Keep up with the latest features and improvements to WebMon.
Browser Rendering for WAF Bypass & Auto-Dismiss Alerts
Highlights
- Browser Mode in tools — use headless Chrome to bypass WAF/bot protection
- Cloudflare Worker auto-detects WAF-blocked sites and retries with browser rendering
- All alerts now auto-dismiss after 5 seconds with smooth fade-out
Browser Mode in Tools
- • New "Browser Mode" toggle on Redirect Checker, Content Checker, and Security Scanner
- • Uses headless Chrome to render pages — bypasses JavaScript challenges and bot protection
- • Follows JS redirects and meta refreshes that regular HTTP can't detect
- • Handles sites with invalid SSL certificates gracefully
WAF Detection & Auto-Bypass
- • Cloudflare Worker detects WAF-blocked responses (403/429/503 with WAF headers)
- • Automatic fallback to headless Chrome when WAF is detected
- • needs_browser flag set on monitors so future checks skip straight to browser
- • Flag auto-clears after 7 days to retest with regular HTTP
- • WAF and browser badges shown in check history
Alert Improvements
- • All flash messages now auto-dismiss after 5 seconds with fade animation
- • MaryUI toast system enabled — action feedback shows as auto-closing toasts
- • Monitor bulk actions (pause/resume/delete) now show toast confirmations
- • Admin invitation and plan actions show proper toast feedback
Moderator Role & Admin Improvements
Highlights
- New moderator role with scoped admin access
- Monitor detail page converted to Livewire for smoother interactions
- Last login tracking for admin user management
Moderator Role
- • New role between regular user and admin with limited permissions
- • Moderators can manage bug reports, contact messages, and view users
- • Admin-only routes protected — moderators cannot access settings or campaigns
- • Role badge shown in admin user list
Monitor Detail Page
- • Fully converted to Livewire — actions work without page reloads
- • Run check, toggle status, pause notifications all happen inline
- • Domain WHOIS refresh, follow redirect, and delete with confirmation modals
- • Security false positive reporting with live UI updates
Admin Improvements
- • Last login timestamp shown in admin users table
- • Status badge component defaults to small size for consistency
- • Expanded moderator permissions for day-to-day support tasks
Admin Panel Livewire Conversion & UI Polish
Highlights
- All 15 admin forms converted to Livewire — selects, actions, and validation now work reliably
- Custom confirmation modals replace browser-native confirms across all admin actions
- False positive review buttons now fade after action, keeping focus on pending reports
Admin Forms on Livewire
- • User details, bug reports, invitations, email templates, redirects, plans, campaigns, and contact messages all converted
- • Select dropdowns now correctly display saved values (MaryUI + Livewire fix)
- • Form validation happens server-side with real-time error display
- • Moderator role-based visibility enforced on all admin forms
Confirmation Modals
- • All destructive admin actions now show styled confirmation dialogs
- • Color-coded by severity: red for delete, yellow for sends, blue for approvals
- • Replaces generic browser confirm() popups with branded modals
Admin UI Improvements
- • False positive action buttons subdued after review with hover-to-reveal
- • Affiliate link badges decluttered — ad slots collapsed to count
- • Bug report status badges no longer wrap mid-word
- • Redirect table icons converted from raw SVG to consistent icon components
What's New Emails, AI Ad Copy & Shareable Invite Codes
Highlights
- New "What's New" email template to keep users informed of platform updates
- AI-powered email ad copy generation for affiliate links
- Shareable invitation codes for forum distribution — one link, multiple sign-ups
What's New Email
- • New email campaign template showcasing the latest platform update
- • Includes version badge, highlights, and detailed section breakdown
- • Optional sponsor/ad section at the bottom for affiliate links
- • Email-specific ad copy field on links — separate from the regular description
AI Email Descriptions
- • "Generate with AI" button on affiliate link forms for email ad copy
- • Uses Claude AI to create compelling one-liner descriptions
- • One-click generation from the link title and URL
Shareable Invitation Codes
- • Create multi-use codes (e.g. afflift-2026) for forum posts
- • Set max uses, expiry, and referral source tracking per code
- • Users register with any email — no per-person invite needed
- • Track registrations per code in the admin panel
- • Filter invitations table by single-use vs shareable codes
Alert Fix, Accessibility & UI Polish
Highlights
- Slow response alerts limited to once per day — no more hourly email floods
- Accessibility improvements across all forms and interactive elements
- Tables and profile converted to Livewire for smoother interaction
Alert System Fix
- • Slow response alerts now limited to one per day per monitor (was sending every hour)
- • Matches the daily limit already used for SSL expiry alerts
- • Significantly reduces email volume for persistently slow monitors
Accessibility Improvements
- • Form labels properly linked to inputs via MaryUI label, hint, and error props
- • Screen reader labels corrected across all interactive elements
- • Table action buttons standardized to icon-only with descriptive tooltips
UI Refinements
- • Profile page, tables, and forms converted to Livewire components
- • Admin navigation moved from dropdown to sidebar for easier access
- • Theme toggle alignment improved in admin sidebar
- • Error pages updated with consistent button styling
- • Button colours refined across the platform
Performance & Stability
- • Profile page memory usage fix — incident counting now uses SQL instead of in-memory processing
- • CSP policy updated for Alpine.js and MaryUI component compatibility
- • Root favicon added for better browser tab display
- • Removed legacy custom CSS classes and support files
UI Overhaul — MaryUI Components & Livewire
Highlights
- Full migration to MaryUI component library with DaisyUI 5 theming
- Interactive features powered by Livewire — faster, smoother experience
- Charts bundled locally — removed all external CDN dependencies
Modernized Interface
- • All forms use standardized MaryUI components with consistent styling
- • Buttons, stat cards, and badges unified across every page
- • Status badges use DaisyUI badge-soft variant with automatic dark/light theming
- • Collapsible sections, progress bars, and loading indicators upgraded
- • Built-in theme toggle with smooth sun/moon animation
Livewire-Powered Features
- • Tag Manager with inline create, edit, and delete — no page reloads
- • Security Scanner, Redirect Checker, and Content Checker rebuilt as Livewire components
- • Notification bell with real-time polling
- • Security Status and Compliance cards with live updates
- • Monitor and Stats page charts rendered via MaryUI chart component
Performance & Security
- • Chart.js bundled via npm — no more external CDN scripts
- • Tightened Content Security Policy directives
- • Eliminated jsdelivr CDN dependency from CSP whitelist
- • Reduced custom CSS footprint — leveraging DaisyUI semantic classes
Navigation & Layout
- • Navigation rebuilt with MaryUI nav component and dropdown menus
- • Admin sidebar uses MaryUI menu with badge counts
- • Password fields have built-in show/hide toggle
- • Color picker for tag management with live preview
Plan-Based Features & Profile Improvements
Highlights
- Alert settings gated by plan — see only what your plan includes
- Login redirect preferences — choose your landing page
- CSP nonce hardening across all templates
Plan-Based Alert Settings
- • Alert settings page now shows only features available on your plan
- • SSL monitoring alerts available on Pro and Expert plans
- • DNS monitoring available on Pro and Expert plans
- • Telegram notifications available on Pro and Expert plans
- • Sidebar and active alerts summary respect plan gating
Profile & Login Improvements
- • Choose your landing page after login: Profile, Monitors, Alerts, or Stats
- • Change Password moved to a prominent button in the profile action bar
- • Plan names display correctly as "Starter" across the entire platform
- • New users get 6 default tags for organizing monitors (Landing Pages, WordPress, Offers, Tracking, Email, Domains)
- • Status page settings hidden for plans without the feature
Admin Improvements
- • Fixed plan update validation bug in admin user management
- • Affiliate link management with dropdown slot selection
- • Configurable recommended services display limit (1–4 links)
Security & Infrastructure
- • CSP nonce hardening across all Blade templates
- • Authorization policy consistency improvements
- • Contact form spam filtering hardened
- • HTMLPurifier integration for content sanitization
Security Hardening & Platform Stability
Highlights
- Comprehensive security audit and hardening
- Worker API nonce-based replay protection
- 1,200+ lines of dead code removed
Security Hardening
- • Nonce-based HMAC replay protection on worker API
- • Rate limiting on sensitive endpoints (login, tools, settings)
- • CORS lockdown — removed wildcard origins
- • Password breach checking via Have I Been Pwned
- • Uniform error responses to prevent information leakage
- • Deactivated user login prevention
- • Input validation limits on worker API payloads
Worker Improvements
- • IPv6 CIDR support for IP allowlisting
- • Reduced logging exposure (no token or header dumps)
- • Coordinated nonce signing between worker and server
Code Cleanup
- • Removed 33 unused model scopes across 13 models
- • Removed 11 unused service methods
- • Removed 7 unused helper functions and accessors
- • Removed unused packages (laravel/sail, autoprefixer, postcss)
- • Cleaned up 12 unused config keys
Bug Fixes
- • Fixed critical PlanChanged notification constructor mismatch
- • Fixed CheckMonitorHealth command TypeError
- • Fixed TinkerServiceProvider not found on production
- • Hardened User model mass assignment protection
DNS Monitoring & Bug Fixes
Highlights
- Full DNS monitoring for all record types
- Auto-close resolved bug reports
- Enhanced getting-started guide with screenshots
DNS Monitoring
- • Monitor DNS records: A, AAAA, MX, NS, TXT, CNAME, SOA, SRV, CAA
- • Custom DNS server selection (1.1.1.1, 8.8.8.8, or custom)
- • Expected value validation for DNS records
- • Historical DNS resolution tracking
- • User-friendly DNS error messages
Bug Tracking Improvements
- • Auto-close resolved bug reports after 72 hours
- • Reply to resolved tickets (closed tickets remain locked)
- • System activity logging for automated actions
Performance & Fixes
- • Fixed duplicate monitor checks
- • Fixed keyword monitor validation errors
- • Enhanced error message translation
- • Improved scheduler configuration
Documentation
- • Added 14 screenshots to Getting Started guide
- • Visual walkthrough of all features
- • Improved onboarding experience
Security Tools & Content Scanning
Highlights
- Security Scanner tool - scan any URL for threats
- Content Security Scanning on all HTTP monitors
- Notification pause feature
New Tools
- • Security Scanner - Scan any URL for phishing, hacks, and malicious content
- • Content Change Checker - Detect webpage modifications
Content Security Scanning
- • Automatic threat detection on every HTTP monitor check
- • 8 threat categories: Google bans, hacks, phishing, and more
- • Threat scoring (0-100) with clean/warning/threat status
- • Whitelist patterns to reduce false positives
- • Zero API cost - analyzes content already being fetched
Notification Pause
- • Pause notifications from dashboard, monitor page, or alert emails
- • Flexible durations: 1h, 4h, 24h, or indefinite
- • Monitor keeps checking - only notifications paused
Improvements
- • Standardized UI components
- • Improved CSP compliance
- • Form accessibility fixes
- • New Help Center articles
Redirect Checker & Status Pages
Highlights
- Redirect Checker tool with page download
- Status page performance improvements
- Bulk monitor operations
Redirect Checker Tool
- • Trace complete redirect chains
- • Multiple device emulation (Desktop, iPhone, Android)
- • Browser user-agent switching
- • View page source code
- • Download page with assets as ZIP
Status Pages
- • Performance optimization for large monitor lists
- • Fixed uptime color display (≥99% = green)
- • Improved response time calculations
- • Better tag and status filtering
Bulk Operations
- • Bulk pause/resume monitors
- • Bulk delete monitors
- • Select all / deselect all
Email Campaigns & Help Center
Highlights
- Admin email campaign system
- Knowledge Base launched
- Welcome emails for new users
Email System
- • Admin-managed email templates
- • Campaign management with user targeting
- • Filter by plan, activity, registration date
- • Send test emails before campaigns
- • Track sent/pending/failed status
Help Center
- • Knowledge Base with categorized articles
- • Markdown support with syntax highlighting
- • Search functionality
- • Related articles suggestions
- • View count tracking
User Experience
- • Auto welcome emails for new users
- • Improved FAQ page
- • Getting Started guide updates
Push Notifications & PWA
Highlights
- Web push notifications
- Full PWA support (iOS & Android)
- In-app notification center
Push Notifications
- • Web push notifications for monitor alerts
- • VAPID authentication for security
- • Works on desktop and mobile browsers
- • iOS PWA push support
- • Test notification button
Notification Center
- • Bell icon with unread count
- • Dropdown notification list
- • Mark as read / Mark all read
- • Full notification history page
PWA Improvements
- • Install prompt for mobile users
- • Offline indicator
- • App-like experience on mobile
Bug Tracking & Security Hardening
Highlights
- Bug report system with screenshots
- Critical security fixes
- Security compliance grading
Bug Tracking
- • Submit bug reports with descriptions
- • Screenshot attachments (up to 3)
- • Admin reply system
- • Status tracking (open, in progress, resolved)
- • Image modal for full-size viewing
Security Hardening
- • Fixed 5 high-risk security issues
- • Monitor authorization policies
- • Cloudflare trusted proxy setup
- • Tightened CSP headers
- • Rate limiting on sensitive endpoints
Security Compliance
- • Security header analysis for monitors
- • Compliance grading (A+ to F)
- • CSP, HSTS, X-Frame-Options checks
- • COOP, COEP, CORP header detection
Launch & Core Platform
Highlights
- Invite-only launch
- Core monitoring functionality
- SSL certificate monitoring
Monitor Types
- • HTTP/HTTPS website monitoring
- • Keyword presence/absence detection
- • Response time tracking
- • SSL certificate expiry monitoring
- • Configurable check intervals
Alerts
- • Email notifications for down/up events
- • Slow response time alerts
- • SSL expiry warnings
- • Customizable alert thresholds
Dashboard
- • Monitor overview with status
- • Response time charts
- • Uptime percentage display
- • Tag organization
- • Quick actions
User Management
- • Invite-only registration
- • Profile management
- • Two-factor authentication ready
- • Session management
Have feedback or suggestions?
We'd love to hear from you! Report bugs or suggest features.