AI is reshaping managed services, and MSP Summit brings the industry's brightest minds together to help you navigate what's next with confidence.

SuperOps will be there, and we want to see you at our booth. Come say hello, check out what's new (we've been building fast), and take five minutes to step into our AI Nightmares corner.

Tell us your worst AI horror story, the pilot you had to kill, the tool that caused more work than it saved, the moment you realized shadow AI was already loose in your environment. We're capturing quick video answers on camera, and the best ones get featured on our site.

1. Requester 2FA: SuperOps now supports two-factor authentication (2FA) for requesters, adding an extra layer of security when they sign in, just like the existing 2FA protection for technicians.

   

   
   
   

2. Self Service Portal branding: The Self Service Portal can now reflect your organization's brand with customizable Logo, Cover Image, and One Line Text. IT admins can personalize the portal for their employees, while MSPs can apply their own branding across clients or customize the experience for individual clients.
   
   

   

   
   
   

3. Remote control for Android: Technicians can now remotely access and control Android devices directly from SuperOps, making it easier to troubleshoot issues and support users without needing physical access to the device.
   
   
   

   

   
   
   
   

4. Apple Kiosk Mode: SuperOps now supports Kiosk Mode for Apple devices, giving admins greater control over how devices are used in dedicated or session-based environments.

   You can configure Kiosk Mode in two ways:

   1. Persistent Mode: Lock a device to a single app until an admin removes or changes the policy. Ideal for permanently dedicated devices such as point-of-sale systems, check-in tablets, and digital signage.

   2. Autonomous Mode: Allow approved apps with built-in autonomous capabilities to enter and exit Kiosk Mode on their own. Ideal for session-based use cases such as timed exams, clinic check-ins, and guided workflows where devices need to move in and out of lockdown without repeated admin intervention.
      

   

5. Additional Android remote commands: SuperOps now gives technicians additional remote commands to help protect and recover Android devices when they're misplaced or lost.

   1. Remote Ring: Trigger a device to ring for two minutes, even when it's on silent, and stop the ring directly from SuperOps. This makes it easier to locate misplaced devices around offices, warehouses, stores, and other workspaces.

   2. Admin Lock: Instantly lock a device using an admin-set password and unlock it later using the password or directly from the SuperOps console. This helps secure devices that go missing or temporarily restrict access during investigations and offboarding.

   

   
   
   

6. Disable the native Service Desk: Customers can now turn off the native Service Desk during onboarding. When disabled, the Ticketing, Projects, and Tasks modules are hidden from the account, keeping the workspace focused on the modules the team uses.
   
   

   

1. FileVault for Mac devices: SuperOps now lets you configure and enforce FileVault encryption on managed Mac devices through MDM. Admins can control when encryption is enforced, escrow recovery keys securely, retrieve them from the asset page when needed, and configure automatic recovery key rotation to help protect data on managed Macs.

2. Private apps for Android and Kiosk devices(for IT teams): You can now add and manage private Android apps in SuperOps and use them with Android Kiosk policies. Private apps can be configured as the primary kiosk app or as background apps, giving you greater control over dedicated Android devices and enabling organizations to deploy internally developed or organization-specific applications.

3. Geolocation Tagging for Android Devices: You can now see where managed Android devices are physically located, with a fleet-level map and a 30-day location history for each asset. This makes it easier to investigate lost or stolen devices and confirm compliance, without needing a separate tool.

4. Device Lifecycle Management: You can now manage the lifecycle of assets by moving devices through appropriate lifecycle states instead of deleting them or leaving unused devices active. Retired devices retain their historical data while being excluded from the endpoint count used for billing.

5. Samsung Knox Mobile Enrollment: SuperOps now supports zero-touch enrollment for Samsung Android devices through Samsung Knox Mobile Enrollment. Devices purchased through authorized Samsung resellers can automatically enroll into SuperOps as corporate-owned, fully managed devices when they are powered on.

6. Client-Specific Runbooks: Runbooks can now be scoped to specific clients, so technicians only see the SOPs relevant to the account they're working on. Admins can create runbooks for specific clients, change an existing runbook's scope, or duplicate a global runbook and customize the copy for a particular client. 

Things we’ve improved:

1. Third-party firewall status: The Firewall Status card now also shows the status of third-party firewalls if one is installed on the asset. Previously, this card only checked for Windows Defender Firewall and marked it as non-existent if Defender wasn't found.

2. Granular device types: We've made asset classification more precise. Instead of broad Workstation and Server labels, you can now identify devices as Windows Desktop, Windows Laptop, Mac Desktop, Mac Laptop, Linux Desktop, and Linux Laptop, making it easier to understand exactly what's in your environment.

3. Hierarchical Policy tabs: The Hierarchical Policy list is now organized into separate Endpoint, Network Device, and MDM tabs instead of one long list, making it easier to find and manage the policies you need.

4. OS Version Filtering in Asset Views: Asset Views now include an OS Version filter, allowing you to filter devices by Major Version, Minor Version, Build Version, and Release Version. This makes it easier to identify specific OS versions for patching, upgrade planning, and compliance checks.

5. Editable billing queue configuration for active contracts: Need to change how a contract handles billing after it's already active? You can now edit ‘Skip billing queue by generating invoice directly’ even after activation. Changes will apply to future charges, so there's no need to reach out for a backend update.

6. CMD-based custom software installation: Custom software deployments now support both PowerShell and BAT (CMD) execution types. When configuring a custom software installation, you can select the execution type that matches your deployment requirements, giving you more flexibility when deploying applications across Windows devices.

1. FileVault for Mac devices: SuperOps now lets you configure and enforce FileVault encryption on managed Mac devices through MDM. Admins can control when encryption is enforced, escrow recovery keys securely, retrieve them from the asset page when needed, and configure automatic recovery key rotation to help protect data on managed Macs.

2. Private apps for Android and Kiosk devices(for IT teams): You can now add and manage private Android apps in SuperOps and use them with Android Kiosk policies. Private apps can be configured as the primary kiosk app or as background apps, giving you greater control over dedicated Android devices and enabling organizations to deploy internally developed or organization-specific applications.

3. Geolocation Tagging for Android Devices: You can now see where managed Android devices are physically located, with a fleet-level map and a 30-day location history for each asset. This makes it easier to investigate lost or stolen devices and confirm compliance, without needing a separate tool.

4. Device Lifecycle Management: You can now manage the lifecycle of assets by moving devices through appropriate lifecycle states instead of deleting them or leaving unused devices active. Retired devices retain their historical data while being excluded from the endpoint count used for billing.

5. Samsung Knox Mobile Enrollment: SuperOps now supports zero-touch enrollment for Samsung Android devices through Samsung Knox Mobile Enrollment. Devices purchased through authorized Samsung resellers can automatically enroll into SuperOps as corporate-owned, fully managed devices when they are powered on.

6. Client-Specific Runbooks: Runbooks can now be scoped to specific clients, so technicians only see the SOPs relevant to the account they're working on. Admins can create runbooks for specific clients, change an existing runbook's scope, or duplicate a global runbook and customize the copy for a particular client. 

Things we’ve improved:

1. Third-party firewall status: The Firewall Status card now also shows the status of third-party firewalls if one is installed on the asset. Previously, this card only checked for Windows Defender Firewall and marked it as non-existent if Defender wasn't found.

2. Granular device types: We've made asset classification more precise. Instead of broad Workstation and Server labels, you can now identify devices as Windows Desktop, Windows Laptop, Mac Desktop, Mac Laptop, Linux Desktop, and Linux Laptop, making it easier to understand exactly what's in your environment.

3. Hierarchical Policy tabs: The Hierarchical Policy list is now organized into separate Endpoint, Network Device, and MDM tabs instead of one long list, making it easier to find and manage the policies you need.

4. OS Version Filtering in Asset Views: Asset Views now include an OS Version filter, allowing you to filter devices by Major Version, Minor Version, Build Version, and Release Version. This makes it easier to identify specific OS versions for patching, upgrade planning, and compliance checks.

5. Editable billing queue configuration for active contracts: Need to change how a contract handles billing after it's already active? You can now edit ‘Skip billing queue by generating invoice directly’ even after activation. Changes will apply to future charges, so there's no need to reach out for a backend update.

6. CMD-based custom software installation: Custom software deployments now support both PowerShell and BAT (CMD) execution types. When configuring a custom software installation, you can select the execution type that matches your deployment requirements, giving you more flexibility when deploying applications across Windows devices.

You can now deploy custom Apple MDM configuration profiles to macOS, iOS, and iPadOS devices by uploading a .mobileconfig file or pasting plist XML directly into SuperOps. Unlike standard MDM solutions, SuperOps lets you reference both built-in and custom asset fields inside payloads, automatically populating device-specific values during deployment. 

This gives you the flexibility to deploy reusable payloads across multiple clients, silently configure Privacy Preferences Policy Control (PPPC) settings for security tools, and immediately take advantage of new Apple MDM capabilities without waiting for product updates.

👉Learn More!

Pin and Unpin Android Kiosk Apps

Managing Android kiosk devices is now much easier. You can pin or unpin kiosk apps directly from the asset page or list view without removing or reconfiguring kiosk policies. 

Whether you're troubleshooting devices, pushing updates, fixing connectivity issues, or preparing new hardware, you can temporarily unlock devices and restore kiosk mode in a single click. The current kiosk status is also visible from both the asset details page and the asset list.

👉Learn More!

Remote Desktop Privacy Permissions for macOS

Configuring remote access on managed Macs is now much simpler. SuperOps can automatically deploy the required macOS privacy permissions for Splashtop and ISLOnline directly through Remote Desktop policies. This enables remote support to work seamlessly without requiring technicians or end users to approve permissions on every device.

👉Learn More!

New Windows Patch Categories

Windows patches are now categorized more accurately with two new patch classifications: Updates and Tools. These categories are available across the Approval Matrix, Filters, and Schedule Conditions, giving you more granular control over patch approvals and automation. Existing patches previously classified under Others will automatically move to their appropriate category during patch scans.

Hide Conversations in Ticket Threads

You can now hide specific conversation blocks from email threads and the Customer Portal while keeping them visible to authorized technicians. This helps teams selectively withhold customer-facing conversations from requesters when necessary, maintain internal context, and ensure only the intended information is shared externally.

Expanded Support for Dependent Fields

Dependent Fields are now more flexible, allowing Multi-select and Checkbox fields to act as parent fields, while virtually any supported custom field can be configured as a dependent field. Hidden dependent fields are automatically cleared when they no longer apply, and mandatory fields are validated only while they're visible. Together, these enhancements make it easier to build dynamic ticket forms that display only relevant fields, simplify ticket creation, and improve data accuracy.

Persistent Dashboard Chart Visualisation

Dashboard visualisation preferences now stay exactly the way you set them. You can choose whether a chart displays as a graph or a summary table, and that preference is saved at the dashboard level for everyone viewing it. This also improves PDF exports, ensuring reports retain the intended visualisation without requiring additional edits.

1. Revamped CSAT Module: The CSAT module has been completely revamped, giving you greater control over how customer feedback is collected with customizable survey formats, automated workflows based on responses, instant escalation of poor ratings, and richer reporting. This helps teams act on customer sentiment faster and turn feedback into measurable service improvements.

👉🏼 Learn more!

2. Site-Level Custom Fields: Site-Level Custom Fields allow MSPs to capture and manage location-specific information for customers operating across multiple sites. This gives technicians better context, reduces manual information tracking, and supports more scalable site management.

👉🏼 Learn More!

3. Lost Mode Location Tracking for Apple Devices: SuperOps now automatically retrieves and displays the GPS location of supervised iPhones and iPads when Lost Mode is enabled, directly from the asset page. This makes it easier to locate lost devices quickly while ensuring location data is automatically cleared once the device is recovered.

👉🏼 Learn More!

4. Enhanced Alert Cooling-Off Behaviour: Alert cooling-off periods are now tied to the lifecycle of an alert rather than its trigger time, ensuring that once an issue is resolved, future occurrences generate new alerts and notifications. This prevents recurring problems from being missed and keeps teams informed when issues reappear.

👉🏼 Learn More!

5. Custom Software Update Behaviour Improvements: Software update execution now varies based on patch configuration, with URL-based updates running on every scheduled policy cycle and file-based updates running only when the file is newly uploaded or updated. This provides more predictable patch management and reduces unnecessary update executions.

👉🏼 Learn More!

6. Splashtop Notification Controls: Administrators can now customize how remote session notifications appear to end users by choosing between popups, banners, or both, and controlling whether banners can be dismissed. This offers greater flexibility to balance user awareness, compliance requirements, and overall user experience.

👉🏼 Learn More!

7. HaloPSA Integration Enhancements: The HaloPSA integration now includes expanded asset support, flexible asset and custom field mapping, criticality mapping, detailed sync visibility, client and site imports, and configurable ticket creation settings. These enhancements provide greater transparency, flexibility, and control over how data flows between HaloPSA and SuperOps.

👉🏼 Learn More!

8. Data Reports Improvements: Building asset-based data reports is now faster with upfront asset type selection, support for custom asset types, and additional grouping options, including client custom fields. This makes reporting more flexible and allows you to generate insights that better reflect your business structure.

9. Custom Fields in Asset Views: Asset Views now support filtering by asset scope, asset class, and custom asset fields, making it possible to search and organize assets using business-specific attributes. This enables faster asset discovery, better inventory management, and reusable views for audits and operational reporting.

10. Export Asset Views to CSV: You can now export any Asset View to CSV, with downloads reflecting the exact filters and columns applied in the view, along with a downloadable history log for tracking exports. This simplifies audit preparation, external reporting, and inventory sharing while providing clear accountability for exports.

1. Sales Orders:

Sales Orders is a new module that sits between an approved quote and the final invoice. You can convert any approved quote to a Sales Order in one click, assign it to a technician, fulfill line items individually as they are delivered, and generate invoices directly from the order. This ensures nothing falls through the gap between a signed-off quote and actual delivery.

2. Mac MDM:

Mac MDM brings Apple device management into SuperOps, so you can manage your entire device fleet from one place. You can enroll devices without manual setup, push OS updates without admin credentials, enforce security policies, and monitor device status in real time. This helps you reduce manual effort, maintain compliance, and stay in control of all managed Mac devices.

3. Script File Manager:

   
   Managing script files just got easier. You can now access a dedicated Files tab within the Scripts Library to view and manage all files uploaded to your scripts. Quickly see where files are being used and safely remove unused ones—without worrying about accidentally deleting files that are still in use.

   

Things we’ve improved:

1. Bulk Policy Association Across Clients

You can now replicate a client's entire policy configuration across multiple clients at once, instead of repeating the same setup manually for each one. This significantly cuts down the time spent on client onboarding.

2. Event Monitoring Thresholds:

Event monitoring policies now let you set a threshold — defining how many times an event must occur within a time window before an alert fires. For example, alert only when a failed login happens 3 times within 1 hour. This reduces alert noise and helps surface patterns that actually need attention.

3. Enhanced Asset Summary Experience

   
   We’ve redesigned the Asset Summary tab to help technicians find critical information faster. Important asset details are now surfaced right at the top, with a more compact and structured layout that reduces scrolling and improves visibility.

   This update makes it easier to quickly understand asset context—especially during triage—so teams can act faster and with more confidence.

   

   Applies to MDM devices, endpoints, and SNMP device pages.

4. Default SLA:

Default SLA automatically applies to tickets without a matching SLA policy. This acts as a fallback, so no ticket is left without response and resolution targets, giving teams consistent SLA coverage without additional manual configuration.

4. Unknown Ticket Clarity in Bulk Actions:

Tickets without a mapped client are now clearly labelled and automatically excluded from bulk actions. Previously, selecting these tickets in a bulk workflow would result in errors mid-operation. Users now get clear guidance on what needs to be fixed before those tickets can be acted on.

5. 1:1 Ticket Creation in Slack and Teams [for IT Teams]: 

Users can now raise support requests by messaging the SuperOps bot directly in a private 1:1 chat in Microsoft Teams or Slack, without needing to post in a shared channel. Tickets are created and managed in SuperOps exactly as they would be through any other channel.

(Available on the Prime Plus plan)

6. Department-Based SLA Conditions (for IT Teams)

   You can now define SLA policies based on the requester’s department. This allows you to tailor response and resolution targets more precisely—for example, setting different SLAs for Finance and Marketing teams.

   With this added flexibility, your SLAs can better reflect business priorities without added complexity.

6. MDM Enhancements:
   

   • Improved APNs & ADE Token Alerts: Get proactive in-product notifications when tokens are nearing expiry, expired, or invalid, helping you take timely action and avoid interruptions in device communication.

• Enhanced Device Offboarding: Cleanly reset or remove MDM configurations when needed. New delete controls allow admins to remove entire MDM client configurations or specific Android/Apple configurations during offboarding or migration.

• Android Remote Actions: You can now perform remote actions on Android devices directly from SuperOps. You can use Ping to check if a device is online and Send Message to notify users. All actions are logged in the asset activity history. This helps you verify device availability and communicate with users before taking further action.

• App Blocking in Device Management: Admins can now block specific apps from the App Management section. Blocked apps are hidden from users and stop functioning if already installed. On BYOD devices, this applies only to the work profile — personal apps are not affected.