SocialScalr changelog

v2.0 2026-05-26 Major

Founding 500 cohort + Studio + unified data layer

Founding 500 cohort launched. Hand-picked early-adopter program at /founding-500 with permanent public listing, Founder Slack, roadmap voting, custom welcome video, monthly Founder Spotlight, co-marketing slots, and a milestone-gated founders dinner one year after the cohort fills. Token-tagged signup link auto-activates perks.
Email channel - full deliverability stack. Domain warmup engine ramping 30/day Week 1 to 500/day Week 4, validation waterfall blocking risk_score >= 60, A/B/C banner rotation with attribution down to which variant won. Per-job tagged reply-to addresses so every inbound maps to the exact send.
Inbound reply capture. Resend Inbound on reply.socialscalr.com. Replies attributed to job + banner variant, classified by sentiment (positive / neutral / negative / unsubscribe / auto-reply), forwarded to your inbox with a triage preface. Auto-unsubscribe on reply-unsubscribe keywords.
Banner A/B/C performance panel in admin. Per-variant sent / opens / clicks / CTR / bounces over last 14 days, winner highlighted at 50+ sends.
Studio expanded: AI carousel maker, banner creator, profile photo creator, post-hook generator, headline rewriter, scheduled posting, content calendar.
30 cold-outreach templates reframed to billboard-style intros + icebreakers under 30 words each, demo link in every P.S.

v1.9 2026-05-25 Feature

Cloudflare Turnstile on /login + /signup. HIBP password breach check + 12-char minimum at signup.
TOTP 2FA available across all accounts; mandatory on is_admin=true (gated by ADMIN_MFA_REQUIRED).
Server-side plan gating on every paid API endpoint. CSP enforcing (Lock 5). All 20 client-side Supabase tables migrated behind apiDb proxy (Lock 3).
Trial abuse defenses. Affiliate fraud detection blocking stolen-card commission farming.
GDPR/CCPA data export + delete endpoints. Customer-facing audit log + CSV export.
Honeypot intrusion detection wired with email alerts. Cross-tenant smoke test cron.
k6 load tests at 10x peak + spike + soak. WCAG accessibility scanner in CI. Heap-leak drill via Chrome DevTools Protocol. W1-W7 red team drill checklist.

v1.8 2026-05-24 Feature

Built-in CRM with sortable, filterable contacts. ICP scoring + top-N prioritization.
Apollo + Hunter enrichment integration with field-selectable picker (choose what to enrich).
HubSpot Connect button in Settings - one-click export of contacts to a HubSpot list.
Per-lead Find Email + Send Email buttons in Pipeline and Contacts.
CSV import wizard with column mapping. Bulk select + bulk enrich + bulk CSV export.
Resume builder + ATS checker. Score any resume against any job description.

v1.7 2026-05-24 Feature

New Refer & earn tab: every account gets a unique referral link. Earn 20% of every first-period charge from referred customers.
Public REST API at /api/v1 covering campaigns, leads, posts. Auth with your existing token. Docs.
Outbound webhooks now sign every payload with HMAC-SHA256 in X-SocialScalr-Signature. Wildcard * event subscription supported.
Webhook delivery history visible per row.

v1.6 2026-05-23 Feature

Public status page with live API/cron/DB/payments health and 24h error counts.
Annual billing at every tier - 2 months free. Toggle monthly/annual in Settings.
Brand-new help center with 8 walkthroughs.

v1.5 2026-05-23 Feature

Lifecycle drip emails (welcome, day 3, day 7, day 14) auto-fire from the cron, gated by the suppression list.
Onboarding checklist on the home page tracks the 5 setup steps every new account needs.
Client errors auto-capture into a server-side log viewable from /admin3.

v1.4 2026-05-23 Feature

Cloudflare Cron Worker runs every 10 minutes - recovers stuck posts, fails 24h+ overdue posts, drains the drip queue.
Insights tab now tracks post + comment activity end-to-end (was silently dropping before).
Real team accounts for Pro (3 seats) and Agency (10 seats) with invite emails + accept tokens.

v1.3 2026-05-23 Major

Square Subscriptions recurring billing. First period charges immediately; auto-renews until cancelled.
Self-cancel from /app -> Settings - keeps full access through the paid period.
Admin /admin3 gets impersonate, refund-last-payment, CSV export, user/discount management.

v1.2 2026-05-22 Feature

/forgot + /reset pages for self-service password reset.
Email confirmation required on signup (Supabase Auth).
Resend webhook captures bounces & complaints into the suppression list automatically.

v1.1 2026-05-22 Feature

Track competitor companies and target profiles. Get notified on new posts, hiring signals, and profile changes.
One-click "connect" or "comment" from any Watchtower row.

v1.0 2026-05-21 Major