# Changelog

## 0.2.0 (2026-09-16)

- Named users with viewer, operator and admin roles, and an audit trail of every action.
- First-run setup in the browser; macOS .pkg installer; Windows executable installs itself on double-click.
- Fleet: enrol devices on a hub and see every machine from one dashboard.
- Outbound connection monitoring by process: reverse shells, programs in temp folders, calls to blocked or attacking addresses, fan-out, odd ports, first-time programs.
- Daily known-vulnerability scan of installed packages against OSV.dev, with alerts for new high-severity advisories and an Update packages fix.
- Light and dark themes (system default, switchable).
- Fix exposure findings from the dashboard (SSH hardening, firewall, Gatekeeper, auto-login, Screen Sharing, Defender, RDP, UAC, blocking, inbound logging).
- Device protection: port-scan detection from the host firewall log (on by default), new account, administrator and startup-item detection, endpoint protection checks (FileVault, BitLocker, Gatekeeper, SIP, Defender, UAC, auto-login, remote access).

## 0.1.0 (2026-09-15)

First release.

First release.
- Real-time detection from SSH, sudo, Windows Security and OpenSSH event logs, Apache/nginx and IIS access logs, decoy ports and custom rules.
- Per-attacker campaigns, live dashboard, web push, webhooks, email.
- Automatic blocking on Linux (ipset/iptables), macOS (pf) and Windows (Windows Firewall), with escalating durations and a never-block list.
- Installers for systemd, launchd and Windows Task Scheduler.
- Self-contained executables for Linux, macOS and Windows (x64 and arm64), no Node.js install needed.
- Canary account names and URLs: critical alert and immediate block on first use.
- Tarpit decoy ports that hold scanners and count the attacker time wasted.
- Peer block sharing between your own hosts through a token-protected feed.
- Hourly exposure self-check of the host (SSH password auth, root login, firewall, open ports, alert channels) with fixes.
- Daily digest on every configured channel.
- Settings screen with validation and live apply.