Use the export button in the Stream to download the logs that match your current filter. Choose a time range: the last 15 minutes, hour, 24 hours, or 7 days, or a custom range. Pick CSV with the visible columns for spreadsheets, or JSON Lines with every field for jq, scripts, or a SIEM.

Text filters in the Stream, such as contains, starts-with, and ends-with, now ignore letter case. Use contains-cs, not-contains-cs, starts-with-cs, or ends-with-cs when case must match exactly. New rule conditions also have Case Insensitive turned on by default. See Match letter case exactly.

Rate-limit actions that use the Default scope now give each client IP its own bucket. Previously the default bucket was shared by all clients, so one client could use up a limit, such as a login limit, for everyone. IPv6 clients are grouped by /64, so rotating addresses within one allocation no longer gets a fresh allowance.

Proxy v0.27.0 reads request values the way common backends do, so requests can't slip past a rule by spelling a value differently:

When you connect an AI client such as Claude, ChatGPT, or Codex to FlowGuard, you can now choose All my teams instead of a single team. The agent can then investigate logs and manage rules for every team you belong to, including teams you join later. It names the team on each request and asks you when the intended team is unclear.

When you connect an AI client such as Claude, ChatGPT, or Codex to Domain Chief, you can now choose All my teams instead of a single team. The agent can then work with every team you belong to, including teams you join later. It names the team on each request and asks you when the intended team is unclear.

Apps that support it, such as AI clients connecting through MCP, now offer All my teams when you authorize them. Choosing it grants access to every team you belong to, including teams you join later, so you don't need a separate connection for each team. The app still gets only the permissions you approve.

Turn on Upgrade proxies automatically under Proxy upgrades in settings. Once a day, every online server that allows remote upgrades is upgraded to the latest proxy release. A release that failed to install on a server isn't retried there automatically.

The GraphQL API now returns statistics for links and custom domains for a chosen range. They include totals, a timeline, and breakdowns by country, referrer, browser, and operating system. Links also expose their public and private statistics URLs, and the linkUpdateStatisticsSharing mutation changes who can see them.

Open the statistics for a link, redirect domain, or custom domain to see clicks, unique visitors, and crawler visits over the last 24 hours, 7, 30, or 90 days, or 12 months. Breakdowns show clicks by country, referrer, browser, and operating system.

Socket Chief provides hosted WebSockets for realtime features in your apps. It works with Pusher client and server libraries, so you can move an existing Pusher integration over without managing servers.

Individual reminders now send one email per domain 14 days before its renewal or expiration date and another seven days before, instead of a single email seven days ahead. The Weekly summary option is unchanged.

You can now register .ie domains. The registry requires a connection to Ireland, so contacts used for .ie domains choose one: a company incorporated in Ireland, a charity based in Ireland, or another connection to Ireland. The company and charity options are available only for business contacts.

Deploy Chief now emails team members when a deployment fails or succeeds. Each member chooses which emails they receive for a team under Deployment notifications in settings. Failure emails are on by default, and success emails are off until you turn them on.

The deployment log now summarizes the deployment in its header and updates its status live. Step output appears inline and opens automatically for failed steps. Steps skipped after a failure are marked, and when every step ran on the same server, the steps appear as a single list.

Turn on Update agents automatically under Agent updates in team settings to install the latest agent release once a day on every server that can be updated remotely. Agents finish their current work before updating. A release that failed to install on a server isn't retried there automatically.

The Email DNS check looks up a domain's MX, SPF, DKIM and DMARC records and explains them in plain language. It flags common mistakes, such as multiple SPF records, more than 10 SPF DNS lookups or a missing DMARC policy, and each result appears as soon as its check finishes. DKIM keys are found by trying common selector names, and you can also check your own selector.

Paste a PEM certificate, certificate chain or certificate signing request into the Certificate & CSR decoder to see its subject, alternative names, issuer, validity dates, key type and size, and fingerprints.

The Password generator creates random passwords in your browser, and they're never sent to our servers. Choose how many passwords you need, their length and the character sets, optionally excluding look-alike characters such as 0, O, 1 and l. Or start from a preset, such as five 24-character passwords without look-alikes, an API secret or a PIN. Your settings are kept in the URL, so you can bookmark your favourite setup.

Use the Unix timestamp converter to turn a timestamp into a readable date or a date into a timestamp. Seconds, milliseconds, microseconds and nanoseconds are detected automatically. Results are shown in UTC, your local time and any timezone you choose, along with the relative time and ISO week. The current timestamp is shown at the top, ready to copy.