Public log · Updated continuously
Security Changelog
Advisories DRIVUNO has published, with severity, affected components, and remediation status. This list is sourced live from the database — what you see is what is published.
Platform hardening · 2026
- 2026-07-28
Automated security test suite reaches 226 tests
Continuous integration now runs an expanded suite covering row-level-security isolation and randomized (fuzzed) checks of server functions and triggers, plus a dedicated gate that fails the build if any code path would let unencrypted content leave the browser.
- 2026-07-15
Scoped API keys and signed webhooks
Public API keys can now be limited to specific scopes and are stored hashed. Outgoing webhooks (including Zapier/Make integrations) are signed with HMAC-SHA256 so subscribers can verify authenticity and retry safely.
- 2026-06-30
Per-channel roles enforced in Rooms
Viewer, creator, moderator, admin, and owner permissions for DRIVUNO Rooms channels are now enforced directly at the database layer, not just in the interface.
- 2026-06-12
Session geo-anomaly detection
A sign-in from a country not previously associated with an account now raises an alert and is recorded in the audit log.
- 2026-05-28
Immutability triggers and identity-anchored policies for collaboration data
Row-level security policies across teams, rooms, and shared-folder tables were extended to anchor strictly on the authenticated identity, and database triggers now block tampering with protected audit and history records.
- 2026-04-22
Hardened account recovery
The recovery flow now verifies recovery proofs on the server before any master-key material is released, with tightened rate limiting to slow down abuse attempts.
- 2026-04-05
Password-protected public links with a 24-hour maximum lifetime
Public share links can now require a password; the server verifies an Argon2id-derived proof without ever learning the password itself. All public links now expire automatically after 24 hours at the latest.
- 2026-03-02
Resumable, chunked uploads
Large file uploads are now split into chunks and can resume after an interrupted connection instead of restarting from zero — most useful on mobile networks.
- 2026-01-19
Streaming encryption for large files
Large files are now encrypted and decrypted in a continuous stream of small chunks rather than all at once, so the full file is never held in memory in one piece — improving both reliability and device memory usage.