hard at work busting more of those tricky vulnerabilities for you. October’s update brings new detections for end-of-life operating systems, ensuring those ghostly legacy assets don’t haunt your security posture. We’ve also brewed up new and enhanced CIS benchmark policies, fresh vulnerability detections and remediations, a new ‘known ransomware use’ risk factor, and other powerful improvements to help you banish risk before it becomes a nightmare. Keep reading, if you dare, to uncover all the chillingly good details of our October release.

Mondoo Release Highlights September 2025
As the colors of fall begin to show and the days start to get shorter, we certainly haven’t been sitting still at Mondoo. This month, we greatly extended our vulnerability detection capabilities, adding support for new operating systems and an impressive list of third-party applications. We also added support for EU and German compliance frameworks Dora and BSI SYS 1.5. On top of that we added experimental MCP security, streamlined the process of listing and filtering findings, and made advisory remediations easier to access. Dig in to find out more!

Mondoo Release Highlights August 2025
Staying ahead of evolving security threats requires both deeper visibility and faster, more effective remediation. This month, we’ve expanded our vulnerability and EOL detections, added more Ansible, Bash, and Terraform remediation snippets, and included the latest CIS benchmarks to strengthen security and compliance. We’ve also added some enhancements to the Mondoo Query Language (MQL) to further simplify the creation of custom policies. These improvements are all about helping your team save time, remediate faster, reduce risk, and stay ahead of attackers. Let’s jump in.

How to Find Vulnerabilities in Hidden Software Packages and Installers
Picture this: Your IT department updated the organization's computer systems last week, patching a vulnerability in one of the applications that is used daily. Your vulnerability scanner, however, is still showing alerts for that same CVE. How is this possible? The answer often lies in the hidden, forgotten, and redundant software packages scattered across your assets - a problem that creates significant, and usually invisible, security risks.

Mondoo Release Highlights July 2025
Even at the height of summer, Mondoo is in full delivery mode. This month we expanded coverage for critical Microsoft apps, simplified filtering on findings, enhanced our guided remediations, and added more exceptions functionality. Dig in to find out more!

Mondoo vs Tenable - Ten Ways to Compare Tenable Alternative
Tenable offers a traditional vulnerability management tool, known for its comprehensive scanning capabilities and extensive vulnerability database. However, it's not necessarily the easiest to use and often leaves users frustrated. Complaints we hear about Tenable is that it's fragmented, too noisy, lacks automation, clunky to deploy, and offers limited shift left capabilities - plus, it's expensive. Mondoo is a Tenable alternative that offers unified vulnerability management for cloud, on-prem, endpoints, and SaaS from a single interface that doesn't just tell you what's wrong, but prioritizes issues based on context and actually helps you fix them.

Mondoo Release Highlights June 2025
It’s been a scorching month of June but that hasn’t stopped the Mondoo engineering team. This month we focused on supporting new operating systems, platforms, and CIS benchmarks. Plus, we've enhanced our UI for faster remediation with improved exception management and direct links to assets. Read the blog to get all the details.

Mondoo Release Highlights May 2025
May brought a fresh wave of Mondoo innovation, improvements, and exciting updates. This month was all about quickly surfacing the information you need to remediate quickly - especially the most critical and exposed CVEs in your environment. In this blog post, we’ll walk you through everything we released in May - from expanded CVE detection to improved reporting and exceptions management. Let’s dive into what’s new!

Mondoo Release Highlights April 2025
We're excited to tell you about everything we've been working on this past month, including the Mondoo MCP Server that helps unlock the power of AI to fix CVEs faster. In addition, we've expanded our detection coverage, enhanced the remediation information in tickets, reduced noise with centralized exception management, added new and updated policies, and much more.

Mondoo Release Highlights March 2025
This month at Mondoo was all about exposing CVEs wherever they are, and then making it as easy as possible to quickly remediate them in order of importance. With our growing engineering team, we’re excited to be moving at lightning speed to make our findings even more actionable. Here’s what we’ve been up to:

Mondoo Unveils Unified Policy as Code Solution at Google Cloud Next 2025

Mondoo Release Highlights February 2025
Integrations with CrowdStrike and SentinelOne, priority asset customization, optimized dashboards that give you exactly what you need to start your day informed… Nobody told us it was a short month! Learn about these and many more additions and improvements we made to Mondoo in February.

Unify Findings from CrowdStrike, SentinelOne, and Microsoft Defender in Mondoo
Are you tired of constantly having to switch between different security tools for cloud, on-prem, SaaS, and endpoints? Is it difficult to understand your biggest risks and how to optimize your security efforts? Do you need to manually enter all security findings in a spreadsheet to get a unified view? To make impactful changes to your security posture, you need a unified view of your entire attack surface. That way you can understand which remediations will result in the greatest overall improvement. Mondoo makes this possible.

Mondoo Release Highlights January 2025
Identifying risks that threaten your infrastructure just keeps getting easier with Mondoo. This month we introduced a dynamic and flexible way to organize and view your assets, plus we improved the experience of gathering and sharing scanned asset data. Learn about these enhancements and more in our January release highlights.

Mondoo Workspaces: Organize Security Insights by Team, Location, Technology, and Focus
While organizations need centralized security insights to understand what the most critical risks are across their IT infrastructure, it’s also important to organize security findings into separate areas that align with existing workflows and business goals. With Mondoo workspaces, you can create separate views of assets to divide responsibilities, prioritize risks within focus areas, and deliver focused reporting. The ability to slice and dice assets into workspaces allows Mondoo customers to streamline their security efforts and optimize processes. In this blog we explain what Mondoo workspaces are and how they work. We provide three use cases to demonstrate how our customers are benefiting from this feature.

Mondoo Release Highlights December 2024
Ever wish you could apply Mondoo's advanced prioritization and remediation tracking to findings from your other security tools? Wish granted: We added the ability to ingest Microsoft Defender for Cloud findings into Mondoo—with support for more security tools coming soon! We also added support for querying Nmap data and Cloudflare infrastructure, plus made huge performance improvements. But that's not all we accomplished this month. Read our release highlights to learn more.

Mondoo November 2024 Release Highlights
We're over the moon about a revolutionary feature we added in November: the five-minute Azure setup. Integrating with complex systems can be… well… complex. And historically Azure has been the most challenging. Now our new automatic Azure integration setup reduces your effort down to a couple of choices and a single command. We know you'll be as thrilled as we are. Also this month we've given you ultimate control with customizable risk factors, expanded our Windows support, and continued to make improvements to our user experience.

Mondoo October 2024 Release Highlights
For Mondoo, October has been about building, sure, but also about rebuilding. We overhauled our AWS serverless integration and the user experience for managing policies. Based on customer feedback and smarter engineering, we just keep making it easier to secure your business-critical assets. When you throw in workflow integration with Azure DevOps and Zendesk and hearty lists of newly supported systems, policies, and resources, you have a bountiful fall harvest!

Mondoo September 2024 Release Highlights
Mondoo has dramatically reduced the labor of tracking and completing security fixes. By connecting Mondoo with your project and ticket management software and automating drift detection, we made a lot of lives easier this month. But that's not all we did! Learn about more additions and improvements in our September 2024 release highlights.

Mondoo August 2024 Release Highlights
Sure, many of our superstar engineers, like much of Europe, were on vacation in August. Still we managed to pump up our compliance experience, write loads of new policies, improve our UI, give you access to new resources, and more. Here's the whole story in this month's release highlights.

Mondoo July 2024 Release Highlights
It's been a hot July for the Mondoo team! It's tough to pick what we're most excited about this month. We launched cases, our new remediation task tracking feature... We expanded our GitHub, GitLab, and Linux support, exceptions coverage, and CIS benchmark policies… We improved Kubernetes scanning, compliance framework management, and data exports… And more! What capabilities do these changes give you? Find out in this month's release highlights.

Mondoo June 2024 Release Highlights
During the month of June at Mondoo, two key words drove our engineering work: better and more. We endeavored to make your security assessment and prioritization experience better and to extend the Mondoo security data fabric to give you more data. The results are finer details on cloud security, an improved user experience, new platforms supported, and expanded information on your infrastructure. What do Mondoo's better and more enable you to do? Find out in this month's release highlights.

Mondoo May 2024 Release Highlights
We definitely have spring fever here at Mondoo. The most exciting development is full-text search that finds assets, policies, checks, CVEs, advisories, and more. There's a whole lot of good news for our AWS and GitHub customers. And to help you secure your entire infrastructure, we've further expanded our platform support, policies, and resources.

Mondoo April 2024 Release Highlights
We lit some big sparks in April with our initial release of Mondoo Firewatch, which focuses on solving the challenge of prioritizing security fixes. We also expanded our scanning capabilities to include Azure Container Registries and Dockerfiles, plus added a problem-solving approach to scanning Kubernetes cluster nodes. The improved workflow of compliance as code makes it easier to adjust your compliance monitoring and reporting to precisely match your auditor's needs.

Mondoo Firewatch
We are excited to announce the next major release of Mondoo, which introduces an effective new way to prioritize risks. This approach takes threats and exposure into consideration to highlight findings that pose the greatest actual risks. As a result, you won't drown in issues and alerts. Instead, you can focus on the best actions that increase your security.

Mondoo March 2024 Release Highlights
At Mondoo we wrapped up our winter efforts with a productive month of March. We added SCIM 2.0 support, new features that help you prioritize and speed through your security fixes, and improvements to policies and resources.

Mondoo February 2024 Release Highlights
It may be the shortest month, but we still managed to pack a lot of great features and enhancements into Mondoo in February! We made big improvements to our vulnerability detection capabilities and experience, supercharged performance, and gave you access to more infrastructure data.

Mondoo January 2024 Release Highlights
It may be the shortest month, but we still managed to pack a lot of great features and enhancements into Mondoo in February! We made big improvements to our vulnerability detection capabilities and experience, supercharged performance, and gave you access to more infrastructure data.

Looking Back on Mondoo's Epic 2023
It’s been a momentous 2023 for us here at Mondoo. To grasp the scale of everything new we’ve shipped, let’s take a walk through a winter wonderland of features and improvements. Because we release a new version of Mondoo every week, we’ve shipped 52 releases this year, including 2 major releases.

Eliminating Mystery from Your Complex Infrastructure
The past decade has witnessed an exponential surge in infrastructure complexity. Far behind us are the days when teams could rely on a simple mental map to navigate their software architecture or draw a server diagram on a single sheet of paper. Instead, seemingly simple application deployments now span multi-region Kubernetes clusters and traverse dozens of different cloud services. This explosion of complexity has strained security and operations teams’ ability to respond to security findings. Without the context our mental infrastructure maps once provided, we can't validate, let alone remediate, security issues. To empower both operations and security teams to secure their environment, Mondoo is launching new capabilities that deliver context to complex environments.

Mondoo - The First CIS SecureSuite Vendor Certified for Cloud and Kubernetes Security
Mondoo ensures your Cloud and Kubernetes environments are compliant with CIS Benchmarks. Continuously assess compliance reports instantly and remediate issues without trouble.

Enhance Your Security with Data: Mondoo + Snowflake Integration
Mondoo is thrilled to announce its extended partnership with Snowflake, following the recent collaboration with Google BigQuery. This integration empowers companies to leverage their security information for advanced analysis, revolutionizing the way enterprises tackle security intelligence.

Announcing Mondoo's Feature Releases at RSA 2023
Discover the latest innovations in cybersecurity with Mondoo's new feature releases, designed to empower CISOs and revolutionize security posture management.

ICYMI: Mondoo Release Highlights for March 2023
Welcome to March 2023 release highlight of Mondoo.

Mondoo + Google BigQuery: A Winning Combo for Security Intelligence
Mondoo is excited to announce our integration with Google BigQuery, a game-changer for your security intelligence and insights!

ICYMI: Mondoo Release Highlights for February 2023
Welcome to Mondoo's February 2023 release highlights.

Mondoo v8: Enhanced Policies & Query Packs for Simplified Security Posture
Get ready to enhance your security posture with Mondoo v8, our latest version featuring improved policies and query packs.

Mondoo Launches Cloud-Based Enterprise Solution for Highly Regulated Industries
If you're in a highly regulated industry like healthcare, government or finance, data privacy protection is a top priority. This is why I’m excited to share that Mondoo has announced the launch of its new cloud-based enterprise solution. It combines the power of our SaaS platform with the added convenience of a dedicated environment to give enhanced security, privacy, and scalability for large enterprises.

ICYMI: Mondoo Release Highlights for January 2023
With the new year starting, we have already a number of exciting updates for the new year! Before moving to the next major release in February, let's take a look at some of these new features:

Mondoo Secures SOC 2 Type 1 Certification
Mondoo is proud to announce that we have achieved SOC 2 Type 1 certification, demonstrating our commitment to the highest levels of security and compliance.

ICYMI: Mondoo Release Highlights for November 2022
As the year is coming to a close, we have a lot of exciting changes to share from our work this past month:

ICYMI: Mondoo Release Highlights for October 2022
We hit a major milestone in October: Mondoo version 7! For important information about changes in the release, see the Mondoo 7 Release Notes.

ICYMI: Mondoo Release Highlights for September 2022
Welcome to the September 2022 recap of Mondoo releases. We are a bit late this month, since there are some big announcements on the way!

ICYMI: Mondoo Release Highlights for August 2022
Welcome to the August 2022 recap of Mondoo releases.

ICYMI: Mondoo Release Highlights for July 2022
Welcome to the July 2022 recap of Mondoo releases.

ICYMI: Mondoo Release Highlights for June 2022
Welcome to the June 2022 recap of Mondoo releases.

ICYMI: Mondoo Release Highlights for May 2022
Welcome to the May 2022 recap of Mondoo releases.

ICYMI: Mondoo Release Highlights for April 2022 (version 5.37)
Welcome to the April 2022 recap of Mondoo releases.

ICYMI: Mondoo Release Highlights for March 2022
Welcome to the Mondoo release recap for March 2022.

We’re all in on a more secure Cloud Native world
Mondoo has joined the Cloud Native Computing Foundation (CNCF) as a Silver Member, emphasizing its dedication to collaborating within the cloud-native ecosystem. Additionally, Mondoo introduces the Mondoo Kubernetes Operator in early access, offering a unified platform for continuous compliance across cluster nodes and deployed resources, with a focus on simplicity and ease of integration. Look for Mondoo at KubeCon | CloudNativeCon in Valencia, Spain, where they will showcase their latest updates and engage with the community in person.

Mondoo Funding Announcement
Mondoo has raised $15 million from investors Atomico, First Minute Capital, and System.One, aiming to simplify infrastructure security operations for organizations of all sizes. The platform, designed by experienced DevOps professionals, automates security tasks across various infrastructures, allowing users to start securing their fleets immediately without the need for sales involvement.
Ready to Transform Your Security?
See how Mondoo can help you find and fix vulnerabilities faster.