v7.4 — Latest
Magecart Detection + DPDP 2023
25 February 2026
Major release adding real-time Magecart attack detection, full DPDP 2023 (India) compliance, and PCI DSS 6.4.3 / 11.6.1 coverage. Also includes the BigQuery real-time export pipeline and full SaaS dashboard launch.
- Magecart detection: Unknown script domain monitoring alerts you within seconds of a new script appearing on your payment pages
- SRI validation: Checks Subresource Integrity hashes on all scripts loaded in PCI scope pages — required by PCI DSS 6.4.3
- CSP violation reporting: Real-time Content Security Policy violations captured and alerted via Slack and email
- DPDP 2023 India: Indian user detection, children_mode flag (DPDP Section 9), session pseudonymisation for IN users
- BigQuery export pipeline: All events streamed in real-time to customer's own BigQuery dataset
- Full SaaS dashboard: 9-page dashboard — Overview, Tag Health, Security, Consent, Web Vitals, Domains, Alerts, BigQuery, Settings
- Cloudflare Worker proxy: api.tagdrishti.com serves as clean proxy for Cloud Run — bypasses browser blocklists
v7.0
Consent Mode v2 + Web Vitals
January 2026
- Consent Mode v2 signals: Full analytics_storage, ad_storage, functionality_storage, personalization_storage, security_storage tracking
- GPC signal detection: Global Privacy Control respected and reported in consent dashboard
- Core Web Vitals P75: LCP, CLS, INP, FCP, TTFB per domain with good/needs/poor thresholds
- Per-tag CWV impact: Attribution of LCP blocking to specific GTM tags
- GDPR consent rate charts: 7/30/90 day trend views for analytics and advertising consent
v6.0
Multi-tenant SaaS architecture
December 2025
- Multi-tenancy: Full tenant isolation with workspace-scoped API keys
- Supabase integration: tenants, workspaces, api_keys, alert_configs tables
- Clerk authentication: JWT-based auth for dashboard and API
- Razorpay billing: Subscription plans (Starter/Agency/Enterprise) with webhook-driven plan updates
- Breaking: API key format changed from
gtm_xxxtotd_live_xxx
v5.0
Production hardening + Pub/Sub pipeline
November 2025
- Fixed duplicate event ID generation using auto-increment counter (F2)
- Fixed SPA memory leak — seenEventIds capped at 500 (F3)
- Fixed tagDurationBuffer memory leak — capped at 100 per tag (F4)
- Added ts_ms wall-clock epoch timestamp to every event payload (F6)
- Improved SPA pushState — now correctly updates page_referrer (F7)
- Added global unhandled-error and promise-rejection reporters (F9, F10)
- Google Cloud Pub/Sub pipeline replacing direct BigQuery writes
- Cloud Function bq-writer deployed for async event processing
v4.0
Anomaly detection + flood guard
October 2025
- Anomaly alert system — fires when tag fail rate exceeds configured threshold
- Flood guard — prevents alert storms from a single misbehaving tag
- Email alerts via Resend — configurable per workspace
- Slack webhook integration — per-workspace webhook URL
- P75 latency tracking per tag — stored in tagDurationBuffer
v3.0
BigQuery schema + device classification
September 2025
- BigQuery schema with 5 tables: tag_events, security_events, consent_snapshots, anomaly_alerts, web_vitals_rollups
- 4 BigQuery views: v_tag_health_24h, v_security_summary, v_consent_compliance, v_daily_usage
- Device classification (mobile/tablet/desktop) by viewport
- Sample rate support — configurable % of events to collect
- Network info collection (connection type, effective type)
v1.0
Initial release — tag fire/fail monitoring
August 2025
- Core GTM tag monitoring — fire/fail/warning status per tag
- Cloud Run API for event ingestion
- Basic dashboard with tag health table
- Session tracking with page context
- GTM container ID detection