What's new at BuildAPI
What has shipped, newest first. Everything here is live; nothing is listed before it is.
New features
Improvements
Bug fixes
0.10.0
- a yearly PDF statement of every payment, emailed each January to the addresses you choose
- a printable account record for procurement and supplier forms
- owners can require two-step sign-in for every member
- an owner can hand a team to another member
- an email when your account is signed in from a new device
- your tax ID and billing address on receipts, statements and the account record
- a key can carry its own end date, with a week's notice before it stops
- the data export carries everything held about you, and deleting your account erases it everywhere
0.9.0
- Status page: incidents with their timeline, planned maintenance, uptime per service and an Atom feed
- Status emails: one when an incident opens, one when it is resolved, notice of maintenance ahead — for the services you choose
- A redesigned site and dashboard, with dark mode and a light/dark switch
- Forms check what you type as you go, and say what is wrong next to the field
0.8.0
- Findings get an owner, a status and a due date, with reminders, escalation and a weekly digest
- Notes and @mentions on a finding, and a history timeline for each one
- An opt-in public trust page per domain, with an embeddable badge
- A signed quarterly evidence pack, and a security event feed for your SIEM
0.7.0
- Active testing: safe, authorized checks of your own site, on demand or on a schedule
- A read-only scan API, and scan results and regressions as webhooks (Slack format too)
- Accept a finding as a known risk, with a review date and a reminder before it lapses
- Copy a finding as a ready-to-paste ticket, or export a whole scan as CSV
0.6.0
- Security scans of your verified domains: DNS and email deliverability, TLS, headers, and files that should never be served
- Watched domains are re-scanned on a schedule, and you hear only when something new goes wrong
- A printable, shareable scan report
0.5.0
- Protected content: substance served at runtime, so a copied site renders empty
- Domain ownership proof by DNS TXT record or /.well-known file
- Signed offline entitlement, so a brief outage here does not break your site
- One shared enforcement chain across every API endpoint
0.4.0
- Recurring charges were sent an invalid billing address and could never succeed
- Dunning retried every minute; it now backs off over days before downgrading
- Admin revenue and refunds read the wrong table and reported zero
- Customers can read and answer support replies
0.3.0
- A cancelled plan never lapsed and kept paid entitlements indefinitely
- A late payment confirmation could cancel a newer, live subscription
- Trial keys could be extended by their own holder
- Monthly call quota now enforced at the gateway
0.2.0
- Paystack webhook receiver, so a payment is never lost to a closed tab
- Bot protection fails closed on an invalid, revoked or expired key
- Gateway latency is now measured rather than estimated
- Industry list expanded to 34 verticals
0.1.0
- Domain-locked API keys with HMAC-signed, nonce-bound verification
- Teams, five roles, invitations and per-key scopes
- Two-factor authentication with backup codes
- GDPR data export and account erasure
Stay up to date
Signed in, new releases appear on your dashboard. To have each one emailed to you as well, turn on release emails under Notifications.
Notification settings