https://blankitt.com/changelog Every dated release across the Blankitt platform. en-gb Invalid Date EAS Technology Consulting Ltd, trading as Blankitt https://blankitt.com/changelog#edge 71b19678-1fc5-4d2b-8e90-3ba270d0feff Invalid Date Edge [new] The Email channel drill-down now shows every tagged send with its first 24 hours as a timeline: machine clicks against real recipients, hour by hour. Mailbox security software opens every link in an email as it is delivered, and that pattern is unmistakable at a glance: a tall machine spike in the delivery hour, then silence, while real clicks trail on for hours. [new] Each send carries a verdict. Delivery-hour scan means benign email security software, and the panel says so plainly, together with the recommended response: verify your email platform's machine-click filtering, and do not block these networks, because blocking can hurt deliverability. Machine traffic that persists outside delivery windows is flagged for investigation instead. [new] Every send shows its real clicks (235 of 1.49k, for example) so you can report email engagement on human numbers, and keep browse-abandonment triggers and retargeting audiences off the machine slice. [improved] What it hit is now Links opened on the Email drill-down: spread across pages there usually reflects the links inside the send being opened once each, not browsing. https://blankitt.com/changelog#edge 44859b65-bbce-430e-8f69-45250fafd720 Invalid Date Edge [new] Networks whose addresses appear in your billed invalid ad clicks now carry a billed badge on the Offenders page, with a spend estimate when your channel rates are configured. Clicking the badge opens the channel that billed those clicks, with the evidence CSV and the paste-ready IP exclusion list right there. [new] The IPs page gains a Billed column and filter (the addresses worth excluding first), plus Cloudflare's own classification of each address: known bad host, Tor exit, monitoring service and so on. [new] Offenders can now be filtered by acquisition channel (which networks pollute Google Paid, email or referral) and by declared identity: verified crawlers, AI agents, other declared bots, or nothing declared at all. [new] Networks whose automation is email delivery-hour link scanning carry a scanner infra chip, so benign mailbox security never tops your offenders list looking like an attack. [new] The Paths page now reads the landing data: filter paths by the channel that enters through them, and bot-only doors (pages with real landing volume and almost no human entries) are flagged in red. [improved] Quick find pills are now shared between the Paths and IPs pages, and the list extends itself with your own site's highest-volume controllers. https://blankitt.com/changelog#edge f75502fd-4779-4cf1-905a-b386c67ff14c Invalid Date Edge [new] The Protections page gains the standing challenge mandate. Approve one policy and Edge keeps a managed challenge current for the IP addresses behind your invalid ad clicks, the same evidence set as your Google Ads exclusion list. Challenged bots never load the page, so they never enter your retargeting audiences or analytics either. [new] Every mandate starts in trial mode: it shows you exactly what it would challenge, and the live switch stays locked until you have reviewed a preview. Challenge only, never block. Blocks always remain a per-incident human decision. [new] The mandate owns exactly one rule and never touches anything else on your zone. Every change is recorded in its activity feed and sent to your notification channels, and you can pause or revoke it at any time. https://blankitt.com/changelog#edge 0b970847-5bf8-48f9-9631-a0aee23dd997 Invalid Date Edge [improved] Campaign rows now carry a trend sparkline of their invalid share, so a code that started climbing on Tuesday reads as exactly that. [new] Paid campaign rows expand into their own drill-down: the networks, paths, browser identities and countries behind that campaign's invalid clicks, built from the same click log the Evidence CSV exports. [new] Click any landing page to see which channels enter through it, each with Cloudflare's verdict. A page that looks healthy in total can be one channel's favourite scripted entry point. [new] The Geography map can be narrowed to a single channel, answering which markets that channel's invalid traffic claims to come from. [new] The Detection section adds a per-channel method mix. Heuristics-heavy means crude automation; machine-learning-heavy means sophisticated and worth the evidence log. [new] Referrer domains running almost entirely bot-scored at real volume now carry a fabricated flag in the drill-down: invented referrers, not partners. [improved] The AI-assistant arrivals tile splits by assistant and links straight to what AI is citing on the Bots and agents page. [fixed] Times on the invalid arrivals chart now display correctly on the 30 minute, 2 hour and 30 day ranges. https://blankitt.com/changelog#edge 646b2cf2-7071-41dc-b596-024da8281f11 Invalid Date Edge [new] Every campaign code is now watched by its own detector. It compares a campaign's invalid share against that campaign's own weekly baseline, across every channel at once, because replayed campaign URLs usually arrive as Direct rather than on the channel that owns the code. When it fires, the campaign's row carries a badge linking straight to the alert. [new] Paid campaigns carry their own Evidence CSV and IP exclusion downloads. Ad platforms take credit claims and IP exclusions per campaign, so the artifacts now scope the same way. [new] Download History CSV on the Channels table exports the banked weekly history, one row per channel per week, kept beyond the live analytics window. Ready for your own spreadsheets and dashboards. [new] Open channel and campaign alerts are now drawn on the invalid arrivals chart at the moment each opened, so a spike and its alert line up visually. Click a marker to open the alert. [improved] If your Logpush job is not shipping the ClientRequestHost field, the Channels page now says so in a banner instead of quietly over-counting Referral arrivals. The source coverage panel lists the field as well. https://blankitt.com/changelog#edge 8aea0525-d7f6-4508-b6bf-c76cc2a34f54 Invalid Date Edge [improved] The Channels page is now organised by a section menu: Channels, Campaigns, Landing pages, Geography, Timing and Detection. The headline tiles stay in view whichever section you are in, so the summary never disappears. [improved] Each section loads its own data the first time you open it and keeps it cached afterwards. The page opens noticeably faster, and switching between sections you have already visited is instant. https://blankitt.com/changelog#edge 30fcc76e-f39e-4d1c-bbf0-cd22c860f233 Invalid Date Edge [new] The Channels page now opens with invalid arrivals over time: bot-scored landing views per interval with the invalid rate alongside. A volume spike with a steady share is a campaign going out; a rising share on flat volume is automation replacing shoppers. [new] Where arrivals land: a world map of landing views by country with each country's own invalid rate. A market you do not sell to at a near-100% rate is fleet infrastructure, not customers. [new] Top landing pages shows the doors automation actually enters through, with exact per-page invalid rates. Platform controller URLs appearing here at all means bots are using entrances no shopper ever lands on. [new] How Cloudflare caught it: each invalid arrival grouped by the verdict engine's own detection method (heuristics, machine learning, JavaScript fingerprinting). Threat types from the platform that saw every request, not from a tag. [new] IP exclusions, next to the evidence CSV on paid channels: a paste-ready list of the top invalid-click source addresses, capped at the 500 entries Google Ads accepts per campaign. Edge prepares the list; applying it is your click. [new] The weekly report's Marketing channels section now opens with a short generated summary, clearly labelled, composed only from the week's own numbers. If generation is unavailable the section reads exactly as before. https://blankitt.com/changelog#edge 78edc5d1-c349-408e-a68b-ad6ce26f3e55 Invalid Date Edge [new] New Channels page under Monitor: every acquisition channel, from paid search and email to affiliates, organics and AI assistants, with Cloudflare's verdict on each landing view. Classified server-side at the edge, so it includes the bot traffic your tag analytics never sees, and the counts are exact. [new] Campaigns table reads your own campaign codes (sourceCode, marketingCode, utm_campaign), so replay shows up at the level marketing plans at: one campaign running hot while its siblings stay clean is bots re-requesting that campaign's tagged URLs. Only those three parameters are ever read; nothing user-typed is stored. [new] Spend at risk: add cost-per-view estimates in Settings and invalid views become currency figures on every money channel and campaign. [new] Evidence export: paid channel drill-downs download a CSV of bot-scored clicks with their ad platform click IDs, timestamps, campaigns and networks. The attachment an invalid-traffic credit claim needs. [new] A channel-invalid-spike detector watches paid, email and affiliate channels and alerts when a channel's invalid share jumps against its own weekly baseline. It never suggests blocking a channel; real shoppers arrive through it too. [improved] Channel drill-downs show who runs the invalid slice: networks, paths, claimed browsers, markets, referring sites (for Referral), and Cloudflare's own view of the addresses. The weekly bot report gains a Marketing channels section, and an hour-of-day strip shows when each channel's automation runs. https://blankitt.com/changelog#edge 992e8c78-8633-432f-9bcb-dd76db5681ac Invalid Date Edge [new] Every name in the Other declared bots panel now carries an identity label: who operates it and what it does, from SEO crawlers (Ahrefs, Semrush, Majestic) to link-preview bots (Facebook, Pinterest, TikTok), ad checkers, uptime monitors, and archives. Hover for the fuller story. [new] Where nobody credibly claims a name, the label says so. An unidentified crawler with real volume is worth more attention than a known SEO tool, and the panel now makes that difference visible at a glance. [new] Performance testers are no longer invisible. Tools like GTmetrix and Lighthouse fetch pages with a real browser identity and never used to appear here; they are now classified and listed by name, verified badge included. [improved] The panel lists up to 40 names so a low-volume tool is not buried under the heavy crawlers, and the Bots over time chart plots named agents by default, with a toggle to add the unclassified catch-all line back. https://blankitt.com/changelog#edge a28eb97b-77a7-4ff4-84f7-bde026cca2f4 Invalid Date Edge [new] Edge now watches for browser versions that do not exist. A fleet claiming a version newer than anything your real shoppers run is fabricating its identity, and the Impossible Browser Version alert names it, sizes it, and says how much of it Cloudflare already scores as automated. [new] The detector calibrates itself from your own shoppers: whatever version your human traffic runs is the ceiling, so there is no version list to maintain and it never goes stale. Stores without Bot Management data simply never see a false alarm; without a real-shopper baseline the detector stays quiet. [new] Each alert carries a drafted challenge rule matched to the exact fabricated version string. It cannot touch a real shopper, because no real browser runs a version that does not exist. As always, the rule arrives disabled; nothing changes until you enable it. [improved] In the analytics gap drill, click any claimed browser version to pin the whole drill to that fleet: its networks, its paths, its POSTs. A new self-announced identities list also shows the in-app browsers and testing tools inside each slice. https://blankitt.com/changelog#edge 5b33d82b-00ec-450a-9c7b-dcc18cae75ce Invalid Date Edge [new] The 'What tag analytics never sees' card on the Overview now drills. Click the headline percentage to open the whole never-tagged slice, or any tile for one segment, and see the networks behind it, the paths it hit (with POSTs and errors), and what it claimed to be. [new] The claimed-identity column is the quick tell on report pollution: browser-shaped, bot-scored traffic concentrated on a single browser version is an automated fleet, not an audience. Every network listed clicks through to its detail page, where a challenge rule is one draft away. [improved] The declared bots and crawlers tile links straight to Bots & agents, that population's full drill-down. Drill numbers always use the same definitions as the card, so what you expand sums to what you clicked. https://blankitt.com/changelog#edge f173a04a-7246-4b6f-aae7-02a15a053a3b Invalid Date Edge [improved] The Monday weekly bot report has been rebuilt to read the way the Bots & agents page does, in the same priority order: crawler impersonation first, with a plain all-clear line when the week was clean, then what AI cited from your store, the AI agents with their intent labels, the search crawlers, and the other declared bots. Agents are named properly (GPTBot, ChatGPT-User) and every cited page appears exactly as AI fetched it. [improved] The report's numbers now come from the same per-bot data the page itself shows, so what lands in your inbox matches what you see on screen. Some heavy crawlers were previously under-counted in the report; that gap is closed. [new] The report has its own recipients, separate from alert routing: a dedicated report email, and optionally a webhook that receives the same report as structured JSON for your own tooling. Both are set in Settings under the Weekly bot report switch; leave the email blank to keep using your default notification address. [improved] Week-over-week comparisons pause for one week while the upgraded dataset takes over, then resume automatically. The report says so itself rather than showing changes the traffic never made. [new] You don't have to wait for Monday: Send report now in Settings sends the report on demand, to the same recipients, whether or not the weekly schedule is on. Pick a date and it sends the report covering the last completed week as of that date, so any banked week from the history is one click away. https://blankitt.com/changelog#edge a4d17b3e-9c6f-4e2a-8b5d-1f7c3a9e6d42 Invalid Date Edge [improved] What AI is citing now records the real URL of every answer-time fetch. Long product pages used to collapse into a placeholder; now you see the exact page, product code and all. Query strings are never kept, so nothing personal is recorded. Applies to the live retrieval agents from 19 August onward; bulk crawls and AI-search indexing deliberately stay grouped by URL pattern, where the pattern is the right level of detail. [improved] The AI agents panel now carries an always-visible legend for the three intent labels: training crawl (reading your catalogue in bulk, to learn from it), AI search (indexing you for AI search results), and live retrieval (fetching a page to cite it in a live answer). https://blankitt.com/changelog#edge f8c24a6e-7d1b-4e9f-b3a5-6c8d2f4e7a91 Invalid Date Edge [new] Click a bar on a bot's When it hit timeline and the whole drill-down focuses on that interval: paths, content types, networks and the verified split all recompute for just that slice. A spike stops being a shape on a chart and becomes these pages, from these networks, in that hour. [new] Drag across several bars to focus a range instead. A live highlight shows the span as you drag; release to apply it, and Show whole window clears it. [new] Time and network focus combine. Select the burst, then click the network behind it, and you are looking at exactly what that network did in that window. If it is hostile, Draft rule is one click away. https://blankitt.com/changelog#edge e3a91f7c-2b5d-4c8e-a6f1-9d4b7e2c5a83 Invalid Date Edge [new] A What AI is citing panel on the Bots & agents page. Live retrieval agents (ChatGPT-User, Claude-User, Perplexity-User) fetch a page at the moment they cite it in an answer for a real person, so each fetch is your content appearing in generated output: the closest server-side signal to an AI impression. The panel lists those pages with the split per agent. [new] Every AI agent now carries an intent label: training crawl (reading your catalogue in bulk), AI search (fetches powering AI search indexes), or live retrieval (citing you right now). Three very different things stop looking like one number. [improved] Claude and Perplexity retrieval agents are now identified separately from their bulk crawlers, and the AI search fetchers Claude-SearchBot, ExaSearchBot and AzureAI-SearchBot are recognised names. Their history builds from 19 August 2026 onward. [new] Edge banks a weekly per-page summary of AI citation fetches and keeps it indefinitely, so the trend outlives the raw log window. Page paths only, query strings stripped, no personal data. [improved] The Bots & agents page now reads in priority order: impersonation first while there is any (a clean window gets a one-line all-clear instead of an empty threat panel), then AI visibility, crawlers, the unclassified group, and banked history. The tiles at the top jump straight to their sections, every bot timeline has a proper time axis, and drafting a challenge rule from an impersonation row is a one-click button. https://blankitt.com/changelog#edge b7e42c1d-8f3a-4e6b-9c5d-2a1f8e7d6c4b Invalid Date Edge [new] Every bot drawer now shows where the traffic comes from, network by network, with the verified and unverified share of each. Click a network to focus the whole drawer on it. For a name like Googlebot this is the fastest honesty check on the page: the real crawler is one fully verified network, and every impersonator shows up beside it. [new] A when-it-hit timeline in each drawer shows when the bot crawled across your selected window, so a steady crawl and a sudden burst stop looking the same. Intervals that are mostly errors are tinted red, because a burst that is all errors is probing, not crawling. [new] Unclassified bots are now drillable. Expand any name in Other declared bots to see its networks, activity, paths and content types. Being unverified is normal in this group, and the drawer says so plainly instead of treating every SEO tool as suspicious. [new] Two new always-on checks watch the bot population itself. New bot detected fires when a name that has never crawled your store arrives with real volume. Bot volume spike fires when a known bot runs at a multiple of its own usual rate. Both alerts link straight to the bot's drill-down, and both are detection-only: nothing is blocked without you. [new] One click from a fake crawler row now drafts a challenge rule for that network. The rule is generated disabled, for your review. Nothing is applied until you decide. [improved] Amazon's shopping crawlers (amazonproductbot, Amzn-SearchBot) are now recognised names with their own rows, verification status and banked weekly history. https://blankitt.com/changelog#edge ce13a97b-f9d5-44d9-a01f-cd94379f32a3 Invalid Date Edge [new] Bots over time on the Bots & agents page. Every completed week, Edge banks a per-bot summary (requests, verified share, POSTs, errors, origin load) and keeps it indefinitely, long after the raw log window rolls off. The panel charts your busiest agents week by week with change against the prior week. The banked rows hold a bot name and counters only: no IPs, no URLs, no query strings, no personal data. [new] Download CSV exports the same weekly history, one row per bot per week, ready for your own reporting tools. No log pipeline, no warehouse, no BI licence required. [new] Optional weekly bot report email. Turn it on in Settings and each Monday you get the previous week's agents with their week-over-week changes, sent to your notification address. [new] What it fetched: expand any bot to see its traffic split by content type. Pages and data mean the bot is reading your catalogue; heavy image and asset weight is the signature of media harvesting. Requires the EdgeResponseContentType field on your Logpush job; the help article shows how to add it. https://blankitt.com/changelog#edge c692ea9a-298b-41b3-bf62-f494ea9af5e0 Invalid Date Edge [new] Monitor detail pages gain an Outages panel. Every failure episode in the range is listed with when it started, an estimated duration, the cause (timeout, connection, TLS, or the HTTP status code returned), and the individual failed checks on expand. Previously a failure older than the recent-checks list was effectively invisible. [new] Short blips are no longer lost. Episodes are rebuilt from the check history itself, so a failure that recovered before the alert threshold still appears, labelled below alert threshold. Three scattered failed checks and one fifteen-minute outage now read as the different situations they are. [improved] Episodes that did alert link straight to the alert, with the exact error message recorded at the time and, for journeys, which step failed. [improved] The uptime strip now distinguishes slow from broken: green means all checks passed, amber means slow but successful (still counted as up, matching the uptime figure), red means a failure. Red bars are clickable and jump to the matching outage. https://blankitt.com/changelog#edge 932d4ec0-1efe-43ce-aebc-5ac596a45d21 Invalid Date Edge [improved] Expanding a bot or crawler on the Bots & agents page now shows the paths it actually hit. Previously most of a busy crawler's traffic collapsed into a single catch-all row because bot paths competed with your whole storefront for space; bot traffic is now captured separately, so the detail survives. Where detail ends, the drawer tells you how many further requests it holds no per-path detail for, instead of hiding them. [new] The Verified-bot impersonation panel opens with a plain-English summary: what the traffic claims to be, what network it really comes from, and whether any of it touched checkout, auth, or cart paths. It is written by AI from the same figures the panel shows. The numbers and any drafted rule come from the deterministic pipeline, and nothing is applied without your approval. [improved] Impersonation rows now name the network next to its AS number, and each row's drill-down shows only that network's fake traffic, so two networks running the same disguise no longer blur together. [new] A new Other declared bots panel lists what is inside the unclassified-bots group by the name each bot gives itself, with its request volume and verification status. [new] Every bot drill-down links to a forensic capture window scoped to that one bot: exact URLs as sent, query strings included if you ask, and the IPs behind the traffic. https://blankitt.com/changelog#edge 5004cf0d-ead3-402e-8926-1d426801e008 Invalid Date Edge [new] New Origin bot load column on the Offenders page. Automated traffic your cache serves costs your origin nothing, however much of it there is. Sort by this column to rank networks by the automation that actually reached you, so the ones costing you real capacity rise to the top even when they are not the largest by volume. [new] New What changed page under Monitor. It compares the current window against the one before it and lists the networks, paths, countries and browsers that moved most, with a plain-English summary. Each row shows how much of the change reached your origin, so a large but cache-served increase is visibly different from a smaller one that cost you. [new] The ASN detail page gains an Automation and origin load card, showing how a network's traffic splits between human and automated, how much of its automation reached your origin, and what that network cost your origin in milliseconds. [improved] Alerts now show how long a condition has been firing continuously, and how many times it has stopped and restarted. The list is ordered by impact by default rather than by newest, so a long-running problem no longer sits below a page of smaller, more recent ones. Sorting by Newest is still available. [improved] A condition that stops and restarts is now tracked as one alert with a flare count, instead of raising a new alert every time it comes back. Alerts also wait briefly before closing, so a brief pause no longer ends one prematurely. [improved] Traffic spike alerts now require the spike to have actually reached your origin. A surge your cache absorbs no longer raises an alert, which removes a large share of spike alerts that never represented a cost to you. Networks genuinely reaching your origin alert exactly as before, and the threshold is adjustable on the Rules page. https://blankitt.com/changelog#dmarc dmarc-1.4.0 Sun, 16 Aug 2026 09:00:00 GMT DMARC Gateway impact: grades now measure what you control. When a recipient's security gateway (Check Point/Avanan, Mimecast, Proofpoint) modifies your mail in transit and re-delivers it, so your own reject policy destroys it, those failures no longer drag down your grade. A Gateway impact panel names the gateway, the volume lost, and the fix. Security gateways identified by name. Traffic relayed through Check Point, Mimecast, Proofpoint, Barracuda, Cisco or Sophos gateways is now identified with confidence instead of showing as unknown. RFC 9989 transition tracking. DMARC became a full Internet Standard in May 2026. Every tag in your DMARC record is annotated with its spec status (current, new or deprecated) with guidance on hover. Spec migration checklist. Domains still carrying removed tags (pct=, rf=, ri=) are listed with a corrected record ready to copy. Deprecated tags never affect your grade. https://blankitt.com/changelog#dmarc dmarc-1.3.0 Invalid Date DMARC [new] New SPF IP usage panel: see which SPF entries actually send, which are dead weight you can remove, and which senders are missing from your record entirely. [new] New Provider setup panel: each detected sending service checked against the DNS records it requires, with the exact missing entries and a one-click live re-verify. [new] Track your sending subdomains so their DNS records are checked alongside the root domain. [new] The DNS panel now grades each DKIM key's strength: weak 1024-bit and revoked keys are flagged. [new] Two new alert thresholds: get emailed when your SPF record nears the 10-lookup limit or a published DKIM key is weaker than you allow. [new] Zipped DMARC reports now import: some providers send .zip instead of .xml.gz, and both now work everywhere reports come in. [improved] The dashboard now loads instantly: data is precomputed and refreshed the moment new reports arrive. [improved] A visual refresh across the whole app: clearer cards, smooth loading, an explanation on every panel, long lists that fold, and a domain page reorganised into a natural workflow order. [fixed] Alert threshold settings now save all fields correctly. https://blankitt.com/changelog#edge edge-20260712-plain-english-explanations Invalid Date Edge [new] Every alert now carries a plain-English brief of what happened: who is behind the traffic, what kind of network it came from, how it compares to your baseline, and whether the same network has been seen before. [new] Every suggested rule now carries a note on exactly what it would and would not block, before you decide to apply it. [new] The weekly comparison now opens with a written summary of your week in traffic, aware of the promo weeks you tagged. [new] The AI only ever explains. Detection comes from the detectors, rules from the deterministic pipeline, and nothing is applied without your approval. https://blankitt.com/changelog#edge edge-20260711-campaign-windows Invalid Date Edge [new] Declare a sale, email send or product drop on the new Campaigns page and the volume detectors you choose hold their fire for the window. Every held alert is recorded, so you can see afterwards exactly what Edge suppressed and why. [new] Security detectors are never suppressed: credential stuffing, card-testing signals and probes stay live through every sale, because attackers hide behind them. Windows cap at 14 days. [new] Each window gets a report over its exact time range: requests, egress, the automated share of scored traffic, and how much of the campaign's traffic never reached your tag analytics. https://blankitt.com/changelog#edge edge-20260711-search-abuse Invalid Date Edge [new] New detector: search abuse. Catches networks flooding your search and suggestion endpoints with bot-scored traffic, measured against each network's own baseline. Protects origin cost and the signals your search and personalisation tools learn from. [new] Cloudflare-verified crawlers are excluded before detection, so Googlebot browsing your categories can never trigger it. Ships in tune-first mode; enable it from the Rules page. [new] Every search-abuse alert carries a ready-to-apply, per-visitor rate limit for the search endpoint, challenge-first as always. https://blankitt.com/changelog#edge edge-20260710-analytics-truth Invalid Date Edge [new] New on the Overview: What tag analytics never sees. The share of your traffic that could never have fired an Adobe or GA tag (API clients, declared crawlers, no-user-agent scripts), split from browser-shaped traffic and its bot-scored slice. [new] Export Adobe Analytics bot rules from any network detail page: the offender's top observed IPs as a ready-to-import CSV for Admin, Bot Rules, Import File. Each rule carries a provenance description. https://blankitt.com/changelog#edge edge-20260710-slack Invalid Date Edge [new] Send alerts to Slack: paste an incoming-webhook URL in Settings and alerts arrive as formatted messages with severity colours, the affected network and path, and a link straight into Edge. [new] Same behaviour as Teams: correlated incidents post one message rather than a cascade, the pause switch silences it, and a Send test message button verifies the connection before you save. https://blankitt.com/changelog#edge edge-20260710-teams Invalid Date Edge [new] Send alerts to Microsoft Teams: paste a Workflows webhook URL in Settings and alerts arrive as cards showing severity, the affected network and path, and a link straight into Edge. [new] Correlated incidents post one card rather than a cascade, and the alerts pause switch silences Teams along with email. Webhooks keep firing for on-call tooling. [new] A Send test card button in Settings verifies the connection before you save. https://blankitt.com/changelog#edge edge-20260709-guided-response Invalid Date Edge [new] Every alert now includes the exact eCDN rule to stop the attack: the firewall or rate-limit expression, a ready-to-paste CDN Zones API call, and the Business Manager steps, challenge-first so real shoppers pass. [new] Edge never changes your WAF on its own. You review and approve every rule; one-click apply and opt-in automatic protection are on the roadmap. [improved] Alert emails and webhooks carry the suggested rule as a one-line summary. https://blankitt.com/changelog#hr hr-20260705-statutory Invalid Date HR [new] Day-one SSP under the reformed rules: no lower earnings limit, no waiting days, and a weekly rate of the lower of £123.25 or 80% of average weekly earnings. [fixed] Statutory rate tables re-verified against GOV.UK for 2024-25, 2025-26 and 2026-27: every calculation now picks the right year's table automatically. [new] Provision users automatically from Microsoft Entra ID via SCIM. https://blankitt.com/changelog#hr hr-20260703-us-ready Invalid Date HR [new] US employee support: worksites, federal and state tax fields, and US-specific onboarding alongside UK records. [improved] The sidebar now adapts to role and country: employees see their own workspace, and country-specific items only show where they apply. https://blankitt.com/changelog#draw draw-20260703-public-api Invalid Date Draw [new] Public API with per-workspace keys and OpenAPI documentation. [new] IPAM data over the API: pull your address ledger into other tooling. [new] Webhook ingress with incident tracking, and signed webhook egress for change events. https://blankitt.com/changelog#draw draw-20260629-insights Invalid Date Draw [new] A browsable Rules & Insights catalog under Help. [improved] Contextual tips no longer overstate: HSRP rules now check real redundancy before flagging. [new] Out-of-band management IP field on device properties. [improved] Connection media badges reveal on hover or selection instead of cluttering the canvas. https://blankitt.com/changelog#draw draw-20260628-ipam-teams Invalid Date Draw [new] IPAM-lite ledger with smarter gateway insights and L3-switch awareness. [new] Workspace audit log. [new] Org-shared templates and invite-by-link for teams. [new] SCIM hook for directory-driven provisioning. https://blankitt.com/changelog#hr hr-20260626-comms Invalid Date HR [new] Audience-scoped announcements: target by location or role instead of broadcasting to everyone. [new] Polls and @-mentions in the unified company feed. [improved] Recognition controls tuned for busier feeds. https://blankitt.com/changelog#hr hr-20260623-rota-reports Invalid Date HR [new] Workforce management: rota builder with shift patterns, open shifts with approval flows, clock-in/out, and worked hours flowing straight into payroll. [new] No-code report builder over eight HR datasets, with scheduled email delivery and CSV export. [new] Candidates can receive AI interview feedback via a secure magic link: with human review before anything sends. https://blankitt.com/changelog#edge 2026-06-23-edge-live Invalid Date Edge [new] Overview, Offenders, Paths and IPs surface your edge traffic shape: worst-behaving ASNs and per-path 499, 4xx and cache-bypass rates. [new] Probe & scanner detection classifies reconnaissance (WordPress, secrets, git, SQL dumps, admin, tenant-targeted) by family. [new] SSL/TLS certificate inventory with expiry monitoring, plus configurable detector rules and alerts. https://blankitt.com/changelog#hr hr-20260620-recruitment-analytics Invalid Date HR [new] Recruitment upgraded: interview scorecards, job-board posting, blind screening with a DEI view, a searchable talent pool, and interview calendar sync. [new] AI CV ingestion with candidate summaries and skill-match against the job spec. [new] Seven people-ops reports: headcount, turnover, absence and more: with scheduled delivery and point-in-time views. [new] Announcements, peer recognition, awards and length-of-service celebrations. https://blankitt.com/changelog#hr hr-20260616-lms Invalid Date HR [new] Course catalog, enrolments, quizzes, certificates and video lessons: with completion reporting and automatic reminders. https://blankitt.com/changelog#dmarc 2026-06-15-smarter Invalid Date DMARC [new] Fix Groups now names the exact record to add: the missing SPF include or unpublished DKIM selector: with a link to the vendor's setup guide. [improved] Sharper sender recognition: more email vendors identified automatically, and the list keeps improving without app updates. [new] Per-domain reporter analytics: see which providers send your DMARC reports. [new] The DNS panel now shows DNSSEC status, zone delegation, and parent-domain records. [new] Per-domain alert thresholds with email alerts when alignment drops or failing senders spike. [improved] A new volume-trend chart, a clearer compliance scorecard, and a redesigned policy simulator. [new] Opt in under Settings → Shared detection to help improve vendor recognition for everyone. https://blankitt.com/changelog#marketing 2026-06-15-campaigns Invalid Date Marketing [new] Campaigns: turn a short brief into a ready-to-send email, target an audience, and track sends, opens and clicks. [new] Omni-channel: adapt a campaign into X posts and schedule them alongside the email send. [new] Sequences: multi-step automated email follow-ups with enrollment and exit-on-reply. [new] Audiences: build static lists or dynamic segments with a live count preview. [new] Reusable email templates, organised by category. [new] Analytics: sends, opens, clicks and unsubscribes over time, per campaign and per sequence. https://blankitt.com/changelog#dmarc 2026-06-14-parity Invalid Date DMARC [new] Policy Progression Wizard: readiness scoring to guide you none → quarantine → reject. [new] Compliance grade (A–F) plus a printable compliance report with recommendations. [new] New Offenders page with search, filters and sorting. [new] Getting Started checklist and an in-app DMARC Guide. [improved] Dashboard now shows trends, policy mix and domains needing attention. [new] Built-in help: articles, an assistant, and contact: bottom-right. https://blankitt.com/changelog#marketing 2026-06-14-launch Invalid Date Marketing [new] Lead capture from the blankitt.com Mail Check assessment now flows straight into Contacts. [new] Contacts: search, status filters, add, and CSV import. [new] Dashboard with contact counts, sources and recent activity. [new] Built-in help and feedback: bottom-right. https://blankitt.com/changelog#dmarc 2026-06-13-selfserve Invalid Date DMARC [new] Change your plan (up or down) and add extra domains right inside Settings. [new] Per-domain data export before deleting, and a domain-cap-aware add flow. https://blankitt.com/changelog#hr hr-20260529-payroll Invalid Date HR [new] Full UK payroll engine: PAYE, NI, statutory payments, pension auto-enrolment, P45, P60 and P11D. [new] RTI submissions (FPS and EPS) generated with every pay run: live filing switches on with HMRC recognition. [new] Skills matrix and training-needs analysis in Learning & Development. https://blankitt.com/changelog#finance fin-20260529-consolidation Invalid Date Finance [new] Consolidate subsidiaries with ownership percentages and minority (non-controlling) interest handled properly. [new] Intercompany eliminations so group numbers aren't double-counted. [new] Currency translation reserve for non-GBP subsidiaries. [new] Equity-method consolidation for associates, plus partial-VAT-relief apportionment. https://blankitt.com/changelog#finance fin-20260526-departments Invalid Date Finance [new] Departmental read-scoping across transactions, reports and lists: people see their department, not the company. [new] Departmental dashboards and a department filter on P&L, balance sheet and aged reports. [new] Org-chart hierarchy view and an audit log for cross-department actions. https://blankitt.com/changelog#hr hr-20260525-selfservice Invalid Date HR [new] Employee self-service portal: payslips, leave and personal details in one place. [new] Document e-signing built in: offers and policies signed without another subscription. [new] 360° feedback and calibration for performance reviews. [new] A help centre with guides, FAQs and in-app support. https://blankitt.com/changelog#finance fin-20260525-payment-runs Invalid Date Finance [new] Faster Payments single-pay with a bank-ready instruction PDF. [new] Per-supplier remittance PDFs emailed automatically, with per-supplier opt-out. [new] VAT bad-debt relief claimed automatically on write-off (Box 4), with the 4-year-6-month window enforced. [improved] Goods-received notes as PDFs and an audit trail on purchase-order emails. https://blankitt.com/changelog#hr hr-20260523-launch Invalid Date HR [new] Core HR: people records, leave management, documents and the org chart. [new] Recruitment, performance reviews, learning & development, and ER case management: included from day one, on every tier. https://blankitt.com/changelog#finance fin-20260522-fixed-assets Invalid Date Finance [new] Fixed-asset register with a depreciation engine. [improved] VAT returns now respect your VAT scheme. https://blankitt.com/changelog#finance fin-20260517-mtd-vat Invalid Date Finance [new] MTD VAT returns prepared straight from the ledger. [improved] Every record is entity-aware: the foundation for running more than one business. https://blankitt.com/changelog#finance fin-20260424-open-banking Invalid Date Finance [new] Open Banking bank connections via TrueLayer: transactions flow in for reconciliation. https://blankitt.com/changelog#finance fin-20260403-invoicing Invalid Date Finance [new] Full-lifecycle invoicing with PDF generation and your company branding. [new] Invoice templates and recurring invoices. [new] Multi-currency invoicing with Pay Now payment links.