Secure Sign-Ins and Enhanced API Reliability
This release introduces secure, automatic account reclaiming for email owners, preventing lockouts from previous unauthenticated signups. We have also hardened our API keys with per-IP rate guards and improved the stability of JS-rendered scrapes and AI model routing. Developers using our Node SDK will also benefit from standardized package naming and new cryptographic subpath exports.
Our automatic recovery now uses recent success rates instead of lifetime averages. This allows the platform to instantly adapt and bypass detection on domains experiencing sudden degradation.
A new 15KB minimum content threshold applies across all scraping paths. This ensures empty pages or small anti-bot screens are marked as failures and never billed as successful scrapes.
Fixed an issue in the Node SDK's fetch wrapper where multiple Set-Cookie headers were folded into a single comma line. They are now properly preserved for seamless session tracking.
New Features
1Secure Account Reclaiming
Users can now seamlessly reclaim their email addresses during sign-in if their email was previously registered via unauthenticated signup. This process automatically revokes unauthorized credentials and secures your account data.
Improvements
10Responsive domain self-healing
Our automatic recovery now uses recent success rates instead of lifetime averages. This allows the platform to instantly adapt and bypass detection on domains experiencing sudden degradation.
Strict quality checks for successful scrapes
A new 15KB minimum content threshold applies across all scraping paths. This ensures empty pages or small anti-bot screens are marked as failures and never billed as successful scrapes.
Context manager support in Python SDK
We added context manager support and explicit close methods to the Python SDK. This properly cleans up client sessions and active event loops, preventing persistent background memory leaks.
Optimized HTML-to-Markdown parsing
An optimized single-pass parser now handles unclosed elements in HTML documents. This eliminates processing lag and speeds up markdown extraction for complex, structured pages.
Smarter connection failure routing
The platform now detects IP-level connection rejections to instantly block wasteful escalation. This ensures faster failover, reduced latency, and overall smarter request routing.
Resilient AI Extraction Model Routing
AI-powered scraping tasks are now more resilient to third-party model deprecations. The system automatically redirects queries to active fallback pools, preventing unexpected 404 errors during extraction.
Node SDK Subpath Exports
The Node SDK now supports subpath imports for helper modules. Developers can import utility modules like cookie encryption directly using standard paths without encountering module resolution errors.
Standardized Node SDK Imports
We standardized our SDK references to use the official npm package name, alterlab. Documentation, templates, and public examples have been updated to ensure smooth integration without using outdated package names.
Updated Affiliate Commission Cap
We updated our affiliate commission payouts to align with our standard rewards policy. Affiliates now receive a 20% commission on their referred user's first deposit, capped at a maximum of $10.
Improved DNS Resolution Stability
We optimized DNS caching and watchdog intervals across our web scraping worker fleet. This resolves transient resolution failures under heavy scraping volumes, making concurrent network requests much more stable.
Bug Fixes
12Reliable automatic billing and deposits
Fixed an issue where billing webhooks failed during automatic recharges or deposits. This ensures billing transactions and credit top-ups process instantly without account disruption.
Accurate success metrics in digest emails
Fixed a bug where digest, billing, and credit emails reported a zero percent success rate. Email metrics are now fully accurate and reflect the true success outcomes of your jobs.
Proper Set-Cookie handling in Node SDK
Fixed an issue in the Node SDK's fetch wrapper where multiple Set-Cookie headers were folded into a single comma line. They are now properly preserved for seamless session tracking.
Unicode support in agent metadata
Fixed a crash that occurred when metadata headers contained emojis, accented characters, or non-Latin scripts. The SDKs now safely URL-encode all agent configuration fields.
Intact URLs in extracted markdown links
Resolved a bug where legal URL characters were over-escaped in markdown generation. Extracted links and references now render perfectly and redirect to the correct target URLs.
Robust concurrent update validation
Enhanced safety for concurrent data updates by validating database records immediately before committing. This prevents rare race conditions and data overwrites under high load.
Eliminated race condition on trial keys
Fixed an intermittent race condition that caused valid trial key requests to be incorrectly rejected with unauthorized errors, ensuring smoother testing and onboarding.
General bug fixes and improvements
Includes several developer-experience and minor platform improvements. These include Node SDK documentation updates, optimized database locks, and proper ID-independent route caching.
Reliable JS-Rendering Escalation
We fixed a rendering conflict where forcing JavaScript execution could trigger redundant browser behaviors. Scraping requests now scale cleanly and consistently when JavaScript rendering is requested.
Dashboard B2B Profile Reliability
Fixed routing issues on the web dashboard that caused B2B demographic profiles, verifications, and stats to intermittently fail. These dashboard features are now fully functional and stable in production.
Robust Team Invitation Handling
Resolved an issue where sending duplicate organization invites or triggering database conflicts would return a 500 server error. The API now correctly returns a 409 Conflict status and handles retries safely.
Asynchronous Queue Stability
Fixed a task lifecycle leak where background processes in our message queue consumers could be prematurely destroyed under high load. This ensures reliable and smooth handling of asynchronous scraping jobs.
Security
4Sanitized API telemetry logging
Improved data privacy by scrubbing raw exception details from telemetry logs. This prevents accidental exposure of sensitive internal runtime information in reports.
Hardened API gateway rate limiting
Resolved gateway vulnerabilities where crafted paths could bypass standard rate limits. All administrative and download endpoints are now strictly isolated and throttled.
Enhanced API Key Bruteforce Protection
Introduced a dedicated per-IP soft-blocking guard to defend against API key brute-force attacks. The system tracks cumulative authentication failures and enforces ceilings, preventing attackers from evading detection.
Trial Key Spend Limit Isolation
Enforced strict validation checks on spend-limit API endpoints for our trial key pool. This ensures trial users cannot read, modify, or delete spend-limit configurations belonging to other trial accounts.
Plus 83 internal changes for stability and performance.