Workspace security controls, a checklist template library, and design reviews in Slack
Admins get a Settings > Security tab that puts workspace-wide ceilings over every project, worker and member: switch the public comment widget or share links off, restrict which domains actors may reach, and control who can invite teammates and from which email domains. Creating a checklist now starts from a library of ready-made templates instead of a blank page, a Slack channel can review design links in-thread, and pending invitations can be resent or chased automatically.
- Workspace security controlsNew
A new Security tab in workspace settings, admin only. Switch the public comment widget, public share links and self-hosted workers on or off for the whole workspace; restrict the domains actors are allowed to browse with an allow list or block list; cap which origins any project may serve the widget to; and decide who can invite members and which email domains they may be invited from. Every control is a ceiling, so it can only narrow what a project or worker already allows, never widen it. Turning public sharing off also revokes share links that already exist.
Read about security - Start a checklist from a templateNew
The create-checklist dialog now opens on a library of ready-made checklists covering smoke tests, signup and activation, checkout, pricing and landing pages, form validation, accessibility basics, mobile responsiveness, content clarity, navigation and search. Pick one, point it at a URL and adjust the steps, rather than writing every check from scratch.
- Design reviews in a Slack channelNew
Map a Slack channel for design review, then drop a link to a page or a Figma file into it and ask for feedback. Stunt Double opens the link, captures what it sees (Figma frames come through your workspace Figma connection) and posts a review back in the thread, with findings ordered by severity. The channel does not need to be wired to a project first.
- Resend and auto-chase pending invitationsNew
Resend an invitation that never got opened straight from Settings > Members, and let Stunt Double send a reminder on its own if one is still sitting unaccepted.
- Auto-join on more than one workspaceImproved
Domain auto-join is no longer limited to a single workspace per domain, so teams running separate workspaces on the same company domain can each pick up new teammates automatically.
- A hardened comment widgetImproved
The public comment widget went through a security pass: every endpoint now checks the requesting origin against the project allow list and fails closed, team-only comments are unlocked by a signed short-lived token rather than a client-side flag, and anything a visitor submits is validated before it reaches your dashboard.
Widget documentation - Clearer product and security pagesImproved
A dedicated product page walks through what actors, checklists and interviews actually do, and the security page now covers how comment data is handled, with the full detail available on request.
See the product - Quieter and cheaper under the hoodImproved
Background work was right-sized and rescheduled so runs cost less and scheduled sweeps stop doing no-op work, embeddings are cached per workspace so repeated interview and search queries are not recomputed, and a batch of benign auth and rendering warnings no longer surfaces as errors.