Release Notes
What's New in Flowguard
Stay up to date with the latest features, improvements, and bug fixes.
Fixed
- Fixed full-page screenshots stretching hero sections and cutting off content on pages with fixed/sticky headers.
- Fixed the screenshot viewer to start at the top, show the full image, and stack above the WordPress admin menu.
- Report PDFs no longer return a 403 error when opened or downloaded on Apache/LiteSpeed servers.
- Fixed broken statistics icons in PDF reports on PHP 8.5.
- Fixed Cloudflare Turnstile (Simple Cloudflare Turnstile plugin) not being bypassed during flow runs, so protected form submissions now pass in test mode.
- Fixed the Record feature adding an invalid "Type Text" step on submit buttons, which caused flows to fail on run.
Security
- Hardened PDF report generation against template injection.
Added
- AI Test Generation – Generate tests by describing what you want to test in natural language
- Live step progress now shows during test runs, both in the flow editor and under each item in the overview.
- Environment Variables — store API keys and secrets encrypted in Settings → Developer, access them in Code steps via env.KEY_NAME
- Steps can now be renamed via right-click in the flow editor, with custom names shown everywhere including execution logs.
- Discord notifications — connect a webhook under Settings → Notifications and choose which events (flow failures, passes, site downtime, recovery) you get pinged about
- Scheduled tests can now be staggered — set a delay (in minutes) between each flow's start under Settings → Auto-Run, so they don't all run at once (e.g. to avoid OTP/SMS collisions). Defaults to off.
Improved
- Code Editor can now be moved, resized from any edge/corner, and maximized via double-click — its size and position are remembered
- Settings tabs auto-scroll to the active tab on page load
- Redesigned execution logs with a cleaner timeline, copy-to-clipboard for console output, and consistent rendering across the editor and overview.
- Fixed sticky/fixed headers appearing floating mid-image in full-page visual checks. Applies to new checks; existing reference screenshots keep their current behavior.
- Full-page visual checks now trigger lazy-loaded images automatically, so they're included without a manual scroll + wait. Applies to new checks; existing reference screenshots keep their current behavior.
Fixed
- Cloudflare Turnstile blocking form submissions for plugins which are disabling the submit button until the captcha is valid.
- WS Form submissions failing on captcha validation in some situations.
- Fixed the code editor stripping backslashes (e.g. regex like \d, \w, \s) from saved code on save/refresh.
- Fixed selector detection for Amelia forms — checkboxes, radios and similar fields now get stable selectors instead of Amelia's auto-generated IDs that change on every page load.
- Fixed the Run Code editor freezing the browser when typing a "$" character.
Fixed
- Plugin update check could fail on PHP 8 due to a missing type cast in the bundled SureCart Licensing SDK
Added
- New "Run Code" Step: Execute custom code during your flows — in Browser mode (full DOM access) or Playwright mode (for Local API Runner). Includes a built-in code editor with syntax highlighting, live syntax validation, auto-formatting, and a reference sidebar with click-to-insert snippets
- Visual Check steps now support full page screenshots. Enable "Full page" in the step options to capture the entire page instead of just the viewport. New Visual Check steps have this enabled by default. Existing steps are unaffected.
- A new Debug Log page (Flowguard → Debug Log) shows internal events: test mode activation, blocked emails, flow execution, and errors. Useful for troubleshooting and support.
Improved
- Chunked image upload: Visual Check images are now uploaded individually, improving compatibility with strict hosting environments.
- Fixed styling for execution log timeline, test results dialog, and code editor in dark mode.
Fixed
- Test mode on Memcached/Redis hosting: Test mode now reliably blocks emails and database writes on hosting environments with aggressive object caching. Previously, cached tokens could be lost between requests, causing test mode to not be recognized during form submissions.
- Test mode detection now correctly validates tokens for concurrent flow runs (e.g. multiple flows triggered by a plugin update) using per-token transients
- Auto-dismiss no longer closes popups that contain elements targeted by the current step. Fixes an issue where form popups (e.g. Elementor Pro popup forms) were accidentally closed.
Added
- Flowguard can now attach browser session videos to failed flows
Improved
- Added helper to create WordPress admin login test flows directly from the Flow Editor
Fixed
- Fixed monitoring authentication for WordPress subdirectory installations
- Fixed brute force protection false positives on shared hosting
- Fixed preview token permissions for users with custom roles
- Fixed Reference Screenshot for Visual Check not added on some server environments
Fixed
- Google reCAPTCHA v3 blocking form submissions during automated test runs
- Bricks Form Submissions Test Mode Compatibility Fixes
- Test Mode logs not showing blocked emails and other intercepted actions in some situations
- Elementor Forms - Captcha Improvements
Fixed
- Fixed Cloudflare Turnstile captcha blocking form submissions during automated test runs (Bricksforge Pro Forms)
Improved
- Improved compatibility with strict firewalls and cookie consent tools
Fixed
- Fixed Cloudflare Turnstile blocking form submissions in the Flow Editor
- Fixed Visual Check screenshots failing on servers with strict upload size limits (413 errors)
- Fixed incompatibility with other plugins using the SureCart License system
Added
- Added option to automatically clear the page cache after a rollback (Settings > Auto-Run > Clear Cache After Rollback)
Improved
- Select2 multi-select recording and execution support
- Smart Skip — automatically skips non-essential steps that fail if the next step succeeds
- Checkbox handler gracefully handles long values (e.g., GDPR consent text)
Fixed
- Fixed staging sites with public domains being incorrectly flagged as local addresses when the hosting server's DNS resolves them to a private IP.
- Fixed Choices.js dropdown options not being selected in the Flow Editor
Added
- Role-based permissions — control which user roles can access Flowguard
- Added analytics blocking — Google Analytics, Facebook Pixel, Independent Analytics and 15+ other tracking services are automatically blocked during test runs to keep your analytics data clean
Improved
- Added Usercentrics (.uc-close-button) to default auto-dismiss selectors
Fixed
- Fixed email From header incompatibility with transactional mail services (Postmark, SendGrid)
- Fixed recording generating broken steps for Choices.js / custom select dropdowns
- Fixed select step timeout on hidden select elements wrapped by custom select libraries
- Fixed step handler timeout when multiple elements match selector (multi-step forms)
- Fixed assertions failing instantly instead of polling for condition to be met
Added
- Initial Release
Added
- Amelia Booking Support
- Success Banner in Test Results with completion confirmation
Improved
- Visual Check: Pixelmatch Sensitivity lowered for more accurate change detection
Fixed
- Concurrent Cron Runs race condition with batch-scheduled flows
- Bricksforge Pro Forms Cookie check failed error
Added
- Visual Check Step for pixel-by-pixel viewport screenshot comparison
Improved
- Auto-recreation of reference screenshots when settings change with config hash detection
Fixed
- Added page.mouse.move() after navigations to trigger deferred JavaScript loading in headless browsers
- Fixed broken page rendering on cached sites with LiteSpeed JS defer
- Whitelisted CSS metadata writes for Elementor, Bricks, Divi, Beaver Builder, and 15+ other page builders
- Fixed page builders skipping CSS enqueuing due to blocked meta writes
Added
- Auto-Rollback feature to restore previous plugin/theme versions when tests fail
- Smart update batching to run tests once after all plugin updates complete
- Auto-dismiss popups with configurable CSS selectors for 20+ common plugins
- Local site detection with clear error messaging
- Priority queue system for manual and update-triggered tests
Improved
- Full i18n support with 312 translatable strings across 7 languages
- LiteSpeed Cache compatibility with no-cache headers
- reCAPTCHA bypass in editor iframe preview
- WordPress update compatibility for PHP 8.0+ requirements
Fixed
- Stale license status and monitoring data on LiteSpeed-cached sites
- Incorrect timestamp display showing '2 hours ago' for recent checks
- Broken selectors for elements in flip boxes and accordions
- PHP 8.2 compatibility issues with union types and FILTER_FLAG_NO_LOOPBACK
Ready to Try Flowguard?
Start protecting your WordPress site today.