v0.4.6 — Reliable anonymous operation counters

Anonymous visit and conversion counters now have enough time to finish on the restored remote database connection. The timeout remains bounded, and a statistics failure still cannot fail a customer operation.

Verified by reproducing the missing increment, testing the dedicated database role, and confirming that the corrected signed API persists the counter. Privacy/event-validation tests, formatting, optimized build and CI pass. Publisher signatures, trusted timestamps and package hashes are verified.

Website: https://glarion.app
The existing free hosting setup is unchanged and still requires the PC, user session and internet connection.

v0.4.5 — Service and transactional email restored

Glarion is online again: https://glarion.app

The API and scan worker now run through the existing Cloudflare Tunnel and Supabase Free database, with a signed Windows launcher and encrypted local credentials. Existing accounts and data are preserved; no new paid hosting plan was activated.

Public pages and the free website check pass. Delivery of the partial report and password-recovery email is confirmed, with official links. Stripe's existing webhook points to the restored backend, and all six live prices are verified. No real purchase, new-account activation or password change was performed during verification.

Backend/frontend checks, dependency audit, publisher signatures, trusted timestamps, package hashes and tamper rejection passed. The attached signed manifest binds the deployed files.

Hosting requires the operator's PC, signed-in session and internet connection to remain available.

Compare plans: https://glarion.app/pricing.html
Try the public check: https://glarion.app/#public-check

v0.4.4 — Clear annual savings and simpler setup

Annual plans now show the cost of twelve monthly payments crossed out, a savings badge and the actual yearly charge. Each annual plan saves at least 25%; configured Stripe prices are unchanged.

Studio's star recommendation sits above the plan card. Setup and service guides now explain email confirmation, domain verification, free-check scope and client reports more clearly. SPF/DMARC wording describes the published policy without promising a mail-delivery outcome.

Validated on desktop and mobile, including an isolated annual checkout test. The deployment image and configuration are bound to a verified publisher signature and trusted timestamp.

Compare plans: https://glarion.app/pricing.html
Setup guide: https://glarion.app/how-it-works.html

v0.4.3 — Clear priorities and a visible plan recommendation

Glarion v0.4.3 — Clear priorities and a visible plan recommendation

Studio now carries a visible Recommended badge on the landing page, pricing page and account billing view. Its distinct surface and border help visitors compare plans, while all offers retain their clickable cards, actual monthly/yearly prices and explicit registration-to-checkout flow. The badge is an editorial recommendation, not a customer popularity claim.

High-priority findings now have a clear bordered label and highlighted container in the landing report preview. Priority badges are more readable and consistent in the dashboard, sample report and production report renderer. Sample page metadata, next-step links and printable report behavior are preserved.

Validation: TypeScript check/build, 24 frontend tests, 23 report tests, 15 marketing destinations, desktop and mobile checks at 390px and 320px, yearly Studio selection into signup, and the isolated billing view. Text contrasts exceed 4.5:1. No plan price or payment behavior changed.

Distributed only as the immutable image bound to the verified, timestamped publisher signature in the release manifest. No unsigned CI deployment is enabled.

v0.4.2 — Clear plans, a smoother path to checkout

Choose a plan directly from the landing or pricing page, with clearer features and monthly/yearly billing. Your selection stays with you through account entry and email confirmation into a final billing review. Existing subscribers manage changes through Stripe.

Validated desktop and mobile layouts, marketing links, all six Stripe prices, 24 frontend tests and the backend CI checks. Released with a verified, timestamped publisher signature binding the deployed image.

Explore the updated plans: https://glarion.app/pricing.html

Glarion v0.4.1 — A clearer path from check to client report

The approved Prism hero stays. The rest of the landing now gives visitors a shorter, clearer route from a free website check to a client-ready report.

• A labeled sample-report excerpt makes the findings, consequences and next steps concrete.
• Three setup steps explain account creation, email confirmation, domain verification and monitoring.
• Compact Free/Solo/Studio/Agency pricing explains paid features once, with unchanged prices and site allowances.
• Larger supporting type, stacked mobile form controls and concise FAQs improve readability.
• Technical guides remain accessible through the footer.

CI and CodeQL passed. Desktop and 320/390px layouts, production routes and the live public-check flow were verified. The immutable image digest was deployed through a valid timestamped publisher-signed manifest.

Try Glarion: https://glarion.app
Sample report: https://glarion.app/sample-report.html

Glarion v0.4.0 — Clear plans and client-ready reports

Glarion now makes the path from a public website check to a client-ready security report clearer.

• Free and paid plans are distinct across the website and app: Free (1 site), Solo (5 sites), Studio (10 sites), and Agency (40 sites) are shown with their allowances and next steps.
• Requested public checks send a partial-results email only when an address is supplied. The message links to the paid-plan comparison and a clearly fictional sample full report.
• Signup explains the 24-hour email activation link. Password creation, reset, and changes use the same server-side rule: 8–256 characters, an uppercase letter, and ASCII punctuation. Email and password changes are easier to find in Settings.
• Customer replies to Glarion email now go to hello@glarion.app, which routes to a verified mailbox.
• The landing page, workspace, and report were refined for clearer evidence, next steps, and client presentation. Updated assets are versioned to reach returning visitors.

The production configuration and immutable application image were deployed through a timestamped, publisher-signed manifest. CI and CodeQL passed; production health and a delivered public-check email were verified.

Website: https://glarion.app
Plans: https://glarion.app/pricing.html
Sample report: https://glarion.app/sample-report.html

Glarion v0.3.0 — Agency security monitoring, made clearer

What’s new

Glarion now presents a clearer, evidence-led workflow for digital agencies managing client websites.

• Rebuilt the public experience around website security monitoring and client-ready reporting.
• Added an ungated public website check with clearer scope and authorization boundaries.
• Added a fictional sample report that demonstrates the client deliverable without presenting invented customer evidence.
• Improved result visibility: checks now move directly to the result, while failures return focus to the domain field with a clear message.
• Added transparent plan comparisons, security controls, FAQs and product boundaries.
• Expanded structured data, sitemap freshness, repository metadata and search-oriented content.
• Added deployment notifications to Discord while retaining separate release announcements.
• Introduced formal brand guidelines for positioning, terminology, voice and visual consistency.

Safety and compatibility

No pricing, authentication, billing or active-scanning policy was weakened. Full scans still require current proof of domain control, private and reserved network targets remain blocked, and the detection-only scanning policy remains enforced.

Verification

• Complete CI passed on the release commit.
• CodeQL passed for GitHub Actions and JavaScript/TypeScript.
• Web tests, TypeScript checks, Rust tests, formatting and integration gates passed.
• Production deployment and public preview endpoint were verified after release integration.

Website: https://glarion.app
Sample report: https://glarion.app/sample-report.html

v0.2.0

The free check now reads five more things about a site, all of them from what the site already publishes to any visitor, so it still needs nobody's permission. It looks at SPF and DMARC, which together decide whether a stranger can send invoices as your client's domain; the flags on the cookies the front page sets; version numbers the server volunteers in its headers; and the camera, microphone and location policy. That is on top of the certificate, the security headers and the published files it already read.

The full scan is now part of the paid plans. It is the expensive half, it is the half that needs you to prove you own the domain, and it was being given away — which made the free plan the product and the paid ones a discount on it. The free check stays free, on one site, forever.

Two things you were paying for and could not reach. The certificate and TLS check existed on the server and had no button anywhere, so the only thing the dashboard could run was the vulnerability scan. You can now choose between them, and the scan history says which one each run was.

Settings tells you which address your account is on, sends you a password reset link if you do not have your current password to hand, and no longer offers to "send the confirmation link" on a page you can only open by having confirmed.

https://glarion.app

v0.1.0

Three things people told us were in the way.

You can see what the full scan is before you're asked to prove the domain. The free check reads what a site publishes to any visitor. Now the page also lists, plainly, the half that is held back: known vulnerabilities, exposed panels and files, versions with published CVEs, the whole certificate chain, findings ranked with the fix written out, and a report under your own name. One button takes you to the step that unlocks it. It is free on your first site.

The domain check says what it actually found. "Token not found yet" is gone. You now get told whether nothing is published at the record name at all, or whether something is published and it is not the value we issued. Two different problems, two different next moves.

You can change your password from Settings. Before, the only way was to use the recovery flow and pretend you had forgotten it. Changing it signs out every other device and keeps the one you are on.

Also fixed: long runs of blank space that were appearing in the middle of sentences in report guidance.

https://glarion.app