2026 Changelog

1.0.0-beta.2 (in progress)

May 2024 – April 2026

MONO-REPO

Since 1.0.0-beta.1 the project has transitioned to a mono-repo. The Web UI, documentation site, and developer tools now live in the main secutils repository. The changelog below is organized by feature area instead of per-component.

⚠ Breaking Changes

• platform: consolidate Web UI, documentation, and developer tooling into the main repository (secutils@4b5e054, secutils@ad1431b)
• web-scraping: migrate content and resource trackers to the Retrack scheduling service, unifying both tracker types under a single "page trackers" umbrella (secutils@9ed3c26)
• platform: remove support for favourite utils (secutils@d038a09)

Web Scraping & Trackers

Features

• web-scraping: implement API trackers - track changes in arbitrary HTTP API responses alongside page trackers (secutils@2c1f687)
• web-scraping: add debug functionality to page trackers with live execution output (secutils@ed867f5)
• web-scraping: capture page screenshots in debug mode (secutils@c7083c9)
• web-scraping: support "Camoufox" browser engine for page trackers to improve stealth scraping (secutils@c88c540)
• web-scraping: add support for tracker execution log (secutils@3b5a80e)
• web-scraping: introduce support for scheduled_at and last_ran_at tracker fields (secutils@61febb8)
• web-scraping: add support for importing Playwright scenarios as page tracker extractor scripts (secutils@1947376)
• web-scraping: allow users to configure page trackers to bypass HTTPS errors (secutils@98a9134)
• web-scraping: allow users to define custom cron schedules for tracker jobs (secutils@acbd82a)
• web-scraping: make tracker schedule picker more flexible (secutils@563d1e0)
• web-scraping: switch to Monaco-based diff viewer for tracker revisions (secutils@3cb086a)
• web-scraping: add diffs to tracker notification emails (secutils@58688f3)
• web-scraping: support new Chart mode for numeric tracker revision values (secutils@0c7d5a5)
• web-scraping: support full screen mode for Chart tracker revision view (secutils@faf8f56)

Fixes

• web-scraping: keep non-scheduled trackers at the bottom when sorting by next/last run (secutils@dcdc040)
• web-scraping: properly handle non-string engine type (secutils@d2e3288)

Webhooks

Features

• webhooks: add support for MITM responders - intercept, inspect, and modify requests forwarded to an upstream server (secutils@7f25620)
• webhooks: add support for response tracking in MITM mode (secutils@a518340)
• webhooks: add support for insecure proxy requests and custom proxy request timeouts (secutils@a157c79)
• webhooks: auto-decompress proxy response body and simplify body handling in scripts (secutils@ba7ab83)
• webhooks: switch from custom responder subdomains to subdomain prefix (secutils@d5522cf)
• webhooks: improve responders list layout, display last requested timestamp (secutils@a52821c)

Fixes

• webhooks: enforce HTTP/1.1 in op_proxy_request (secutils@c7dcd4c)
• webhooks: return proper error message when saving responder with non-unique path and method (secutils@fc038eb)

Digital Certificates

Features

• certificates: add support for importing certificate templates (secutils@969eef4)

Fixes

• certificates: improve private key handling error messages (secutils@8b69f91)
• certificates: properly parse Distinguished Name fields with commas (secutils@7d79d37)

Platform

Features

• platform: add support for user tags - label and filter items across all utilities (secutils@c56d3a7)
• platform: introduce support for user scripts - reusable JavaScript/TypeScript snippets (secutils@3427ec8)
• platform: introduce support for user secrets - securely store and reference sensitive values in scripts (secutils@9d9bc39)
• platform: add support for data export and data import (secutils@a879a84)
• platform: include user settings in data export/import (secutils@a1afefc)
• platform: add updated_at field for all user data types (secutils@beb8ebe)
• platform: store global scope value as a user setting (secutils@8f0b9f4)
• platform: use dedicated "empty state" for the case when no items are visible due to filters (secutils@2e3b608)
• platform: add support for user API keys (secutils@64a261b)
• platform: make top-level sidebar groups collapsible (secutils@0df267e)

Fixes

• platform: properly handle import conflicts in responders (secutils@8adaf82)
• platform: properly handle large import sizes (secutils@4438a40)
• platform: fix import for responders without history (secutils@53de317)
• platform: fix a typo in the activation email template (secutils@8b98cf5)
• platform: disable bulk conflict resolution actions if there are no conflicts selected (secutils@8c88a5b)
• platform: properly strip responder sub-domain prefixes during import when necessary (secutils@1afd567)
• platform: consistently handle expired session (secutils@50b8ea1)

UI Improvements

Features

• ui: make sidebar collapsible with persistent state (secutils@3fc90ad, secutils@23ddbf8)
• ui: add support for search filters in grids (secutils@755d609)
• ui: introduce "duplicate" action for all utilities (secutils@035df34)
• ui: add full screen support for the script editor (secutils@f8fac34)
• ui: add support for auto-refresh functionality in responder requests grid (secutils@99889bf)
• ui: ask user for confirmation before discarding unsaved changes (secutils@4ac60e3)
• ui: add context menu item to copy entity ID (secutils@788ccf0)
• ui: add support for example scripts in the script editor (secutils@960b524)
• ui: make home/welcome page more useful with recent items and summary (secutils@5a01c23, secutils@593ddec)
• ui: add support for default "system" color mode (secutils@b3398db)
• ui: support Cmd/Ctrl-K to open workspace search (secutils@fdeff0c)
• ui: add sidebar icons for utilities and flatten CSP utility group (secutils@4775932)
• ui: move tags, secrets and scripts management from settings to workspace (secutils@97ed43d)

Fixes

• ui: update all util tables to default sort by "Last updated" descending (secutils@c2e7897)
• ui: fix side-bar navigation and improve hooks handling (secutils@5e004fc)
• ui: improve handling of the tags column width (secutils@0e5c06a)
• ui: increase spacing between icons in responder and tracker grids (secutils@0217c33)

Performance

• ui: lazy load editor flyouts to reduce initial bundle size (secutils@6e5f2f9)
• ui: load Scripts tab lazily to reduce main bundle size (secutils@10d0d07)
• ui: replace axios with native fetch (secutils@457efc0)

HTML Apps

• html-app: create JWT Debugger HTML app (secutils@893e871)
• html-app: create SAML Decoder HTML app (secutils@8b609a8)
• html-app: create SAML Mock IDP HTML app (secutils@af75f92)
• html-app: create Markdown-to-HTML converter HTML app (secutils@c2cac23)

API & OpenAPI

Features

• api: comprehensive OpenAPI spec coverage - all HTTP routes now documented with utoipa (secutils@697bb57, secutils@803f752, secutils@6f91db6, secutils@3c1b19a, secutils@fe7f6dc, secutils@afb76ad, secutils@00cd555)
• api: add authentication requirements to OpenAPI spec (secutils@d1e6fcd)
• api: include a link with the tracker ID in tracker notification emails (secutils@43ec3e7)

Fixes

• api: throw 403 Forbidden when operator credentials are invalid (secutils@f2f8913)
• security: reorganize Ory error handling (secutils@ec88825)

Documentation

• docs: allow importing samples directly from documentation (secutils@748c60f)
• docs: migrate towards fully automated docs screenshot generation (secutils@20fe1b8)
• docs: add ARCHITECTURE.md (secutils@b4ec50f)
• docs: rename /llms.txt to /llms-index.txt and /llms-full.txt to /llms.txt (secutils@71e2f70)

Infrastructure & DevOps

Enhancements

• api: switch to tracing crate for structured logging (secutils@3b8655c)
• api: migrate from unmaintained trust_dns_resolver to hickory_resolver (secutils@2770170)
• api: switch to Debian distroless runtime image (secutils@87f945e)
• security: upgrade to Ory Kratos 1.2.0 (secutils@1227b81), 1.3.0 (secutils@17f70d4), v25.4.0 (secutils@a239293), and v26.2.0
• api: switch to jemalloc memory allocator (secutils@398a2fb)
• api: improve DB connection reliability and include DB status in API status (secutils@0586ac2)
• build: introduce E2E test infrastructure with Playwright and Docker Compose (secutils@663ad4c)
• build: add commands to deploy components to private Docker registry (secutils@dd62fd0)
• build: self-host Google fonts (secutils@c6208be)
• build: pin base Docker images (secutils@b9c44a6)
• web-security: use BTreeSet instead of HashSet for CSP directives for stable ordering (secutils@3f52864)
• Dependency upgrades across all components