What's new in AIScan

Scan designation, cleaner header

• newEvery scan row across the community feed, /scans, /profile, and scan history now carries a short scan ID chip (#abc12345) so you can reference a specific scan unambiguously.
• fixedHeader logo no longer exposes a ?reset=1 query string in the URL — clicking the logo on the homepage silently resets the form via a client-side event.
• fixedRemoved duplicate extension CTA on the homepage — the header 'Get extension' pill is now hidden on / where the larger install banner already appears.

Private-by-default visibility

• newAuthenticated scans are now private by default across every channel — web, Chrome extension, REST API, MCP, Telegram bot, and scheduled scans.
• newNew 'Default scan visibility' toggle on /profile — one setting all channels read.
• newREST API and MCP now accept an isPublic override per call (query string on GET, JSON body on POST).
• improvedAnonymous scans remain public (required for shareable /scan/[id] URLs); a scans_public_or_owned DB constraint enforces this at the row level.
• improvedRescans from /scan/[id] respect the owner's default visibility instead of forcing public.
• improvedREST API docs updated to document the new default and override parameters.

Sign-up CTA everywhere

• newEvery scan surface now shows a 'Create a free account' prompt after a scan completes — homepage, /scan/[id], Chrome extension popup, MCP tool responses, and Telegram bot messages.
• newTelegram free daily limit raised to 5 scans/day for anonymous chats; linked accounts get 100/day.
• improvedSigned-in / linked users don't see the CTA — the prompt is scoped to unauthenticated sessions only.

Telegram bot

• new@AIScanBot on Telegram — scan any URL from a Telegram chat and get a full breakdown with top fixes.
• newLink your Telegram chat to your AIScan account (from /scan/[id] or /profile) so bot scans save to your history.
• newBotFather description artwork (640x360) matching the AI/scan branding.
• new'Chat with the Telegram bot' card on every scan report page and a pill CTA on the homepage.

Blog, monitoring, emails

• newFull blog at /blog with server-rendered markdown, cover images, OG cards, and RSS-friendly per-post .md endpoints.
• newAdmin blog editor at /admin/blog — draft, publish, upload cover images, and edit rich content.
• newMonitored sites — track any domain from a scan page or /profile and get a scheduled re-scan (daily or weekly) with grade-change alerts.
• newCron endpoint /api/public/hooks/run-scheduled-scans to run monitored-site scans in the background.
• newTransactional email pipeline: welcome, magic-link, signup, contact confirmation, grade-improvement, score-alert, reengagement, daily/weekly digest, and unsubscribe flow.
• newContact form at /contact with confirmation + notification emails.
• newSignup notifications so admins get a ping whenever a new account is created.

Polish & Performance

• fixedAdmin panel access restored — EXECUTE grant on has_role and SELECT grant on user_roles.
• newScan cache transparency — cached results now show a badge with timestamp and a one-click Re-scan for fresh data button.
• newForce a fresh scan with ?fresh=1 to bypass the 5-minute result cache.
• fixedHomepage community feed properly deduplicates domains — each site appears only once.
• newmissiondeck.ai hit 100/100 via xCloud nginx Link header configuration.
• improvedChrome Web Store listing description rewritten to remove keyword spam and resubmitted.
• fixedLogo navigation restored to client-side SPA routing — instant home, no more full page reload.

llms.txt Generator & SEO

• new/llms-txt-generator — free tool to build a standards-compliant llms.txt file with live preview, copy, and download.
• newGoogle Search Console verification meta tag for aiscan.site.
• improvedSitemap now includes every /docs page, /extension, /changelog, and the new /llms-txt-generator route.
• improved/llms.txt and /llms-full.txt updated to advertise docs, the Chrome extension, and the llms.txt generator.
• fixedScan report header — site favicon and domain are now the hero; duplicate dimension breakdown removed; gauge arc fully closes at 100/100.
• fixedHardened SECURITY DEFINER database helpers and upgraded @tanstack/react-start to patch undici advisories.

Chrome Extension

• newAIScan Chrome Extension published on the Chrome Web Store — scan any site without leaving your browser.
• newExtension popup with score, grade, 5-dimension breakdown, top fixes, and View full report link.
• newAPI key authentication in the extension — connect your account for scan history.
• newSmart install banner on the homepage for Chrome users (auto-hides when extension is installed).
• new/extension page with Chrome Web Store link, feature highlights, and popup screenshot.

Documentation

• newFull /docs section — 20 pages covering Getting Started, Scoring, all 5 check dimensions, 5 platform guides (WordPress, Shopify, Lovable, Replit, Next.js), REST API, MCP, Agent Skills, API Keys, and Chrome Extension.
• newDocs link in the site header and footer.
• improvedFooter redesigned as a clean 4-column layout (Product, Legal, For Agents, copyright bar).

Performance & UX

• newReact Query caching — admin, profile, and shared report pages load instantly on revisit.
• newCommunity feed live-updates after each scan and auto-refreshes every 60 seconds.
• newRe-test button on every scan card — pre-fills the form and auto-scans.
• newScan limit modal — anonymous users who exhaust free scans see a sign-up prompt.
• new3 stat counters above the community feed (sites scanned, avg score, not AI-ready %).
• fixedLogo link forces full page reload for a clean homepage state.
• fixedINFO checks excluded from score calculation (informational only, don't affect grade).
• fixedMobile overflow on homepage, scan result pages, and shared report pages.
• improvedLovable platform detection via JS bundle scanning — works on custom domains.

Global layout & detection accuracy

• newGlobal site header and footer now appear on every page (scan results, profile, admin, how-it-works, changelog, auth, 404).
• fixedReplit detection now uses attribute-scoped scanning (src/href values) to avoid false positives on body text, while correctly identifying custom-domain Replit sites.
• fixedLovable detection for custom domains — detects via data-lovable-id, lovable-tagger scripts, lovableproject.com references, and meta generator tag.
• fixedaiscan.site no longer misidentified as Replit.

User accounts & privacy

• newUser profile page at /profile with full scan history (public + private).
• newEditable display name on profile page.
• newPublic/private scan toggle on the scan form — private scans only visible to their owner.
• improvedLogged-out users attempting private scans see a sign-in prompt instead of being silently blocked.
• newHeader avatar dropdown for logged-in users with Profile, Admin (if applicable), API Keys, and Sign out.

API keys & agent authentication

• newAPI key system — generate named keys (ask_…) from your profile page.
• newMCP and REST API now accept Authorization: Bearer ask_… for authenticated scans attributed to your account.
• improvedAll fix guides now lead with AIScan's own tools (Claude skill, MCP, REST API) as the primary fix path before manual steps.
• newPlatform-specific fix guidance for Lovable and Replit projects.

Community scans & public result pages

• newCommunity scan feed on the homepage showing the latest 10 public scans with favicons, scores, and grade badges.
• newBrowse all public scans at /scans.
• newSEO-friendly public scan result pages at /scan/[id] with full OG metadata and canonical URLs.
• newDynamic sitemap includes all public scan result pages.
• newScan results now saved to the database on completion (previously only computed client-side).

Admin panel

• newRole-based access system with admin/user roles.
• newAdmin dashboard at /admin — total scans, registered users, score distribution, top domains, recent scans table, and full user list with role badges.
• fixedAdmin redirect no longer fires before role is resolved from the database.
• newAdmin link appears in the header dropdown only for admin accounts.

Agent surface polish

• newPublic REST API now serves a designed HTML docs page at /api/public/scan when opened in a browser, with a try-it form and example curl commands.
• newFull favicon + PWA manifest set (16, 32, 180, 192, 512, .ico) so the icon shows in browsers, mobile home screens, and link previews.
• newChangelog page (this one) — link in the footer.

Smarter detection & cleaner sharing

• improvedFramework detection now identifies Astro, Next.js, Nuxt, SvelteKit, Remix, Gatsby, Angular, Vue and React — meta-frameworks take priority over generic library matches.
• newServer-side report storage with short share URLs — aiscan.site/r/abc12345 instead of a giant base64 hash. Each report has its own OG metadata.
• fixedReplaced the brittle hash-based share link with a proper Create-share-link → copy flow.

Built for AI agents

• newProgrammatic scan API at /api/public/scan (GET + POST) with 5 req/min rate limiting per IP.
• newMCP server at /api/mcp exposing scan_website, get_fixes, and get_grade tools.
• newAgent Skill (aiscan-skill.json) and Claude Code skill (CLAUDE.md) available as one-click downloads.
• newAgent integration panel on the homepage with direct copy buttons for the MCP URL and CLAUDE.md.
• newDiscovery files: llms.txt, /.well-known/api-catalog, /.well-known/mcp/server-card.json, and robots.txt entries that explicitly allow AI crawlers.

Better reports, faster fixes

• newQuick wins panel surfaces the highest-impact failing checks first.
• improvedCollapsible check sections grouped by dimension (Discoverability, Content, Bot access, Capabilities, Commerce).
• newPer-check Fix-with-AI prompts that open directly in ChatGPT or Claude with the right context pre-loaded.
• newEmbeddable score badge at /api/public/badge.svg.
• improvedRefreshed submit form and site header.

Initial release

• newAI-readiness scanner covering 25+ checks across discoverability, content, bot access, capabilities, and commerce.
• new5-level scoring system (Invisible → Agent-Native) with letter grades A–F.
• newPlatform detection for WordPress, Shopify, Lovable, Replit, Bolt, Next.js, and more — each with platform-specific remediation.
• newPlain-English fix guides with ordered steps and copy-pasteable code.
• newStreaming scan progress UI with live per-check updates.
• newShareable HTML reports with print-friendly styles.