Skip to main content

Changelog

June 2026

Docs: Traffic Score

Documented dashboard Traffic Risk / Traffic Score — aggregate average, risk bands, trends, and GET /api/overview/traffic-score.

Documentation sync

Customer documentation updated to match production codebase:
  • Split API hosts: account.shieldlabs.ai (Dashboard + Pub) vs api.shieldlabs.ai (Core Management)
  • Corrected key formats (32 hex), DeviceID/VisitorID derivation, scoring constants
  • VPN 2-of-3 detection and Browser VPN/Proxy collapse documented
  • Removed outdated session cache and DNS verification docs
  • Webhook Phase field (initial / update) documented

April 2026

New: Behavior Patterns

Multi-session patterns in dashboard and API. Entity types: device_id, visitor_id, user_hid, webrtc_ip.
  • GET /api/domains/{id}/patterns
  • GET /api/domains/{id}/patterns/{name}
  • Levels: suspicious, dangerous

New: noscript Beacon

GET https://rest.shieldlabs.ai/noscript?publicKey=... triggers score 90 for JS-disabled browsers.

Scoring: VPN 2-of-3 rule

VPN detection uses IP API + TCP VPN hint + STUN failure (2 of 3 when TCP data available).

January 2026

Launch: ShieldLabs v1.0

  • JS snippet with checkAnonymous() and checkAuthenticatedUser()
  • Encrypted REST fingerprint pipeline
  • WebRTC STUN + passive TCP OS fingerprinting (Shield.Tcp)
  • IP intelligence via ipapi.is
  • Trust Score 0–999 with HMAC webhooks (Assing)
  • Dashboard on dashboard.shieldlabs.ai
  • Pub API debug/history on Portal.Admin