Invoices you can write by hand
- NewNot every invoice comes out of a timer. You can now write one by hand — a fixed fee, a monthly retainer, a line with its own quantity and unit price — instead of being told there is no unbilled time in the period.
- ImprovedThe invoice document now says who is issuing it: your business name, address and tax number sit at the top, and if they are still empty the page tells you where to fill them in.
- ImprovedA work log states in words whether it is billable, so you are not guessing which hours can reach an invoice.
- SecuritySign-up and invitations stopped reading one mailbox as many: an address carrying a “+tag” is refused, and [email protected] is recognised as the same inbox as [email protected]. If the mail provider starts refusing everything, the outgoing queue backs off instead of hammering it.
Terms and privacy, rewritten to be read
- ImprovedThe terms of service and the privacy policy were rewritten to hold up when somebody actually reads them, and the banner that asks for your acceptance stopped taking up half the screen. Because the wording changed, every account is asked to accept the new version once.
Views you can name, work that repeats, and a board you can run from a chat window
- NewA filter and a sort can have a name. Save the view, keep it to yourself or share it with the organization, reach it from the sidebar or Cmd+K, and put it on a dashboard. If a saved view points at a label or a project that no longer exists it says so, rather than quietly showing you an empty list.
- NewWork can repeat: daily, weekly on the days you choose, or monthly on a day of the month — either on a fixed calendar or counting from the moment the previous one is finished. The rhythm a retainer actually has.
- NewSlack, Telegram and Discord: add a task, list the ones on you, mark one done without leaving the conversation. A channel is linked with a code the chat gives you and the app spends once, and your notification settings decide what reaches you there.
- NewDescriptions and comments understand Markdown — headings, lists, links, code — with a preview tab while you write. A mention still looks like a mention.
- ImprovedThe board can be worked from the keyboard alone: pick a card up, move it between columns, put it down. Contrast, focus rings and the “reduce motion” setting were audited across the app, dark theme included.
- ImprovedThe public site got about twice as light: opening the home page downloads 433 KB of JavaScript where it used to download 849 KB, and a build now fails if that number creeps back up.
- SecurityEvery query that reads an organization’s data now has a floor underneath it: the scope comes from who is asking — your memberships, a portal session, an API key — rather than from a condition somebody remembered to write.
- FixedCmd+K stayed silent until the page that owned it had finished loading, and a client portal logo would not draw in a browser that could not carry a token. Both answer now.
Bring your board with you, and decide what reaches you
- NewImport from Trello, Asana, Jira or a plain CSV. You pick the file, see a preview, map their columns onto ours, and the import runs in the background and hands back a report of what came in and what did not.
- NewSelect many tasks at once — shift-click for a range — then move, assign, label, prioritise, sprint or delete them in one go, with a line per task saying what happened to it.
- NewNotifications became a grid you own: every kind of notification against every channel — in the app, by email, on your phone. Quiet hours hold a push back until morning rather than dropping it, and six kinds that matter cannot be switched off.
- NewYou can change the email address on your account. Nothing is written until you confirm the new address from your inbox, and confirming ends every other session.
- NewStarting out got easier from both ends: a new workspace opens with five steps on the dashboard that read your actual workspace rather than a stored checkbox, and the project templates are now a gallery you can browse before you even sign up.
- Improved“Today”, “overdue” and “due tomorrow” are answered in your time zone, taken from your browser once and changeable in settings. A due date stays a calendar date: the day you picked in Istanbul is the same day in Berlin.
- ImprovedWhen two people edit the same task at once, the second one is told and shown the current version instead of quietly overwriting the first.
- SecurityA password that has turned up in a public breach is refused wherever a password is set — the client portal included — and a strength meter says so before you submit.
Projects that retire, comments you can fix, and a portal your client owns
- NewA finished project can be archived. It stops taking new work and drops out of dashboards, My Work, the calendar feed and automations — while staying fully readable, with its reports and its invoices.
- NewDue dates remind themselves: a nudge the day before, and again when a task is one, three and seven days late — sent at nine in the morning, in your organization’s time zone.
- NewA comment can be edited by whoever wrote it and deleted by them or a manager, in the app and in the client portal. A deleted comment leaves a trace that it existed, not a copy of what it said.
- NewSigning out of the client portal now reaches the server. A client can see and end their own sessions, change a password in a way that drops their other devices, download their data and ask for their account to be closed.
- NewAn organization’s owner can hand the role to an admin, confirming with a two-factor code or their password. For twenty-four hours it can be taken back.
A hardening pass, from the inside out
- SecurityEvery door onto a task, a project, an organization, the portal, the admin panel and the machine keys was walked again against one rule: whether you can reach a thing is asked before what you are allowed to do with it. The result is a published table of endpoint, gate and answer — the rows that were already right included.
- SecurityUploaded files are scanned for malware before they are stored, and an infected upload is refused rather than quietly kept.
- SecurityThe endpoints that answer before you sign in got the rate limits the rest already had, and the platform administrator account cannot exist without two-factor authentication.
- ImprovedA transactional email is written down before it is sent. If the mail provider blinks, the message waits and is retried rather than disappearing.
- ImprovedWe now say how long each kind of record is kept, and a worker enforces it: a deleted organization really leaves when its quarantine ends, with its files and its address. The table on the security page is derived from what that worker is configured with, so it cannot drift into a promise.
- ImprovedThe app stopped answering trouble with a white screen: a real 404 page, an error boundary with a way back, a notice when a new version is waiting, and a countdown instead of a dead button when you have been rate-limited.
- FixedTwo tasks created at the same instant could be handed the same number. They now come from a counter that cannot be raced.
One sign-in for your agency and the portals you are invited to
- NewIf you already have a KyroTask account, the client portals you were invited to now live behind the same sign-in. One menu switches between your own workspace and a portal, and an invitation sent to that address can be claimed instead of starting a second account.
- ImprovedApproval in the portal became a deliberate act on a named task rather than something a column move implied, and a client can open that task to read its thread, its files and its history before deciding.
- ImprovedThe portal follows the client rather than us: their language, their light or dark theme, their own avatar. And when no intake form is open, it says so instead of offering a button that goes nowhere.
The small edges of logging time
- FixedA task’s two time fields said “Est.” and “Actual” and never said in what unit, so 15:00 read like a time of day. They now say Estimated Time and Logged Time, carry hours:minutes beside them, and explain themselves on hover. The page spinner stopped sitting off to one side.
A sidebar that shows where you are
- ImprovedThe sidebar took the shape of the product — grouped sections instead of a flat list — and the pages with nothing to show got an empty state that tells you what to do next, rather than a bare table header.
- FixedDropdowns in dark mode were drawing dark text on a dark surface.
The product fits a phone, installs like an app, and can reach you on it
- FixedEvery project page fits the phone reading it. All seven views used to lay out a document nearly twice the width of the screen, so a phone spent the day scrolling sideways.
- NewKyroTask can be installed from the browser and opens like an app, with its own icon. It never caches anything that belongs to somebody — what you see offline is the shell, not another account’s work.
- NewIt can reach you when you are not looking at it: push notifications to your desktop or Android phone, queued only once the work is actually saved, so a phone never lights up for something that was rolled back.
- NewAn organization gets a clean address of its own, generated from its name and kept clear of the routes the site already uses.
- ImprovedSettings were reorganised so each subject has its own tab and every form has one obvious action row, instead of a single page you scrolled through hoping to find the save button.
The enterprise column stops being a list of promises
- NewSign in through your company’s own identity provider, so joining and leaving KyroTask happens where you already manage it.
- NewAn audit trail the organization can read for itself, a list of your active sessions you can end one at a time, and an export that is a real exit plan: your whole organization, streamed out in full.
- NewThe client’s half of proofing: a client can open a file version in the portal, pin a comment directly onto the image, and approve the version they actually saw.
- SecurityUploaded files are encrypted at rest, not just the secrets around them — done before there was any production data, so it never became a migration over live files.
- NewThe site caught up with the product: a security page that lists what we do not claim, this changelog, a help centre, feature pages for the half of the product nobody was told about, and comparisons that admit where another product is better.
- Fixed“Sign out my other devices” was signing out the device that asked, about a minute later. The client portal header was drawing the reading client’s own name and logo instead of the agency’s. And approving a proof could never say who approved it.
Invoices, and a trial that starts on day one
- NewTurn tracked hours into an invoice you can send. The agency page and the client portal read the same document, and overdue invoices remind themselves.
- NewEvery new organization now opens on 14 days of full Pro, with no card. When it ends, the workspace drops to the free plan on its own.
- NewThe client portal became two-way: agencies can reply to a client from inside a task, clients can download delivered files, and the portal speaks the client’s language while wearing the agency’s name and logo.
- NewAn organization can set its own currency, invoice issuer details and payment link — three fields the product stored but never let anyone fill in.
- ImprovedA rate change no longer rewrites history: the cost of an hour is frozen the moment the log closes, so margins you already reported stay where they were.
- SecuritySuspending an organization now reaches every door, not just the team’s: the client portal, API keys and inbound email all stop with it.
The dashboard learns time, and sprints learn to answer
- NewVelocity and burndown for any sprint, plus cycle time, estimation accuracy and story-point distribution — the evidence behind calling anything a Jira alternative.
- NewDashboards gained a time dimension: created, completed and logged hours drawn over a window you choose, with a comparison against the previous period.
- NewEvery number on the dashboard now opens the list of work it counts, at a URL you can share.
- ImprovedAn open dashboard is no longer a photograph: it hears about work it did not do and refreshes itself.
- NewCards can hand their numbers over as CSV, and the billing, profitability and revenue reports can leave as files.
One vocabulary for depth, colour, type and motion
- ImprovedThe interface got a single design vocabulary: four elevation levels, one chart palette that survives dark mode, one motion scale, and a compact density option in settings.
- FixedCharts were drawing with a light theme inside dark cards, which left some axis labels effectively invisible.
- FixedRows on the dashboard now respond to the keyboard the way they respond to a click, and the “reduce motion” setting is respected live.
A proven address, and a sign-up form that is not a mail pump
- SecuritySigning up no longer hands out a session. You confirm your email address first, and an unconfirmed address cannot even reach the two-factor step.
- SecurityRegistration is shielded three ways: a per-address budget on identity emails, a daily per-IP ceiling, and a list of disposable email domains. A bot challenge can be switched on without touching the flow.
- ImprovedThe free dynamic-QR allowance now belongs to the account, not to each organization — three free workspaces no longer meant nine live redirects.
Sign in with Google, and email links that actually open
- NewSign in with Google. It goes through exactly the same gate as the password path, so it cannot skip two-factor or an organization’s 2FA policy.
- FixedFive transactional emails — including the invite that is the product’s main front door — were sending a link no mail client could open. They now carry an absolute address.
- ImprovedNotification emails were removed. If you are already in the app, the bell and the live updates have reached you — a second copy in your inbox is noise.
Private projects, and a dashboard that stops guessing
- NewA project can be private. You choose who sees it, invite people to it individually, and every surface — search, dashboards, the activity feed — asks the same access rule.
- NewThe organization dashboard became something you can act on: an attention strip, an activity feed, pending invites you can resend or withdraw, budget usage, and a way to set a budget at all.
- FixedCards that reported numbers they never measured were removed rather than quietly corrected.
- FixedEvery notification and search result was opening the wrong page. Deep links now land where they say they will.
Your data, on your terms
- NewSelf-service data export and account deletion, with a grace window: your sessions end immediately and signing back in cancels the request.
- ImprovedThe privacy policy was rewritten against what the code actually does, and sign-up carries an explicit consent gate.
A pre-production security pass
- SecurityA full audit of authentication, session handling, multi-tenancy isolation, the client portal, payment webhooks and secret masking — findings tracked and closed rather than filed.
- SecurityEvery link-borne credential is now stored as a hash only, and the encryption key ring moved into the database where the data it protects already lives.
Pricing that matches the product
- ImprovedPro moved to per-seat pricing, with the checkout and the subscription webhook keeping the seat count in step. Client portal users are still never counted as seats.
- FixedMarketing copy was aligned with what the backend actually enforces — several plan claims the product never applied were removed.
Everything is an organization
- ImprovedPersonal workspaces and team workspaces became the same thing, which removed a whole class of "works in a team but not for me" bugs and put every feature gate in one place.
- ImprovedThe whole interface is available in English and Turkish, with the account’s language restored at sign-in.
QR codes: a free tool, and codes that never break
- NewA free QR generator that runs entirely in your browser — no account, no upload, and your logo never leaves the page.
- NewDynamic QR codes whose destination you can change after printing, with scan analytics that never store a visitor’s IP address or raw browser identity. Scans are not capped on any plan.
Proofing, dashboards, and billable time
- NewCreative proofing: file versions, pinned comments placed directly on an image, version comparison and version-bound approval.
- NewBillable time and profitability: rate cards that resolve per organization, member or project, project budgets with threshold alerts, and rates that lock in when a log closes.
- NewAnalytics dashboards you build yourself, from widgets that read the work already in your workspace.
A public API, webhooks, and an automation engine
- NewScoped API keys, a versioned REST API with hand-written OpenAPI, signed outbound webhooks, and an MCP server so an AI agent can work your board directly.
- NewA When / If / Then automation engine with a visual builder, cooldowns and no-op guards so rules cannot loop.
Older work is not carried onto this page — the project started in April 2026, and that period built the core project management, organizations and role hierarchy.