Changelog
Stay up to date with the latest improvements to True Protection.
Version 1.2.44
April 20, 2026
Feature
Fast daemon startup - no more minutes-long Connecting screen
Brought back the background signature-index build that was originally shipped in v1.2.35. On a 265K-entry signature database the daemon was taking 20 to 30 seconds of fully-synchronous load to build the Aho-Corasick pattern trie before it would open its IPC pipe, during which the GUI could only show "Connecting..." and the tpj-daemon.exe process climbed to 7+ GB of RAM before finally becoming responsive. The async path parses entries and builds the cheap indices in about three seconds, opens the pipe immediately so the GUI connects, and builds the pattern matcher on a background thread while hash-based detection works right away. The v1.2.35 crash we originally blamed on this path was actually the firewall-connections TCP-table bug that got fixed in v1.2.41, so this is safe to re-enable now.
Version 1.2.39
April 19, 2026
Feature
Diagnostic telemetry + vectored crash handler
The daemon has been access-violating on startup every two to six minutes since v1.2.35 and none of it was reaching tpjsecurity.com because the crash handler only caught main-thread exceptions and telemetry required a license key. This release fixes both. A vectored exception handler catches crashes from any thread (IPC workers, scanner, updater) and writes a daemon.crashed line with the faulting instruction pointer so we can finally identify what 0x1d724 is. The daemon also writes a daemon.heartbeat every 30 seconds so the crash window is bounded in the activity log. Telemetry upload now defaults ON and falls back to an anonymous-<hardware-id> identifier when no license key is on disk, so crash reports from un-enrolled installs still reach /admin/audit-logs. The audit log batch endpoint accepts those anonymous submissions and records them with the synthetic sender ID in the details payload. No other user-facing changes.
Version 1.2.38
April 18, 2026
Feature
Automated signature pipeline and live admin controls
Signature updates no longer wait 24 hours. Feeds now pull every 15 minutes and a new hourly "auto" run rebuilds and publishes the signature package whenever the active entry count has actually changed (no churn when nothing changed). A safety-net daily rebuild stays in place. The admin signature dashboard at /admin/signature-dashboard gets a pipeline summary strip showing the last published version, how many new entries are sitting un-shipped, feed health, and oldest feed sync - plus "Sync Feeds Now" and "Rebuild and Publish Now" buttons and a 30-second auto-refresh. Connected sessions now track every authenticated request - browser extensions, desktop apps, and daemon heartbeats all populate the Connected Sessions table on /dashboard and /admin immediately with live browser, OS, and IP detail instead of a stale row from whenever the user last logged in with email and password.
Version 1.2.37
April 18, 2026
Feature
See exactly what the extension blocked
The browser extension now shows a full list of every blocked threat, not just the count. Click the "Threats Blocked" or "Phishing" counter in the extension popup to see each blocked item with its URL, time, and reason (phishing, mining, malware, or blocklist). Your tpjsecurity.com dashboard also has a new "Recently Blocked" card showing the last 10 blocks and a 24-hour count. Previously the counter went up but there was no way to see what was behind it.
Version 1.2.35
April 17, 2026
Feature
Faster daemon startup and daemon telemetry
The daemon no longer freezes for 20+ seconds on startup building its signature index - hash lookups work immediately while the pattern matcher builds in the background, so Windows Service Control Manager stops killing the daemon for appearing unresponsive. The daemon also now uploads its own diagnostic telemetry (not just the desktop GUI) when telemetry is enabled, so daemon-side crashes, errors, and activity show up at /admin/audit-logs alongside desktop events. Fixed three admin panel 500 errors (audit-logs, alert-rules, threat-dashboard) along the way.
Version 1.2.33
April 17, 2026
Feature
Admin telemetry dashboard
Desktop clients can now upload their activity logs to tpjsecurity.com so crashes and errors show up in one place across every install. Opt-in via Settings > General > "Send diagnostic telemetry". Admin team can view everything under /admin/audit-logs with filters for source, action, device, user, date range, and an errors-only toggle, plus CSV export.
Version 1.2.32
April 17, 2026
Feature
Full disconnect and crash logging
The GUI now records every connect, disconnect, socket error, and reconnect attempt to the activity log, and the daemon now writes a crash record before it dies from a signal or exception. Previously a silent crash-loop showed up only as repeated daemon-started entries with no explanation; now every event has a breadcrumb.
Version 1.2.29
April 17, 2026
Feature
Signature update fix, optional firewall rules, Windows Defender toggle
Fixed a bug where the daemon could not download new signature databases from tpjsecurity.com. Added a catalog of 12 one-click hardening firewall rules (block RDP, SMB, Telnet, Tor, cryptomining pools, and more). Added a Windows Security integration that lets you turn off Windows Defender real-time protection with a single click so True Protection runs alone and your system is faster. Also quieted misleading pipe errors during daemon reconnect.
Version 1.2.28
April 17, 2026
Feature
Modern firewall dashboard with smart attack protection
Complete redesign of the firewall page with a live threat feed, stat tiles for packets inspected and threats blocked, and a one-click unblock list for auto-blocked source IPs. Added smart port scan detection and automatic DDoS/SYN flood protection that blocks attackers for 5 minutes. Cross-platform active connection listing (Windows, Linux, macOS) and a fix for a stuck "daemon disconnected" banner after reconnect.
Version 1.2.21
April 16, 2026
Feature
Daemon downloads signature updates from tpjsecurity.com API
The daemon now downloads signature updates directly from the tpjsecurity.com API, keeping threat definitions current automatically.
Version 1.2.19
April 16, 2026
Feature
Signature management in admin panel
Administrators can now manage threat signature feeds, view individual signatures, and build new signature databases directly from the admin panel.
Feature
Automated threat signature updates
Threat signatures now update automatically from multiple community intelligence sources including malware hash databases, malicious URL feeds, and detection rules. Over 100,000 signatures available.
Version 1.2.13
April 16, 2026
Feature
Automatic signature updates
Threat signatures now update automatically every hour in the background. No manual updates needed.
Version 1.2.9
April 15, 2026
Feature
Auto-updater now downloads and installs updates
The desktop app now checks for updates automatically on startup and can download and install them directly. No more manual downloads from the website.
Version 1.2.8
April 15, 2026
Feature
Scan and threat history in browser extension
Click the stats in the browser extension popup to see a full history of scanned pages and blocked threats. Filter by scans only, threats only, or view everything.
Version 1.2.7
April 15, 2026
Feature
Custom blocklist in browser extension
You can now add custom domains to block directly from the browser extension settings. Your custom blocked domains work alongside the built-in threat database.
Feature
Connection tracking across all devices
Every login from the desktop app, browser extension, or web dashboard is now tracked with browser name, version, operating system, and IP address. View all your connected sessions on the dashboard.
Version 1.2.0
April 15, 2026
Feature
Support Tickets page with login and registration
Replaced the Pro-only paywall on the Support Tickets page with a login and registration flow. All authenticated users (free or Pro) can now view, create, and manage support tickets directly in the desktop app. Users can log in with their tpjsecurity.com email and password, or activate a license key for automatic authentication.
Feature
Support Tickets now available to all users
All registered users can now access Support Tickets directly in the desktop app. Log in with your tpjsecurity.com account or activate your license key for automatic access. Create, view, and manage tickets without leaving the app.
Version 1.1.1
April 14, 2026
Feature
Expanded signature support
New signature compiler supports additional threat detection formats. Added device enrollment for fleet management.
Feature
Windows Firewall enforcement
Firewall rules are now enforced by the OS. On Windows, rules sync to Windows Firewall via the COM API (INetFwPolicy2). On Linux, rules are applied via iptables. Rules created, edited, or toggled in the app are immediately reflected in the OS firewall.
Feature
Quarantine manager with restore and delete
You can now restore or permanently delete quarantined files directly from the Quarantine Manager. Restored files are returned to their original location.
Feature
Signature compiler and device enrollment
New YARA-to-TPDB signature compiler converts YARA rules into the binary signature database format. Supports hex patterns, ASCII strings, and SHA-256 hashes. Device enrollment IPC handler allows fleet management registration from the daemon.
Feature
Firewall rules enforced by the OS
Firewall rules created in True Protection are now enforced directly by Windows Firewall and Linux iptables. Changes take effect immediately.
Version 1.1.0
March 31, 2026
Feature
Expanded threat detection sources
Added support for community threat rules, GPG-signed signature databases for tamper-proof updates, and JagAI behavioral analysis model training.
Feature
Enterprise features
Fleet device enrollment with server-assigned profiles. Central management console, compliance reporting, device group policies, and automated threat response workflows.
Feature
CLI scanner, intrusion prevention, and telemetry
The command-line scanner now supports all scan types. The intrusion detection system can automatically promote high-confidence alerts to blocking rules. Anonymous threat telemetry helps improve detection rates.
Feature
Enterprise feature parity
Enrollment API for fleet device management with server-assigned config profiles. Rescue disk builder for Windows PE recovery environments. ESET-level enterprise features: central management console API, compliance reporting endpoints, device group policies, and automated threat response workflows.
Feature
Security certification and compliance
Added comprehensive security testing infrastructure including automated penetration testing, driver verification, and vulnerability assessments. Enterprise readiness now at 95%.
Feature
Signature sources and detection pipeline
New tools: fetch-yara-rules.sh pulls community YARA rules from multiple sources. sign-signatures.py GPG-signs signature databases for tamper-proof updates. train-ml-model.py trains the JagAI behavioral analysis model. generate-training-data.py creates labeled datasets from scan results. ClamAV integration via setup-clamav.ps1.
Feature
YARA rules, CLI scanner, IDS-to-IPS, telemetry
Wired up YARA rule loading in the scanner engine. CLI scanner accepts scan type and path arguments. IDS engine promotes high-confidence alerts to IPS blocking rules. Telemetry client reports anonymized threat stats. Update server infrastructure with Docker Compose for self-hosted signature and update distribution.
Version 1.0.25
March 30, 2026
Feature
Async scanning engine
All scan types (Quick, Full, Custom, Rootkit, Memory, Boot) now run asynchronously in a background thread. The GUI remains responsive during scans with real-time progress polling. Cancel scan works instantly. Fixed Unicode path crash that caused scans to fail on files with special characters.
Feature
Background scanning
All scan types (Quick, Full, Custom, Rootkit, Memory, Boot) now run in the background. The app stays responsive during scans with real-time progress and instant cancel support. Fixed a crash when scanning files with special characters in the path.
Version 1.0.15
March 30, 2026
Feature
Pre-configured firewall rules
Ships with 12 default firewall rules covering DNS, HTTP, HTTPS, DHCP, NTP, and blocking dangerous inbound ports. Rules can be toggled individually.
Feature
Active connections monitor
The Firewall tab now shows active network connections including application name, remote address, port, protocol, and status.
Feature
Default firewall rules
The firewall now ships with 12 pre-configured rules covering DNS, HTTP, HTTPS, DHCP, NTP, and blocking dangerous inbound ports (SSH, RDP, SMB, Telnet, FTP). Rules can be enabled or disabled individually from the Firewall tab.
Version 1.0.9
March 30, 2026
Feature
Sign in from the desktop app and browser extension
You can now sign into your True Protection account from the desktop app and browser extension using your email and password.
Feature
API authentication for browser extension and desktop app
New REST API endpoints for login, registration, logout, and user profile. Browser extension and desktop app can now authenticate against tpjsecurity.com with email and password, receiving a secure Sanctum token for all subsequent API calls.
Feature
Comprehensive audit logging across all apps
Every action across the desktop app, browser extension, and daemon is now logged to the user account on tpjsecurity.com. Tracks scans, threats detected, firewall changes, settings updates, logins, daemon starts/stops, and browser pages scanned. Activity log visible on the web dashboard.
Feature
Browser extension activity tracking
All pages scanned, threats blocked, phishing detections, and mining script blocks are logged to the user account. Events are batched and uploaded every 30 seconds to minimize network overhead. Works offline with local queue.
Feature
Desktop app and daemon activity logging
The daemon logs all scans, threats, firewall changes, quarantine actions, config changes, and IPC connections to a local JSON file and syncs to the cloud. The GUI logs app lifecycle, page navigation, scan requests, and settings changes.
Feature
Activity logging across all apps
Scans, threats detected, firewall changes, and browser protection events are now tracked across all True Protection apps. View your activity log on the tpjsecurity.com dashboard.
Version 1.0.7
March 30, 2026
Feature
License key activation
Enter your license key in Settings to activate Pro features. Your subscription tier is displayed throughout the app.
Feature
License key activation in desktop app
Users can now enter their license key in Settings to activate Pro features. The key is validated against tpjsecurity.com and the subscription tier is displayed throughout the app.
Version 1.0.6
March 29, 2026
Feature
Secure checkout and billing portal
Subscribe with secure payment processing. Manage your plan, upgrade, downgrade, or cancel directly from the billing portal.
Feature
Stripe checkout and billing portal
Wired the full Stripe payment flow. Subscribe button now redirects to Stripe Checkout for secure payment. Added Stripe Billing Portal for plan management, upgrades, downgrades, and cancellation with proration.
Version 1.0.5
March 29, 2026
Feature
License gating for Free vs Pro tiers
Pro features (JagAI threat analysis, scheduled scans, network monitor, priority signatures) now require an active subscription validated against tpjsecurity.com.
Feature
Full desktop app functionality
All pages - Dashboard, Scan, Firewall, and Settings - now show live data from the protection service. Real-time status, scan results, and firewall rules update automatically.
Feature
Free and Pro tier support
Pro features including JagAI threat analysis, scheduled scans, network monitor, and priority signatures now require an active subscription.
Feature
Full GUI functionality with daemon IPC
All GUI pages (Dashboard, Scan, Firewall, Settings) now communicate with the daemon via named pipe IPC. Real-time status, scan results, and firewall rules are shown live.
Feature
In-app support ticket system
Pro subscribers can now create, view, and reply to support tickets directly inside the desktop app. Tickets sync with the tpjsecurity.com dashboard.
Feature
In-app support tickets
Create, view, and reply to support tickets directly inside the desktop app. Tickets sync with your tpjsecurity.com dashboard.
Version 1.0.3
March 29, 2026
Feature
Automated release downloads
New releases are now automatically available on the download page for all platforms.
Feature
Support ticket system on web platform
Customers can now submit and track support tickets via the website contact form. Tickets include honeypot and math challenge anti-spam protection.
Feature
Release download pipeline
Automated release pipeline creates download records on the website when new versions are tagged. Platform-specific packages (MSI, DEB, RPM, DMG) are uploaded to the download page.
Feature
Website support tickets
Submit and track support tickets directly on tpjsecurity.com with built-in spam protection.
Version 1.0.0
March 27, 2026
Feature
Initial release
First public release of True Protection by Jag. Includes real-time scanner, application firewall, anti-rootkit protection, host intrusion prevention, and command-line tools.
Feature
Cross-platform support
Available on Windows 10+, macOS 12+, and major Linux distributions including Ubuntu, Fedora, and Arch.
Feature
Web platform launch
tpjsecurity.com launched with account registration, downloads, blog, pricing, and admin dashboard.