Skip to content
Submit a Ticket
  • There are no suggestions because the search field is empty.

Recent Fixes & Improvements

Here you will find all our recent improvements to the Nimblr Product.

Clear notice before replacing the Introduction course
November 2026

When you pick the Security Awareness template in Custom Courses, you are now told that publishing the course replaces Nimblr's Introduction course for your organization. You see this on the template card, when you create the course and before you publish it. The Custom Content Editor is a paid add-on.

Clearer text in Custom Courses
November 2026

Text across Custom Courses is now shorter and easier to follow. The template preview has new text that explains what the template covers and that you can adapt it to your own policy.

Richer user report export
November 2026

The user report export now includes manager email, credential simulations sent and credentials entered, so you have more to filter and follow up on outside the portal.

Show phone numbers in the end user list
November 2026

Admins can now show a Phone number column in the end user list to spot users who are missing a number and won't receive smishing simulations.

Browser tabs show the organization name
October 2026

Browser tabs now show the organization name, so partners can tell their client tabs apart.

Long group names fit in employee sync settings
October 2026

Long group names no longer overflow in the employee sync settings, and the full name shows when you hover over it.

Filter the activity log by event
October 2026

Admins can now filter the activity log by what happened, for example clicked simulations, reported simulations or sent courses, using a new Action filter next to the Type filter. The Type filter offers all five activity types: courses, email simulations, SMS simulations, threat alerts and end-user log events. The two filters can be combined, and exports from the activity log follow the same filters.

Reports for Group Auditors
October 2026

Group Auditors can now open the Course Report and the Simulation Report, including the Overview and Detail pages, in addition to the Employee Report. Results are limited to the employees they oversee, and they are anonymized when the Hide PII setting is on, so auditors can follow progress without seeing more than their role allows.

Quick time periods in reports
October 2026

Every report header now has a period control. Pick the last 3, 6 or 12 months with one click, or open the custom range to choose your own months. The 12 month view remains the default.

User journey at a glance
October 2026

Opening a user from a simulation shows where they stopped: delivered, clicked, credentials and reported, each with the exact time or what did not happen. The credentials step only appears for simulations that ask for credentials. Course views show the same journey from invitation through reminders, start and completion.

Clearer activity timeline and user summary
October 2026

Each event in the activity timeline lists its date and time, and a delivered simulation shows the address it went to. A new About the user section shows the user's current awareness level and how their last five simulations went, with a link straight to their full profile.

Move between users without closing the panel
October 2026

Previous and next buttons, or the up and down arrow keys, step through the users in the list without closing the panel.

Refreshed colors
October 2026

A calmer palette throughout, with softer page and surface tones and clearer text. Outcome colors are now consistent: blue marks good outcomes and orange marks risk. Charts and badges follow the same palette, so the same meaning always carries the same color, and toggle switches are now black and white instead of yellow.

Tidier sidebar navigation
October 2026

Sidebar items are now grouped into clearer sections, and you can collapse the sections you don't need, so it's quicker to find your way around.

Filter reports by user properties
October 2026

Simulation and course reports can now be filtered by department, location, country and entity, so it's easy to see how a specific department, office or entity is doing. The filters are available on the Simulations report, Simulation detail report, Course report and Course detail report.

More accurate totals in the New Partner Portal
October 2026

The summary cards at the top of the new partner portal no longer count users in unpublished organizations, so the totals reflect only your active organizations.

Clearer search boxes and form fields
October 2026

Table search boxes now show a clear button while they contain text, so one click empties the search and resets the results. The button also works from the keyboard. Text you type into fields is now darker than placeholder hints, so it's easy to see which fields are filled in.

Full-screen menu on phones and small tablets
October 2026

On narrow screens, the navigation now slides down from the top and fills the screen instead of opening as a narrow drawer. Long menus scroll inside the panel and your account controls stay at the bottom.

Cleaner pie charts
October 2026

A chart with a single category at 100 percent now renders as a full circle without a thin seam, and categories with no data no longer add stray lines or zero-percent labels. This affects the License Distribution card and the awareness type chart in course reports.

Smoother course creation in the Custom Content Editor
October 2026

Several small fixes make building a custom course easier. The Author field in the course panel now shows the name of the person who created the course. Undo and Redo work as expected, with Redo available right after you undo a change. In the create-course wizard, a file that isn't a PDF or is larger than 20 MB is now rejected as soon as you add it. And if an AI generation fails, the text in the course's Notes field is kept. The Custom Content Editor is a paid add-on.

Smoother onboarding for managers in Microsoft sign-in organizations
October 2026

In organizations that use Microsoft sign-in only, managers in a newly activated group now receive an invitation that takes them straight to "Sign in with Microsoft," so they can get started in one step.

Consistent totals in smishing campaign reports
October 2026

The summary at the top of each smishing campaign report now draws on the same data as the detailed interactions table below it, so counts such as Ignored always line up with the employee list.

Higher-quality translations for custom courses
October 2026

Translations of custom courses now go through a quality check for accuracy and correct terminology before they are published. Employees always see the most recent approved version of each language, image descriptions are translated too, and images, quizzes and formatting stay exactly as in the original. If a language needs another try, the course shows which one, so you only retry what is needed. Each language's glossary is built only from Nimblr's shared course content and never from another organization's courses. The Custom Content Editor is a paid add-on; see Product release notes for the new languages.

Clearer awareness colors
October 2026

The "low" awareness band is now yellow instead of orange, so it's easier to tell apart from "critical" red.

Course reminders stay on schedule after a progress reset
October 2026

When an admin resets simulation progress for an organization, course reminders now continue on their normal schedule.

Awareness levels refresh right away after a progress reset
October 2026

After simulation progress is reset, the awareness level on the employee list updates immediately, so you always see the current figure.

More reliable images in courses and simulations
September 2026

Images in courses and simulations now load more reliably, and if an image ever can't be shown, the page handles it cleanly instead of displaying a broken image icon.

Smoother SFTP imports when a manager isn't recognized
September 2026

For organizations that sync employees via SFTP, rows that list a manager from another organization, or a manager Nimblr doesn't recognize, are now imported as normal. New employees are created and group changes are applied, and a warning about the manager field helps you tidy up the source file.

New Compliance Framework Targeting: ISO 27001 and CRA August 2026

Time-sensitive: CRA (Cyber Resilience Act) reporting obligations start September 11, 2026. Any customer that manufactures or sells products with digital elements should review this immediately.

What is the Cyber Resilience Act (CRA)? The CRA is a European Union regulation that introduces mandatory cybersecurity requirements for products with digital elements sold in the EU, covering vulnerability handling and incident reporting obligations.

Organization admins can now target courses, simulations, and smishing campaigns by ISO 27001 and CRA compliance status, alongside the existing GDPR, DORA, NIS2, PCI-DSS, and HIPAA options.

Partner Directory Integration Setup via API 
August 2026

Partners can now set up and manage their own Microsoft Entra ID, Google Workspace, or SFTP directory connection directly through the Nimblr API, without needing manual setup help from Nimblr.

  • Covers picking a connection type, saving credentials, adjusting sync settings, and mapping directory groups to Nimblr groups.

  • Available to any partner using the API.

    For full API reference documentation on directory integration, see the Nimblr API docs.

"View All" Link in Course Notifications
July 2026

Course reminder and invitation emails, and Microsoft Teams course cards, now include a "View all" link. Clicking it takes employees straight to their personal Nimblr portal, where they can review their full course and simulation history. Shown in the recipient's own language where a translation is available.

Admins Can Now Edit an Employee's Role and Responsibilities
July 2026

Organization admins can now view and correct an employee's job role and responsibilities directly from that employee's profile edit page, without needing to contact support. This is the same information that powers Role-Based Learning content matching. Lower-privilege admin roles can still see this information, but only in read-only view.

Reported Simulations Now Counted in the Users Report Export
July 2026

For organizations with the Report button feature turned on, the Users report export now includes a count of reported simulations for each end user — making it easy to see who's actively reporting suspicious emails.

Smoother Mobile Course Experience
July 2026

On mobile phones, navigating through consecutive course slides with embedded media no longer causes a visual jump between slides. 

Automated Mail Scanners Inflating Simulation Click Rates
July 2026

Automated mail scanners opening a simulation link were previously counted as if a real employee had clicked it, inflating click rates and skewing individual reports. We've now fixed this by filtering out scanner-triggered opens at the source, so they don't register as a click, credential entry, or repeat event at all — not just hidden from view. Reports and exports now reflect real employee interactions far more accurately.

Scanner behavior varies across mail providers and keeps evolving, so this filtering reflects our best effort at identifying it rather than a guarantee that every automated open is caught. If a click that appears scanner-driven is still showing up, contact Nimblr support so the detection can be further refined.

Cleaner Simulation Reports
June 2026

Simulation activity reports now ignore duplicate "clicked again" and "credentials entered again" events. These repeats usually come from automated mail scanners, not from a real end-user. Reports now show only the first, genuine occurrence of each event, including in exports.

Filter by Simulation Type
June 2026

The simulations report now includes filters for each simulation type: phishing email, credential simulation, or smishing (SMS). Reviewing results for one kind of simulation no longer means scrolling through all of them.

Export the Awareness Level Report
June 2026

The Awareness Level report can now be exported as an Excel or CSV file, covering month-by-month awareness levels, users, courses sent and completed, reminders, and simulation stats. The export can be limited to a specific date range.

More Reliable Report Button
June 2026

Previously, the phishing report button could quietly switch off for organizations during a brief network interruption. The button now stays on through short connectivity drops, and is only disabled when there is a genuine configuration problem on the customer's side.

Phishing Reports with Special Characters
June 2026

Reported phishing emails with special characters in the subject line were not always recognized, so the report would not register. These reports are now recognized correctly whatever characters the subject contains.

Special Characters in Course Invitation Emails
June 2026

Group and training names that contain an apostrophe or ampersand (&) now appear correctly in course invitation emails. Previously these characters could show up as code instead of the actual name.

Two-Step Admin Login
May 2026

The admin login page now works in two steps: admins enter their email first, then their password on a separate screen. Because the email and password are no longer submitted together on one page, this lowers exposure to certain phishing attacks. Existing logins, password resets, and "Sign in with Microsoft" all work exactly as before.

Faster Activity Reports for Large Organizations
May 2026

The activity report and end-user detail pages load noticeably faster for organizations with high activity volumes. The data shown is the same; the pages simply open more quickly.

Microsoft Entra Sync: Business Phone Fallback
May 2026

For organizations syncing users from Microsoft Entra: if a user has no mobile number set in Entra, Nimblr now uses their business phone number instead. This helps more users receive smishing simulations when no mobile number is set.

Deleted Users Move to Trash Before Permanent Removal
May 2026

When an admin deletes an end-user, the user now moves to a soft-deleted state instead of being removed permanently right away. Deleted users can be restored if they were removed by mistake, and their training history is preserved in the meantime. Admins can access the trash from the Users section of the admin panel. To remove a user permanently, an admin can empty the trash

End-User Email Status Fix
May 2026

End-users could appear with an "invalid" email status on simulation and course detail reports even when their email addresses were valid. Email status now displays correctly.

This page covers updates from May 2026 onward and is updated with each release.