What’s shipped, what’s next, what’s not coming.
This page tells you exactly where we are. We update it when we ship something or change a plan, not when we decide to talk about one.
Shipped: what’s in your hands today.
Web article capture (Cloudflare Worker + Mozilla Readability) · PDF text extraction (pdf.js / PDFKit) · YouTube videos with auto-transcript via Supadata (14-day cache TTL) · Voice notes with transcription (Apple speech recognition on iOS, which may process audio on Apple’s servers; the browser’s speech service on web) · Screenshot capture with AI vision (cloud AI through our server) · Bulk import: YouTube playlists.
Tiptap (ProseMirror) with 6 custom extensions · Slash commands (Format / Block / AI categories) · Drag handles · Wikilinks [[...]] with title autocomplete · Callout and details (collapsible) blocks.
Cloud AI through our server (Anthropic, Google or OpenAI, on SecBrain’s own accounts within your plan’s limits) · Auto mode across the enabled providers, or name one: Claude, Gemini or ChatGPT · Embedding model gemini-embedding-001 (migrated from deprecated text-embedding-004) · Per-provider, per-operation token-count tracking.
Local full-text search (offline-capable; SQLite FTS5 on iOS) · Semantic search over local embeddings (IndexedDB, web and desktop) · Hybrid keyword + semantic ranking · Search parser (title: / body: / tags: fields, NOT exclusions) · Server-side full-text index for the Chrome extension’s chat · Knowledge graph: 9 link types, AI-suggested connections, Sigma.js (WebGL) renderer · 60-second graph cache.
Weekly AI insights (24-hour cache) · Tag-first clustering (>30%) with semantic fallback; clusters of 2+ memos, up to 6 · SM-2 spaced repetition (per-item intervals on web and desktop) · Daily review queue (up to 10 memos on web, due ones first; 5 on iOS).
Real-time sync (writes over HTTPS, change notifications over WebSocket); bounded offline queue (500 ops / 5 MB) · Crash-safe pending-message persistence in IndexedDB · Server-wins conflict resolution; 30-day conflict archive · Postgres on Supabase, with Supabase Edge Functions and Cloudflare Workers · iOS GRDB with FTS5 triggers · 4 platforms built (PWA, Tauri Desktop for macOS on Apple silicon and Windows x64, Chrome Extension MV3, native iOS Swift 6 + SwiftUI + GRDB in TestFlight).
Automated test suites for the web app, the iOS app, the Chrome extension, the Cloudflare Workers and the Edge Functions · macOS desktop builds signed and notarised · Versions overwritten by a sync conflict kept in a 30-day recoverable archive.
In flight: what we’re working on now.
- Subscription enforcement & paywall gatesIn flight
Plan limits are enforced today. Paid plans, with a 14-day free trial, arrive with the next release.
Considered: on the list, no commitments.
- Client-side memo encryption (E2EE).Considered
Today, memo content sits in Postgres protected at the provider level. Client-side memo encryption would close that gap. Encrypted memos can’t be searched server-side, so search would stay on your device.
- Native Android (Kotlin / Compose).Considered
Same architecture as iOS, different SDK. Not a launch priority because shipping iOS-quality on Android takes a year.
- Platform abstraction layer.Considered
Replace the if (isTauri()) branches with a clean abstraction so future platforms ship faster. Internal cleanup, no user-visible feature.
- Public API for third-party apps.Considered
There is no public API today. A stable, documented one is on the list.
- General-purpose memo version history (90 days, all tiers).Considered
Today, only conflict archives exist (30 days, on every plan). We’re considering general history, for everyone.
- End-to-end encrypted cloud search (opt-in).Considered
Let you choose between cloud search and encryption.
- Push notifications (iOS).Considered
Daily review reminders, plus sync and AI-job alerts. Off by default.
- Cross-source full-text search.Considered
Search across imported content, such as YouTube transcripts, from the same query box.
Not coming: what we’ve decided against, and why.
- Multi-user workspaces / team plans.Not coming
Single-user is a deliberate locked decision. Permissions would get in the way of a tool that is yours alone. Read the Manifesto for the long version.
- Shared editing / live cursors.Not coming
Same reason. SecBrain is a tool to think with yourself.
- A web-only mobile app.Not coming
Native iOS is the mobile experience. The web app runs in a phone browser, but we won’t build a separate web-only mobile app.
- A public site or publishing platform.Not coming
You can share a single memo as a read-only link: anyone with the link can read that memo, and the link stops working if you delete the memo. Anything beyond that would be feature creep, and would get in the way of working offline.
What changed and when.
The latest five releases, from the product’s changelog.
Download SecBrain → Subscribe via RSS Coming soonRead the manifesto