securenow 8.11.2 → 8.12.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (40) hide show
  1. package/README.md +7 -8
  2. package/SKILL-API.md +0 -1
  3. package/SKILL-CLI.md +624 -632
  4. package/TELEMETRY-SQL.md +6 -1
  5. package/app-config.js +10 -7
  6. package/cidr.js +83 -83
  7. package/cli/apps.js +36 -8
  8. package/cli/client.js +102 -102
  9. package/cli/diagnostics.js +5 -1
  10. package/cli/firewall.js +141 -141
  11. package/cli/fp.js +638 -638
  12. package/cli/monitor.js +398 -398
  13. package/cli/run.js +132 -132
  14. package/cli/security.js +1866 -1856
  15. package/cli/ui.js +374 -374
  16. package/cli.js +923 -922
  17. package/firewall-cloud.js +202 -202
  18. package/firewall-iptables.js +139 -139
  19. package/firewall-only.js +46 -46
  20. package/firewall-tcp.js +74 -74
  21. package/firewall.js +1470 -1470
  22. package/mcp/catalog.js +2358 -2346
  23. package/nextjs-auto-capture.d.ts +29 -29
  24. package/nextjs-auto-capture.js +273 -273
  25. package/nextjs-middleware.d.ts +57 -57
  26. package/nextjs-middleware.js +267 -267
  27. package/nextjs-webpack-config.js +79 -79
  28. package/nextjs-wrapper.d.ts +95 -95
  29. package/nextjs-wrapper.js +233 -233
  30. package/nextjs.js +0 -9
  31. package/nuxt-server-plugin.mjs +0 -11
  32. package/nuxt.mjs +74 -74
  33. package/package.json +1 -2
  34. package/register.d.ts +42 -42
  35. package/register.js +44 -44
  36. package/resolve-ip.js +13 -13
  37. package/telemetry-schema.json +3 -1
  38. package/tracing.js +847 -853
  39. package/web-vite.mjs +0 -76
  40. package/free-trial-banner.js +0 -175
package/README.md CHANGED
@@ -210,9 +210,9 @@ Everything the MCP server can do is also a command. Run `npx securenow help` for
210
210
 
211
211
  ---
212
212
 
213
- ## Free firewall
213
+ ## Firewall
214
214
 
215
- The free tier includes the in-process IP firewall — no tracing required:
215
+ The in-process IP firewall is included in SecureNow (14-day free trial, then $99 per app per month). It runs on its own, no tracing required:
216
216
 
217
217
  ```bash
218
218
  npx securenow run --firewall-only src/index.js
@@ -220,7 +220,7 @@ npx securenow run --firewall-only src/index.js
220
220
  node -r securenow/firewall-only src/index.js
221
221
  ```
222
222
 
223
- It syncs your app's blocklist plus SecureNow's IP database of 500k+ known-bad IPs, refreshed hourly, and blocks in-process with HTTP 403. No proxies, no DNS changes, no network configuration — and it fails open.
223
+ It syncs your app's blocklist plus SecureNow's known-bad IP feed, refreshed hourly, and blocks in-process with HTTP 403. No proxies, no DNS changes, no network configuration — and it fails open.
224
224
 
225
225
  ---
226
226
 
@@ -239,12 +239,11 @@ More at [securenow.ai/security](https://securenow.ai/security).
239
239
 
240
240
  ## Pricing
241
241
 
242
- 14-day free trial. No credit card. Full product.
242
+ One plan: **$99 per app per month**, every feature included — detection, MCP, AI investigations, traces and logs, custom detections, blocking, rate limits, alerts, and the firewall.
243
243
 
244
- - **Free** — $0: local AI security audit, IP intelligence, basic firewall with 500k+ known-bad IPs refreshed hourly, CLI
245
- - **Pro** — $49/app/mo: full production security — detection, MCP, AI investigations, traces/logs, custom detections, blocking, rate limits, alerts, 7-day history
246
- - **Team** — $149/mo: 5 apps, 30-day history, team features
247
- - **Scale** — custom: dedicated isolated instance
244
+ - **Billed per app.** Your subscription quantity is the number of apps on the account (minimum 1). Creating an app adds $99/month, prorated; deleting one removes it. It's automatic.
245
+ - **14-day free trial** for the whole account, every feature, no credit card.
246
+ - **No free tier.** After the trial, everything pauses until you subscribe, including the firewall (the known-bad IP feed and blocklist sync stop being served).
248
247
 
249
248
  Details at [securenow.ai](https://securenow.ai/). Full CLI/SDK reference: `npx securenow help` plus the `SKILL-CLI.md` and `SKILL-API.md` files shipped in this package.
250
249
 
package/SKILL-API.md CHANGED
@@ -590,7 +590,6 @@ Local development uses `.securenow/runtime.json`; legacy `.securenow/credentials
590
590
  | `config.runtime.noUuid` | Use exact app key as service name without UUID suffix |
591
591
  | `config.runtime.strict` | Exit clustered workers when no app identity resolves |
592
592
  | `config.runtime.testSpan` | Emit a startup test span |
593
- | `config.runtime.hideBanner` | Suppress the free-trial upgrade banner |
594
593
  | `config.firewall.*` | Local firewall behavior, API URL, intervals, cloud WAF, and trusted proxy settings |
595
594
 
596
595
  **Resilience:** The firewall SDK includes a circuit breaker (opens after 5 consecutive errors, 2-min cooldown), in-flight request guards (prevents overlapping requests), 429 Retry-After support, and exponential backoff on both lightweight ETag checks and initial sync retries.