Release Notes

Launch Summary

• Confirmed the public cyber tools subdomain as cyber.contentauthority.com.au.
• Kept the website scanner free for traffic and trust building.
• Built a monetisation ladder after the report: Fix Pack, AI Ready Fix Pack, WordPress SafePatch, hacked-site repair, donations, and sponsor placements.
• Created a Claude launch handoff prompt in claude-cyber-launch-handoff-prompt.md.

Free Scanner + Offer Stack

Lightweight SOC Visibility Console

• Added SOC Visibility navigation and panel.
• Added sidebar links and a first-panel launch card for the free public cyber tools.
• Includes endpoint, browser intelligence, log aggregation, and network/file triage positioning.
• Launch recommendation: keep Product 2 as analysis-on-demand so running costs stay low.
• Future paid path: Lightweight SOC Watch or incident-review packs.

WordPress Security Tester + Patch Planner

• Repositioned as a self-service WordPress audit and assisted patching workflow.
• Main action changed to Request AI Fix.
• Requests go to backend/local queue for Content Authority review.
• Live work remains gated by approval, backup, staging or maintenance window, rollback, and smoke testing.

Hacked Website Symptom Checker

• Production-hardened and launch-ready. XSS audit passed — all innerHTML uses escapeHtml(); user URL input only via textContent or encodeURIComponent.
• Meta description, canonical URL, and clean footer added.
• alert() replaced with in-button visual feedback ("Copied!").
• Cross-linked from security_portal.html Fix My Hacked Website section: "Not sure if you're hacked? Try the free symptom checker →"
• Privacy Policy footer link added.
• Route /hacked-website-checker rewrites to hacked_website_checker.html via root .htaccess.
• No backend, no live scan, no server access, no login required.
• Directly supports the Fix My Hacked Website emergency service.

Phishing Email Checker

• Added a standalone free phishing email checker.
• Users paste suspicious email text, sender details, subject lines, or headers and receive a rule-based phishing risk score.
• Indicators include urgency, credential requests, payment themes, suspicious links, attachment risk, impersonation wording, and sender spoofing clues.
• No backend, email storage, external API, or attachment upload required for launch.

Free Cyber Tools Hub

• Added a standalone hub for lightweight browser-only tools.
• Includes Password & Login Risk, Email Spoofing Readiness, WordPress Plugin Risk, and Incident Response Checklist tools.
• Each tool creates a rule-based score, recommended next steps, and a review request CTA.
• No backend, user accounts, external APIs, or storage required for launch.

Backend + Internal Dashboard

• Added tools-backend/api/wp/request-fix.php as a lightweight WordPress AI Fix request intake endpoint.
• Endpoint validates request basics, creates request IDs, and queues records without executing commands or storing credentials.
• Added AI Fix Review Queue to the internal dashboard.
• Agents can ion>
  Next Tasks

  Production Readiness Backlog

  Next

  • Add the $20/month AI Security Watch recurring offer. ✓ Done
  • Create real Stripe links for AI Ready Fix Pack, SafePatch, hacked-site repair, donation, and subscription products.
  • Decide whether hacked-site repair gets its own internal incident queue. ✓ Done — Incident Review Queue added.
  • Confirm feedback-connector.js exists on the production subdomain or remove its script tag.
  • Review all public claims for compliance: no guaranteed cleanup, instant recovery, or 100% protection promises.
  • Upload security_portal.html with all July 2026 changes to server (AI Watch, print view, AI Ready toggle).
  • Set AuthUserFile path in admin/.htaccess and create .htpasswd on server.
  July 6, 2026

  Production Pass — Cyber Tools Launch

  security_portal.html hacked_website_checker.html phishing_email_checker.html free_cyber_tools.html cyber_protection_tools.html internal_dashboard.html data_privacy.html .htaccess

  • AI Security Watch — $20/month recurring monitoring card added to security_portal.html. Domain-aware mailto, 10% Fix Pack/SafePatch discount, clear scope disclaimer (monitoring only, no live patching).
  • AI Ready Fix Pack — variant toggle in Fix Pack pricing box. +$100 on tier price. Machine-readable JSON + AI prompt template. Mailto fallback until Stripe links created.
  • Print-view findings — 16-point findings section renders on print only in OBSERVED VALUE / ASSESSMENT / REMEDIATION card format.
  • Incident Review Queue — new tab in internal_dashboard.html. New → In Triage → Awaiting Client → Escalated. Five-point recovery checklist.
  • Admin launchpad — admin/index.html at cyber.contentauthority.com.au/admin/. Basic auth via .htaccess. Cards for all live and planned tools.
  • Hacked Website Symptom Checker — production-hardened: XSS audit passed, meta tags added, visual copy feedback, cross-linked from scanner, privacy footer added, route configured.
  • Data Privacy page — data_privacy.html. Covers passive scan approach, no-cookie policy, Stripe handling, Australian Privacy Act + GDPR rights. Footer link on all cyber tools.
  • Root .htaccess — clean URL rewrites (/hacked-website-checker, /scanner, /privacy) + full security headers. Protects sources.md, .env, *.json.
  • XSS audit — all public tools — cyber_protection_tools.html, free_cyber_tools.html, phishing_email_checker.html all passed. Every user-controlled value uses escHtml()/escapeHtml() before innerHTML insertion. IOC type validation further constrains input surface. Clean.
  • Cross-tool navigation — footers added/updated on all 6 public pages. Every page now links to all other tools + Privacy. cyber_protection_tools.html had no footer previously — added.
  • .htaccess routes expanded — /tools, /soc-tools → cyber_protection_tools; /free-cyber-tools, /free-tools → free_cyber_tools; /phishing-email-checker, /phishing-checker → phishing_email_checker; /release-notes → cyber_release_notes.
  Handoff

  Claude Launch Prompt

  The handoff prompt for the next production pass is saved as claude-cyber-launch-handoff-prompt.md. It summarises the current strategy, edited files, production tasks, copy constraints, and validation requirements.