Protect federal servers between disclosure and remediation.

BOD 26-04, issued 10 June 2026, has federal agencies remediate each vulnerability as quickly as possible and no later than the timelines in its Table 1. That Phase III duty applies within 180 days of issuance, by 7 December 2026. Mimic doesn't remediate anything. It stops unauthorized changes on the servers it protects at the point of execution while remediation runs.

Yes. BOD 26-04 says it supersedes and revokes BOD 19-02 and BOD 22-01, and CISA's directives list marks both revoked. Plans and pages that still cite BOD 22-01's deadlines are out of date, so check which timelines your program tracks. What Mimic does doesn't change with the directive: unauthorized changes on protected servers stop at the point of execution.

Mimic Networks runs alongside the EDR, vulnerability scanning and patch tooling an agency already runs. EDR asks whether activity matches an attack it recognizes; Mimic asks whether a change to a protected server was authorized, and stops unauthorized changes at the point of execution. Each blocked change lands in DashCam, and Mimic feeds enforcement events to your SIEM and SOAR platforms.

Mimic keeps supporting Windows Server 2016 after Microsoft's Extended Support ends on 12 January 2027. That matters for mission servers that can't migrate in time. When an exploit needs an unauthorized change on a protected server, Mimic stops it at the point of execution. The Windows Server 2016 guide covers the options server by server.