← Back to The Wire№ 3 · Sep 7, 2026
Shipped.
3 shipped this week

The posture we said was coming in Issue № 2 is live. Two smaller settings-page improvements ride along. Issue № 3 — what changed, why it matters, no roadmap theater.

Lead item

TrustZero's third posture: Learn, Then Enforce

The bridge between "we don't know our own app footprint yet" and "deny everything not explicitly allowed" is live. Switch to Learn, Then Enforceand every app can reach the network for a fixed 7-day window while its traffic gets recorded into your catalog — apps you've already blocked stay blocked the whole time. Once the window closes, TrustZero switches itself to Catalog Only, automatically, using exactly what it saw. No manual review step, no rules to hand-write first.

Turn on Learn, Then Enforce →

Quick hits

  • NEWπ Config now explains itself — a hovercard on the page title covers what π actually does before you touch a single setting below it.
  • NEWSame treatment on TrustZero's settings page — the three postures and the independent "deny all ingress" toggle, explained up front instead of read cold off three radio cards.

Next up

→

As orgs run TrustZero-managed policies alongside hand-written ones, the Policies list needs a way to stay readable once auto-managed rows start outnumbering the rest — the "Show TrustZero-managed" toggle from Issue № 2 was the first step, not the last one.

"Learn, Then Enforce" sounds like it needs a scheduler behind it, watching the clock and flipping a switch the instant a window closes. It doesn't — the expiry gets checked whenever anyone next opens the settings page. Simpler than it sounds, and it still does the job.— the Threatmatic team

You're getting this because you're a Threatmatic customer or asked to follow along.
Threatmatic, Inc.