v1.18.0-Oct 2, 2026Major
Live white-label client audit pages and your own GPT-6 Astra voice
- Any audit can now be published as a live, secret web page instead of an attachment — open the lead card, choose Client audit, and use the new Live client page panel to publish and copy the link.
- The page is fully white-label: your logo, your colours, your contact details and your own booking button, with no Grow By Lead branding anywhere. It is built for phones and needs no sign-in.
- You can see how many times a prospect opened the page, so follow-ups land at the right moment, and one switch turns the link off without deleting the page.
- Live client pages are included on Starter and Pro.
- Pro accounts can now teach GPT-6 Astra their own voice: a 1,000-character brief in Settings covering your offer, your proof, your booking link and the words you never use, plus a tone choice.
- Emails written with a custom brief are stored privately to that workspace and are never added to the shared domain library, so one agency's offer can never appear in another's outreach.
v1.17.23-Sep 23, 2026Major
One lead per website, contact origins and sharper mailbox scoring
- Re-scanning a website you already have no longer creates a second entry — the existing lead is refreshed with the newest capture while its scan count, first-seen date, stage, notes, tags and category stay intact.
- Duplicates created by earlier versions were merged automatically, keeping the newest capture of each website.
- Every lead now records where each contact was found — landing page footer, contact page, structured data or a mailto link — so audit reports can cite the exact source.
- Grow By Lead now learns which page paths actually produce contacts, which drives smarter contact discovery on future scans.
- Contact scoring recalibrated: named decision-maker mailboxes rank above generic info@ inboxes, an address confirmed on two pages scores higher, and self-hosted mail is capped below "verified".
v1.17.22-Sep 12, 2026Fix
Accurate email visibility, social preview tags and HSTS detection
- Business emails printed in the footer, header, contact page or a mailto link are now correctly reported as publicly visible instead of "found in page code only", and no longer lose deliverability points.
- Open Graph and Twitter card checks were always reported as missing because of a type error in the checker — sites with complete social preview tags now pass.
- Security headers are read with a lightweight GET request instead of HEAD, so Strict-Transport-Security (HSTS) behind Cloudflare, Nginx, AWS and Squarespace is finally captured.
- Leads scanned before this release were re-scored from their stored evidence; HSTS on those older scans is shown as "not verified" rather than failing.
v1.17.20-Sep 2, 2026Fix
Full control over bulk scans: no surprise restarts
- A saved scan queue no longer restarts on its own after a shutdown, crash or browser restart — it waits for you to click Resume scan, so a finished batch can never begin again from the first website.
- New red Cancel scan button: it closes every controlled tab, discards the remaining queue and makes sure nothing resumes after a refresh. Stop scan is now clearly labelled Pause scan.
- Pasting the same URL list again skips the websites already scanned in that batch instead of scanning them twice.
- Each new scan tab is brought to the front immediately, so fast-loading websites and pages that only render while visible are no longer scanned in a hidden background tab.
v1.17.18-Aug 24, 2026Fix
Security evidence is captured again on every scan
- The extension's own network policy was blocking the response-header check on scanned websites, so almost every lead came back with an "N/A" security grade.
- Real headers — HTTPS enforcement, content security policy, clickjacking protection, referrer policy and server software — are now captured and graded again.
- Copying a lead now includes the Redesign opportunity, Speed & SEO opportunity, best angle and security grade.
v1.17.17-Aug 14, 2026Improvement
Redesign scoring now matches what you see on screen
- The scanner measures real page depth: number of genuine content sections, page height, images, word count, typography variety, navigation and footer presence.
- A thin, unfinished-looking site — three or fewer sections, under 250 words, no visuals, one screen tall, browser default fonts — now scores a High redesign opportunity even when its code is modern.
- Four sections score as partly thin; five or more count as a complete page. Captures without layout measurements are unaffected.
- Every added point comes with a plain-language reason on the lead card, such as "Only 3 real content sections — the site looks unfinished".
v1.17.14-Aug 5, 2026Fix
Accurate JavaScript framework detection in release builds
- Moved the JS/DOM technology probe into a dedicated main-world script so release-mode obfuscation no longer breaks inline function injection.
- React, Next.js, and other framework detections now return reliable results instead of empty arrays on protected sites.
- Added the cookies permission so Cloudflare/WAF interstitial markers can be observed before evidence is collected.
v1.17.13-Jul 27, 2026Improved
Internal stability release
- Intermediate build with internal scaffolding for the main-world analyzer pipeline.
v1.17.12-Jul 18, 2026Fix
Clearer licence activation errors
- Activation failures now explain what went wrong instead of showing a bare "denied" code.
- Mistyped or incomplete licence keys are reported as a key-format problem, with a prompt to copy the full key from the dashboard.
v1.17.11-Jul 9, 2026Major
Scan-only extension, CRM moves to the dashboard
- The in-extension CRM, Evidence Vault review UI, and all local export/backup tools were permanently removed — lead review and CSV/Excel/JSON exports now live only in the Grow By Lead dashboard.
- The extension is now purely the scan engine: single-site scan, bulk scan queue, licence gate, settings, and help.
- Settings simplified — backup, restore, and local-lead cleanup removed; "Clear saved contacts" is now "Clear local scan buffer".
- User Guide, About, and Setup pages rewritten for the scan-and-sync workflow, and the shipped bundle trimmed of ~370 unused style blocks and dead code.
v1.17.10-Jun 30, 2026Feature
Very large bulk scans now run reliably
- Bulk Scanner accepts pastes of up to 5,000 websites per batch, with an upfront warning instead of a silent failure above that.
- Fixed multi-thousand queues that never opened a tab — authorization is now requested lazily in blocks of 100 and topped up while the scan runs.
- Mid-run authorization failures pause the batch so it can be resumed instead of discarding the remaining queue.
- New 10-minute hygiene pass deletes the browser-side copy of a lead's evidence once the dashboard has confirmed it.
v1.16.35-Jun 21, 2026Improved
Library-wide analysis progress and steadier scanning
- A whole-library progress banner ("Analysed 142 of 200 scanned websites") with a Sync now action replaced paging through leads to check completion.
- Pending server verdicts are pulled every 20 seconds and stored verdicts are always treated as final, fixing leads stuck on "Intelligence syncing".
- Pasting 500+ links no longer freezes the Bulk Scanner input.
- Scanning now waits for Cloudflare/WAF interstitials to clear before collecting evidence.
v1.16.33-Jun 12, 2026Fix
Conditional leads retain complete website intelligence
- Separated outreach qualification from website analysis, so Conditional prospects now show their captured Website Improvement, SEO Health, and technical/UX fields.
- Healthy research-only pages retain factual website-opportunity and SEO findings; audit sections are withheld only for genuinely unusable or excluded captures.
v1.16.30-Jun 3, 2026Fix
Backend intelligence now renders correctly
- Evidence Vault now preserves the completed server-intelligence fields while normalising lead rows, so finished results no longer remain stuck on Intelligence syncing.
- Moved the Lead Vault configuration bootstrap into a CSP-compliant external script, removing the blocked inline-script error.
v1.16.29-May 26, 2026Fix
Immediate intelligence sync and accurate capture status
- Completed scans now send their evidence for final server intelligence immediately; the background alarm is only a recovery fallback.
- SEO evidence and lead records now use the same canonical hostname, removing false SEO snapshot missing warnings.
- Pending results show a truthful syncing state with a Refresh result action instead of being labelled as low-confidence captures.
- Existing www SEO records are migrated automatically to the canonical website record.
v1.16.27-May 18, 2026Fix
Pending intelligence no longer gets stuck
- Unified www and non-www website records so the server verdict always reaches the correct saved lead.
- Existing split browser records are merged automatically after updating the extension.
- Evidence Vault now clears stale caches and refreshes the open lead as soon as backend intelligence arrives.
- Refresh failures and still-processing results are now shown instead of failing silently.
v1.16.26-May 11, 2026Fix
Verdicts appear the moment you open a lead
- Opening a lead in the Evidence Vault now pulls its authoritative server verdict instantly instead of waiting for the next sync tick.
- Leads that still read "Pending backend intelligence" — while the server already had the final result — now show the real business type, verdict, and outreach angle.
v1.16.24-May 4, 2026Fix
Lead intelligence always shows up
- Fixed leads stuck on "Pending backend intelligence" — business type, verdict, opportunity score, outreach angles, and recommended services now fill in automatically.
- Leads scanned with older versions are repaired in the background on the next sync.
- A sync acknowledgement without a fresh result can no longer wipe intelligence already stored for a lead.
v1.16.22-Apr 27, 2026Security
Tamper-proof builds and faster syncing
- The extension package is now cryptographically signed, so a modified copy is detected and blocked automatically.
- Signature checks cover every page, stylesheet, and script in the package — not just the core logic files.
- Each activation carries a private, non-reversible watermark, so a leaked or altered build can be traced back to its source.
- Tampered builds are shut off immediately: the licence key and all active sessions are revoked on detection.
- Scan syncing puts far less load on our servers, keeping the dashboard responsive during large bulk scans.
v1.16.20-Apr 20, 2026Major
Server-authoritative lead intelligence
- Final lead score, business classification, verdict, opportunity score, and outreach angles are now generated on the Grow By Lead server.
- Scoring rules and service-mapping tables were removed from the extension package entirely.
- While a scan syncs, the extension shows a simple preview grade — Good, Average, or Weak — until the final server result arrives.
v1.16.15-Apr 13, 2026Major
Brand-aligned extension & export upgrades
- Extension interface fully aligned to the Grow By Lead brand green across every screen.
- Contacts can now be exported as CSV and Excel alongside JSON.
- Improved country detection using postal code, phone prefix, and currency signals.
- Prompt actions renamed for clarity — 'Copy Grow By Lead prompt' is now the primary action.
v1.16.14-Apr 6, 2026Improved
License handling & session security
- Plain-text license keys are no longer displayed anywhere inside the extension.
- Session-key hard binding added, so a linked device cannot be silently reused elsewhere.
- Cleaner license status panel with clearer linked-device information.
v1.16.13-Mar 30, 2026Major
Protected extension package & alignment release
- Published the current protected Grow By Lead extension package.
- Aligned the release manifest and integrity manifest at version v1.16.13.
- Included the latest scan reliability, dashboard accounting, contact discovery, and security hardening updates.
v1.15.1-Mar 20, 2026Improved
Performance, telemetry & modular rebuild
- Heavy analysis runtimes now load on demand instead of on every page — far lower memory and CPU use while browsing.
- New centralised error telemetry with PII redaction and rate limiting, so real failures surface instead of being swallowed.
- Storage guard warns at 80% capacity and auto-prunes the oldest cached scans at 95% — no more silent write failures.
- Non-prospect domain library can now be updated remotely via signed config, without waiting for a new build.
- Faster popup: parallel startup plus a cached last-known state for instant painting.
- Tighter security policy (API origins only), full ARIA labelling, and Bangla + Hindi interface languages.
- Package trimmed by ~2.2 MB via lossless icon optimisation; unused modules removed.
v1.14.17-Mar 10, 2026Fix
Popup polish & bulk-scan clarity
- Fixed duplicate 'Grow By Lead' text in the extension popup header.
- Moved version alert and admin notice banners to the bulk scanner page.
- Bulk progress bar now reflects only scannable items, with blocked count shown.
- Quota banner label unified to 'Buy Subscription' across all flows.
v1.14.14-Mar 2, 2026Major
Tamper detection & integrity guard
- Extension integrity hash verification — modified builds are auto-flagged.
- Silent admin alerts when a tampered client attempts to sync.
- Automatic ban pipeline for repeat offenders, with audit trail.
- Mandatory QA gate before every release build.
v1.14.9-Feb 20, 2026Feature
Upgrade CTAs & plan awareness
- Quota-blocked users now see a direct 'Upgrade to Pro' CTA inside the extension.
- Sidebar shows the active plan pill after successful checkout.
- Batch scan loop respects per-plan daily limits in real time.
v1.14.2-Feb 11, 2026Major
Stripe billing & plan enforcement
- Stripe checkout live: Starter $5, Pro $9/mo, Pro Yearly $39.
- Server-side daily-scan enforcement per plan (Free/Starter/Pro).
- Billing dashboard with invoices, MRR, and plan management.
v1.14.0-Feb 3, 2026Feature
Analytics, notifications & PWA
- Interactive Recharts dashboards with date-range filtering.
- Web Push notifications for admins and users, WhatsApp-style delivery.
- Full PWA install with offline shell and home-screen shortcut.
v1.13.20-Jan 26, 2026Feature
Passwordless OTP + Google sign-in
- 6-digit email OTP login flow with rate limiting.
- Google social auth enabled by default.
- Kill-switch and per-user daily scan caps in Admin Settings.
v1.5.0-Jan 16, 2026Major
Strict qualification signals
- Strict gating: contact-surface + tech-stack + domain-age all required to pass.
- SEO signals now weight page-title + meta-description independently.
- Accessibility score contributes to disqualification, not scoring.
- New evidence card: last content update.
v1.4.0-Jan 7, 2026Feature
License keys & device binding
- Every user gets a personal License key.
- One-device-at-a-time binding for the Chrome extension.
- Daily scan limits enforced per plan.
