Changelog — What's New in MyMonitor365

Report Builder — visual report composer with four report types, live preview, scheduled delivery, and white-label branding for Enterprise and MSP plans.

• NewReport Builder — a dedicated two-panel reporting interface at Reports → Report Builder. Choose from four report types (Uptime Summary, Incident Report, Response Times, SLA Compliance), set a date range, select monitors, and preview results live before exporting.
• NewOutput format selector — export any report instantly as a PDF download, a CSV file, or send directly to your account email.
• NewSchedule Delivery modal — configure recurring report delivery (daily, weekly, or monthly) with custom recipients and optional PDF attachment, directly from the Report Builder without saving a report first.
• NewWhite-label branding — Enterprise and MSP teams can upload a logo, set a primary accent color, customize the report title, and add footer text. Settings persist per team and are applied to every exported PDF and scheduled report email. The right panel shows a live branded header preview.
• NewBranding API — GET/PUT /api/teams/:teamId/branding endpoints for reading and updating white-label settings. Gated server-side to teams with the whitelabel_reports plan feature.
• ImprovedReport Builder added to the left navigation under Reports with its own sub-item entry.

New Team plan, updated plan limits, cancel subscription, and billing page fixes.

• NewTeam plan — new $50/month tier with 250 monitors, 5 users, 30-second check interval, 200 SMS credits, and 365-day data retention. Sits between Pro and Enterprise on the pricing page.
• NewCancel Subscription — active paid subscribers can cancel from the Subscription page. A confirmation dialog shows the exact date access ends; the plan stays active until the billing period expires, then reverts to Personal.
• ImprovedPersonal plan: monitor limit raised to 25 (previously 5). Pro plan: monitor limit raised to 100 (previously 50).
• ImprovedEnterprise plan updated to $150/month with 500 monitors, 15 users, unlimited SMS credits, and white-label reports.
• ImprovedSupport Docs: new Subscription & Billing article covering all plan tiers, limits, the free trial, upgrading, SMS credits, data retention, and how to cancel.
• FixedSubscription page no longer showed stale plan data after returning from Stripe Checkout — the page now auto-refreshes when a ?checkout=success query parameter is detected.
• FixedSubscription page upgrade prompt card was incorrectly shown to active paid subscribers because trialUsed stays true permanently. It is now correctly hidden once a paid plan is active.
• FixedStripe webhook crash on API v2025-05-28.basil where current_period_end was undefined. A helper now checks the subscription root and item level with a 30-day fallback.

Security hardening — SSRF protection, CSP headers, session security, stricter passwords, and rate limiting.

• SecuritySSRF guard — monitor targets and webhook URLs are now validated against private/internal IP ranges, loopback addresses, and cloud metadata endpoints before any connection is attempted.
• SecurityTeam listing and creation APIs restricted to app administrators.
• SecurityPassword minimum length raised from 8 to 12 characters across registration, account activation, and all password-change flows.
• SecuritySession ID is now regenerated on successful login and on 2FA completion, preventing session fixation attacks.
• SecurityTOTP verification endpoint rate-limited to prevent brute-force attacks against two-factor authentication.
• SecurityContent Security Policy added via Helmet — restricts script, style, font, and frame sources to trusted origins only (Cloudflare, Stripe, Google Fonts).
• SecurityJavaScript source maps disabled in production builds — internal code structure is no longer exposed to the browser.

Subscription plans with Stripe, Google Sign-In, blacklist zone ignoring, and admin tools.

• NewSubscription plans — Free, Pro, and Enterprise tiers are now enforced. Upgrade via Stripe Checkout directly from the Subscription page. All new accounts start with a 10-day Pro trial.
• NewGoogle Sign-In — log in or register with your Google account from the login and registration pages.
• NewMSP inquiry form — dedicated contact form on the Pricing page for Managed Service Providers, with feature-interest fields and a two-column layout.
• NewBlacklist monitor: ignore specific DNSBL/SURBL/DBL zones — ignored zones no longer affect monitor status. Ignored counts are shown on the monitor list.
• NewAdmin team management — administrators can delete any team and manage all teams from the admin panel. All admin actions are recorded in the audit trail.
• ImprovedRegistration form: first and last name fields are now separate; team name defaults to the user's full name on sign-up.
• ImprovedSubscription page: shows trial expiration date, direct plan management options, and a consistent layout across all team types.
• ImprovedUpgrade prompts now link directly to Stripe Checkout instead of sending an email.
• ImprovedMonitor groups require a Pro or Enterprise plan — not available on the personal free plan.
• ImprovedSupport Portal renamed in navigation (previously 'Support').
• FixedConfirmation prompt added before deleting a saved report.
• FixedAuth page layout and scroll issues resolved across all screen sizes and viewports.

PDF report delivery, agent activity logs, dashboard group controls, and login UX refresh.

• NewEmail PDF reports — send a PDF copy of any saved report directly to your inbox from the report detail page.
• New24-hour report range option for quick daily performance snapshots.
• NewScheduled report emails now support optional PDF attachments.
• NewAgent check logs — view real-time monitoring activity from each agent in the admin panel.
• ImprovedAgent activity breakdown is now clickable and shows last run time and status per monitor.
• ImprovedDashboard: collapse or expand all monitor groups in one click.
• ImprovedScheduled report delivery UI reorganised into a two-column layout for clarity.
• ImprovedLogin screen refreshed with the orange eye logo and updated branding.
• ImprovedSupport documentation is now accessible without logging in.
• FixedScrolling issue when selecting monitors in the group editing dialog.
• FixedActivity breakdown dialog widened to eliminate horizontal scroll on wide datasets.
• FixedReport email subjects and filenames no longer include 'SLA' where it was not applicable.

Session auto-logoff fix and Monitoring Region support docs.

• FixedSession auto-logoff: the login and 2FA verify endpoints now return the full user object including sessionTimeoutMinutes. Previously they returned a minimal object, causing the idle timer to always fall back to the 30-minute default regardless of the team-configured value.
• FixedSession auto-logoff: changing the timeout in Team Settings now immediately updates the idle timer for the admin making the change, without requiring a re-login.
• ImprovedSupport Docs: new Auto-Logoff article in My Account — explains the idle timer, how it resets on activity, available timeouts, and admin configuration steps.
• ImprovedSupport Docs: new Monitoring Region article in My Account — covers the 7 region options, automatic fallback behaviour, and per-user scope.
• ImprovedSupport Docs: Teams & Users article now includes an Auto-Logoff section with all available timeout values and a warning about the Never option.

Agent-based monitoring improvements: region-aware execution and named agents in emails.

• ImprovedMonitor engine: the central engine now defers status transitions to regional agents when active agents are present. Agents use quorum logic to determine UP/DOWN state — reducing false positives caused by single-region network events.
• ImprovedCreate Agent email template now includes the agent name (AGENT_NAME) so recipients know which agent was provisioned without needing to log in.

Monitoring Region per-user preference.

• NewMonitoring Region — a new per-user preference in My Account allows each user to select which geographic region (Automatic, North America, South America, Europe, Asia, Africa, Oceania) should run their monitor checks. Automatic is the default and lets the engine pick the best available agent.

Multi-region agent infrastructure with quorum-based status logic.

• NewMulti-region agent support — deploy lightweight monitoring agents in multiple geographic regions. Each agent performs independent checks and reports results back to the central engine.
• NewQuorum-based status logic — a monitor only transitions to DOWN when a majority of active agents agree it is unreachable. Single-region blips no longer trigger false alerts.
• NewAgent management UI — view all registered agents, their region, last heartbeat, and status from the admin panel. Agents are provisioned via a one-time setup email containing configuration instructions.

Scheduled report emails — saved reports can now be automatically emailed on a recurring schedule.

• NewReports: saved reports can now be scheduled for automatic recurring delivery. Choose Daily, Weekly (pick a day of week), or Monthly (pick a day of month), set a UTC send time, and enter one or more recipient email addresses.
• NewReports: each saved report card now has a Schedule button that expands an inline configuration panel with a toggle, frequency selector, day/time pickers, and recipient input.
• NewReports: scheduled emails deliver a full branded HTML report with summary stats (monitors, avg uptime, incidents, total downtime) and a per-monitor data table. Last-sent date is shown on the card.

Support Docs major update, richer production logs, and collapsible navigation.

• ImprovedProduction Logs: error messages now appear inline on every log row without needing to expand. 'Request errored' entries now show method, URL, status, and error message inline — matching the 'request completed' format.
• ImprovedProduction Logs: context pills expanded to include email, monitor name, feature request ID, support request ID, domain, recipient count, and maintenance window name.
• ImprovedSupport Docs: SSL Certificate Monitor renamed to 'SSL Evaluation' and fully rewritten to cover all displayed certificate fields, connection and protocol details (TLS version, cipher suite, chain validation), evaluated conditions, DOWN/warning conditions, and expiry email notifications.
• ImprovedSupport Docs: Domain Monitor fully rewritten to cover all displayed WHOIS fields (registrar, dates, registrant, EPP status, nameservers), evaluated conditions, DOWN/warning conditions, expiry email notifications, and a propagation delay note.
• ImprovedSupport Docs: Blacklist Monitor fully rewritten with complete two-column lists of all 48 IP-based DNSBL zones and 12 domain-based SURBL/DBL zones checked on every run.
• ImprovedSupport Docs: DNS Monitor record type list expanded to all 16 supported types displayed in two columns.
• ImprovedSupport Docs: sidebar navigation categories are now collapsible and collapsed by default. Clicking an article auto-expands its category. Searching bypasses the collapsed state.
• FixedSupport Docs: wording updated throughout to use 'you / your' instead of 'teams / their'.

FAQ page added to the marketing website.

• NewFAQ page at mymonitor365.com/faq — 29 questions across 5 categories (Getting Started, Monitor Types, Alerts & Notifications, Teams & Account, Plans & Data) with a collapsible accordion and sticky category sidebar.
• ImprovedFAQ added to the top navigation (between Pricing and Support) and to the Company section in the footer.

Full security hardening: headers, rate limiting, CORS, and TLS improvements.

• SecuritySecurity headers added to all API responses (X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Strict-Transport-Security) via Helmet middleware.
• SecurityCORS policy tightened in production — credentialed requests are now restricted to the configured app origin only.
• SecurityRate limiting applied to login, registration, and password-reset endpoints to prevent brute force.
• SecuritySession secret is now validated at server startup in production — the server will refuse to start without a strong SESSION_SECRET set.
• SecuritySMTP TLS certificate verification is now enabled by default.
• SecurityOutput encoding hardened in the Miro integration to prevent stored XSS.

Scrolling integration banner added to the home page.

• NewHome page: auto-scrolling banner above the Instant Alerts section showcases all eight supported integration platforms (Slack, Teams, Discord, Telegram, Zapier, Pushbullet, Miro, Trello) with their brand icons.

Integration cards in Support Docs are now collapsible.

• ImprovedSupport Docs → Integrations: each integration card is now collapsible (all collapsed by default). Click a card to expand its step-by-step setup instructions.

Integrations support article expanded to cover all eight integrations.

• ImprovedSupport Docs → Integrations now shows all eight integrations (Slack, Teams, Discord, Telegram, Zapier, Pushbullet, Miro, Trello) with their brand icons and step-by-step setup instructions, regardless of team configuration.

Login notice added to the Support page.

• ImprovedSupport page now shows a login notice between the action buttons and documentation cards, with a direct link to create an account.

Spelling correction in Support documentation.

• FixedCorrected 'Organise' to 'Organize' throughout the Support documentation.

Support page added to the marketing website.

• NewSupport page at mymonitor365.com/support — browse documentation categories and link directly to the in-app Support Portal.
• ImprovedSupport link added to the main navigation header between Pricing and Contact.

Email Server monitoring, Support Portal, and IP/Domain blacklist checks.

• NewEmail Server Monitor — full SMTP connection test, TLS negotiation, open relay detection, reverse DNS (PTR) check, and transaction time measurement.
• NewEmail authentication checks — SPF, DKIM (7 common selectors), and DMARC DNS record validation with pass/fail detail panel.
• NewEmail platform detection — automatically identifies Google Workspace, Microsoft 365, and other providers.
• NewSupport Portal — 19 documentation articles across 4 categories (Getting Started, Monitor Types, Alerts & Notifications, Account & Billing) plus an in-app support request form.
• NewIP & Domain Blacklist Monitor — checks your IPs and domains against 61 DNSBL / SURBL / DBL zones including Spamhaus, SpamCop, Barracuda, and SORBS.
• ImprovedNotification settings (Email, SMS, Integrations) on monitor forms are now collapsed by default to reduce visual noise.

Stability improvements and minor UI polish.

• FixedResolved false-positive alerts triggered during brief network partitions.
• ImprovedAlert history table now paginates correctly on large datasets.
• FixedDashboard sidebar no longer collapses unexpectedly on tablet-width viewports.
• ImprovedResponse time sparklines render more smoothly at 1-minute intervals.

API hardening and webhook reliability improvements.

• ImprovedWebhook delivery now retries up to 3 times with exponential back-off on non-2xx responses.
• FixedFixed edge case where DNS monitor reported success after NXDOMAIN responses.
• SecurityUpdated internal dependencies to address upstream CVEs.
• ImprovedAPI rate-limit responses now include a Retry-After header.

Domain Expiry monitoring and team notification channels.

• NewDomain Expiry monitor — track registrar renewal dates and get alerted weeks in advance.
• NewPer-team notification channels: route alerts from specific monitors to designated email groups or webhooks.
• NewBulk monitor actions — pause, resume, or delete multiple monitors at once.
• ImprovedSSL certificate check now reports the full certificate chain, not just the leaf.
• FixedTCP Port monitor no longer times out prematurely on hosts with slow SYN responses.

Public Status Pages and SMS alerting.

• NewPublic Status Pages — share a branded live status page with your users. No login required to view.
• NewSMS alerting — receive text alerts for critical monitors (Pro & Enterprise plans).
• New90-day data retention for Pro plans, up from 30 days.
• ImprovedHTTP monitor now validates response payloads against custom keyword patterns.
• ImprovedNotification emails include a direct link to the affected monitor's detail page.
• FixedAlert storm protection now correctly suppresses duplicate notifications within the quiet window.

DNS monitoring and multi-user team support.

• NewDNS Record monitor — assert that specific domains resolve to expected IP addresses.
• NewTeam member management — invite colleagues, assign roles, and share monitor visibility (Enterprise).
• NewMonitor grouping — organise monitors into labeled groups for easier navigation.
• ImprovedICMP Ping monitor now displays packet loss percentage alongside average RTT.
• ImprovedDashboard load time reduced by ~40% through query optimisations.
• FixedFixed timezone offset bug affecting scheduled maintenance window calculations.

Complete platform rewrite — faster, more powerful, and built for scale.

• NewFull platform redesign with a new dark-themed dashboard built for speed.
• NewSSL Certificate monitoring — get notified days or weeks before a certificate expires.
• NewTCP Port monitoring — verify that databases, email servers, and custom sockets are listening.
• NewCheck intervals down to 1 minute on Pro plans.
• NewWebhook alerting — push notifications to Slack, Teams, PagerDuty, or any HTTP endpoint.
• NewTime-to-First-Byte (TTFB) tracking on all HTTP monitors.
• ImprovedFull control over data residency with no third-party cloud dependency.
• ImprovedCompletely rewritten alerting engine with deduplication and quiet-hour support.