Changelog

What's been shipped, fixed, and improved.

June 2026 Feature Security
SEO overhaul + CSP nonce hardening
  • SEO: Added JSON-LD structured data (WebApplication, FAQPage, HowTo schemas) to all 8 tool pages - now eligible for Google rich results and FAQ dropdowns in search.
  • SEO: Added per-page meta keywords, enhanced Twitter Card tags, and added Organization/WebSite/SoftwareApplication schema to the homepage.
  • Security: Replaced CSP unsafe-inline on script-src and style-src with per-request nonces. All script and style blocks are now nonce-gated.
  • Security: Changed Referrer-Policy from no-referrer to strict-origin-when-cross-origin for better analytics attribution.
  • Security: Aligned X-Frame-Options with CSP - changed from SAMEORIGIN to DENY to match frame-ancestors 'none'.
  • Security: Removed Access-Control-Allow-Credentials from non-API responses (auth is JWT header-based, not cookie-based).
  • Security: Simplified robots.txt API disallows to a single Disallow: /api/ entry.
  • Pages: Added Changelog, Status, and 6 coming-soon tool landing pages.
May 2026 Feature
File storage, PWA install, Discord bots landing page
  • File Storage: Per-user private file storage with quota by tier - 5 MB free, 20 MB Starter, 50 MB Pro, 200 MB Elite. Supported types include PDF, CSV, JSON, images, ZIP, and Office documents.
  • PWA: ToolBit is now fully installable as a Progressive Web App on desktop and mobile. Offline support via service worker, instant loading from cache, auto-updates in the background.
  • Discord: Launched discord.toolbit.online with landing page and bot catalogue. OAuth account linking between ToolBit and Discord accounts. Bot waitlist capture.
  • Support: Inbound email support via Resend - emails to support@toolbit.online automatically create support tickets visible in the admin panel.
  • Admin: Full ticket system in admin panel with reply emails and auto-close notifications.
April 2026 Feature Improvement
API Collections, Lifetime plans, email verification
  • API Collections: Save named API requests (URL, method, headers, body) and re-run them with one click. Available on Pro and Elite plans - a lightweight Postman alternative built into ToolBit.
  • Lifetime plans: Pro lifetime ($25) and Elite lifetime ($75) now available on the pricing page. Pro lifetime holders can upgrade to Elite lifetime for the difference ($50).
  • Email verification: New registrations now receive a verification email. Unverified accounts see a banner in the dashboard. Verified status shown in account settings.
  • Price protection: Existing subscribers are guaranteed their current rate for 4 months after any price change.
  • UI: Merged 10 separate tabs into 6 cleaner tabs (Home, Tools, Feeds, Automate, API, Account).
March 2026 Feature
URL Scrambler, uptime monitor custom alert email, QR scan analytics
  • URL Scrambler: Encode any URL into an obfuscated redirect using base64url encoding. Stateless - no database, no expiry. Free for all users.
  • Uptime monitor: Added per-monitor custom alert email - set a different address than your account email for each monitor.
  • QR analytics: Pro+ users can now enable scan tracking on QR codes. View scan counts, daily trends, and device breakdown per code.
  • Cron jobs: Added pause/resume toggle. Jobs can be suspended without deleting them or losing run history.
  • Rate limiting: Improved per-user rate limiters for API proxy (50/day free, 200/day Starter, unlimited Pro+) and QR generation (1/min free, unlimited Starter+).
February 2026 Feature Fix
Starter tier, annual billing, OPML import
  • Starter plan: Introduced $5/yr Starter tier for users who want a step up from free without committing to Pro. Includes 25 short links, 5 uptime monitors, 10 RSS feeds, 3 cron jobs with hourly intervals.
  • Annual billing: Monthly and annual billing options added to pricing page. Annual plans offer 33% savings.
  • OPML import: Pro+ users can now bulk-import RSS feeds via OPML files (up to 100 feeds at once).
  • Fix: Short link click tracking now correctly classifies tablet user agents separately from mobile.
  • Fix: Uptime monitor no longer sends duplicate alerts on rapid status flapping - one alert per transition only.
January 2026 Feature
Initial launch - QR, URL shortener, uptime monitor, cron jobs, RSS digest, API proxy
  • QR Code Generator: Generate QR codes for any URL or text. Custom colors, PNG download, no watermark. Free with no account required.
  • URL Shortener: Short links with click analytics - daily trends and device breakdown. 5 links free.
  • Uptime Monitor: 1-minute checks with email alerts on status change. 2 monitors free.
  • Cron Job Scheduler: Schedule HTTP requests on any interval without a server. 1 job free.
  • RSS Email Digest: Subscribe to RSS feeds and get daily or weekly email summaries. 3 feeds free.
  • API Proxy: Make cross-origin API requests from the browser. 50 requests/day free.
  • Pro plan: $1/month (early bird rate) for unlimited access to all tools.