🚀 New features

⚙️ Settings

• 🔗 External security system integration (DLP, Proxy, SIEM)

  Whalemate can now receive risk events from external tools such as DLP systems, corporate proxies, and SIEMs. Each event automatically updates the collaborator's risk score and is logged in their history with the source identified. Access tokens are generated from Settings → API Keys → Active Keys. 📄 View documentation

📊 Insights

• 📤 Export your dashboard as PDF, PNG, or JPEG

  Insights overviews (General, Simulations, and Academy) now include an export button. You can download the current state of your dashboard — with active filters applied — in three formats: PDF, PNG, or JPEG. The exported file reflects exactly what you see on screen and is automatically named with the overview name and date.

✨ Improvements

📊 Insights

• 🕐 UTC timestamps in log exports

  When exporting campaign logs, timestamps now appear in a single column in explicit UTC format (2026-06-04T12:00:00Z), replacing the previous separate date and time columns. This makes it easier to integrate data with external tools like SIEMs or automated reports, and ensures there's no timezone ambiguity in the exported files.

• 🎓 Assignment traceability in the Course Audit Log

  In Insights → Academy, the course and learning path Audit Log now displays the campaign that triggered each assignment directly next to the collaborator's name. This information is also visible from the enrollment history. This makes it easy to trace the origin of every assigned training without leaving the current view.

🚀 Campaigns

• 📱 New smishing templates in Spanish, Portuguese, and English

  When creating an SMS campaign, ready-to-use templates are now available in three languages: Spanish, Brazilian Portuguese, and English. Each template includes customizable placeholders and can be previewed before sending.

• 📥 Download campaign events as Excel

  You can now export campaign events per user in Excel format (.xlsx). Access the data you need and analyze it with greater flexibility in your preferred tool.

⚙️ Settings

• 🔐 Session timeout control per company

  Administrators can now set the maximum active session duration directly from Settings → Security. Available options include 30 min, 1 h, 8 h, 24 h, and 7 days — the selected value is saved and persists across page reloads. This setting applies at the company level, making it easier to align the platform with each organization's security policies.

🎓 Awareness — Academy

• 📥 Download enrollments as Excel

  Course and Learning Path enrollment tables can now be exported in Excel format (.xlsx). Filter by completion status and download the report in one click.

🐛 Bug Fixes

🚀 Campaigns

• 📱 Error when launching SMS campaigns with "Send now" at night

  Fixed an issue that prevented creating or updating SMS campaigns using the "Send now" option during late-night hours. The launch date validation now correctly accounts for the timezone configured in the campaign, instead of always comparing against UTC.

⚙️ Settings

• 🧠 Handling of invalid prompts in Smart Groups

  Fixed an issue that allowed certain prompts with contradictory or impossible conditions to generate malformed queries in Smart Groups. The system now detects these cases and returns a clear error message instead of silently processing the request.

📊 Insights

• 📈 Test campaigns excluded from Benchmark Click Rate calculation

  Fixed an issue where test campaigns were being included in the Benchmark module's Click Rate calculation, leading to inaccurate rates. Only real campaigns are now factored into that metric. Individual campaign views and reports are not affected by this change.