v1.0.1

Bug fixes

• Widget library page crashed when opening a widget detail: the page was rendered outside DetailDrawerProvider, so the drawer context was missing (#115, #116).

CI

• E2E smoke test now seeds a fixture employee so fresh instances reach the dashboard (instead of the /setup redirect) and cover the widgets page (#116).

Full changelog: v1.0.0...v1.0.1

DataShield v1.0.0

First stable release. DataShield is a self-hosted service that tells a business whether its employees' data has surfaced in known breaches, with severity-based alerting and a customizable security dashboard.

Highlights

• Breach exposure monitoring per employee (Have I Been Pwned and manual sources), risk scoring, remediation tracking, GDPR exposure register
• Customizable widget dashboard (drag and drop, saved presets)
• Directory sync: Microsoft Entra ID, Google Workspace, LDAP / Active Directory, AWS IAM Identity Center, Okta, inbound SCIM 2.0
• Alerting by severity and status, notification channels, SIEM pull/push (CEF, syslog, JSON), webhooks, scheduled reports

Hardening shipped for this release

• Database backup and restore tooling (pg_dump, make backup / make restore) with a tested restore procedure and key-handling guidance (#109)
• next-auth pinned to the exact v5 beta with a documented migration plan to stable (#110)
• Enforcing strict Content-Security-Policy with per-request nonces and strict-dynamic (#111, #113)
• Playwright smoke test (login, dashboard, alerts, CSP violation guard) as a blocking CI gate (#112)
• Production readiness checklist complete; WIP banner removed (#114)

Getting started

See the README quickstart (make env && docker compose up) and the wiki. Migrations deploy with prisma migrate deploy.