Public Roadmap

DONEOpen-source CLI toolkit (32+ tactical scripts)

DONESign-up / sign-in / sign-out + email confirmation + password reset

DONEPer-user API keys (rotate / revoke)

DONEGuardian agent (Python daemon, ARP scan, anomaly detection)

DONEReal-time dashboard (devices, scans, incidents, auto-refresh)

DONEStripe billing — Guardian Pro $9.99/mo + Operator $49/mo (live)

DONEAnnual plan pricing (20% off monthly)

DONE14-day Pro trial, plan-gated features, monthly AI quota

DONEEmail notifications via Resend

DONEAI security assistant (platform / BYOK / self-hosted Ollama)

DONEOutbound webhooks (Slack/Discord/PagerDuty/HTTPS, HMAC-signed)

DONETeam / family accounts (Operator-only owner, plan inheritance)

DONEPWA — installable, offline shell, web-push receiver

DONEGDPR data export + account self-delete

DONEPer-user audit log (sign-ins, key changes, deletions)

DONEOnboarding wizard, status page, public docs, comparison table

DONE2FA / TOTP via Supabase MFA

DONEshadow-cli OAuth login (RFC 8628 device flow — no more paste-key)

DONEReferral program — +30 days Pro per referred subscriber

DONEAndroid app — ShadowCypher Guardian APK (Capacitor, GitHub Releases)

DONEShadow Android app — replaces Bixby/Google Assistant; on-device Vosk STT + offline fallback

DONESplunk / Datadog / ConnectWise / PagerDuty / OpsGenie webhook templates

DONECVE alert matching — device-scoped CVE feed matched against your network inventory (hourly cron)

DONEPhishing Forge — 35 enterprise phishing templates, live PHP server, credential capture (desktop app)

DONEC2 Command Center — multi-listener control, session manager, payload generator (desktop app)

DONEShadowScript runtime — lexer, parser, interpreter, engine CLI

DONEShadowOS v0.1.0 — Arch-based live/installable ISO. Hyprland, 250+ packages, 6 hot-swap modes, ShadowCypher + Ollama pre-installed. ISO builds verified at ~7.4 GB.

DONERAG knowledge base (1593 chunks) — live context injection for AI security teams

DONEGemma 4 local model — shadow-gemma4 modelfile, Ollama sovereign config (no telemetry)

DONETauri desktop auto-update — Windows/macOS builds check releases.shadowcypher.site on launch and install silently in background

DONELinux desktop packaging — hicolor icon theme registration, shadowcypher --update self-upgrade, Tauri .deb/.AppImage CI builds

DONEAES-256-GCM encryption — full Fernet→GCM migration; 12-byte random nonce, auth tag verification, sentinel-based key validation

DONEGuardian agent auto-update — daemon polls GitHub releases every 24h; SHA256-verified atomic self-replace + auto-restart; shadow-agent update for on-demand upgrades

DONECounter-intelligence engine — MITM/ARP spoofing detection, SSL interception (cert fingerprint pinning), DNS leak analysis, rogue DHCP discovery, promiscuous interface detection, traffic anomaly scan, and OSINT self-audit (HIBP breach check, Tor exit node status, public IP exposure)

DONEQt6 C++ native desktop app — replaces GTK3 Python UI; compiled binary, instant startup, HiDPI rendering. Full page suite: Dashboard (arc gauges), Network Guardian (device table, incident feed), Counter-Intelligence (7 live detectors), Arsenal (24-tool status grid), AI Assistant (chat), ShadowScript (mission runner + editor)

DONEShadow daemon (IPC server) — JSON-RPC 2.0 Unix socket bridge connecting Qt6 UI to all Python modules (guardian, counter-intel, AI engine, ShadowScript interpreter)