API Changelog

Custom plans for distributors, scan status visibility, and simpler plan assignment.

• Custom plans: distributors can offer tailored plans to all of their partners, alongside the default Basic, Plus, and Pro plans.
• Assign plans by `planId` when onboarding or updating a customer. Existing `planType` values (e.g. `safeweb-basic`) continue to work, so no changes are needed for current integrations.
• Customer info responses now include `scanned_status`, showing the customer’s current scan state.

Customer upgrade flow, partner customer listing, and webhook improvements.

• Upgrade prospect customers to active status via a dedicated endpoint.
• List all customers for the authenticated partner.
• Domains added through the assets update endpoint now trigger a scan automatically and immediately.
• Webhook payloads alias UUID fields as `id` for migration in July afterwhich they will be removed.

Prospecting workflow, reactivation, and webhook delivery visibility.

• Onboard customers in `prospect` status for a one-time exposure scan.
• Reactivate offboarded customers.
• List recent failed webhook deliveries for troubleshooting.
• New `customer.scan.first_completed` webhook event when the initial scan finishes.

Breach intelligence, threat scoring, and distributor webhook management.

• Update breach resolved status by customer and breach ID.
• Retrieve a single breach record by ID.
• Get a customer threat score.
• Manage distributor-scoped webhook endpoints (create, update, delete).
• Contact email is now optional when onboarding a customer.

Distributor API launch and partner analytics.

• New Distributor API for partner management, billing codes, and analytics.
• Partner analytics endpoint for breach and customer metrics.
• All integration routes moved under `/api/v1/integrations/`.