What's New - April 2026

Note: All documentation links below will require you to log into the Menlo Security Admin Portal. The documentation is also available in PDF format on the Customer Success Portal.

Paste and File Upload Policy Improvements

What's New

Administrators now have more independent control when Copy & Paste and File Upload policies are both configured on a tenant.

Where paste policies are set to a "block" or "limit" paste action, a new toggle allows administrators to enforce file upload restrictions as part of the Copy & Paste policy. As a result, file uploads to the matching sites will also be blocked. If strict enforcement is not required, then the toggle can be left disabled.

When strict copy & paste enforcement is active and a file upload is blocked, the block page displayed to administrators will clearly indicate that “copy, paste and file upload” was blocked, rather than just a “paste“ action.

This new enforcement can be made at the global level or when creating certain web policy exceptions. (For Secure Application Access, you can continue to enforce file upload policy side by side with paste policy in access profiles).

The following exception types are currently supported:

• Category
• Domain
• Dynamic Domain List
• Geolocation
• Sticky Isolation
• Threat

Availability

This is a licensed feature and must be enabled, contact Menlo Security Customer Success.

Learn More

For more information, see Configure Copy & Paste Controls in Isolation.

Google Cloud Storage for Browsing Forensics

What's New

Browsing Forensics now supports Google Cloud as a storage location for your recordings and files.

You can configure your Google Cloud storage settings in the Admin Portal. You’ll need the Google Cloud bucket name, path and the GCP JSON key to set up your storage.

Availability

This enhancement is available to all users with the licensed feature Browsing Forensics enabled. For more information, contact Menlo Security Customer Success.

Learn More

For more information, see Configure Browsing Forensics Storage Settings.

Assess Browser Extension Security with the Spin.AI Risk Score

What's New

Menlo Security has partnered with Spin.AI to provide comprehensive risk scoring for browser extensions, to help you assess the safety and security of extensions and whether you should allow or block users to download them.

Assessing the risk of browser extensions will allow you to quickly mitigate the risk of potentially malicious extensions, as well as implement a more detailed extension management policy.

Spin.AI uses a proprietary algorithm to assess the risk of browser extensions based on areas such as scope of permissions, developer reputation, and known vulnerabilities. This results in a score between zero, which represents low risk, and 100, which indicates a high risk.

When you add an extension to an Extension List in the Admin Portal, the score is displayed in the Spin.AI Risk Score column in the table, with an external link where you can see a comprehensive overview of the risk assessment.

Availability

This enhancement is available to all users with Browser Posture Manager enabled.

Learn More

For more information, see Browser Extension Risk Score.

Updates to Admin Portal Dashboard Widgets

What's New

As part of upcoming improvements to the dashboards feature, and to align the Dashboards and the Value Reports, several of the widgets in the Admin Portal dashboards are changing to provide a more consistent experience across the platform. No action is required from admins.

The query that calculates the percentage displayed in the Traffic Isolated card on the Web Overview dashboard in the Admin Portal has been refined to include only traffic that could potentially be isolated, as well as filtering out unsuccessful traffic, iframes, and blocked actions. The result displayed is the percentage of web page navigations that are isolated out of all successfully accessed web pages through supported browsers via the platform.

In addition, the calculations behind the Actions Summary widget have also been refined to better represent the breakdown of actions for secured traffic.

These changes may adjust the isolation percentage from the current implementation and will align to the information provided in the Value Report.

Availability

This change is part of the April 2026 Cloud update.

Learn More

For more information, see View Web Dashboards.