P

PostHub

Waking up your workspace

Changelog

What changed, and when

October 2026, newest first — real shipped updates written in plain English. No version numbers, no invented milestones, nothing listed here before it actually went live.

  1. 10 October 2026SEO & quality release

    Metadata, robots, sitemap, error pages and a real test toolchain

    The SEO layer was pulled into one place and the site started publishing the files crawlers expect.

    • Site-wide SEO values live in one module and every page builds its canonical, Open Graph and Twitter metadata through the same helper.
    • robots.txt and the XML sitemap are generated routes; the title template renders "Page | PostHub" everywhere.
    • Custom 404, error and global-error pages so a broken URL fails with the site around it instead of a bare white screen.
    • A password-reset flaw that could hand an account to whoever held the link was closed.
    • Vitest, Prettier and an ESLint config were installed so typecheck, lint and unit tests run in CI on every push and pull request.
  2. 9 October 2026Hardening & audit release

    Security hardening, a claim audit and a documented database

    Two hardening phases landed alongside five audits — every claim in the marketing copy was checked against the real product before it was allowed to stay.

    • Phase one: environment validation, secret hygiene, session hardening and an edge guard in front of the app.
    • Phase two and three: route authorisation, request validation, upload validation, SSRF and XSS fixes, and CSRF guards on state-changing routes.
    • New migrations: rate limits and security events, session versioning, the admin lockout table, media quotas, OAuth hardening, newsletter double opt-in and suppressions, per-post metric snapshots, and a consolidated schema baseline.
    • Baseline audit: 23 incoming claims re-verified and marked confirmed, changed or not found.
    • Claim audit: fabricated testimonials and ratings removed, "free plan forever" replaced with the real 10-day trial, network counts corrected to the 13 that are live.
    • Analytics rebuilt on per-post metric snapshots: a metric that cannot be fetched is stored as missing, never as a fake zero.
    • Schema and testing guides published, and the marketing claims that survived the audit were corrected page by page.
  3. 5–8 October 2026Composer & connector fixes

    Publishing fails loudly, and connected tools stay disconnected

    A run of fixes to the compose flow, the media library and the connector settings.

    • Pinterest board picking, schedule pre-flight checks and plan-aware AI locks in the composer.
    • Publishing failures are surfaced instead of disappearing, and dialogs stay pinned to the viewport.
    • Disconnecting an MCP connector revokes its tokens for real and updates the list immediately.
    • API tokens gained tabs and a create dialog; media tiles stop smearing, uploads get a guide and deletes ask once.
    • The database became the record of truth for uploads, so files stop disappearing after a deploy.
  4. 6–7 October 2026Apps

    PostHub for Android, and an apps page that shows it

    The mobile app got a home on the site and the admin tooling to ship it.

    • A download page for every PostHub app, with the Android build available directly (about 59 MB, no Play Store required).
    • Admin gained a review desk and Android build sections, backed by public review and version APIs so the star wall only ever shows real rows.
    • Database updates shipped for app controls and for app reviews and versions.
  5. 3 October 2026API access & 2FA

    OTP-gated API tokens and a real OAuth flow for connectors

    Machine access to the API was tightened, and organisation 2FA rules became enforceable.

    • Personal API tokens are created behind a one-time code, and the MCP connectors complete a genuine OAuth consent flow.
    • Default post type per network, and the organisation "require 2FA" toggle now demands 2FA on your own account before it can be switched on.
    • The require-2FA wall applies to members, never to the workspace owner.
  6. 1–2 October 2026Plans & accounts

    Repriced plans in rupees, team seats, and more than one account per network

    Billing and connection rules changed so a team can grow without a spreadsheet.

    • Plans repriced and restated in PKR, with seat counts of 0 / 5 / 10 / 25 and JazzCash and Easypaisa wallet details on checkout.
    • The old limit of one account per network per person was lifted, so you can connect several accounts on the same platform.
    • Platform requests let you ask for a network PostHub does not cover yet.
    • Audience counts, AI agent posting through MCP, connected apps and credits checkout shipped together.

Following along

Product updates and platform changes also go out through the newsletter, so you can follow along without watching this page.

Ask a question