Implemented a 'Ping-First' strategy for subnet sweeps, eliminating the 10-second hang caused by blocking ARP calls.

Reduced mDNS listen windows and increased scan intervals to 5 minutes, significantly lowering network 'tax' during discovery.

Integrated granular phase-timing into the engine via Debug logs, enabling instant performance audits directly from the Dashboard UI.

Introduced a 'Debug Mode' switch on the Logs page for instant, verbose diagnostics without requiring a service restart.

Restored the background security scoring engine to the main sync loop for live vulnerability updates.

Re-implemented event logging for device discovery, roaming, and status changes to restore full history visibility.

Restored Latency History and Stability Score increments to ensure accurate long-term health analytics.

Introduced real-time event streaming to SIEM platforms like Splunk and Elastic, enabling enterprise-wide security correlation.

Consolidated Network Ports and SIEM configuration into a single, high-authority 'Appliance Infrastructure' section with atomic restart controls.

Migrated to a secure, public licensing handshake. Master API Keys are no longer stored within the appliance, significantly hardening the security posture.

Introduced a tiered offline verification system (30-day soft warning, 60-day hard expiry) to ensure business continuity in remote or air-gapped sites.

Completely eliminated legacy 'Mock Mode' bypasses, ensuring mandatory, authoritative validation for all production environments.

Eliminated identity 'ping-pong' by centralizing all device classification logic into a single, authoritative reconciliation engine.

Implemented a hierarchical identity system that prevents low-confidence discovery data from overwriting manual names or high-confidence fingerprints.

Refactored the core API infrastructure into a modular, service-oriented architecture for significantly improved reliability and cold-start speed.

Upgraded internal database encryption with 256-bit peppered entropy and DPAPI-hardened key protection.

Migrated to PBKDF2 with 600,000 iterations and implemented O(1) constant-time API key validation to mitigate timing attacks.

Introduced a sophisticated 0-100 security scoring engine with structured risk tracking for unauthenticated services and remote exposure.

Optimized socket hygiene and concurrency models to boost port enrichment speeds by over 300% on high-density networks.

Implemented full bitwise CIDR masking for all subnet sizes, ensuring 100% accuracy for massive /16 corporate environments.

Moved high-concurrency environment tuning to the host level to eliminate 'ramp-up' latency during initial network sweeps.

Smashed the 'Scan Stall' bug by implementing persistent negative caching for DNS and SNMP. Reduces sparse network scan times by up to 40%.

Scan parameters now apply instantly via a CancellationToken interrupt system. Changes to subnets or intervals no longer wait for the engine sleep cycle.

Eliminated scan 'ramp-up' latency by scaling the .NET ThreadPool proactively to match configured parallelism, preventing thread starvation.

Introduced a high-performance terminal UI for real-time engine logs, featuring millisecond-accurate stage timing and severity filtering.

Eliminated a hidden 5-strike grace period. The engine now respects your configured status thresholds immediately.

Docker/restricted devices responding only to ICMP now show as 'Online' with an 'Unknown MAC' instead of being rejected.

The engine now explicitly logs which IPs were dropped by synthetic filters, providing full transparency into discovery outliers.

Massive expansion of the visual registry including premium logos for Dell, Synology, Samsung, Sennheiser, Yamaha, and major Pro-AV brands.

Smashed the 'Ugly Logo' placeholder bug by replacing the legacy text with a professional, high-quality gradient wordmark.

Refactored detection logic to handle substring matches and common vendor variations (e.g. HPE/Aruba) automatically.

Released the first-party StacksAtlas bridge for the OpenAVC platform. Enables real-time 'Network Pulse' status cards on AV control surfaces.

Relaxed Ghost-Ping protection to allow devices that respond to ICMP but delay ARP requests (common in managed switch security profiles).

Hardened neighbor verification to require active ICMP/ARP verification for all passive neighbors, eliminating stale ARP 'ghost' entries.

Running a Traceroute or Deep Scan now automatically promotes the target device to 'Online' status.

Implemented a 'Physical Reality Check' for all scans. If a sweep returns suspiciously high counts (>85%), a mandatory triple-verification loop is triggered automatically.

Nmap discovery now monitors OS network buffers for 'Resource temporarily unavailable' errors, aborting unreliable scans rather than reporting false data during system load.

Added randomized micro-delays (0-20ms) to parallel pings to distribute peak network stack pressure and prevent packet reflections.

Implemented a passive 'Stage 0' discovery layer using netstat and arp for instantaneous device recognition on Darwin, bypassing traditional socket throttling.

Refined Role-Based Access Control to allow 'Normal' users read-only access to Dashboards, Topology, and Alert History while strictly gating administrative settings.

Automatic path resolution for Nmap on macOS (Homebrew or Bundle paths) with hardened privileged execution for OS fingerprinting.

A beautiful, interactive Canvas-based Force-Directed Graph mapping the entire scanned subnet in real-time.

Native SNMP v2c support for fetching System Name and Description from managed hardware (Switches, NAS, Routers).

Replaced legacy Windows PInvoke with a robust, cross-platform engine for universal networking compatibility.

Integrated Recog XML signature engine for industrial-grade hardware identification.

Simultaneous ARP+Ping 'racing' logic reduces subnet sweep times by up to 30%.

Fixed a critical race condition causing service hangs on startup. Startup is now sub-second.

Fixed race condition where acknowledged security risks were reverting.

Resolved a 'Invalid URL' crash in ApiService and a LiteDB mapping exception.

Fixed regressions in 'Show Archived' toggle and 'New' filter logic.

Fixed issue where manual device edits were not persisting.

'Magic Packet' support to boot up offline workstations remotely.

Visual Traceroute to identify latency bottlenecks.

Historical tracking of MAC-to-IP bindings to spot 'drifting' devices.

Detection of EOL OS (XP/Win7) for immediate risk forecasting.

Added dependency disclosure (Npcap/Nmap).