What's New

This release introduces SimLab, a new simulation-driven training layer designed to model real-world cybersecurity scenarios and decision-making. It establishes the foundation for interactive, agent-driven simulations while expanding the platform beyond deterministic labs into experiential training.

• SimLab: launched simulation framework for scenario-based cybersecurity training
• SimLab: introduced basic (text-based) simulation mode with decision-driven multiple-choice flows
• SimLab: established rendering modes to support basic, static UI, and future interactive simulations
• SimLab: added CAPTCHA-based social engineering scenario as an initial simulation use case
• UI: integrated SimLab into the platform navigation and core product structure
• UI: updated Labs row to integrate SimLab and refine overall product navigation structure
• UI: improved sidebar hover states and interaction feedback
• Platform: laid foundation for agent-driven simulation generation and reasoning workflows
• Platform: expanded HuntCode beyond deterministic validation into real-world decision simulation
• Checkout: migrated to Paddle in-app modal for improved user experience and tax handling
• Checkout: removed legacy Lemon Squeezy integration
• Pricing: added B2B inquiry form to support enterprise and institutional onboarding
• UX: improved checkout modal loading states and overall interaction consistency
• UX: continued refinement of layout and component consistency across new and existing features

This update focuses on refining HuntCode’s frontend experience, upgrading landing page visuals with custom-designed assets, improving animation consistency, and enhancing chat workflows and dashboard visibility.

• UI: replaced legacy landing page visuals with custom-designed assets, including updated hero mesh and system diagram
• UI: improved animation flow and consistency across landing page experiences
• HuntBot: added internal metadata toggle for timestamps and usernames to support chat debugging
• Dashboard: introduced runs feed and updated home dashboard cards for clearer system activity tracking
• Chat: added collapsible Recent Chats section with improved layout and usability
• UI: refined button styles and interaction patterns across the platform
• Landing: refined layout, spacing, and visual consistency across sections
• Platform: introduced API documentation under docs subdomain to support integrations
• UI: refactored pre-sign-in frontend pages for improved structure and maintainability

This release significantly expands HuntCode’s agentic curriculum generation pipeline with automated module lessons, quizzes, and assessments, introduces a new certifications tier above modules and lessons, refines core UI structure, and finalizes foundational legal policies for platform readiness.

• Agentic: implemented automated build module lessons job with strict lesson generation rules
• Agentic: added build module quizzes job with structured quiz generation support
• Agentic: introduced build module assessment job to complete end-to-end module evaluation workflows
• Agentic: added build course outline job to enable fully automated course scaffolding
• Platform: introduced a certifications tier layered above modules and lessons
• CertLab: added course information pill and sidebar drawer for improved certification context
• Learn: switched home dashboard to agentic temporal curriculum analysis
• PulseLab: added job-generated HuntBot brief and audio output for threat intelligence insights
• PulseLab: expanded threat analysis window to 30 days and normalized analysis metadata UI
• UI: refactored views structure and updated route render paths for maintainability
• Legal: updated Terms of Service, Privacy Policy, and Cookie Policy to establish a unified legal foundation

This update hardens CodeLab execution and validation, introduces deterministic builds with automatic output normalization, and delivers significant UX and agentic workflow improvements for creating, inspecting, and validating interactive exercises.

• CodeLab: enforced deterministic builds and auto-fixed expected output by executing reference solutions on the runner
• CodeLab: hardened validation by failing on solution stacktraces and preventing false positives in malformed exercises
• CodeLab: preserved multiline CLI output during validation to ensure formatted console results remain intact
• CodeLab: introduced module-aware codelab_meta with improved agentic job routing
• Agentic: added validation jobs for CodeLab meta normalization and consistency checks
• Agentic: introduced module-aware assessment rewrites with structured meta tracking
• Agentic: added rewrite quiz jobs with attempt-scoped quiz metadata and UI support
• UI: refined CodeLab pagination placement and card metadata layout for clarity
• UI: added a CodeLab details drawer with AI-generated meta inspection support
• UI: clamped CodeLab interface modes to editor-output and terminal-only views
• Agentic Jobs: added notes indicators and reduced visual noise on job cards
• Platform: defaulted agentic job execution to GPT-5.2 for improved consistency

This update introduces new lesson rewrite workflows, expands activity insights in SkillLab, surfaces richer learner data, and delivers clarity-focused UX refinements across the platform.

• Lessons: replaced the lesson sidebar with a new Lesson Info drawer and inline resource links
• Lessons: introduced agentic lesson rewrite workflows with content-aware updates
• SkillLab: migrated the activity heatmap into SkillLab, replaced the legacy roadmap view, and added activity drilldowns
• SkillLab: added a preview sidebar for faster context and readability while reviewing activity details
• PulseLab: added threat intel build support with an insights-based UI for clearer analysis
• SkillLab: surfaced lesson key questions explored and CodeLab attempt history for clearer learner activity visibility
• Help Center: improved content clarity with dynamic article and topic counts
• Marketing: refreshed landing page copy for clearer positioning
• Platform: continued internal improvements to reliability, safety, and maintainability

This update introduces the SkillLab dashboard with clearer progress and objective visibility, along with reliability, navigation, and security improvements across the platform.

• SkillLab: launched the SkillLab dashboard with centralized progress and analytics views
• SkillLab: surfaced lesson-level learning objectives and clearer completion states
• SkillLab: introduced attempt history pages for quizzes and assessments
• SkillLab: improved visibility into lesson, quiz, and hands-on activity progress
• Analytics: refined progress calculations to better distinguish completed vs in-progress work
• HuntBot: improved response reliability and handling of edge cases
• Help Center: improved navigation and isolation between the Help Center and main application
• Auth: fixed logout behavior to ensure consistent, reliable sign-out across domains
• UX & Stability: continued internal improvements to performance, reliability, and safety

This update strengthens assessment accuracy, improves certificate issuance reliability, enhances result clarity, and introduces additional security and UX improvements across HuntCode.

• Assessments: added server-authoritative timing to ensure accurate and tamper-resistant time tracking
• Assessments: now display total time used directly on the results page for clearer performance feedback
• Assessments: improved result layout by surfacing score and summary information more prominently
• CertLab: persisted certificate issue dates to prevent date drift on repeated downloads
• CertLab: enforced strict eligibility and best-attempt logic for proficiency certificates
• CertLab: improved certificate issuance consistency and validation checks
• Security: added signup honeypot protection to further reduce automated abuse
• Auth: improved Cloudflare Turnstile UX, alignment, and dark theme support
• Auth: hardened expired verification and retry handling during signup
• Help Center: balanced grid layout using conditional filler cards for a cleaner, more consistent presentation
• UX: applied small layout and clarity improvements across results and certification flows
• Stability: continued internal cleanup and safeguards to support future platform expansion

Introduced CertLab, enabling learners to earn verifiable proficiency certificates with secure PDF generation and issuance tracking tied to assessment completion.

• CertLab: launched proficiency certificate generation with downloadable PDF certificates
• CertLab: added issuance tracking to link certificates to learner identity and completion state
• CertLab: enforced name validation before certificate download to ensure accurate attribution
• CertLab: established foundational data model for future verification and trust features
• Assessments: integrated certificate eligibility checks based on completed requirements
• Platform: laid groundwork for certificate verification, auditing, and institutional trust

Enhanced the reliability of the Help Center by fixing logout issues, unifying cookie behavior across subdomains, improving cross-domain navigation, and updating sitemap and link handling for better SEO and user flow.

• Auth: fixed logout desync issues across huntcode.com and help.huntcode.com
• Auth: unified shared-domain JWT cookies for consistent sign-in status between subdomains
• Auth: corrected Help Center sign-in and account settings links to always route users to the main app
• Help Center: fixed redirect behavior when hitting protected pages or signing out
• Help Center: added canonical URLs and ensured article & root URLs appear correctly in sitemap.xml
• Help Center: updated routing to use APP_BASE_URL and HELP_CENTER_URL for accurate cross-domain navigation
• Help Center: improved domain fallback logic for safer redirects and fewer broken routes
• UI: ensured footer links navigate cleanly between Help Center and app dashboard
• Backend: added support for custom ordering of Help Center articles
• Stability: refined shared cookie and host handling to prevent sporadic auth mismatches
• Dev: cleaned up routing and host-redirect logic to prepare the Help Center for future expansions

Launched a full Help Center with collections and articles, unified FAQs and lessons into a single HuntBot knowledge base, and upgraded the chat experience with faster, streaming replies and smoother UI behavior.

• Help Center: launched a public landing page with collections and article pages
• Settings: redesigned in-dashboard FAQs page with improved layout
• Search: unified Help Center and FAQ data into a single knowledge base for HuntBot
• Search: HuntBot now retrieves answers from both FAQs and lessons for better accuracy
• Knowledge Base: migrated FAQ indexing to live database-driven updates
• Knowledge Base: added full lessons indexing and unified multiple indices for more consistent results
• HuntBot: introduced fast streaming replies for a more natural chat experience
• Chat UI: smoother scrolling, thin scrollbar styling, and improved viewport layout
• Chat UX: fixed scroll-to-bottom flicker during live message streaming
• Behind the scenes: improved automation systems to support future agentic features

Hardened route protections and idle sign-out behavior for a more secure experience, improved account visibility on public pages, upgraded HuntBot chat responsiveness, and added clearer roadmap progress indicators.

• Auth: improved idle timeout behavior and passive auth for correct signed-out UI
• Auth: enforced proper middleware protections across all routes
• New: R&D Blog including browse view and individual article pages; featured on the landing carousel
• Carousel: consistent card heights and cleaner titles for a more even layout
• Improved idle sign-out login state: properly updates when returning after timeout
• Security: ongoing hardening and code cleanup to reinforce privacy protections
• Security: additional safeguards added around chat access to support defense-in-depth
• Navigation: 'My Account' menu now available consistently across pages
• Navigation: new 'Resources' section to discover core parts of the platform
• HuntBot: smoother chat switching, faster rendering, no stale bubbles
• HuntBot: typing indicator re-enabled for a more natural chat feel
• Roadmap: added visible completion progress and calls-to-action

Strengthened session security with idle timeout + automatic sign-out, expanded the activity heatmap to include code-card completions, improved FAQ ordering, added HuntBot intel facts, and shipped several chat UI reliability/UX fixes.

• Session security: idle timeout with automatic sign-out to prevent stale sessions
• Heatmap: track code-card completions in participation visuals
• FAQ: sort categories by display order (not name) for predictable listings
• Heatmap/assessments: prevent duplicate quiz increments; add first-pass assessment tracking; correct post-quiz result lookup
• HuntBot: add cybersecurity intel facts and random fact generator
• Chat sidebar: remove JS hard-truncation; rely on CSS ellipsis for consistent titles
• Chat input: auto-resize textarea and reset height on submit
• Chat UI: move send icon inside textarea; fix scroll-to-bottom button position
• Chat scrolling: edge-aligned viewport scrolling and message-pane cleanup

Shipped a ChatGPT-style HuntBot input with auto-expand and cleaner typing UX, introduced secure code-runner wiring with presigned WebSocket tokens, and added execution modes across CodeLab. Also tightened validation, improved JSON-aware grading, and polished UI details.

• HuntBot input: ChatGPT-style textarea (auto-expand, centered, no resize/autofill, better cursor behavior)
• HuntBot: version label displayed in Chats header
• CodeLab: added execution modes for CLI, HTTP, and shell with improved query performance
• Runner security: X-Huntcode-Runner-Key auth header on exec endpoints
• Workspaces: per-user workspace isolation + seeding; traversal guards
• Presigned terminal WS: JWT presign + origin allowlist; dynamic wsHost
• Security: enforce required environment variables for code execution and workspace validation
• Hardened Docker: drop caps, no-new-privileges, no network, CPU/MEM limits
• Validation: stricter node-cli output cleaning; preserve JSON for HTTP labs
• Validator: added JS HTTP-runner support and JSON-aware grading path
• Terminal UX: heartbeat/idle timeout; sanitized terminalCommand; cleaner output
• Monaco/editor polish: safe escaping + toggle UX (escapeHtml, aria keyboard tweaks)
• Quizzes & Assessments: shuffle answers server-side for consistent randomization
• Deps/infra: updated backend framework and cleaned up unused packages for stability and performance
• UI: small icon/typography updates; minor layout polish across pages

Hardened authentication with MFA, stronger passwords and compromised-password checks, plus protective rate limits on login/signup and account changes. Also refreshed the Learn UI, added live search, introduced a Try Demo experience, launched a public changelog + newsletter, and updated the hero/Mission content.

• Protective rate limits on email & password changes
• Protective rate limits for login, signup, and password reset
• Minimum 12-character passwords + compromised-password checks
• Multi-factor authentication (MFA) now available
• Learn UI refresh: categories, buttons, and icons
• Learn: live search dropdown
• Hero: new “Try Demo” experience
• Launched Changelog page and newsletter sign-ups
• Let HuntBot Talk” CTA in Our Mission + section refresh

Launched assessments with end-to-end UI and routes, introduced PulseLab for threat intel, and improved performance with a log cache. HuntBot now supports voice responses with cached audio, smarter progress queries, and a search modal for past messages—plus cleaner results that exclude user messages.

• New Assessments page with admin & user routes
• Added PulseLab page for cyber threat intelligence
• Implemented log caching to reduce query load
• HuntBot: text-to-speech voice replies with audio caching
• Smart queries: view modules in progress and completed
• “My progress” query with comprehensive user metrics
• Search modal to quickly find past messages
• Results hygiene: strip user messages from result sets

Refined account security and notifications, refreshed branding site-wide, and shipped an activity heatmap on Learn with dynamic rendering and clearer tooltips. Also updated the roadmap layout and tuned icon consistency across auth states.

• Email change security: send verification code to the current email
• Header notifications: enforce 5-item cap in dropdowns
• Roadmap page: updated layout
• Branding: new logo and favicon applied site-wide
• Learn: added activity heatmap chart with dynamic rendering
• Heatmap: improved tooltip text and added “How we measure participation” link
• Heatmap: styled tooltip component for better readability
• Icons: improved consistency across signed-in/out states

Shipped pagination for CodeLab and streamlined code card displays, expanded HuntBot commands, and tightened grading with cleaner output and progress tracking. Added premium access gating, launched a full notifications system with mark-as-read and bulk actions, refreshed pricing tables, integrated a payments webhook, and surfaced plan/role info in the account menu.

• CodeLab pagination + refined code card displays
• Expanded HuntBot command set
• Stricter code validation, normalized output, and user progress tracking
• Premium content redirect for non-subscribers in CodeLab
• Notifications: mark as read, bulk 'Mark all as read', and pagination
• Timezone-aware notification timestamps
• Updated pricing tables on landing and plans pages
• Payments webhook integration
• Account dropdown shows current role/plan
• Notify users on module completion

Rolled out embedding-powered FAQ search for more relevant answers, refined prompts for clarity, and polished the dashboard. Insights now lets you switch views and shows code card completion. Added likes and favorites for code cards, tightened terminal-mode validation, introduced Smart Queries for faster retrieval, and laid groundwork for billing and invoices.

• Embedding-based FAQ search with vector retrieval
• Clearer, multi-line system prompt configuration
• Dashboard layout tweaks
• Insights: switch between progress/results; show code card completion
• Code cards: heart/like (saved to your account) and favorites
• Terminal-only mode: validation wired to the Validate button
• Smart Queries for improved data retrieval
• Account settings: base templates for billing & invoices

Stabilized the CodeLab terminal with deferred init and FitAddon, tightened terminal-only validations, and polished the landing page. Shipped a HuntBot page template with OpenAI integration, fixed message loading, unified chat styles with rename support, added dynamic sidebar highlighting, and launched an FAQ page.

• Defer terminal init until DOMContentLoaded to prevent null errors
• Conditional validation for terminal-only mode in edit route
• Fix terminal display/resizing; integrate FitAddon with DOMContentLoaded handling
• Landing page: new section and updated scrolling text
• HuntBot page template with OpenAI API integration
• Fix message loading: only show when a conversation is selected
• Unify chat message styles and support renaming chat titles
• Dynamic sidebar highlighting
• New FAQ page with questions, descriptions, and tags

Overhauled CodeLab execution and validation, introduced an interactive terminal mode with conditional UI, and improved authoring tools. Added copy-to-clipboard, dynamic selectors, safer handling of empty outputs, stricter result normalization, and a new landing page section.

• Revamp CodeLab code execution validation logic
• Add copy-to-clipboard button and a new landing page section
• Dynamic module/lesson dropdowns on the create CodeLab page
• Frontend/backend handle empty code execution output gracefully
• Editor: wrap selection with inline code; add pop styling button
• Validation: strip leading carets and non-printable characters from outputs
• CodeLab detail: interactive terminal; add interface_mode to edit form
• Conditional layout/rendering based on interface_mode
• Code cards: show/hide fields and validate inputs for terminal-only mode

Made the roadmap data-driven and added pinning for posts, refined lesson page details and typography, and gated premium quiz access. Improved code styling and editor controls, enabled HTML in quiz content, removed the X-Powered-By header for security, and launched a CodeLab with Monaco editors for starter and solution code.

• Roadmap pulls modules/lessons dynamically; add pin option to posts
• Add missing roadmap link and refresh sidebar icons
• Show lesson page date; font/typography refinements
• Restrict access to premium quizzes
• Style: refine inline code/link styles; scope Shiki to code blocks only
• Security: disable X-Powered-By header
• Quizzes: render HTML in questions and results
• Editor: inline code/link insert buttons; improved controls semantics/layout
• New CodeLab page with Monaco editors (starter + solution)

Tightened the quiz flow with required answers and a 70% pass threshold, fixed grading edge cases, and improved the results page. Expanded the landing page with new content and UI updates, launched a pricing plans page with access gating for premium lessons, added role-aware notifications, and introduced a base roadmap template.

• Quizzes: require all answers before submit
• Set passing threshold to 70%
• Fix POST handler and grading for punctuation/whitespace
• Enhanced quiz results page display
• Landing page: new content section + UI updates
• Pricing plans page; free users redirected from premium lessons
• Role-aware toast notifications
• Mobile polish: adjust H1 margin
• Add base roadmap template

Launched lesson bookmarking and quizzes, upgraded the Insights page with data-driven metrics, and hardened the app by blocking direct template access and moving static assets to public. Refreshed the dashboard layout with module completion status and improved code syntax highlighting. Landing page copy was also updated.

• Bookmark lessons directly from module feeds
• Introduce quizzes and an edit-questions page
• Harden routing: prevent direct template access; move static assets to /public
• Refactor post-login dashboard; add module completion status
• Insights page: base template + enhanced UI with rendered metrics
• Upgrade code syntax highlighting for readability and performance
• Update landing page content

Introduced the modules system with new pages and feeds, added creation and ordering controls, and refreshed navigation with a left sidebar on the dashboard. Legal documents were updated, and UI polish improves module/lesson readability and counts.

• Dashboard: new left sidebar with updated nav links
• New module page and refreshed layout
• Create Module page with an order field for custom sequencing
• Added modules and lessons feeds
• Updated Terms, Privacy Policy, and EULA
• Improved modules/lessons feed UI
• Clearer module/lesson count text

Improved authentication and onboarding with email verification gating and a signup disclaimer. Fixed the password reset view, enhanced the post editor with better list/paragraph handling and list style controls, added code syntax highlighting on post pages, standardized page titles, and introduced a pricing section on the landing page with subsequent refinements.

• Fix password reset view rendering
• Gate access for unverified accounts; redirect until verified
• Add terms & policies disclaimer on signup
• Editor: insert paragraphs and bullet lists with proper line breaks
• Editor: list style buttons (circle & square)
• Code syntax highlighting on post pages
• Consistent markup and page titles across pages
• Add pricing table to landing page and refine it

Added category filters and search to the post feed, introduced bookmarking with saved items on your profile, and improved account controls with password/email change flows and security email notifications. The sidebar now uses dynamic category data, and posts can display a featured label.

• Filter posts by category and keyword search
• Bookmark posts and view them on your profile
• Change password and email from the profile dashboard
• Security email sent to the original address on email change
• Sidebar now driven by dynamic category data
• Posts support a conditional featured label

Migrated the site from static HTML to a dynamic, template-driven system with core views and reusable components. Added a logged-in user dashboard, role-based access controls, and sign-in restrictions. Introduced 404 handling, new post creation and editing, and improved the post UI with categories, pagination, and enhanced layouts.