XOAP Image Management has been rebuilt from the ground up. The previous generation wrapped an external, third-party build binary orchestrated from the XOAP cloud. The new generation is powered by a purpose-built, native .NET build engine that runs inside your own environment via the XOAP Connector.

The result: more platforms, richer provisioning, built-in security tooling, and builds that execute right next to the infrastructure they target — with the same XOAP console experience you already know.

Old vs. new at a glance

Five things the new generation does that the old one couldn’t

1. Builds run where your infrastructure lives

The old pipeline built from the XOAP cloud — which meant firewall exceptions for on-prem hypervisors and credentials leaving your perimeter. The new engine ships inside the XOAP Connector: builds execute on a device you control, on your network. Your vSphere, Proxmox, Hyper-V, and Nutanix endpoints stay private. Your cloud credentials stay local.

2. One template, every platform — including bare metal

Write the image definition once. The same YAML produces an Azure image, an AWS AMI, a vSphere template, a Proxmox template, a Hyper-V VHD, a Docker image — and can even provision physical machines over PXE, something the previous generation could not do. Identical hardening, identical agents, identical result, everywhere.

3. Security is a pipeline step, not an afterthought

Every build can end with a compliance chain: generate an SPDX/CycloneDX SBOM, run a Trivy, Grype, or Snyk scan (and fail the build on severity), emit checksums and a signed manifest. What used to be a separate tooling project is now three lines of YAML.

4. Real configuration management, first-class

Beyond scripts: native Ansible, Chef, Puppet, Salt, and Windows DSC actions, plus typed steps for package managers, Windows features and services, registry, firewall rules, and in-guest validation (including Pester test gates). Builds fail loudly on the step that broke — no more grepping one giant script log.

5. Clean failure semantics

Cancelled a build? Timed out? Something broke mid-provision? The engine cleans up the cloud resources it created — instances, temporary firewall rules, key pairs — instead of leaving billable orphans behind. Timeouts are enforced per build, automatically.

What stays the same

• Your console. Image management remains in the XOAP portal — dashboards, build history, live build progress.
• Your image definitions. Existing definitions are translated automatically; the migration path converts previous-generation builders and provisioners to their new-generation equivalents.
• Your pace. The new generation is enabled per workspace via a feature flag you control. Nothing changes until you flip it, and the previous generation remains available during the transition window.

By the numbers

The complete capability reference

Everything the new generation ships, by category.

Platform targets (15)

Where your images get built.

Cloud

Virtualization

Containers, bare metal, and existing hosts

Actions (33)

The provisioning steps you compose into a build.

Configuration management

Shell and script execution

Package management

Windows administration

Linux administration

Cross-platform utilities

Connectors (3)

How the engine talks to the machine being built.

Connector settings can be defined once and reused across targets via connector_profiles.

Post-conversions (18)

Chainable steps that run after the image is built.

Image replication and distribution

Cloud storage upload

Format conversion and packaging

Security and compliance

Notifications

The new build engine is developed by XOAP and is also available standalone as a CLI and REST API.

The post Image Management appeared first on XOAP.

New optimized GUI flows and features

Multiple areas of the configuration management will benefit from streamlined interface flows and enhanced feature accessibility. From reduced click paths to contextual actions and improved form logic, these updates are designed to make day-to-day tasks faster, more intuitive, and consistent across the XOAP platform.

New upload configuration flow

Support for uploading multiple configurations at once, aligned with all other upload flows inside the XOAP platform.

Redesigned Configuration wizard

The Configuration Wizard will be completely restructured to provide a more guided and user-friendly setup experience. With clearer step-by-step navigation, contextual help, and improved validation, configuring systems and policies is now faster, more reliable, and accessible even for less experienced users.

Simpler views

Improved Configuration flows

Reduced options, hiding advanced options that are not mandatory

Improved Group Policy Settings flow

Improved Configuration details

Planned

New nodes view options

Add the capability to move nodes between configuration groups easier, also as bulk action.

New Policy details view

We are adding more information to the policy details view.

New Configuration details view

We are adding more information to the configuration details view.

Backlog

• Implement better configuration compilation error and success messages
• Implement support with DSC v3 (will be based on XOAP Agent integration)

The post Configuration Management appeared first on XOAP.

Updated Application roles UI

The Application Roles interface will be redesigned to improve clarity and usability. Role definitions, assigned applications, and group associations are now easier to view and manage, helping administrators assign applications with greater precision and confidence.

Planned

Package Wizard

A guided Package Wizard will be introduced to simplify the creation and configuration of application packages. It walks users through key steps like metadata input, script assignment, detection rules, and deployment settings, ensuring consistency and reducing errors during package creation.

Support for PSADT v4

XOAP will offer full compatibility with PowerShell App Deployment Toolkit (PSADT) version 4. This includes support for updated command structures, extended logging, enhanced exit code handling, and modernized scripting capabilities, allowing teams to leverage the latest PSADT improvements in their deployment workflows.

Backlog

• Intune import support
• Implement Winget Support
• Integrate Chocolatey support
• Re-deploy an application when parameters are changed
• Integrate AppAttach conversion capability

The post Application Management appeared first on XOAP.

Enable Citrix Cloud support via SDK

We will integrate Citrix Cloud through its official SDK, enabling automated management of Citrix resources directly within the platform. This includes support for image deployment, delivery group interaction, and streamlined provisioning, expanding XOAP’s reach into hybrid and cloud-hosted virtual app and desktop environments.

Planned

Implement the Stacks area

A new Stacks section will be introduced to group and orchestrate related scripts into reusable deployment bundles. This allows teams to define complete environments as modular, version-controlled stacks, enabling faster, consistent rollouts across systems and workspaces.

Add Bicep support for Scripted Actions

Scripted Actions will support the execution of Bicep templates, enabling infrastructure as code (IaC) scenarios directly within XOAP. This allows teams to provision and manage Azure resources using native Bicep syntax, enhancing automation workflows and aligning with modern cloud deployment practices.

Run Scripted Actions on premises via XOAP Agent

Scripted Actions will support execution directly on on-premises infrastructure using XOAP Agent. This enables secure execution of automation tasks behind the firewall—ideal for environments without direct external access or requiring local execution control.

Add MS Graph module to container runtime

The Microsoft Graph PowerShell SDK will be pre-integrated into the XOAP container runtime for Scripted Actions. This allows scripts to natively interact with Microsoft 365, Entra ID, Intune, and other Microsoft services — without requiring manual module installation or external dependencies.

Add VMware CLI support for on premises deployments

XOAP will include native support for VMware CLI tools within the container runtime, enabling automation and scripted deployments directly to vSphere and ESXi environments. This enhancement streamlines on-premises provisioning tasks, such as VM creation, configuration, and image handling, through secure and scriptable workflows.

Add Nutanix nCLI support for on premises deployments

XOAP will support the Nutanix nCLI command-line interface within the container runtime, enabling scripted automation of tasks such as image registration, VM lifecycle management, and cluster operations in AHV environments. This integration empowers on-premises Nutanix deployments with greater flexibility and DevOps-driven control.

Backlog

• Integrate Parameter sets for Stacks

The post Platform Management appeared first on XOAP.

New Insights module

A powerful new Insights module will be introduced to provide centralized visibility into platform activity, configuration compliance, deployment metrics, and usage patterns. With interactive dashboards and historical trends, teams can make informed decisions and optimize operations across their XOAP environment.

Planned

Application Management

• Installed Applications per Version
• Failed Application installations
• Unassigned Applications
• Unassigned Groups
• Unassigned Roles

Hardware

• Manufacturers
• BIOS
• CPU
• Disk Space

Operating System (Windows)

• Windows Versions
• Windows Features
• Services
• Scheduled Tasks
• Devices
• Updates

Users

• Last User Logins
• Users with Devices and Ips

Configuration Management

• Average Configuration Execution Times
• Failed Resources per Configuration

XOAP Agent

• Agent Versions

The post Insights appeared first on XOAP.

XOAP Agent

This agent, deployed on Windows, macOS, and Linux systems, serves as a key component for managing and automating tasks in on-premises and secure cloud environments. The agents are equipped with the necessary capabilities to securely and efficiently communicate with the XOAP platform and perform assigned operations.

Key functionality

• Implement task execution via PowerShell (Windows) and Bash (Linux/macOS).
• Enable secure file transfers between the XOAP backend and agents.
• Provide centralized logging and reporting capabilities.
• Support OS imaging for both on-premises and cloud environments.
• Ensure secure, real-time communication with the XOAP backend.
• Automate agent updates via GitHub repositories.
• Integrate with Windows Event Log for system-level insights.
• Execute queries against
• Run image builds on-premises
• Run Scripted Actions on-premises

Implement a new central Inventory area

The Inventory Module in XOAP provides a centralized system for managing registered XOAP Agents. It offers a structured approach to organizing and monitoring nodes through Nodes and Collections, facilitating efficient automation, configuration management, and application deployment. The module integrates with XOAP components like Configuration Management and Application Management, enabling seamless configuration and software assignment.

Devices

This area shows all connected devices that have a XOAP Agent installed. This enables the XOAP platform to implement and trigger extended functionality against those devices.

Key functionality

• Run command (PowerShell Core, PowerShell, Bash/Shell, CMD)
• Run Script (PowerShell)
• Run query (SQL based)

Queries area

Define and save queries for usage with XOAP Agent. Queries can be edited in the same way we implemented in in our central Resources area, including versioning and versioning messages.

Install applications action

Assign both Application groups and Application roles directly to target devices.

Live logging

A new live logging feature provides real-time feedback for ongoing actions such as deployments, image builds, or script executions. This gives administrators immediate visibility into task progress, success/failure states, and detailed output — reducing the need for manual log retrieval and accelerating troubleshooting.

Planned

Collections

Collections will group multiple Devices to enable configuration of those. The same actions from the Devices area will be available here, as well as sub-collections.

Policies

Policies will enable different configuration settings for communication intervals, data gathering options and XOAP Agent settings.

Device details view

The updated device details view provides a comprehensive overview of each managed endpoint, including hardware information, assigned applications, applied configurations, logs, and recent activity. This centralized view will improve the  diagnostics, auditability, and day-to-day operational efficiency.

The post Inventory appeared first on XOAP.

Implement updated UI and flows of the portal

The XOAP portal has been redesigned with a refreshed interface and streamlined user flows. Navigation, layout, and component behavior have been optimized for clarity, responsiveness, and faster task execution, delivering a more modern and cohesive experience across all modules.

Backlog

• Extend authentication capabilities
  • Enable Passkeys
  • Enable Fido options and Yunikeys
  • Enable Entra ID integration
• Implement new role capabilities
• Enable the option to leave a Workspace as a user
• Remove invited users’ capabilities for Workspace owners and admins
• Assign Workspace ownership to other users
• Implement Workspace templates

The post my.xoap.io appeared first on XOAP.

Dashboard redesign

The main dashboard will be completely redesigned to provide a cleaner layout, smarter data grouping, and improved visual hierarchy. Key metrics, tasks, and alerts are now more accessible, enabling users to get a quick, actionable overview of their environment at a glance.

Notification area

A centralized notification area will be introduced to consolidate all system messages, alerts, and toasts. Users can track important updates such as task completions, errors, and changes in real time, with options to view detailed logs or suppress successful processes.

API Keys (Preview)

A new interface for managing API Keys has been introduced, allowing users to generate, view, and revoke tokens for secure third-party integration. Each key is scoped with specific permissions, giving fine-grained control over external access to the XOAP platform. API Keys will be made available with the preview of the new inventory area.

Planned

Getting started and use cases area

A dedicated onboarding and use case section will be added to help new and existing users explore the platform more effectively. It includes guided steps, real-world examples, and best practices for common tasks — accelerating adoption and maximizing value from XOAP features.

Backlog

• Implement central search
• Add import and export functionality of data inside a Workspace
• Implement highlighting of differences in the Monaco editor
• Provide a XOAP PowerShell module for API access and automation capability enhancements
• Implement Workspace switching
• Check the existing item in the input fields while typing
• Redefine deletion flows for the different central areas and modules
• Adjust module access to support new plans and additional RBAC

The post app.xoap.io appeared first on XOAP.