Changelog

Performance checks, fix recipes, and a faster scan experience

Scans now score page weight, JavaScript payload, and first-load request counts as a performance category, verify that linked privacy and terms pages actually resolve, and check HSTS alongside the other security headers.

Issue cards ship copy-paste fix recipes (next.config.ts / vercel.json / Netlify / nginx header configs, a privacy-policy starter, and a consent banner snippet), reports export as Markdown or CSV, and every scan shows a live progress stepper while it runs.

Email reports, snapshot previews, and the embeddable scan widget

Public scan visitors can get the full report by email without creating an account, shared score snapshots now render a generated preview image on social links and are served from saved scan data instead of URL parameters, and any site can embed a free TrustDebt scan box with a one-line script.

Monitoring alerts can now also post to a Slack channel per connected domain, the dashboard shows score history and live monitor-run status, and the landing page gained an honest capability comparison table.

Deploy-preview gate for GitHub Actions

Agency workspaces can turn the deploy-preview scanner into a required GitHub check. Create a CI token from the Agency Rooms card in the dashboard (only its SHA-256 hash is stored, up to five tokens per account), then add the Action to the repository with the token as an Actions secret.

The gate writes status, score, grade, and issue count to the step summary and exits non-zero on critical findings or a score below the threshold, so branch protection can block an untrustworthy preview before it merges.

Sharper discovery and scan activation

Expanded llms.txt guidance for AI answer engines, tuned organic discovery and the homepage scan activation flow, and updated Next.js security dependencies.

Launch proof refresh and ScrollLaunch verification

Aligned the landing hero with the dashboard launch packet, refreshed visual QA evidence across landing and dashboard, and added the ScrollLaunch verification badge alongside richer social previews.

AI search controls and llms.txt

Shipped llms.txt and AI-search SEO controls so answer engines cite TrustDebt's actual scope — trust QA, not legal compliance — instead of guessing.

Weekly trust monitoring with drift alerts

Founder plans now re-scan saved domains on a weekly schedule and send a branded alert email when trust drifts — a new tracker appearing after an AI edit, a security header dropped during a deploy, or a privacy or contact link that disappeared.

Public snapshots and the embeddable trust badge

Every scan gets a shareable public snapshot page that loads without an account, and td.js embeds a live trust badge card on your own site to back the grade you claim.

Launch Proof Packet PDF

The one-time Launch Audit export produces a polished PDF with severity, top fixes, the manual backend-risk checklist, and the written launch decision — ready for investors, clients, or launch day.

AI Fix Prompt

Every packet includes a copy-paste prompt that hands the full issue list to your developer or AI coding tool, with severity and expected patch scope. Patch the trust issues only — no redesign instructions.

Compare pages, fix guides, and the resource hub

Added nineteen pages: head-to-head comparisons with cookie, consent, and accessibility tools, focused fix guides for common launch blockers, and the launch-guides resource hub with an expanded sitemap.

Auth callback and sitemap fixes

Fixed the scan-launch auth callback path so signed-in users land straight in their workspace, and corrected the sitemap so every public page is indexable.