EXCITE EXCITE EXCITE

This release is one of inspiration; during the building we've been doing over the last two weeks the team has constantly been throwing ideas at each other around new functionality that we really wished for. One of them is the SharePoint templates I'll talk about later, but a lot of it has been stuff we've been building on in the background too.

There's been a lot of buzz inside of CyberDrain because of our next generation of CIPP. If you haven't heard yet, keep reading the release notes as this will have impact on you.

CIPP's future versions

Over the last couple of days we've moved the CIPP repositories over to a monorepo, now these are technical details that don't matter to most, but its the preface to some major changes we've done to CIPP; We are moving away from Azure Functions and Azure Static Web Apps, and moving to Azure Web Apps. Now that sounds a little confusing so let me put it in terms everyone can understand;

We are migrating the underlying infrastructure that runs CIPP to bring you better performance and more features.

No major interface upgrades, no major changes to what CIPP does for you, but very big changes on how it performs and how we've designed the systems.

Starting 27 July 2026 17:00 CEST you'll be able to upgrade your hosted instance to this new infrastructure by using the management portal at https://management.cipp.app/

So what really changes?

Performance has a huge boost. In our testing, day to day usage is 100 to 150% faster. With our new caching mechanics we're also seeing 300% faster reloads of pages; response times under 15ms. Background jobs also run much more performance; in our testing the differences can be minutes versus hours previously.

Hosted has an even bigger performance boost, where we've seen differences up to 1000% thanks to the scale of our deployed instances.

We're also bringing more security features to hosted CIPP such as firewalling of your instance, more domain management features, more control over SSO and so much more. User management becomes simpler and more things can be found directly inside of CIPP instead of a separate management portal.

What about self-hosted?

For self-hosted, it means there will be no more direct need to maintain your own forks, updating is done from the app itself. Deployment is easier if you haven't deployed yet, and in general its just blazing fast. For self-hosted the cost is also made static instead of dynamic; that does have a performance trade-off so you might have to give it more bucks to get more bang.

Starting Monday, new deployments using the self-hosted guidance are automatically going to use the new infrastructure, for existing deployments we'll be releasing a migration script at a later date. Remember that these scripts will perform destructive actions and you will need some Azure expertise to guide that to a successful completion.

Want more info? Join our Discord here

What about actual features in this release?

We've continued building cool features ontop of our new SharePoint capabilities. We've expanded the SharePoint section with SharePoint Templates. @rvdwegen had the idea that creating complex site environments inside of SharePoints with libraries etc takes too much time.

And he was right; each migration it takes ages to deploy the correct SharePoint structure, with the correct libraries and permissions in place. So we introduced SharePoint Templates; deploy a template to a client and get all Microsoft Teams and SharePoint sites created in one go, with their respective security groups immediately in place.

And that's not all, you can decide on the site type, and we're expanding this to allow you to immediately deploy Purview labels, retention policies, etc to each site and library, making a secure setup for AI a peace of cake.

I'm just here for the list. Gimme the list of everything you added!

We've added:

GDAP age-based group option
New standard: resource accounts
Alert on new shadow AI tools
Mailbox quota alert: mailbox type selection
Anonymization alert for report pages
Inactive licensed users alert: license names/SKUs/account status
Stale alert cutoff
AllowedToCreateGroups setting in standards
Copilot policy permissions in configuration added
Sherweb scheduled license removal added
AI report button on executive report
Custom domains page (super-admin)
SetupWizard: partner-status-aware tenant type selection
Store apps "add as system" option
Sort option for custom scripts
Container settings show version + build date
Nudge MFA: group targeting + auth method selection
Auth methods: registration campaign config enhancements
Cloud sync service principal lookup via applicationTemplateId
Test data caching: field projection
MEM managed app policy support

We've fixed:

/organization URI allowed as authorised request
SSO migration suppressed until setup complete / guarded by permissions
Teams switches default $false instead of null
PWdisplayAppInformationRequiredState self-check
Remediation errors logged instead of swallowed
CA GuestsOrExternalUsers spelling + guests selector constant
Smart lockout mode normalized to Enforce
Empty array compare errors avoided
App Protection @odata.type preserved on sync
False App Protection drift from reference-only apps/assignments
MAM policies use deviceAppManagement endpoints
Autopilot profile name validation
Container update-check defaults restored; build dates normalized to UTC; update state reconciled on restart
Cert provision loop prevented, KV 404 retries skipped
Cache buster version bump
DLP advanced rule handling normalized
Sherweb migration tasks stopped after extension disable
QuarantineRequestAlert typo fix
Audit log token denial treated as disable
Synced user writeback reset
App-approval linked permission set refresh
Extension status advance scoping fix
CVE report cache scoped by tenant
Group updates routed by effective type
Drift report Intune name/displayName pairing restored (#6347)
Identity/device test field references corrected
PIM role data cached with app token
ORCA spam action validation (ZAP-supported only)
CISA EXO 1.4.1 failure output corrected
Default assignment mode → 'append' for consistency
AppCache app id drift reconciled
Role dedupe scoped by resource
NinjaOne: CSV helper arg, SharePoint admin link hardening, error handling/dedup
App template keys preserved
GDAP roles JSON: missing commas, ObjectId formatting, new admin roles
Offcanvas markdown tables now scroll
Custom test save/run UX improved
Offboarding postExecution now persists
Raw group type preserved in user add/edit
Custom branding fixes
CVE Management list All Tenants fix

KelvinTegelaar/CIPP v10.7.0
v10.7.0 - The Frisky Whiskey

on GitHub

EXCITE EXCITE EXCITE

CIPP's future versions

So what really changes?

What about self-hosted?

What about actual features in this release?

I'm just here for the list. Gimme the list of everything you added!

Sponsors

What's Changed

New Contributors

KelvinTegelaar/CIPP v10.7.0 v10.7.0 - The Frisky Whiskey on GitHub

EXCITE EXCITE EXCITE

CIPP's future versions

So what really changes?

What about self-hosted?

What about actual features in this release?

I'm just here for the list. Gimme the list of everything you added!

Sponsors

What's Changed

New Contributors

KelvinTegelaar/CIPP v10.7.0
v10.7.0 - The Frisky Whiskey

on GitHub