Changelog
What's new
Every shipped change to AzureProof, in reverse chronological order.
v1.0.0
- AddedAzure subscription discovery — connecting a tenant now finds and stores its subscriptions, so subscription-scoped controls actually run.
- AddedCard-verified 14-day trials with full billing details. The card brand, last four digits and expiry are stored; the full number and security code never are.
- ChangedCheckout no longer shows a success page when no payment provider is connected. Upgrades are handled by our team until card payment is switched on.
- ChangedFramework coverage is now stated exactly: 317 controls carry a SOC 2 criterion, 40 also carry a CIS v3.0.0 code and an ISO 27001:2022 clause.
- FixedSign-up ended in an authorization error because this project requires email confirmation. It now ends on a confirmation screen and the workspace is created after you confirm.
v0.9.0
- AddedBlog moved into the database with full create, edit and delete from the admin portal.
- Addedllms.txt, a sitemap, AI-crawler rules and structured data for search and answer engines.
- ChangedOne shared header and footer across every public page, replacing per-page navbars that had drifted apart.
- ChangedSign-in and sign-up screens rebuilt as a split layout with a password reveal toggle.
- FixedEvery authenticated page crashed on a Radix Slot receiving a false child. Found by an end-to-end browser pass, not by a customer.
v0.8.0
- RemovedInvented testimonials, fabricated customer logos and unverified savings figures. A faked trust signal is the most damaging thing this product could ship.
- RemovedMicrosoft Sentinel from the integrations list — nothing in the engine reads it.
- ChangedThe public site URL is configuration, not code: one command syncs DNS, TLS, auth allow-lists and the consent redirect.
v0.7.0
- FixedPre-launch security audit remediated: organization takeover, invitation-token leak, plaintext Azure client secrets and unauthenticated workspace creation, among others.
- Changed96 controls that could not be checked automatically now report n/a and are excluded from your score, instead of reporting a pass they had not earned.
- AddedA 16-assertion database security gate that builds the schema from zero on every deploy and blocks the release if any row-level-security rule regresses.
v0.6.0
- AddedCIS Azure Compute Services benchmark — App Service, Functions, virtual machines, container instances and Batch. The catalogue reaches 317 controls.
v0.5.0
- AddedCIS coverage for Storage, Databases, Identity, Governance, Networking, Defender for Cloud and Key Vault — 259 controls.
v0.4.0
- AddedThe 40-control SOC 2 base, with a framework schema and reviewed CIS v3.0.0 and ISO 27001:2022 requirement mappings.
- AddedFramework mappings shown on the control detail page, and a live control count on the dashboard.
v0.1.0
- AddedFirst commit: the project scaffold and the SOC 2 rule book the control library is built from.