Founding 500 cohort + Studio + unified data layer
- Founding 500 cohort launched. Hand-picked early-adopter program at /founding-500 with permanent public listing, Founder Slack, roadmap voting, custom welcome video, monthly Founder Spotlight, co-marketing slots, and a milestone-gated founders dinner one year after the cohort fills. Token-tagged signup link auto-activates perks.
- Email channel - full deliverability stack. Domain warmup engine ramping 30/day Week 1 to 500/day Week 4, validation waterfall blocking risk_score >= 60, A/B/C banner rotation with attribution down to which variant won. Per-job tagged reply-to addresses so every inbound maps to the exact send.
- Inbound reply capture. Resend Inbound on reply.socialscalr.com. Replies attributed to job + banner variant, classified by sentiment (positive / neutral / negative / unsubscribe / auto-reply), forwarded to your inbox with a triage preface. Auto-unsubscribe on reply-unsubscribe keywords.
- Banner A/B/C performance panel in admin. Per-variant sent / opens / clicks / CTR / bounces over last 14 days, winner highlighted at 50+ sends.
- Studio expanded: AI carousel maker, banner creator, profile photo creator, post-hook generator, headline rewriter, scheduled posting, content calendar.
- 30 cold-outreach templates reframed to billboard-style intros + icebreakers under 30 words each, demo link in every P.S.
Enterprise security pack + compliance
- Cloudflare Turnstile on /login + /signup. HIBP password breach check + 12-char minimum at signup.
- TOTP 2FA available across all accounts; mandatory on is_admin=true (gated by
ADMIN_MFA_REQUIRED). - Server-side plan gating on every paid API endpoint. CSP enforcing (Lock 5). All 20 client-side Supabase tables migrated behind apiDb proxy (Lock 3).
- Trial abuse defenses. Affiliate fraud detection blocking stolen-card commission farming.
- GDPR/CCPA data export + delete endpoints. Customer-facing audit log + CSV export.
- Honeypot intrusion detection wired with email alerts. Cross-tenant smoke test cron.
- k6 load tests at 10x peak + spike + soak. WCAG accessibility scanner in CI. Heap-leak drill via Chrome DevTools Protocol. W1-W7 red team drill checklist.
Built-in CRM + enrichment + HubSpot
- Built-in CRM with sortable, filterable contacts. ICP scoring + top-N prioritization.
- Apollo + Hunter enrichment integration with field-selectable picker (choose what to enrich).
- HubSpot Connect button in Settings - one-click export of contacts to a HubSpot list.
- Per-lead Find Email + Send Email buttons in Pipeline and Contacts.
- CSV import wizard with column mapping. Bulk select + bulk enrich + bulk CSV export.
- Resume builder + ATS checker. Score any resume against any job description.
Refer & earn + public REST API
- New Refer & earn tab: every account gets a unique referral link. Earn 20% of every first-period charge from referred customers.
- Public REST API at
/api/v1covering campaigns, leads, posts. Auth with your existing token. Docs. - Outbound webhooks now sign every payload with HMAC-SHA256 in
X-SocialScalr-Signature. Wildcard*event subscription supported. - Webhook delivery history visible per row.
Status page, annual plans, full help center
- Public status page with live API/cron/DB/payments health and 24h error counts.
- Annual billing at every tier - 2 months free. Toggle monthly/annual in Settings.
- Brand-new help center with 8 walkthroughs.
Lifecycle drips + onboarding checklist + error tracking
- Lifecycle drip emails (welcome, day 3, day 7, day 14) auto-fire from the cron, gated by the suppression list.
- Onboarding checklist on the home page tracks the 5 setup steps every new account needs.
- Client errors auto-capture into a server-side log viewable from /admin3.
Cron worker, realtime Insights, team accounts
- Cloudflare Cron Worker runs every 10 minutes - recovers stuck posts, fails 24h+ overdue posts, drains the drip queue.
- Insights tab now tracks post + comment activity end-to-end (was silently dropping before).
- Real team accounts for Pro (3 seats) and Agency (10 seats) with invite emails + accept tokens.
Recurring billing + self-cancel + admin tools
- Square Subscriptions recurring billing. First period charges immediately; auto-renews until cancelled.
- Self-cancel from
/app -> Settings- keeps full access through the paid period. - Admin
/admin3gets impersonate, refund-last-payment, CSV export, user/discount management.
Password reset, email confirm, Resend webhooks
- /forgot + /reset pages for self-service password reset.
- Email confirmation required on signup (Supabase Auth).
- Resend webhook captures bounces & complaints into the suppression list automatically.
Watchtower competitive intel
- Track competitor companies and target profiles. Get notified on new posts, hiring signals, and profile changes.
- One-click "connect" or "comment" from any Watchtower row.
Public launch
- Connection requests + sequenced follow-ups + first comment on posts.
- LinkedIn-search and profile-URL targeting with merge fields.
- Calendar view + Studio image tools + content scheduling.
- Free + Starter ($29) + Pro ($49) + Agency ($149) plans.