Changelog

Heatmaps are rebuilt from the ground up: clicks are mapped against the real document, full page rather than just above the fold, and grouped by device class. Capture a screenshot of any page and see exactly where visitors clicked, overlaid on the real thing.

A read-only assistant that answers questions about your site — how protected you are, what was blocked and why, any unusual traffic — using your real metrics. Reach it from its own page or the floating copilot button on any page. It explains and points you to the right place; it never changes anything on its own.

The Security Assistant analyzes your last 30 days — blocks, anomalies, threat exposure — and recommends which vetted protection templates to turn on. It never invents rules: applied suggestions install a known-good template in dry-run mode so you can review the impact before enforcing.

Opt in and each week you get a concise, natural-language rundown of your traffic, blocks, anomalies, and protection score — like having a security analyst email you a briefing every Monday morning. Every AI feature runs under a per-tenant cost guardrail.

Choose which events reach you and on which channel, with quiet hours in your own timezone. Behind the scenes, an operations activity center surfaces new signups, new sites, quota breaches, feed failures, and webhook problems to the team running the platform.

A managed blocklist of known-bad IP ranges refreshes on a schedule and raises the risk score of matching visitors. A managed rule template lets you act on it with one toggle, and a retroactive sweep re-checks recent sessions against newly listed ranges so you learn when a threat visited before it was known.

Our built-in CAPTCHA is a hashcash-style proof of work: suspicious visitors solve a small computational puzzle before they get through, and the difficulty scales with their risk score. It needs no external service, and you can embed the same widget on your own forms. Cloudflare Turnstile and hCaptcha remain available if you prefer them.

Monthly and yearly plans with self-serve checkout and usage metering. Upgrade prompts are driven by real signals — quota trajectory, gated-feature clicks, seat limits — so you only hear about a bigger plan when it would actually help.