Vizoguard Changelog
Stay up to date with the latest security patches, features, and improvements for Vizoguard.
Desktop platform policy August 24, 2026
Support
- Set macOS 12+ on Apple Silicon as the supported Mac target from desktop 1.3.6
- Ended Intel Mac support with legacy 1.3.5 while preserving its exact historical download
- Separated Intel and Apple Silicon URLs so an Intel user is never sent an ARM installer
Android v1.0.4 August 24, 2026
Security
- Required a complete SHA-256 digest before downloading or installing an app update
- Strengthened rooted-device detection for dangerous properties and writable system paths
- Restricted diagnostic log sharing to the app's dedicated cache directory
- Kept platform certificate validation ahead of runtime certificate-pin enforcement
Desktop v1.3.5 July 12, 2026
Security
- Cut over license-response verification from shared-secret HMAC to ECDSA signatures
- Added dual-format support for new 128-bit license keys while retaining legacy-key compatibility
- Pre-armed the kill switch before VPN dialing to close the connection-start leak window
- Authenticated blocklist updates and restored automatic cache cleanup
Android v1.0.3 July 16, 2026
Security
- Cut over license-response verification to ECDSA and removed the embedded shared secret
- Added runtime certificate-pin drift checks and pinned the current Let's Encrypt YE2 intermediate
- Added dual-format support for 128-bit license keys
- Scoped license-invalid broadcasts to the Vizoguard package
Desktop v1.3.4 May 6, 2026
Security
- Replaced runtime code-signing detection with build-time flag (prevents signature-stripping bypass)
- Added Electron fuses: disabled
RunAsNode, EnableNodeCliInspectArguments, EnableNodeOptionsEnvironmentVariable
- Enabled ASAR integrity validation and
OnlyLoadAppFromAsar
- Added signed license responses with replay protection (nonce + timestamp)
- Added temp file cleanup and log rotation on startup
- Fixed semver parsing in updater downgrade protection
- Pinned all GitHub Actions by SHA
Fixed
- Fixed electron-store ESM crash
- Fixed macOS and Windows binary path mismatches
- Fixed Windows packaging bloat from macOS binaries
Desktop v1.3.3 March 23, 2026
Security
- Added certificate pinning to auto-updater
- Added minimum version downgrade protection
- Added WebRTC IP leak prevention
- Added real CSP via session webRequest
- Enabled explicit sandbox in BrowserWindow
- Added log redaction for sensitive data
Desktop v1.3.0 / Android v1.0.1 March 23, 2026
Added
- Obfuscated VPN transport (VLESS + WebSocket + TLS)
- Privacy Autopilot local threat scoring
- In-app update checker for Android with SHA-256 verification
Security
- Block IPv6 at VpnService level (Android)
- Remove allowBypass() — all traffic through tunnel (Android)
- Clock skew detection with monotonic timestamp defense (Android)
Desktop v1.1.0 March 22, 2026
Added
- Initial public release for macOS and Windows
- Shadowsocks VPN with tun2socks
- System tray integration and auto-updater
For security disclosures, contact security@vizoguard.com.