October 2026
- Google Tag Manager and Consent Mode v2 (5.4.3). The tracking script reads Google Consent Mode from the dataLayer, so consent banners connected to GTM work without extra code. Setup.
- Heatmaps fixed. Click and scroll heatmap points had stopped being stored in June. They are stored again, without IP address or query strings.
- GEO audit v2. Passage-level citability scores, checks for 14 AI crawlers, llms.txt validation, JavaScript-rendering and security-header checks.
- Google Search Console can be connected from the dashboard again.
- New documentation: getting started, integrations, security and this changelog.
- Security fixes: a server-log import endpoint without authentication was removed, and Search Console tokens can no longer be read from the browser.
September 2026
- Server-side AI crawler tracking through a Cloudflare Worker, classified with the same registry as the tracking script.
- Consent overhaul. Visitor analytics, including AI-referral measurement, start only after analytics consent, in both cookieless and full mode (5.4.0–5.4.1).
- Consent expiry. Stored choices expire after 12 months, and the WordPress plugin and tracking script now share one version number.
- Self-serve API keys for the REST API and MCP server.
- Database hardening: owner-only access on AI agent and bot tables, and privileged database functions locked down.
August 2026
- Link click counter. Anonymous, aggregate click counts per link, with no data about individual visitors.
- KPI dashboard without GA4. Falls back to CortIQ's own data when Google Analytics is not connected.
- Cookieless sites never store conversion personal data, enforced on the server.
July 2026
- WordPress plugin 5.3. Consent banner with Google Consent Mode v2, cookieless mode, banner in English, Swedish, German, French and Portuguese, and optional geo-gating to the EEA, UK and Switzerland.
- Server-side proof of consent. The consent banner records each choice on the server.
- Per-site tracking mode: cookieless or full.
- More AI bots classified, including YouBot, DuckAssistBot and ChatGPT Atlas.
- Delete a site from the dashboard, with all its data.
- Security review across data isolation, ingest endpoints and server-side fetches.
June 2026
- Scroll-depth heatmaps. Funnel of how far visitors scroll, at 25, 50, 75 and 100%.
- "Show your work" for AI insights. Every AI insight shows the tables, row counts and model behind it.
- Prerendered marketing pages, so search engines and AI crawlers can read them without running JavaScript.