Novedades

Five weeks since the last update. Security and Compensation Research now come with every Kit plan. Most of the rest is Hiring: fewer candidates lost in the gaps.

Pricing

• Security and Compensation Research are included: the whole Security module and Compensation Research (Beta) come with the $8 per seat Kit plan. They were $49 and $29 a month add-ons; Outreach is the only add-on left. Existing VDP subscriptions have been migrated and cancelled. Plans and add-ons

Hiring

• Hiring Insights: every active candidate, the one thing blocking them and who owes it: the team, the candidate, a referee or finance. Owners are ranked by workload, stages by where people stall, and each blocker links to the page that clears it.
• Screening workspace: CV, answers, notes and decision on one screen; J and K move between candidates. With your own Gemini key, start a Live Review: talk the candidate through by voice or text and Gemini drafts a note that only you can save. Kit stores no audio. Set up a Gemini key
• Reply needed: an unanswered candidate email becomes a work item, badged on the board, the list and the dashboard. Reply in one click or mark it as needing no reply. Each email in the thread also gets a one-line AI summary.
• Import a folder of CVs: drop up to 200 PDFs on a posting or the talent pool. AI pulls out each candidate, you resolve duplicates, and nothing enters the pipeline until you confirm. How it works
• Interview calendar: week, month and agenda views, with interviewer filters you can share. An interview missing a meeting link turns red a day out; add the link and everyone gets an updated invite. One that never happened can be rescheduled. Interview scheduling
• Candidates who go quiet: if a candidate has not started a task, submitted or booked, Kit reminds them on day 3 and day 7, with a one-click way to withdraw, and marks the application "No reply" on day 14. On by default, off in hiring settings. Candidate nudges
• Closing a role: record one or more hires, keep the rest open or schedule their rejections after reading the message, and cancel the hires' remaining interviews. A role with 30 days of silence asks its managers whether they are still hiring; Kit never closes one on its own. Managing your pipeline
• Work sample stage: take-home mechanics for support, sales, ops, design and finance roles: private brief, deadline, scoring, reviewers and an optional payout. Any candidate can now also be moved back a stage, with a confidential reason.
• Hiring playbooks: a library for your screening protocols, checklists and question banks, with revision history. Resources tagged to a stage type appear when you configure that stage. Playbooks
• Tax forms before payouts: require an approved W-8BEN, W-8BEN-E or W-9 before a paid candidate task goes to finance. Candidates upload it in the payout flow and it is reused next time. Payment details go to your verified finance inbox, and finance records the payment without a Kit seat. Candidate payouts
• Your own columns: pick up to three data fields as columns on a posting's application list, then sort and filter by them. Filters live in the URL, so a view can be shared. Candidate data fields
• Krisp meeting notes: attach the sections you choose from a Krisp meeting to an application. Transcripts are off by default and notes are stored encrypted. Krisp
• More places to post: publish paid adverts to Just Join IT and RocketJobs.pl, with applications flowing back into Kit, and add Talent.com and No Fluff Jobs feeds in careers settings. A new B2B contract type travels with every feed. Just Join IT and RocketJobs

Across Kit

• Reminders: set one on a candidate or a security report from Cmd+K, for yourself or teammates, in-app or by email, with a calendar file. AI can draft it from the conversation and suggests one when a candidate email mentions a follow-up. Reminders
• Finance role: invite someone who only handles candidate payouts, researcher bounties and tax forms. They see no candidates, no reports and no billing. Team roles
• Quiet weekends: pick as usual, critical only, or one morning summary for Saturday and Sunday. Routine email and Slack DMs follow it; on-call pages do not.
• Slack: each application gets one card, with stage moves, reviews and offers as replies in its thread. Personal DMs split into finer categories, and admins set one language for channels while DMs follow each reader's own. Slack notifications
• Cmd+K: 26 actions, up from 18, now on postings, campaigns and training programmes too. Paste an application ID to jump straight to it.

Security

• Unpaid bounty alerts: when an approved bounty has been payable for 7 days, admins hear about it every week until it is paid. Bounties and payouts
• Breach re-page limits: set how many times a breached report re-pages (default 3) and how often, across Slack, on-call and PagerDuty. Configuring your program
• Researcher history: sort by severity, SLA or date, and filter to "Needs attention" or "Proven", which uses your team's assessment rather than the researcher's own.
• Reward terms on your policy: the public policy page now says whether you pay by severity matrix, at your discretion, or with recognition only, taken from your bounty settings.

Outreach

• Dashboard: Outreach now opens on what needs you, most urgent first, from a broken connection and paused campaigns down to replies waiting and drafts to approve.
• Drafts in your own mailbox: AI drafts appear in your Drafts folder in Gmail, Outlook or any IMAP client, your edits sync back, and mail Kit sends is filed in Sent. Inbox drafts
• Follow-ups stop on reply: queued follow-ups are cancelled the moment a prospect replies, bounces or unsubscribes.
• A/B experiments: assign a campaign as control or variant from the campaign form, then start, conclude and apply the winner. Experiments

Training

• Recertification in the register: for programmes with a recertification cycle, the completion register and its Vanta CSV and PDF show who is due, and a lapsed completion shows as expired rather than compliant. Recertification
• Full previews: preview a checklist or course exactly as a participant sees it, steps, videos and quizzes included.

AI

• 190+ MCP tools: your agent can now create stages, send interview invitations, extend a take-home deadline, read submissions and the candidate mailbox, find where the team is stuck, and manage reminders, playbooks and onboarding plans. Tool reference
• Connect in one paste: copy one line into Claude Code, Codex, Cursor or Claude Desktop and the agent registers Kit, walks you through consent and checks the connection. Connecting AI assistants
• Caps on your own keys: set a monthly and an optional daily cap on your Gemini, Anthropic or OpenRouter key, and see usage by member. Spend controls

Getting set up

• Google in one step: Calendar and Meet are one consent screen, and new members start with Monday to Friday, 9 to 5 availability so candidates can book from day one. Calendar
• Onboarding plans: build a checklist for a new teammate from their page in Members (role brief, access, calendar, GitHub, first review) and email it. Some steps tick themselves off.
• Sign up without a password: passkey, email link or LinkedIn, and Google One Tap on the login page.
• DNS setup your agent can do: all four records for your sending domain up front, and a Copy AI prompt that hands them to your coding agent without breaking existing mail. Startupkit Email
• Docs and blog: 152 help pages, up from 130, with 150 of them translated into each of the four other languages, and 182 articles, all translated.

Six months of work. Kit went from a hiring tool to four more products, and hiring itself got rebuilt.

Four new modules

• Security: run a vulnerability disclosure programme. Public branded portal and security.txt, researcher intake, triage board, CVSS assessment with a plain-English explainer, on-call rotation with SLA escalation to Slack and PagerDuty, bounty proposals with team voting, a disbursement queue, consent-first Hall of Fame, postmortems, and evidence dossiers as PDF. Push reports to Jira, Linear or Vanta. Includes a separate takedown-notice intake channel.
• Outreach: AI cold email that runs itself. Import or discover prospects, research each one, draft personalised sequences with follow-ups, and hold every send behind approval. Replies are sentiment-classified and triaged, positive ones get one-click responses from the notification email, and the AI can offer a bookable meeting slot. Sends over your own SMTP, tracks opens and clicks, runs A/B experiments, and reports deliverability posture for your sending domain.
• Performance: review cycles that produce audit evidence. Build a cycle from a template, assign manager, peer and self reviewers, freeze the questions on activation, then finalise into append-only SOC 2 evaluation records with a nightly integrity sweep. Reviewers write against role expectations and can start from an AI draft grounded in goals and merged GitLab work. Exports as branded CSV or PDF.
• Training: security awareness training and device evidence. Authors build slide decks with video, knowledge checks and attestations; participants sign in by magic link with no Kit account and finish with an immutable completion record. Checklist programmes collect what no MDM can: per-platform steps, screenshot uploads with device label and capture date, and an admin review queue. Start from a SOC 2, GDPR, ISO 27001 or HIPAA deck.

Hiring, rebuilt

• Command centre and live pipeline board: a dashboard with your worklist, active roles and inflow, plus a drag-and-drop kanban that updates for every recruiter watching it.
• Candidate email inside the application: read and reply to the whole thread without leaving Kit, with AI-drafted replies and open and click tracking.
• Catch-all inbox: point an address at Kit and an AI agent parses emailed applications, routes them to the right posting, and chases thin ones for missing detail.
• Semantic candidate search: CVs are extracted into structured fields and embeddings, so you search the talent pool by meaning. Video interview transcripts are searchable too. Define your own AI-filled metafields.
• Interviews that actually book: Calendly and Google Meet stages, RFC 5545 calendar invites, and candidate re-notification when slots open.
• Offers, references and payouts: extend an offer the candidate can accept, decline or counter; collect references by one-tap email, form, or 60-second video with transcription; pay for assignment work with PDF receipts.
• Distribution and analytics: publish to OLX with category and city mapping, plus Adzuna, Jooble, Jobrapido, Uitzendbureau and Atom feeds, Google Indexing on publish, and per-posting analytics with a real view to apply funnel.
• Public Jobs API: pk_ and sk_ keys for listings, applications with presigned CV upload, and talent-pool intake. Ships with an SDK and a Next.js starter.
• Compensation Research: scheduled scraping of seven job boards, LLM salary extraction from job text, multi-currency normalisation, and quartile benchmarks per role and city.
• Hiring process templates: 20 ready-made processes that build a configured posting in one click, each with its own public page.

AI

• 162 MCP tools, up from 15: connect Claude, ChatGPT or Cursor to Kit and drive hiring, security, outreach, training, performance and compensation research.
• Connect it yourself: any member with module access connects over OAuth from their own AI client, on your subdomain, with per-module read or write scopes and revocation from settings.
• AI sidebar everywhere: a streaming chat panel that picks the right agent for the page you are on, keeps conversation history, and is open to every member.
• Bring your own key: Gemini, Anthropic or OpenRouter, configured per account.
• Spend caps you can see: daily and monthly credit limits per provider, a usage bar, threshold alerts, and work that resumes on its own once the limit resets.
• @KitBot in Slack: mention it in a candidate channel or a report thread and it answers from the record with read-only tools.

Access and identity

• SAML SSO and Google Workspace provisioning: connect your IdP, verify your domain by DNS record, then require SSO for everyone on it.
• Passkeys: passwordless sign-in and 2FA, and owners can require passkeys account-wide.
• Account security you can inspect: sign-in history with device, IP and country, trusted devices, a live session list with remote sign-out, and re-auth before anything that weakens a credential.
• Per-module roles: give each member none, member or admin per product, and restrict an individual report, posting or campaign to named people.
• Breach monitoring: daily Have I Been Pwned checks on member emails and addresses you nominate.
• Billing: one $8 per seat plan with modules as add-ons, a 30-day trial, annual option, and Stripe Tax with VAT ID capture.

Your brand, your domain

• Custom domains: point your own hostname at your job board or security portal, with automatic SSL, activation email and health monitoring.
• One branding page, four portals: light and dark logos, brand and background colours, and a custom font, applied across careers, security, training and the candidate portal, down to the browser tab, favicon and share cards.
• Send as your own domain: candidate and researcher email leaves from your address with per-domain DKIM, and inbound mail lands in your Kit inbox.
• Embeddable security pages: iframe the report and takedown forms into your own site, with your Turnstile keys.

Everything else

• Five languages: the whole app in English, German, French, Spanish and Polish, with locale-prefixed public URLs.
• Documentation: 130 pages, 120 of them translated into each of the four other languages, with semantic search and a plain-markdown view for LLMs.
• Blog: 150 articles, every one translated into all four languages.
• One morning email: a single daily digest across hiring, security, outreach and performance, plus Slack DMs you opt into and can pause per category.
• Command palette that does things: Cmd+K now runs 18 actions, not just navigation.

Five weeks since the last update. Here's everything that shipped.

VDP, now self-serve

Billed accounts can start a VDP add-on free trial without talking to sales — claim it by email and watch the countdown in your sidebar. There's a free premium month promo running too. The new Vanta integration pushes your VDP reports into Vanta as compliance evidence, and a configurable public security portal (status, scope, draft preview) gives researchers a front door. On-call admins now get alerted when the whole VDP rotation is on holiday.

Hiring

• Calendly scheduling: connect Calendly, grant the scopes you want, and book interviews from Kit. A health & usage dashboard tracks each connection, with alerts when one degrades or hits a plan limit.
• Needs decision: team reviews that reach no consensus surface as needing a decision (also exposed to AI agents).
• Submission guards: stage advance is blocked when a required submission is missing; completed-without-submission is flagged.
• Unreject: bring a rejected candidate back, with a full audit trail and consent guards.
• Thin email applications are flagged and nudged, so candidates can fill the gaps themselves.
• Candidate emails rewritten to read like a human, with DKIM/SPF/DMARC for deliverability. Hiring Slack notifications are cleaner.

New tool: PDF Sanitizer

Upload a PDF, get a safe flattened copy back — processed in an isolated sidecar, with retention controls and an auto-delete countdown. Find it under Tools.

Outreach

The trial is now 30 days at $10/mo, up from 24 hours at $5/mo.

Platform

• Custom domain health monitoring with warning emails, plus clearer Cloudflare DNS errors during setup.
• Team Members consolidates the colleague directory — profiles, activity timelines, searchable from OmniSearch (⌘K), which now also covers custom domains, the talent pool, and 14 more nav items.
• Refined billing page and consistent "Learn more" help links across the app.

Major Features

• AI Chat Assistant — Ask questions about candidates, get summaries, and streamline your workflow with conversational AI built right into the platform.
• Webhooks — Connect Kit to your existing tools with real-time event notifications for applications, stage changes, and more.
• Data Export — Export your hiring data anytime in CSV format for reporting, compliance, or migration.
• Documentation Portal — Comprehensive guides and API docs available at /docs to help your team get the most out of Kit.
• Ideas Widget — Submit feature requests and vote on ideas directly from the app. Your feedback shapes our roadmap.
• OmniSearch — Find anything instantly with Cmd+K — candidates, job postings, settings, and more.

Hiring Enhancements

• GitHub Code Assignments — Automatically provision private repos from templates, track candidate progress, manage deadlines with extensions, and grant reviewer access.
• Video Interview Scheduling — Built-in interview stage with calendar integration and automated candidate notifications.
• Career Site Analytics — Track views, applications, and conversion rates for every job posting.
• LinkedIn Profile Prefill — Candidates can auto-fill applications with their LinkedIn profile data for a frictionless experience.

Integration Ecosystem

• Slack Notifications — Get real-time hiring updates in your team's Slack channels.
• Google Calendar Sync — Interview events automatically sync to your calendar.
• MCP Server — Connect Kit to AI assistants and custom tooling via the Model Context Protocol.

Platform Improvements

• Per-Seat Billing — Fair pricing that scales with your team size.
• Dark Mode — Full dark mode support across the entire application.
• Real-Time Updates — Live notifications and UI updates powered by ActionCable.