Discovery scans are open for pilot groups

Release notes

What shipped in Surface and AIRiskDB, newest first.

Surface

Insights: Endpoints at Risk

Insights Overview on a sample organization. Assets, Endpoints, Sessions and AI Consumption sit in one row, Governance is below, and the new Endpoints at Risk table is outlined: three devices with their user and risk score.

A new Endpoints at Risk table on Insights Overview lists the devices with the highest risk scores this week, as shown above. Each row shows the endpoint, who last used it, and its score.

The rest of Overview is easier to scan too. Assets, Endpoints, Sessions, and AI Consumption now sit in one row, with the governed share just below. Previously those counts were five separate cards, and the page showed Asset Types by Risk instead of this table.

An Overview for Each Endpoint

An endpoint’s Overview tab on a sample organization: Endpoint Risk Breakdown by severity, an Endpoint Graph of the device’s assets, a table of failed policies, and a side panel of endpoint details such as user, OS and last seen.

Opening an endpoint now lands on Overview. It shows how risk is spread across the assets on that device (Endpoint Risk Breakdown), a mini Endpoint Graph of those assets, and the policies that failed on it, as shown above.

Previously this tab was an Exposure card (how many assets, which types) and a Details card (OS, serial, last user). Those device facts now sit in the side panel; Overview is for risk.

List View and Graph View on Inventory

Old and new Inventory pages, joined by an arrow. Old has Asset Graph as its own sidebar row under Overview, next to Inventory. New keeps only Inventory in the sidebar, with a List view and Graph view toggle in the header.

Inventory and Asset Graph are now one page. In the header you can switch between List view (the table) and Graph view (the map of how assets connect), as shown above.

Asset Graph is no longer its own row in the sidebar. Opening Inventory still lands on the list.

Type Icons on Asset Groups in Side Panels

Old and new side-panel Connections tabs, joined by an arrow. Old shows a SKILLS (3) heading as text only. New shows a skill icon beside SKILLS (3), and an MCP icon beside MCP SERVERS (2).

In side panels, each asset-type group heading such as SKILLS (3) now has that type’s icon next to it, as shown above. You will see this on an asset’s Connections tab and on an endpoint’s Assets tab. The rows themselves are unchanged.

Previously the headings were text only, so you had to read the label to tell skills from MCP servers.

Policy Tags Coloured by Severity

Old and new Asset Policies tables, joined by an arrow. Old shows Scope as grey type chips and Tags as grey chips. New shows Scope as an icon and name for each type, and Tags coloured by the policy’s severity: orange, red, or blue.

On Asset Policies, each row’s tags now use the same colours as that policy’s severity — Critical, High, Medium, or Low — as shown above. Tags on a High policy are orange; tags on a Critical policy are red.

The Scope column now shows each asset type as an icon and a name, instead of a grey chip. Session Policies still has no Scope column, because every row would read the same.

A Product Tour You Can Open Without Signing In

Three steps joined by arrows. Step 1, Click Take a tour: the SuperAlign homepage hero with Take a tour clicked next to Get a demo. Step 2, Walk through without signing in: console.superalign.ai/tour opens on a sample organization with the Welcome to Surface card, step 1 of 17. Step 3, Book a call at the end: the closing card asks Ready to secure your AI environment? with View Resources and Book a call.

You can walk through Surface without an account. On the SuperAlign homepage, Take a tour (and Tour in the navigation) opens console.superalign.ai/tour. It starts the guided tour on a sample organization, as shown above.

The last step of the tour offers Book a call, so you can set up a demo with the SuperAlign team when you’re ready.

Previously the tour only ran after you signed in. The signed-in tour is unchanged for people who already have access.

Give us two weeks.
We’ll show you what’s running.

Deploy on your MDM across 25–100 users. Keep the inventory, scored risk view, and a full session record—whether you buy or not.

Day 1Endpoint sensor and browser extension pushed through Jamf or Intune. First results within the hour.
Week 1Full inventory with risk scores, plus one session reconstructed end to end.
Week 2Findings review against criteria you set before we started.
CostNothing. The findings are yours either way.