Skip to main content

Changelog

What's new in PhishFence, written for customers. For the full git history see our repository.

May 2026

  • 2026-05-25
    security Hardening sweep across multi-tenant API + Stripe webhooks

    API endpoints (/api/v1/domains, /alerts) now respect team membership so a member's token sees shared data. Stripe webhooks use a dedicated dedup table that atomically claims event IDs. Admin audit-log CSV export hardened against formula injection. MTA-STS lookups go through the SSRF-safe HTTP client.

  • 2026-05-24
    feature Bulk domain add/remove from the dashboard

    New drawer lets you paste a newline-separated list of domains to monitor — or select multiple rows and remove them in one shot.

  • 2026-05-23
    feature User-facing audit log

    Every account action — logins, domain adds, scan triggers, status changes — is now visible to the account owner under Settings → Audit Log.

  • 2026-05-22
    feature DNS auto-publish for Cloudflare (DMARC MVP)

    Connect a Cloudflare API token, pick a domain, and PhishFence will publish the recommended DMARC record straight to your zone — encrypted at rest, MultiFernet for key rotation.

  • 2026-05-21
    improvement DMARC + SPF validation, checkdmarc-inspired

    Per-record diagnostics expanded to cover alignment quirks, lookup-count overruns, and `ptr` mechanism use. The Email Security advisor now grounds its recommendations in the new diagnostics.

  • 2026-05-20
    improvement SEO sweep: Open Graph cards, JSON-LD, internal-link audit

    Every public page now ships an OG card, JSON-LD structured data, and is covered by an internal-link auditor that runs in CI.

  • 2026-05-19
    feature Tracked-pages feature on the homepage

    The landing now demonstrates the product in motion — paste a domain, see the live page-tracking flow as a worked example.

  • 2026-05-18
    improvement Email Security woven into onboarding

    New users see Email Security as a first-class second half of the product from step 1 of onboarding, not as a bolt-on later.

April 2026

  • 2026-04-15
    improvement Trial expiry reminders

    Users on the free plan get a clean reminder cadence ahead of trial expiry rather than a sudden cut-off.

  • 2026-04-05
    ops Operators can mark announcements as resolved

    An operator UI in /admin lets staff post and resolve service announcements; resolved announcements stop showing on the public banner.

Subscribed to product updates? You can opt in/out in Settings → Notifications.