New customer offer−20 %20% off the first 3 months when paid monthlyView plans
SilentShield

Changelog

What's New

Stay up to date with the latest improvements, features, and fixes.

v2.9.02026-11-04

New plans Starter and Scale, less page data from the widget

  • Two new plans: Starter and Scale. They appear on the pricing page, in the “Pricing” menu, on the home page and in the comparison table. Prices, limits and included features are read from each plan itself, so the page shows what is actually enforced. On narrow screens the comparison table scrolls sideways.
  • Privacy: the widget sends the address of the page without query string and fragment; whatever follows “?” or “#” stays in the browser. The widget’s requests carry at most the origin (scheme and domain) as referrer. An embed snippet you copy now includes referrerpolicy="origin".
v2.9.02026-11-04

New plans Starter and Scale, less page data from the widget

  • Two new plans: Starter and Scale. They appear on the pricing page, in the “Pricing” menu, on the home page and in the comparison table. Prices, limits and included features are read from each plan itself, so the page shows what is actually enforced. On narrow screens the comparison table scrolls sideways.
  • Privacy: the widget sends the address of the page without query string and fragment; whatever follows “?” or “#” stays in the browser. The widget’s requests carry at most the origin (scheme and domain) as referrer. An embed snippet you copy now includes referrerpolicy="origin".
v2.8.02026-10-20

Setup in one go and clearer counting

  • The setup wizard now asks what should be protected: forms, bot and attack protection on the server and, if your account includes it, control of AI agents. It creates the key, shows the server key once, checks each service separately and remembers your choice on the account. If you use an IP list, it warns you before you lock yourself out.
  • Every key has a new tab “Credentials”: public key and server key side by side.
  • Under the quota on the overview, a collapsed row shows what the monthly usage consists of: submissions, challenges issued, server checks and other.
  • The overview has a tile with two ways: contact support or “Request the setup service”. The setup service is paid and, for now, only on request.
  • Registration takes two steps: first email address and consent, then name, company and password. The page is plainer, and the language can be switched there.
  • The pricing page, the comparison page and the documentation now explain how requests are counted, including challenges issued.
  • If the widget gets no verdict, for example because the connection drops, it releases the form after 8 seconds. Before, the form stayed stuck. A “block” verdict and a challenge the visitor is solving are left alone.
  • Correction: in eleven languages the pricing cards showed a number of requests a thousand times too high. This is fixed.
  • Registration and requesting a free key now record consent to the Data Processing Agreement (DPA). The server key only works with a stored agreement.
v2.7.02026-10-12

Every verdict explains how it came about

  • Every entry under User Interactions has a new button, “How did this verdict come about?”. It opens a page with seven steps from the input to the verdict: entry, blocks, signals, reasons, limits, policy and verdict.
  • You see the strength of each signal, the reasons and the limits. Weights, the amount each reason took off and the raw sum stay with us. The evaluation itself does not change.
  • Entries from before 12 October 2026 are only partly recorded; newer entries are complete. Decimal numbers now follow your language, 0,40 in German and 0.40 in English.
  • New article on the blog: what the page shows and why some numbers stay with us.
v2.6.02026-10-08

Forms sent by button click and AJAX are checked

  • The widget now also reports forms that are sent with a button click and AJAX instead of a regular submit, such as the OpenCart 3 checkout. Before, your server received no typing and mouse data for them, and real visitors were rejected.
  • Forms with a regular submit, requests without a nonce and plain page posts are unchanged.
  • New article on the blog: what went wrong, what changes and how it was tested.
v2.5.12026-10-07

WPForms and the WooCommerce block checkout work with the plugin

  • WPForms forms and the WooCommerce block checkout now work with the WordPress plugin from version 2.15.14. Before, WPForms forms did not submit with protection switched on, and the block checkout rejected every order.
  • The compatibility list in the WordPress guide was measured again with plugin 2.15.14: Contact Form 7, Fluent Forms, WordPress comments, login and registration, the WooCommerce classic and block checkout, WPForms, Elementor Forms and Avada Forms.
  • New step-by-step guides with screenshots on the blog: general setup, Avada Forms, Elementor Forms, WPForms and the WooCommerce checkout.
v2.5.02026-10-06

Privacy, clear pricing and new guides

  • The widget fingerprints (canvas, WebGL, audio) are now hashed on arrival with a salt that changes daily. Detection still works, but visits can no longer be linked over weeks. Values already stored remain until the retention period ends.
  • Page URL and referrer are stored without the query part.
  • Pricing page: it explains what a request is and what happens above the quota. Prices are shown excluding VAT, and Enterprise limits are agreed individually. Quota emails and dashboard notices describe exactly what happens.
  • New WordPress guide with a test using a real and a rejected submission. A verified compatibility list states openly which form plugins work and which do not.
  • The developer documentation has a new structure: architecture, keys, quick start, SDKs, error codes and local testing.
  • New guide on the blog: Contact Form 7 — preventing spam and testing the form.
  • Fixed: The API examples in the documentation returned error 401 when copied.
v2.4.02026-10-01

Hiding forms

  • Detected forms can be hidden, for example when a page no longer exists. Hidden forms are no longer protected and can be shown again at any time.
  • Fixed: With protection switched off, a visitor rated as narrowly human was still rejected.
  • Errors in the automatic scan are explained in your language.
  • Security update for the website and dashboard.
v2.3.02026-09-29

New console, server key and automatic form scan

  • The dashboard has been redesigned: one consistent console, with forms shown as cards with a clear verdict.
  • Automatic form scan: SilentShield visits your pages itself and finds the forms. Individual pages can be checked on demand, and the scanner respects robots.txt.
  • A form in the header or footer counts once instead of once per page, and every form shows where it sits.
  • New server key: the key in your page source is public; for requests from your server there is a secret key.
  • User interactions can be exported as CSV.
  • Priority support: requests from plans that include it are handled first.
  • New SDK versions: Go 1.5.0, PHP 1.4.0, Node 1.6.0 and Edge 1.2.0. Blocking AI agents now also works through the SDKs.
  • Widget: selectable in all 25 languages and usable with the keyboard.
  • Emails arrive in every language and address you formally throughout. You can unsubscribe directly from the email.
  • Slow typing no longer counts as a sign of a bot.
  • Security: hardening of visitor IP detection and of rate limits.
  • Fixed: Creating a second API key failed (error 500).
v2.2.02026-08-28

New analytics, forms page and support

  • Analytics has been rebuilt: the time range as a simple question, a filter bar, a live view and two new tabs on effectiveness and integration.
  • Your keys and their sections now appear in the sidebar.
  • Forms page: forms can be selected several at a time, searched and changed in bulk.
  • The form scan shows that it is running and which pages are still missing.
  • Support: replies arrive complete and formatted, and the portal shows whether a reply was delivered.
  • The pricing page shows the limits the system actually enforces.
  • Fixed: An exhausted quota switched off the protection on your website.
  • Fixed: Continue later and Skip in the setup led nowhere.
  • Fixed: The install snippet on the home page pointed to a wrong host and was in English in every language.
v2.1.02026-07-28

Widget display modes, feedback board and support

  • Three ways to display the widget — invisible (the default), a reCAPTCHA-style checkbox, or a compact badge. The protection is identical; you choose what visitors see.
  • The widget now follows the language you configure. Previously every visitor saw English, whatever the dashboard said.
  • Fixed: the embed snippet in the widget editor pointed at the dashboard host and passed the key in a parameter the loader ignores — copying it produced a page with no protection at all.
  • The visible box no longer claims a visitor is "verified". It reports that the check ran; the actual classification stays in your dashboard.
  • Feedback board — suggest features, vote on other people's ideas and follow what we build next.
  • Support system — reach a human through the portal, with your keys and recent events already in context.
v2.0.02026-07-24

AI Agent Control

  • New AI Agent dashboard — see which AI crawlers (GPTBot, ClaudeBot, PerplexityBot …) visit your site, server-side and cookie-free
  • Per-category rules to allow, observe, or block AI search, AI agents, and AI training — with built-in recommendations so you don't accidentally cut off your AI visibility
  • Per-bot drill-down with request lists, filters, GDPR-native visit grouping, and CSV export
  • Optional query-string capture (off by default, per-key opt-in) to see which search terms bots request
  • Expanded GDPR compliance badge covering agent observation, query-string disclosure, and data processing agreements
  • Pseudonymised bot data only (daily rotating hashes), 14-day retention — no human visitors recorded
v1.9.02026-03-11

Privacy, Fingerprinting & Infrastructure

  • GDPR-compliant cookie consent banner with granular controls
  • Consent management modal for detailed permission handling
  • Browser fingerprint detection and analysis for bot prevention
  • Fingerprint management in admin panel
  • IP reputation monitoring with admin dashboard
  • Automated data retention job for GDPR compliance
  • User profile page in dashboard
  • Logstash pipeline and Docker infrastructure updates
v1.8.02026-03-09

Two-Factor Authentication

  • TOTP-based two-factor authentication with QR code setup
  • Trusted device management (remember device for 30 days)
  • Account lockout protection after failed login attempts
  • IP address hashing and anonymization for GDPR compliance
  • Security settings page in dashboard
  • Email notifications for 2FA enable/disable
  • AES encryption for TOTP secrets
v1.7.02026-03-09

Documentation & Help Center

  • Complete Help Center with 38 documentation pages
  • Getting Started guides: registration, API keys, widget install, domain verification
  • Integration guides: JavaScript, PHP, WordPress, React, Go, Server-Side, Python, Vue
  • Configuration docs: widget, security policy, form rules, alert rules, notifications
  • Feature docs: behavior analysis, adaptive challenge, PoW, math captcha, honeypot
  • Dashboard docs: overview, analytics, usage quota, team management, billing
  • API Reference: authentication, widget endpoints, management, analytics, webhooks
  • FAQ: general, pricing, security, migration (reCAPTCHA/hCaptcha/Turnstile)
  • Troubleshooting: widget loading, domain mismatch, captcha issues, quota, errors
  • Full translations for 25 languages with sidebar navigation
v1.6.02026-03-07

Freemium Branding Model

  • New freemium branding badge: 'Protected by SilentShield' for free users
  • Paid plans can hide branding for clean whitelabel experience
  • Shadow DOM badge with 25 languages, responsive icon-only mode on mobile
  • UTM tracking on badge links for viral growth measurement
  • Widget customizer: branding toggle gated behind plan entitlement
  • Backend entitlement enforcement for branding visibility
  • SQL migration for widget_configs branding column
v1.5.02026-03-06

Frontend Improvement & New Public Pages

  • New Features page showcasing all 15 platform capabilities
  • New FAQ page with 12 common questions
  • New Security & Compliance page with detailed security measures
  • New Use Cases page with 6 industry-specific examples
  • New About page with company information
  • Landing page: Testimonials section with customer quotes
  • Landing page: Trust badges (EU Hosting, GDPR, WCAG, TLS, Uptime)
  • Landing page: How-it-Works demo section
  • Landing page: JSON-LD structured data for SEO
  • Updated navigation and footer with new pages
v1.4.42026-03-06

AI Service Hardening

  • Added HTTP client timeouts for AI service calls (10s predict, 30s retrain)
  • Prevents goroutine exhaustion during AI service outages
v1.4.32026-03-06

Security Fixes

  • Fixed cross-team attack vulnerability in team management
  • API key guard now checks owner account status
v1.4.02026-03-06

System Integrity Audit

  • Entitlement fail-closed middleware for critical features
  • Stripe API timeout (10s) to prevent goroutine stacking
  • Usage key validation in monthly commit job
  • Admin cache invalidation on plan changes
  • Lifecycle job refactored to independent operations
  • Feature gate banners in frontend
v1.3.02026-03-04

Admin Panel

  • Admin dashboard with KPI cards
  • User management with search, filters, and pagination
  • User detail view with API keys and audit log
v1.1.02025-10-13

Billing & Dark Mode

  • Extended Stripe integration with addresses and taxes
  • Dark mode support with theme switcher
  • Enhanced language support and routing
  • Stripe billing portal for customers