What we ship

Changelog

Product updates from the BugHarbor team. We ship often — here is what changed recently.

RSS feed Start your Starter trial
improvements security fixes

Stronger integrations & clearer marketing

Integration setup is more reliable, and registration edge cases no longer break database sessions.

Improvements

  • Reconnecting Slack, GitHub, Discord, Linear, and Jira integrations correctly re-activates them after they were turned off
  • Webhook URLs for Slack, Discord, Zapier, and Make are encrypted at rest; leave the field blank when editing to keep the existing URL

Security

  • Integration Form Requests enforce project update authorization and validation per provider
  • Webhook SSRF guards continue to block private and lookalike destinations on store and delivery

Fixes

  • Invalid early-access invitation tokens during signup no longer leave an open database transaction (which could cascade into failed requests)
improvements security

Safer landing scans & smoother signup

Public URL scans are hardened against abuse, and scan results now pre-fill your first project during onboarding.

Improvements

  • Scan results pre-fill project name, description, and website URL when you sign up after a landing-page scan
  • Landing scan copy now clearly explains it is a static HTML preview, not a full runtime audit
  • Register page shows a banner when you arrive with a pending scan

Security

  • SSRF protections block localhost, private IPs, and non-standard ports before any fetch runs
  • DNS resolution is validated so targets cannot redirect to internal networks
  • Redirects are disabled and response bodies are capped at 2 MB
  • Rate limits apply per IP — 10 scans per minute and 50 per day
improvements

Real widget install docs & framework guides

The landing page now shows the actual script-tag install flow and framework-specific setup guides.

Improvements

  • Install section uses real widget.js and error-tracker.js snippets with copy-to-clipboard
  • Framework cards added for WordPress, Laravel, Django, React, Vue, and plain HTML
  • AI stack section now shows real logos for Cursor, Bolt.new, and Lovable
  • Comparison section copy is aligned with what BugHarbor actually ships today
improvements

Clearer pricing — Starter & Pro plans

Pricing is simplified to Starter ($29) and Pro ($79), with honest plan gating for AI features.

Improvements

  • Public pricing page updated to Starter at $29/mo and Pro at $79/mo
  • Removed the Free tier from marketing — new users start with a Starter trial
  • AI analysis and full AI insights are now correctly gated by plan across the app
  • Paddle billing stays optional when PADDLE_API_KEY is not configured
fixes

Dark mode toggle fixed

Theme switching works reliably again with Tailwind v4 class-based dark mode.

Fixes

  • Dark mode toggle now applies the dark class correctly across the dashboard
  • Tailwind v4 @custom-variant dark configured for class-based theming
  • Theme preference persists in localStorage without a flash of wrong theme on load
improvements security

Security & trust foundation

New security documentation and footer trust links for teams evaluating BugHarbor.

Improvements

  • Public Security & Data Handling page documents embed scripts, storage, PII, and GDPR roles
  • Footer links to privacy, DPA, sub-processors, terms, and refund policies
  • Landing page trust section highlights security and data-handling transparency
  • Product sidebar filters for Inbox, Bugs, and Feature Requests are now clickable

Security

  • Security page documents the landing URL preview scan and its rate limits