Everything we’ve shipped

The Ledger, rebuilt around your orders

The order list is now a fast, sortable table that tells the whole story of every order on one line — cost, what it sold for, and the profit between them in green or red — instead of hiding the sale behind a tiny line of text. Sort by profit or cost straight from the column headers, filter to just what you are still holding, and scope the whole view to a date range. An order that sold across several marketplaces opens up to show each sale on its own line, split prices and all. And an Export that stamps its file with the date range makes handing a whole year to your accountant a single click.

Your ledger keeps itself up to date

Once the tool you list on is connected, the Ledger now tops itself up in the background — new orders and new sales appear on their own, added to what you already have without touching a thing, and a note lands in your notifications telling you how many. A sale that closes while you are away from your desk is in your books by the time you look. Nothing is ever overwritten, and a full reset is still one button when you want it.

Your sold prices fill the Ledger by themselves

Connect the tool you list your tickets on and the Ledger fills itself in: every buy and every sale, the price each went for, the account it was bought on and the seats — read-only, without a row of manual entry. A purchase that sold as several sales at different prices is stitched back to the buy it came from, so your realized profit per order comes out right without a spreadsheet. Umbra only ever reads your sales record — it never lists, prices, or changes anything on your behalf. A sale it can’t place against a buy is set aside for you to look at, never guessed.

See where your money is, three ways

The Ledger now opens on three pictures of your money, each answering a different question. One plots every order you’ve sold by what it cost against the multiple it came back for — so a glance shows whether your small orders carry the margin, and how often something sells under cost. One shows where every ticket you’ve bought ended up, sold against still held, across your whole book. And one sorts every order best to worst and draws your profit accumulating — so you can see how few orders carry most of a season, and what the loss-making tail costs you. A per-currency table beneath states spend, realized profit, unsold stock and sell-through at a glance. Every money figure is per currency and ties out to the penny — Umbra never adds a pound to a euro.

Open Performance detail for the figures the pictures don’t spell out, per currency: how much of your spend went to fees and tax, how long stock sits before it sells, each account ranked by what it actually returned, your budget line, and realized profit week by week.

Resolve stock from an event that has passed

Seats you’re still holding after the event date has gone by — because the order was cancelled and refunded, or it simply never sold — can now be settled with a plain either/or from the order menu. Marking it cancelled records a break-even: your money came back, so no gain and no loss. Marking it unsold writes it off as a full loss of what it cost. Either way the order stops counting as live stock you still hold, and it’s one click to undo.

Warm your whole fleet at once

Warming used to prepare one account at a time; now it prepares every account you select at once — each in its own sealed session — so a fleet is ready in about the time a single account takes, instead of that time over and over again. Each account still starts at its own moment and browses its own way, so what a site sees is ordinary traffic rather than a fleet moving in lockstep. Warming a large number at once opens that many live background browsers on your machine, so past ten Umbra asks first: run them all together, or a handful at a time while the rest wait their turn.

A warning before you reuse a burned exit

Every proxy that has ever been attached to an account — even one you have since deleted — is now marked in red wherever you choose a proxy: the account picker, the per-Session picker, and the Connections list. Reusing an exit that a burned account browsed from carries that risk onto the fresh one, so the warning sits right at the moment of choice, never after. The mark never names the old account. Open the exit to read a private history of which accounts it carried and when — so an account you lose can be rebuilt from the record of the exit that held it.

Recover a stuck page without restarting

If a Session’s page ever goes blank and won’t load — most often right after a purchase — you no longer have to restart Umbra to get it back. Tools → Session now has “Rebuild connection & reload”, which rebuilds just that account’s secure connection and reloads its tabs. Every other account keeps its page and its place in any queue.

A history of what your fleet did

The notifications bell now keeps a durable "Recent activity" feed that survives a restart — warm-ups and how each ended, queue crossings, and bot-checks, newest first. So the morning after an overnight run you can scroll back to what happened and when, not just what is still on screen. Each entry carries an account name and what happened — never a web address, proxy, or login.

Recent activity leads the bell — and clears when you want

The durable activity feed now sits at the top of the notifications bell, newest first, instead of below the live alerts — so the first thing you see is what your fleet actually did. A Clear button wipes the history for a clean slate; it asks first, since it can’t be undone.

Check for updates whenever you want

Settings now has a “Check for updates” button under the version, so you can check on the spot instead of waiting for the periodic check or relaunching. If a newer version is found, Umbra offers to restart into it — it never restarts on its own, so a session or cart is never closed out from under you.

Warming never gets stuck — and tells you how it ended

Warming an account can no longer freeze on "finishing…": if a page stops responding, the warm-up moves on and Stop always works. And every warm-up now reports how it ended — warmed, you stopped it, ran out of time, the site kept blocking it, or hit a problem — with how far it got, so a run that stopped short tells you why instead of going quiet.

See every session stuck on a check

During a drop, the Go screen now gathers every account that has hit a bot-check into one board — so a wall on account nine of fifteen no longer hides until you tab to it. Jump straight to a stuck session to solve it, or prime the token harvester for that challenge. Umbra surfaces the check and never solves it for you.

The Tools panel’s tabs all fit

The Tools panel beside a live page kept its last tab and its close button reachable only on wide windows — on a narrower one they were pushed off the edge. The tab row now fits the panel, so Snippets, Codes, Watch and Session are always one click away.

Warming, rebuilt

Warming a cold account is now a real browsing session — it scrolls, follows links and settles in for a few minutes to build a believable history, rather than loading a list of sites and waiting. Choose how deep to go, schedule it ahead of a drop, and see proof of what each run actually did.

A Light / Thorough / Ticketmaster style covers a quick top-up through to a fuller history; scheduled warm-ups now keep the same proof a manual one does, so a fleet warmed overnight reads as prepared in the morning.

Account Heat

The Accounts screen now shows how hard each Account has been worked — a month of opens and buys, warming from quiet to hot. The ones running hot are the ones to rest before the next drop, and an Account that needs to cool down is flagged so you lead with a fresh one instead.

Hover any day for its opens and buys, or open the log for the whole month as a table. You can also flag an Account as needing to rest by hand — shown distinctly from the ones Umbra spotted for you.

Reports, redesigned

Every Reports tab now leads with the one thing it exists to say: Summary opens on what you spent this window (always per currency, never one merged number), Drops reads as a timeline — each drop under the day of its latest order, outcome stated first — and Compare ranks a live sale like the race it is: the account nearest the front leads, and jumping to it is one click.

Merging a split identity also got a proper picker: every buyer in your ledger listed, type to filter, likely match first — and it’s still always your click, never a guess applied for you.

Card security codes now autofill

Autofill fills the card security code even when the checkout keeps it in its own payment box — the field that used to need typing by hand now fills with the rest. And if a field can’t be filled, Umbra names it rather than claiming a success it didn’t have.

Link split accounts in the ledger

When one buyer shows up as several rows in Reports — after you renamed the Account, or when a checkout only captured the email — you can now merge them into one from the by-account chips. Nothing is guessed for you, and you can unlink any time.

The by-account chips are also ranked biggest-buyer-first and fold behind a “+N more” count, and clicking one filters the ledger to that Account.

Snippets, saved without leaving the page

The session dock now lets you save a snippet on the spot, beside the live page, instead of sending you off to the Snippets screen and back mid-checkout.

Updates check while you work

A running copy of Umbra now looks for new versions every few hours, not only at launch, so you hear about a release the day it ships. The download still waits until nothing is at stake before it offers to restart.

Realized profit, on a timeline

The Money tab now charts realized profit per week — proceeds minus the cost of the seats that sold — from the sale dates already in your ledger. A good week is a green bar above the line, a losing week a red bar below it, per currency.

A row appears once it has both a payout and a sale date; a realized gain with no date is still counted and called out as “undated” rather than dropped. Currencies are never merged.

Queue & bot-wall alerts to your channel

A webhook channel can now be subscribed to two more events: an account reaching the front of the queue (or bypassing the waiting room), and an account hitting a bot-wall / CAPTCHA that needs a human. So you can step away from the boards and still be told the moment something needs you.

Each event is opt-in per channel — an existing channel never starts posting a new event on its own. What crosses is only the account name, the page, and the moment; never a URL, proxy, or secret. A CAPTCHA alert is a “come back” ping — Umbra never solves one.

Watches that survive the tab

A restock or price watch armed on a saved Account is now durable — closing the Session pauses it instead of ending it, it survives a restart, and it re-arms automatically the next time you open that Account on the same page. Watches on throwaway Sessions still end with the tab.

Umbra never opens a Session on its own to keep a watch running — a watch reads and alerts only while its Session is live, and re-arming changes nothing about that. The close warning now says a watch will pause, not that it is lost for good.

Prove a proxy doesn’t leak

Every exit now has a Verify button: it opens a throwaway session routed through that exit and runs a WebRTC leak check on it, then tells you plainly — no leak seen, couldn’t confirm, or leaking. It never probes a direct connection; a proxy that can’t be routed is refused, not tested against your real network.

A probe that couldn’t run says so rather than reading as clean, and a rotating exit that surfaces an unfamiliar public address is called out as unconfirmed instead of a false alarm. In the Proxies detail panel.

An exit history for every Account

Each Account now keeps a read-only record of every exit its sessions actually left through — written when a session opens or is re-pointed, never when a proxy is merely assigned. A session that left on your real connection is recorded too, loudly: the record is honest because it would show the bad day.

The list states its own bounds — when recording began, and how many older rows fell past the cap — so it can never quietly claim more than it holds. Read it in the Account inspector’s Connection card.

The fleet safety line

The Sessions screen now leads with the question the product exists to answer: how many of your open sessions are proxied. A one-line readout counts them, and when any session is the exception — on your home internet, or with a degraded device signature — a chip appears that filters straight to it.

The counts and the filters read from one derivation, so the number a chip claims and the sessions it shows can never disagree. The line reports facts, never a verdict — it will name the two sessions on your real connection; it will not tell you "all safe".

Follow-the-system theme, and a cart you can hear

Appearance gains a System option that follows your operating system’s light/dark preference live. And the cart guardian now rings as a held cart runs down — once at two minutes, one minute and thirty seconds, sharpening each time — so an expiring hold is heard even when you’re working in another screen.

Account notes, and safer duplicates

Every Account now carries a free-form Notes field — searched along with names, groups and tags, synced and exported with the Account — so the side-spreadsheet can retire. And duplicating an Account now always mints a fresh identity: the copy gets its own fingerprint and no connection, rather than ever sharing the original’s exit.

The duplicate change closes a real separation gap: a copy that inherits its source’s exit puts two Accounts on one IP, which is exactly the linkage the separation report exists to catch. Copies now arrive unconnected and clearly flagged until you assign or distribute an exit.

Passphrase strength, judged on your device

The sync passphrase field now shows a strength estimate as you type — judged entirely on this machine, with nothing sent anywhere. It errs on the harsh side on purpose: your passphrase is the whole margin protecting a synced backup, so over-rating one would be the expensive mistake.

Sessions say when they need you

A session that hits trouble — an expired hold, a sign-out, a bot-check — now says so on its card on the Sessions board, not just on the wall view. And any session holding something it can’t get back (a cart, a place through a queue) wears a small padlock on its card and its tab, so you know not to refresh before the warning has to stop you.

The padlock reads from the same judgement the close/reload warning uses, so the marker and the guard can never disagree. Trouble badges carry the same words everywhere they appear.

Proxy upkeep at a glance

Connection health now ages honestly — a test result older than a week says so on the row. A needs-attention count leads the Proxies screen and filters straight to the exits that want a human, bulk selections can move to a group without losing test results, and the one failure automation can’t fix — an Account stuck on a dead exit with nothing to move to — can raise a desktop notification.

The age marker and the needs-attention count read from the same judgement the assignment engine uses, so the screen can never disagree with what rotation would actually do. Group moves change the group and nothing else: no re-test, no lost region readings, no touched credentials.

Clearer resale books

The spend ledger now states your sell-through rate at a glance, the Reports summary shows what you’re still holding unsold, and CSV export follows the filter you’re looking at — with a filename that says so when it’s a partial file.

Sell-through and stock-on-hand are computed across your whole ledger, never a reporting window, so the morning glance answers "how much of what I bought has actually sold" without adding anything up yourself. Exports mirror the screen: filter to one event or stage and the file holds exactly those rows, in the order shown.

Wider checkout coverage

Ready-made checkout help now runs on more ticketing sites out of the box — TicketWeb, Eventbrite, DICE, See Tickets and Gigs and Tours join the built-in list, tidying the page so the fields you need stay reachable.

These join Ticketmaster, AXS, SeatGeek and Live Nation. The shared checkout tidy-up works on each from day one; site-specific touches are added as each is observed. As always, this never presses buy — the committing click stays your hand.

Device-signature hardening

A deep pass over how each Account presents to a site — tightening the coherence of the device signature so it holds together under close, professional inspection.

Covered the reported graphics, fonts, media devices, screen and network signals, and — the part that matters most to a modern check — how consistently they agree with one another across every part of a page. The result is a signature that reads as one ordinary machine from more angles than before.

Remote checkout

Drive a live Session from your phone, paired to your desktop over a secure channel — for the moment a drop opens while you are away from the machine.

Pair a phone to a desktop Session and take the wheel from anywhere: the live view streams to your phone and your taps drive the real Session. The committing buy click stays yours, as it always does — nothing is automated on your behalf.

Steadier team relay

Team boards and remote control now run on always-on hosted infrastructure, so a shared board stays live without anyone keeping a window open.

Faster session warming

Quicker, calmer warm-ups before a drop, and a clearer go-screen countdown so the whole fleet reads at a glance.

New guide, billing and support

A full product guide, self-serve billing, and in-app support — all reachable from the site and your dashboard.