Recent Fixes & Improvements

Smoother Mobile Course Experience
June 2026

On mobile phones, navigating through consecutive course slides with embedded media no longer causes a visual jump between slides. 

Cleaner Simulation Reports
June 2026

Simulation activity reports now ignore duplicate "clicked again" and "credentials entered again" events. These repeats usually come from automated mail scanners, not from a real end-user. Reports now show only the first, genuine occurrence of each event, including in exports.

Filter by Simulation Type
June 2026

The simulations report now includes filters for each simulation type: phishing email, credential simulation, or smishing (SMS). Reviewing results for one kind of simulation no longer means scrolling through all of them.

Export the Awareness Level Report
June 2026

The Awareness Level report can now be exported as an Excel or CSV file, covering month-by-month awareness levels, users, courses sent and completed, reminders, and simulation stats. The export can be limited to a specific date range.

More Reliable Report Button
June 2026

Previously, the phishing report button could quietly switch off for organizations during a brief network interruption. The button now stays on through short connectivity drops, and is only disabled when there is a genuine configuration problem on the customer's side.

Phishing Reports with Special Characters
June 2026

Reported phishing emails with special characters in the subject line were not always recognized, so the report would not register. These reports are now recognized correctly whatever characters the subject contains.

Special Characters in Course Invitation Emails
June 2026

Group and training names that contain an apostrophe or ampersand (&) now appear correctly in course invitation emails. Previously these characters could show up as code instead of the actual name.

Two-Step Admin Login
May 2026

The admin login page now works in two steps: admins enter their email first, then their password on a separate screen. Because the email and password are no longer submitted together on one page, this lowers exposure to certain phishing attacks. Existing logins, password resets, and "Sign in with Microsoft" all work exactly as before.

Faster Activity Reports for Large Organizations
May 2026

The activity report and end-user detail pages load noticeably faster for organizations with high activity volumes. The data shown is the same; the pages simply open more quickly.

Microsoft Entra Sync: Business Phone Fallback
May 2026

For organizations syncing users from Microsoft Entra: if a user has no mobile number set in Entra, Nimblr now uses their business phone number instead. This helps more users receive smishing simulations when no mobile number is set.

Deleted Users Move to Trash Before Permanent Removal
May 2026

When an admin deletes an end-user, the user now moves to a soft-deleted state instead of being removed permanently right away. Deleted users can be restored if they were removed by mistake, and their training history is preserved in the meantime. To remove a user permanently, an admin can empty the trash

End-User Email Status Fix
May 2026

End-users could appear with an "invalid" email status on simulation and course detail reports even when their email addresses were valid. Email status now displays correctly.

This page covers updates from May 2026 onward and is updated with each release.