changelog
Every user-visible nittim change, in plain language, as it ships.
September 7, 2026
The free self-review now asks your assistant to read the whole project once with every lens and fix everything it found in one wave, then re-check only what those fixes changed — the same result in a handful of rounds instead of dozens.
September 5, 2026
When a run is refunded, its held credits are released right away, so a retry is never told to add funds when your balance already covers it.
September 5, 2026
nittim is now listed on Cursor, Smithery and Glama, each pointing at the same MCP server your own key already reaches.
September 5, 2026
MCP clients can now sign you in with your nittim account instead of a pasted key, prompting for it the moment a tool actually needs one.
September 5, 2026
The one free, covered Audit every account gets now runs a genuine reasoning pass over your repository, at no cost and no card, instead of a deterministic preview.
September 5, 2026
Asking for a single check with run_module now costs exactly what that call costs to run, priced on its own rather than borrowed from a larger plan.
September 5, 2026
Credits are tracked to the hundredth of a credit from today, so a price can match what a run actually costs instead of rounding up to the next whole credit.
September 5, 2026
Audit now checks a project against what a production deploy actually promises — pooled database connections, redacted logs, a real time zone, and more — the kind of thing that only bites after launch.
September 5, 2026
nittim's own daily self-audit, the Loop, found and fixed more of its own issues this round, including two known vulnerabilities in the packages it depends on.
September 4, 2026
The enterprise page now offers attestations built to order, and a plain commitment: if a data breach ever happens, you hear about it within 72 hours.
September 4, 2026
Every corner of the product now uses the same plain names for what it does — Scan, Audit, Full Audit, and Loop for the ongoing self-check — instead of a mix of internal ones.
September 3, 2026
Audit now reads your repository's actual branch protection, force-push history, and Dependabot and secret-scanning status straight from GitHub, not just the code itself.
September 3, 2026
Every repository nittim has scanned publicly is now its own indexable page in the report library, so a real report shows up when someone searches for it — not a screenshot.
September 2, 2026
Audit now checks that your live domain and its www version serve the same site, and that plain HTTP actually redirects to HTTPS — a mismatch here usually stays invisible until a customer or a search engine trips over it.
September 2, 2026
The message on a running report now reflects its actual age — the normal expectation while it's fresh, and an honest longer-wait explanation with a live counter once it runs past that.
September 2, 2026
Cross the normal wait and you get one honest email: the run is healthy, the AI provider's own queue is setting the pace, when to expect it, and that a stuck run is retried and then refunded automatically.
September 2, 2026
The Loop — nittim running its own audit on its own code — landed its first full round of fixes, catching problems in its own security and infrastructure the same way it would in yours.