Changelog

Dismiss a check once for the whole site, sharper fixes, and a lot more polish.

• Dismiss a check once and it's silenced across your whole site, with an optional reason. No more clicking it page by page, and you can review or restore everything you've dismissed in Settings.
• Copy fix now gives you the complete fix: what to change and where to put it. Copy for AI writes a proper brief your assistant can act on, ordered by severity, with a step to verify each fix.
• Mizzen now recognizes downloadable desktop and mobile apps, not just App Store links, so a buy-once Mac or Windows app gets the right checks instead of being read as a web app.
• Fewer false alarms: Cloudflare email-protection links and trailing-slash canonicals are no longer flagged, and a whole-site scan that can't start now shows a real error with Try again instead of spinning forever.
• Polish throughout: a branded scanning view, a clearer Dismiss button, sharper share cards, and motion that respects Reduce Motion.

Rescans always reflect your latest changes.

• Rescans now always show your latest changes. Fixed an issue where Mizzen could keep showing an old result until you restarted the app.
• Clearer security warnings. The stack and version check now tells you exactly which header or tag is leaking, instead of a generic tip.

Sharper scans, smarter site detection, and a site type picker.

• Pick your site type before you scan. Mizzen still detects it automatically, but if you already know it is a store, a waitlist, or an app landing page, you can set it up front so the right checks run the first time.
• Two new site types: nonprofit and event. Mizzen now recognizes donation pages and event pages and runs the checks that matter for them, like a working donate or ticket link, a real future event date, and your charity or tax status.
• More checks for the types you already use. Courses get checked for a working enroll link and a refund policy, stores get flagged when a price has no way to buy it, and waitlists get a nudge to tell people what happens after they sign up.
• Smarter site type detection, especially for sites built with React, Vue, and other JavaScript frameworks, and for non-English sites, so a German or French store, pricing, or legal page is read correctly instead of as a plain content page.
• Fewer false alarms. Store and checkout links that redirect are no longer flagged as broken, internal links behind a login or rate limit are not called broken, PayPal.Me payment links are now checked, and the pricing, favicon, and source map checks look at the right place.
• More accurate cookie security. Mizzen now checks your session cookie on its own instead of lumping every cookie together, so it catches a missing HttpOnly or Secure flag it could miss before.
• Quieter site monitoring. When a watched site goes down you get one alert, not a repeat every check until it comes back.
• More reliable activation. If your license key cannot be saved, Mizzen tells you instead of looking activated and then locking again the next time you open it.

ShipKit is now Mizzen, with a whole new Security category.

• ShipKit is now Mizzen: same app, new name and a new sail icon. Your license, watched sites, and settings carry over untouched.
• New Security category, 21 pre-launch checks: clickjacking protection, session-cookie HttpOnly/Secure/SameSite, exposed API keys in your page and JS bundles, password forms over http, public /.git or /.env files, framework debug pages, exposed source maps, and weak security headers.
• Email and domain safety: flags a missing DMARC or SPF record so no one can spoof your domain, and warns when your TLS certificate is about to expire.
• Subdomain-takeover detection for dangling DNS that still points at an unclaimed host.
• Light, Dark, or System appearance switch in the menu-bar footer, with a matching monochrome menu-bar sail.

Per-page checks, a bigger checklist, and updates that just happen.

• Whole-site scans check each page as its own type, a waitlist, store, docs page, or portfolio each get the checks that matter for them.
• Watch a site after you scan it and get notified the moment a passing check starts failing or the site goes down.
• Copy for AI: one prompt with every issue and its fix, ready to paste into Claude, Cursor, or ChatGPT.
• Background self-updates, branded client PDF export, and a faster scanner that stops tripping CDN rate limits.