Revoked keys and tokens now have their own tab
Revoked API keys and MCP tokens move out of your list into a Revoked tab, where you can delete them for good. Your current credentials stay up front.
Product updates in plain words, newest first. Each one is the note every workspace got in the app.
36 releases since June 2026
Revoked API keys and MCP tokens move out of your list into a Revoked tab, where you can delete them for good. Your current credentials stay up front.
Rotate a webhook's signing secret and the old one keeps signing for 24 hours, so your receiver switches over without dropping an event. You can also edit, test, pause and rotate webhooks over the API.
Email security at a company you write to (like INKY or Check Point) can change your message so it fails their check. The Senders page now names those companies, with a note for their IT, and leaves that mail out of your pass rate.
When a service like Mailchimp starts sending as one of your enforced domains and fails DMARC, you now get a finding that names it and shows how to set up its DKIM. Your digest also counts new sources that were blocked.
Alerts > Settings in your MSP console lets you pick critical only or warnings too, mute or tune single clients, add up to five extra addresses like a ticketing inbox, and get one hourly roll-up instead. Owners can also now delete an archived client.
If your record already sends reports to us, step 3 of setup says it is set up correctly and when your first reports should arrive, instead of asking you to add the address again.
Subscribe to status updates, confirm your email, and get notified about incidents and resolutions. Unsubscribe whenever you want.
Since September every page has been rebuilt. The dashboard opens with four summary cards and the one thing to fix first, Actions lists every finding with one-click fixes, Domains is one table you can sort, reorder and resize, and each domain opens on a plain verdict.
Since September the app and the emails we send have a new look. Your digest and the monthly executive report now carry a one-click unsubscribe, and the Executive report settings show who unsubscribed and when, so nobody is added back by mistake.
Since September we have checked the app's counts against your raw reports. Every page now means the same thing by the last 30 days, reports from a sender we can't verify wait for your call instead of moving your numbers, and other companies' mail on shared Google or Microsoft servers no longer counts as yours.
Free for one domain, no card. Every update on this page is already in the app.