What’s new

Added

• Saved-search folders and tags. Organise saved searches into colour- coded folders with tags, notes and last-run timestamps. The new sidebar on /app/saved lets you filter by folder or any tag.
• Blog & changelog. A dedicated /blog and /changelog with RSS feeds.
• Abuse-signal pipeline (internal). New detectors flag rapid search bursts, high failure rates, brute-forced API tokens and consecutive failed payments. Surfaces in the new admin dashboard.

Improved

• Per-tool structured data. Every /docs/tools/* page now emits SoftwareApplication JSON-LD so search engines can index features and pricing.
• Sitemap. Now includes blog posts and changelog entries.

Added

• Personal API tokens. Generate, name and revoke API tokens from /app/settings/api. All tokens are hashed at rest and scoped to your account; Bearer auth is now accepted on every API endpoint.
• VAT in checkout. Buyers in the EU can now enter a VAT number; valid B2B numbers (validated against VIES) trigger reverse-charge. Invoices show net, VAT rate, VAT amount and gross.
• EUR / USD pricing. Pick your billing currency on the checkout page. Saved per-workspace.

Improved

• Test suite. Switched to vitest with MSW for API mocks. 140+ unit and integration tests now run on every PR.
• CI. Lint, typecheck, test and build run on GitHub Actions. Pre-commit hooks via husky + lint-staged.
• Observability. Sentry wired into the Next.js app and edge runtime. All console.error calls replaced with structured pino logs.

Security

• Auto-refund on upstream 5xx. When the upstream OathNet API returns a server error, your credits are automatically refunded — you only pay for results we actually delivered.
• Strict CSP. Inline scripts now require a nonce, and we ship a default-deny CSP for everything else.
• Request IDs. Every request gets an X-Request-ID header and is traced through to the upstream for support investigation.

Added

• Crypto checkout via NOWPayments. BTC, ETH, USDT, LTC, USDC and every other chain NOWPayments supports. No KYC, no chargebacks, no card-network fees passed onto you.
• Rate limiting. Upstash-backed sliding window with a graceful in-memory dev fallback. Per-user, not per-IP, so big shared offices don't share quotas.
• Brand refresh. SquareBreach, the new name and look. Same team, same tools.