Growth Pilot
Sign inStart free

Changelog

Everything we ship

Every notable change to Growth Pilot — features, security and performance. Format inspired by Keep a Changelog.

Up next

Unreleased

Hardening and public-surface work: security first, then the SEO and platform assets.

Security
  • Row-level security enabled on all 24 tables — closing a PII exposure via the public Supabase REST API. Security advisor: 0 errors.
  • HTTP security headers (HSTS, X-Frame-Options, nosniff, Referrer-Policy, Permissions-Policy) and poweredByHeader disabled.
Added
  • Public /showcase gallery — an SEO directory of Growth Loops, filterable by type, seeded with 12 teardowns of famous loops.
  • Tracked referrals — a /r/[slug] route (REFERRAL_VISIT event credited to the org, attribution cookie, UTM) plus a “Built with Growth Pilot” watermark.
  • /mcp landing page for the MCP server — the agent-native wedge.
  • /api/health — health endpoint (DB ping) for uptime monitors.
  • JSON-LD structured data — Organization/WebSite/SoftwareApplication (global), ItemList (showcase), BlogPosting/CreativeWork/BreadcrumbList.
  • Error boundaries across the app.
  • “Book a demo” button (Calendly-backed, dormant until configured).
  • CI on GitHub Actions (lint + typecheck + tests + build) and Dependabot.
  • Playwright E2E suite — 18 tests covering public journeys and hardening.
  • Repo hygiene: professional README, SECURITY.md, LICENSE, CONTRIBUTING, .editorconfig, .nvmrc, Node ≥ 20 engines, PR template.
Performance
  • Covering indexes on 5 foreign keys (Supabase performance advisor).

v1.0.0

MVP — Epics 1 to 12

The full product base, shipped and deployed on Vercel.

Added
  • AAARRR Cockpit — all 6 sections live from GA4 and Stripe.
  • Growth Loops — visual builder, Monte-Carlo simulator, versioning and public loops.
  • A/B Testing with statistical significance.
  • Agile Missions — Kanban, sprints, burndown.
  • Editorial CMS and public blog.
  • Multi-tenant — Clerk Organizations, roles, strict anti-IDOR isolation.
  • Stripe Billing with self-serve checkout and customer portal.
  • Integrations (Clarity, Hotjar, GA4, Looker, Sheets) with token encryption.
  • Goals & Alerts — the proactive cockpit.
  • Platform: public REST API v1, MCP server, signed webhooks (Enterprise).

Watch your own metrics move next

Start free and see the cockpit on your own GA4 and Stripe data.

Start free