What is new in Hashling

trust

A privacy page

• Every connection Hashling makes, what it sends and why, in plain words, at gethashling.com/privacy.

website

A new home: gethashling.com

• The website now lives at gethashling.com. The old address sends you there, so saved links and the install command keep working.

new feature

A double-click installer

• Download Hashling-0.3.0.pkg, open it and follow the steps. No Terminal, no Mac password, and nothing else to install: it brings its own Node and scanning engines.
• It is signed and notarized by Apple, and the Get started page now offers it first.

new feature

I now catch project folders booby-trapped for your AI agents

• I check the folders Claude Code, Cursor, VS Code, Codex and Gemini CLI opened for files that make an agent act by itself: a project’s own MCP servers, settings that switch off safety questions, add hooks or send your API traffic elsewhere, git settings that run commands, hidden git repositories, and shortcuts into ~/.ssh.
• I only warn when those came from someone else (another commit author, or a download). What you set up yourself stays quiet.
• Ask your AI about it: the new risky_projects tool shows the same list.

docs

Ready to share

• Launch posts, Product Hunt images and a launch playbook, in docs/launch.

polish

Fully local means fully local

• While the AI on your Mac is still setting up, questions wait for it instead of opening in a cloud AI.
• The install guide, help pages and compare page now explain Update now and Fully local.

improvement

Sharper answers from the AI on your Mac

• Before the AI on your Mac answers, I hand it the real facts first (your score, open warnings, and the data your question needs), so it never has to guess.
• Automatic now picks a model that gets details right (Qwen3 4B or bigger). The tiny model stays available if you choose it.
• Model downloads that stall or drop pick up where they stopped.
• My own rule files are no longer mistaken for malware when my data folder sits somewhere I scan.

new feature

Update now, and an AI that runs fully on your Mac

• When a new version is out, an Update now button appears. It asks for your Touch ID, checks the download against its published checksum, and keeps your settings and history.
• Fully local mode: Hashling picks a free open model that fits your Mac (or one you choose, or your own Ollama or LM Studio), downloads it once and runs it on your Mac. Nothing you ask leaves it.
• The AI apps table and warning lists read better on a phone.

security

Security updates for the parts Hashling is built on

• Three building blocks Hashling uses for AI connections got their latest security fixes. Nothing changes in how Hashling looks or works.

website

A clearer website and a safety net for every change

• The home page now starts with what Hashling does for the AI agents on your Mac, with a sharper picture of the AI agents table.
• Grey text on the website is darker and easier to read.
• Every change is now tested by starting Hashling on a real Mac, and there is a guide for anyone who wants to help.

docs

Tidier launch drafts

• The drafts for the public launch stick to what Hashling does.

website

A tidier compare page

• The compare page now sticks to what each tool does, in plain words.

website

Clearer privacy wording

• The website and the demo video now say exactly where your data can go: nothing leaves your computer except what you send to the AI provider you choose.

website

A shorter trust section

• The "Why you can trust Hashling" section on the website and the README is shorter and easier to read.

website

A demo video, this changelog and an honest comparison page

• The home page now opens with a 75 second recording of Hashling at work.
• This page lists every update in plain words, newest first.
• A new compare page shows how Hashling stacks up against Little Snitch, LuLu, Malwarebytes, Bitdefender and Snyk, including what they do better.

trust

A "Why you can trust Hashling" section on the website

• The home page now lists what you can check for yourself: open source code, read-only AI access, Touch ID for every change and no tracking.
• A plan for independent testing is published in the repo.

trust

Ways to check Hashling for yourself

• A security policy explains how to report a problem privately.
• Every change is now scanned for security bugs, and the project is graded weekly by the OpenSSF Scorecard.
• Hashling catches the industry's standard test files for malware, and the results are published.

polish

Overview: one rail layout, no gaps, equal-size cards

• Wide-screen overview now uses a single column with no empty corner.
• To-do card no longer shows duplicate items.
• Cards are equal size. Tabs that are already open pick up new data without a refresh.

design

Overview redesign: status band, tile grid, glanceable numbers

• The overview page has a new layout: a status band at the top, tiles for each area, and numbers you can read at a glance.
• Every label now shows a plain-word explanation when you hover over it.

new feature

Breach watch, ransomware brake, text scam watch, AI picture check

• Breach watch: add an email address and Hashling tells you if it turns up in a data breach.
• Ransomware brake: Hashling pauses a program that starts mass-renaming your files, then waits for your Touch ID.
• Text message scam watch: new texts from strangers are checked for scams like fake delivery fees.
• AI picture check: Hashling reads the labels AI tools leave in photos and videos to tell you if something was AI-made.

website

New website: plain-word landing page with Mac and Windows tabs

• The Hashling website is now a clean 7-section page written in plain words.
• A Mac or Windows tab lets you see what is ready now and what is coming soon.
• Fresh screenshots throughout.

phone

Phone check-up: more checks, at-a-glance numbers, website section

• The phone check-up now runs more checks on both iPhone and Android.
• Results show at-a-glance numbers so you can see the important points first.
• A new section on the website explains how phone check-up works.

fix

Phone check-up: fixes after the first real iPhone test

• Several small issues found during the first live iPhone run are now fixed.

new feature

Phone check-up: plug in a phone and Hashling checks it

• Plug an iPhone or Android into your Mac with a cable and Hashling offers a read-only check.
• It checks things like the iOS version, apps from outside the App Store, configuration profiles, and known stalkerware.
• Nothing about your phone leaves the Mac.

new feature

Phone mode: get Hashling on your phone over your own Wi-Fi

• Scan the QR code in Settings and Hashling appears as a home-screen app on your phone.
• Your phone and Mac talk only over your own Wi-Fi. Every message is encrypted with ChaCha20-Poly1305.
• See your score, warnings, a scam check, and your approvals from your phone.

fix

Suggestions: undecided items are now archived, not dropped

• If you leave a suggestion without deciding, it is archived now instead of disappearing.
• Crucial fixes stay waiting until you act on them.
• Use "Bring back" or "Dismiss" any time from the Approvals page.

design

Motion: smoother animations and gentler reduced-motion mode

• The score ring now draws in when the page loads.
• The sidebar highlight glides instead of jumping.
• Approve and reject actions show a quick confirmation animation.
• The reduced-motion setting is gentler throughout.

polish

Calmer activity: fewer repeats, plainer approvals

• Apps now count as new only once per version, so the activity feed is much quieter.
• Repeated entries are merged into one.
• Approval messages now use plain words instead of technical labels.

launch

Initial release: Hashling, your personal AI cybersecurity agent for Mac

• Network monitoring, startup items, privacy permissions, AI agent auditing, malware scanning, scam check, and more.
• Ask anything in plain words. Hashling checks your Mac before it answers.
• Every fix waits for your Touch ID. No account, and nothing leaves your Mac except what you send to the AI provider you choose.