Updates

Notes on what we changed. Only the things you would actually notice, so this is not a commit log.

November 2026
Passkey module, second generation
  • The passkey prompt now appears in the username field instead of after it. People stopped missing it.
  • Signing in from a second device no longer drops into a separate fallback flow.
  • Recovery codes are hashed and shown once. If you close the tab, you generate new ones.
  • The audit log records which authenticator was used, not just that login succeeded.
October 2026
Infrastructure baseline v3
  • New deployments use immutable images. Security updates land without anyone logging in.
  • SSH is no longer exposed per host. New builds go through a WireGuard mesh.
  • Secret rotation is a cron job now. It used to be a page in the handover docs that nobody read.
  • Split the Terraform modules so customers can take the networking without the rest.
September 2026
Reviews got a fixed shape
  • One week, fixed fee, written report. No more open-ended engagements.
  • Findings are ranked by what an attacker gets out of them, not by what the scanner says.
  • The re-check after you fix things is included.
August 2026
Status page and disclosure policy
  • Status page went up, covering everything we run.
  • Wrote down the disclosure policy, including the 24 hour reply we hold ourselves to.
  • Incidents stay listed for 90 days.