Changelog
What's been shipped, fixed, and improved.
SEO overhaul + CSP nonce hardening
- SEO: Added JSON-LD structured data (WebApplication, FAQPage, HowTo schemas) to all 8 tool pages - now eligible for Google rich results and FAQ dropdowns in search.
- SEO: Added per-page meta keywords, enhanced Twitter Card tags, and added Organization/WebSite/SoftwareApplication schema to the homepage.
- Security: Replaced CSP
unsafe-inline on script-src and style-src with per-request nonces. All script and style blocks are now nonce-gated.
- Security: Changed
Referrer-Policy from no-referrer to strict-origin-when-cross-origin for better analytics attribution.
- Security: Aligned
X-Frame-Options with CSP - changed from SAMEORIGIN to DENY to match frame-ancestors 'none'.
- Security: Removed
Access-Control-Allow-Credentials from non-API responses (auth is JWT header-based, not cookie-based).
- Security: Simplified robots.txt API disallows to a single
Disallow: /api/ entry.
- Pages: Added Changelog, Status, and 6 coming-soon tool landing pages.
File storage, PWA install, Discord bots landing page
- File Storage: Per-user private file storage with quota by tier - 5 MB free, 20 MB Starter, 50 MB Pro, 200 MB Elite. Supported types include PDF, CSV, JSON, images, ZIP, and Office documents.
- PWA: ToolBit is now fully installable as a Progressive Web App on desktop and mobile. Offline support via service worker, instant loading from cache, auto-updates in the background.
- Discord: Launched discord.toolbit.online with landing page and bot catalogue. OAuth account linking between ToolBit and Discord accounts. Bot waitlist capture.
- Support: Inbound email support via Resend - emails to support@toolbit.online automatically create support tickets visible in the admin panel.
- Admin: Full ticket system in admin panel with reply emails and auto-close notifications.
API Collections, Lifetime plans, email verification
- API Collections: Save named API requests (URL, method, headers, body) and re-run them with one click. Available on Pro and Elite plans - a lightweight Postman alternative built into ToolBit.
- Lifetime plans: Pro lifetime ($25) and Elite lifetime ($75) now available on the pricing page. Pro lifetime holders can upgrade to Elite lifetime for the difference ($50).
- Email verification: New registrations now receive a verification email. Unverified accounts see a banner in the dashboard. Verified status shown in account settings.
- Price protection: Existing subscribers are guaranteed their current rate for 4 months after any price change.
- UI: Merged 10 separate tabs into 6 cleaner tabs (Home, Tools, Feeds, Automate, API, Account).
URL Scrambler, uptime monitor custom alert email, QR scan analytics
- URL Scrambler: Encode any URL into an obfuscated redirect using base64url encoding. Stateless - no database, no expiry. Free for all users.
- Uptime monitor: Added per-monitor custom alert email - set a different address than your account email for each monitor.
- QR analytics: Pro+ users can now enable scan tracking on QR codes. View scan counts, daily trends, and device breakdown per code.
- Cron jobs: Added pause/resume toggle. Jobs can be suspended without deleting them or losing run history.
- Rate limiting: Improved per-user rate limiters for API proxy (50/day free, 200/day Starter, unlimited Pro+) and QR generation (1/min free, unlimited Starter+).
Starter tier, annual billing, OPML import
- Starter plan: Introduced $5/yr Starter tier for users who want a step up from free without committing to Pro. Includes 25 short links, 5 uptime monitors, 10 RSS feeds, 3 cron jobs with hourly intervals.
- Annual billing: Monthly and annual billing options added to pricing page. Annual plans offer 33% savings.
- OPML import: Pro+ users can now bulk-import RSS feeds via OPML files (up to 100 feeds at once).
- Fix: Short link click tracking now correctly classifies tablet user agents separately from mobile.
- Fix: Uptime monitor no longer sends duplicate alerts on rapid status flapping - one alert per transition only.
Initial launch - QR, URL shortener, uptime monitor, cron jobs, RSS digest, API proxy
- QR Code Generator: Generate QR codes for any URL or text. Custom colors, PNG download, no watermark. Free with no account required.
- URL Shortener: Short links with click analytics - daily trends and device breakdown. 5 links free.
- Uptime Monitor: 1-minute checks with email alerts on status change. 2 monitors free.
- Cron Job Scheduler: Schedule HTTP requests on any interval without a server. 1 job free.
- RSS Email Digest: Subscribe to RSS feeds and get daily or weekly email summaries. 3 feeds free.
- API Proxy: Make cross-origin API requests from the browser. 50 requests/day free.
- Pro plan: $1/month (early bird rate) for unlimited access to all tools.