What is new in Nuvabill

0.7.2: Security fixes

28 October 2026

Security fixes from a review of sign-ins, saved secrets, refunds and server connections. Sites that install security fixes automatically get it by themselves.

What staff will notice

• Making an API key now asks for your password. A staff password reset, or a password set in staff settings, deletes that person's API keys, so tools that use them stop working until a new key is made.
• Changing your own email or password in Settings → Staff asks for your current password.

Security

• A stolen staff session can no longer make an API key that keeps working after the password is reset.
• Secrets you type, such as API keys, tokens and passwords, are no longer kept in the session when a form has an error. New installs keep session data encrypted; older sites switch it on with one click in Site health.
• Stripe and PayPal refunds are never sent twice: when the payment service does not answer, pressing Refund again sends the same refund again.
• Server passwords and tokens are no longer sent over plain HTTP to servers on the internet. Plain HTTP needs a new box and a private address. Servers that used it before keep working, and Site health lists them.
• Every new text is in all 12 languages.

0.7.1: Mongolian and 155 currencies

28 October 2026

Mongolian

• Nuvabill, its emails and add-ons now speak Mongolian: 12 languages. Mongolian PDF invoices are in Mongolian too.
• Mongolian is off until you turn it on in Settings → General, on new sites and on sites that update. Email templates you rewrote keep your words.
• Thanks to @gbatkhuyag for the Mongolian translation and the longer currency list.

155 currencies

• Bill in 155 currencies instead of 38: the national currencies in use today. Every currency you could pick before is still there.
• Each payment method is only offered for the currencies it charges correctly. Stripe is no longer offered for Iraqi dinar; FIB, FastPay and Wayl still take it.
• Currencies with three decimals, such as Kuwaiti dinar, now show the two decimals Nuvabill keeps.

Languages

• When staff pick a language in the admin area and nobody picked one on the client side in that browser, the client side follows it. A client-side choice still wins.
• Telegram and WhatsApp messages use the client's language only while it is switched on. The announcements RSS feed no longer sets cookies, so a shared cache cannot mix up languages.

Demo sites and the marketplace store

• A demo site can keep chosen add-ons switched on after every hourly reset, so the public demo shows dedicated server power buttons and health checks.
• Marketplace listings are checked for length before they are saved, with a clear message instead of a database error. Screenshots must be real images.

On the Marketplace

• Mongolian for every add-on: Aurora 1.6.1, Swift 1.3.1, Proxmox VE Servers, DigitalOcean Servers, Hetzner Cloud and Robot, Dedicated Server Power, Switch Port Control and Automatic OS Install 1.0.1, Website Builder 1.0.3, Free Trial 1.0.3, Google Ads Purchases 1.0.2 and WhatsApp by QR Code 1.0.3.

0.7.0: Resource sliders, a full server panel, your own dedicated servers and Thai

27 October 2026

Resource sliders

• Sell extra CPU cores, memory, disk, IPv4 and IPv6 addresses, traffic and backups as sliders, with a fixed price per step for each currency and billing cycle. Set them up per product under Products → Resource options, with a live preview.
• Clients choose extras when they order and change them later from the service page. They pay only for the days left, and the server changes once the invoice is paid. Disk can grow but not shrink.
• Renewals and invoices show each extra on its own line. Virtualizor resource add-ons from 0.6.13 move over by themselves, and the WHMCS importer brings CPU, RAM, disk and IP options across.

A full server panel for clients

• Tabs for live usage, power, a console in the browser, graphs, reinstall, IPs and reverse DNS, firewall, backups, snapshots, rescue mode, SSH keys, ISO and boot order, settings, and tasks and logs. Turn each tab on or off per product.
• Passwords and console details only show when the client asks, and never stay in the page.
• Virtualizor 2.0: "Open Virtualizor panel" now works in normal setups, and staff get Test panel sign-in and Link existing VPS on the service page. A new VPS is never filed under a Virtualizor user that belongs to someone else.

Sell your own dedicated servers

• Keep your machines on the new Hardware page, with specs, IPs and their power card (BMC). Product stock comes from the free machines. Free in Nuvabill.
• An order gets a free machine, your team installs it and presses Server is ready, and clients can ask for a reinstall. A machine that ends waits as "needs wipe" until staff confirm the disks are clean.
• Without power control, Nuvabill emails your team to switch a machine off or on by hand when it is suspended, ends or is active again. Every power action is in the machine's Power history.
• Power card logins are encrypted, never shown again and never logged.

Connect to marketplace

• When Cloudflare stops your server from reaching the marketplace, the Marketplace page now says so. Click Connect to marketplace once: the store checks that you own your web address and lets your server through. Free, and automatic for normal setups.
• The site key is stored encrypted and changes every 90 days; the store keeps only a hash and only calls public addresses over HTTPS.

Thai

• Nuvabill, its emails and add-ons now speak Thai: 11 languages. New sites offer Thai right away; an updated site turns it on in Settings → General. Thai PDF invoices stay in English for now.

Security and more

• Setting up two-factor login on your staff profile now asks for your password, and server module tools need a session that passed two-factor login.
• API tokens and power card logins are no longer kept after a form error. A payment during the nightly run is no longer suspended or cancelled.
• For module makers: many new optional contracts for server modules and dedicated server add-ons, such as panel tabs, consoles, admin pages, scheduled work and power drivers. See the server modules guide.

On the Marketplace

• Proxmox VE Servers ($99): KVM machines, LXC containers and cloud pools from your own Proxmox VE servers, with a full client panel, a browser console and an IP manager.
• DigitalOcean Servers ($49): Droplets made as soon as the order is paid, with volumes, reserved IPs, private networks, a firewall and snapshots in your client area.
• Hetzner Cloud and Hetzner Dedicated (Robot), both free: cloud servers made on payment, and dedicated servers you bought at Hetzner handed out to clients.
• Dedicated Server Power ($29): power buttons, health checks and power use through the BMC, with Redfish for iDRAC, iLO and Supermicro and IPMI for older boards.
• Switch Port Control ($29): unpaid dedicated servers lose their switch port by themselves, with traffic graphs and the 95th percentile.
• Automatic OS Install ($49): Ubuntu, Debian and AlmaLinux installed over the network for new orders and client reinstalls, with no one at the rack.
• The built-in Proxmox module 1.1.0 supports resource sliders. Swift 1.3.0 shows sliders on the one-page order form, and Aurora 1.6.0 shows the full renewal price.

0.6.13: Virtualizor power buttons work again, and a new VPS panel

10 October 2026

Virtualizor 1.1.0

• Start, stop and restart work again. The module asked for the VPS status in a way that newer Virtualizor versions do not answer, so the buttons seemed to do nothing.
• A new VPS panel for clients: one group of power buttons that shows "Starting..." until the server gets there, cards for CPU, memory, disk and bandwidth use, and IP addresses with a Copy button. It works in dark mode, right to left and on phones.
• Open Virtualizor panel, a product setting that is off by default: clients sign in to Virtualizor's own panel for their VPS in one click. Nuvabill checks on every click that the VPS still belongs to that client. The link is never saved or logged and never uses an admin port.
• More product options: recipe, control panel to install, IPv6, network and upload speed, server group and a limit on OS reinstalls.
• Resource add-ons: sell extra cores, RAM, disk or IPv4 addresses as product add-ons. They are added only when the order is paid, and a VPS is never created twice.

Stock, plan changes and error pages

• On MySQL and MariaDB, two clients checking out at the same moment can no longer both buy the last one in stock, and two plan changes at the same moment no longer stop each other. Plan changes that wait for the renewal date now hold their place in the new plan's stock.
• Pages that show why an action was refused no longer show a database error with the database server and query. It goes to the error page and the log.

On the Marketplace

• Google Ads Purchases, a new free add-on: Google Ads learns which ads bring paid orders. Google gets the value, the currency, a random reference and the ad click, never names or what was bought, and only after the visitor accepts the cookie banner.
• Swift 1.2.1: the line under the Pay button says when each plan is set up, and long plan names fit on every page, also right to left.

0.6.12: Security and billing fixes from a line-by-line review

4 October 2026

Sign-in and accounts

• Password reset links and every other link in emails always use your own site address. Before, a faked request could point a reset link to another site.
• Wrong passwords and two-factor codes are counted per account, not only per IP address. A password reset lets the owner straight back in, so nobody can keep an account locked, and a used two-factor code cannot be used again.
• A new or reset password signs out every other device. Changing the email address or adding a passkey asks for the current password, and the old address gets a notice.
• Google and GitHub sign-in only joins an account whose email was confirmed. A password set in Nuvabill replaces a password imported from another billing system for good.
• Clients who turned on two-factor sign-in are always asked for the code. When staff must use two-factor sign-in, staff without it cannot make or use API keys until they turn it on.
• Only owners can make or change an owner, and the last owner can no longer be switched off.

Payments and billing

• Stripe and PayPal automatic payments are never charged twice. A charge that is still processing, or got no answer, is checked before the next try. Add the event payment_intent.succeeded to your Stripe webhook, so these payments are marked paid as soon as they finish.
• Money on a cancelled invoice or order, and a second payment on an invoice that is already paid, goes into the client's wallet. Taking back wallet funds takes them out of the wallet too.
• Moving to a smaller plan gives back only what the client really paid for the days left. Renewals that a 100% coupon makes free are paid at once, so the service never goes overdue.
• Stock and coupon limits hold when many clients check out at the same moment.
• New setting: Cancel unpaid new orders after (days) in Settings → General, 7 by default. A new order whose invoice is still unpaid 7 days after its due date is cancelled at night, and its stock and server room are freed. On sites that update, older pending orders stay as they are. Set it to 0 to turn it off.
• Affiliate totals are kept per currency, and a commission on a refunded invoice is cancelled or made smaller. Staff without billing access no longer see invoices, payments or revenue.

Servers, imports, updates and site health

• One setup runs per service at a time, so a double click cannot make two accounts. New accounts never go to a server that is turned off.
• Plesk only changes the service's own subscription, Proxmox suspensions also turn off start on boot, and cPanel passwords are no longer sent in the address of a request.
• Imports no longer join a client to a Nuvabill account only because the email is the same, and imports from another server use an encrypted connection. Running an import again keeps what you changed in Nuvabill.
• Faster restores on MySQL and MariaDB. Putting the database back after a failed update takes 39 seconds instead of 18 minutes for 100,000 rows. Backups of big databases no longer run out of memory, and an update that stopped halfway finishes by itself.
• Site health finds more problems, such as settings files that make the server run code and a proxy list without Cloudflare's addresses.

Marketplace, automations and emails

• On the Marketplace, a full refund ends the license, and changes to a live listing wait for a reviewer.
• Webhook steps in automations cannot reach private network addresses. Each Telegram or WhatsApp chat can send 10 messages a minute, and automatic AI translation has a limit per client and per month.
• Names, ticket text and other client input in emails show as plain text, so they cannot add links. Erasing a client also removes their IP addresses from the activity log.
• For developers: gateways can check unclear automatic payments with ChecksSavedCharges and say they do not convert currencies with convertsCurrency(). Add-ons save settings safely with ExtensionManager::mergeSettings().

0.6.11: Sign in from an order and come back to it

30 September 2026

• Sign-in links, including "Continue with Google", can bring clients back to the page they came from, so order forms keep the plan they chose. Only pages on your own site are accepted.
• Themes and order forms can bring their own translations. Aurora 1.5.0 and Swift 1.2.0 use this to show all their words in 10 languages.

0.6.10: Webhooks for add-ons

30 September 2026

• For add-on developers: add-ons can receive data from other services at their own secret webhook addresses, and WhatsApp add-ons can show themselves on the Chat apps settings page.

0.6.9: Choose the order clients see payment methods in

30 September 2026

• A new Payment order box in Extensions → Payment gateways. Move each payment method up or down; clients see them in that order on invoices and in the quick order form, and the first one is chosen for them.

0.6.8: Fix for sites with the Crystal Mail add-on

30 September 2026

• On sites with an add-on that changes how emails look, such as Crystal Mail, pages that send email showed "Server Error" since 0.6.5, including sign-in with Google. Fixed, and emails still go out in each client's language.

0.6.7: Credit notes, CSV exports for accountants, and privacy tools

30 September 2026

• Credit notes: take back all or part of a paid invoice. The money goes back to the client, into their wallet, or you settle it yourself. Every refund now makes a credit note too.
• CSV exports of invoices, payments and refunds, credit notes and clients, for a date range, safe to open in any spreadsheet.
• Privacy tools: download everything about a client as one file, or erase their personal data while invoices stay, as tax law requires. Clients can download their own data and ask for erasure.

0.6.6: Knowledge base, announcements and a network status page

30 September 2026

• Knowledge base with categories, search and “Was this article helpful?”. New tickets suggest matching articles while the client types.
• Announcements with an RSS feed; the newest shows on the client dashboard.
• Network status page: servers are checked every 5 minutes, with 30 days of uptime and an email to you when one goes down.
• Post network issues and planned maintenance with updates. Clients on those servers see them on their dashboard.
• Articles and announcements can be translated into every language you offer.

0.6.5: Emails and PDF invoices in each client's language

30 September 2026

• Every email goes out in the language the client picked, dates included. Arabic and Kurdish emails read right to left; staff emails use your default language.
• All 28 built-in emails come translated into the 10 languages. Emails you rewrote keep your words until you translate them.
• Settings → Email templates has a tab per language.
• PDF invoices and quotes follow the client's language too. Arabic, Kurdish and Chinese PDFs stay in English for now, because the PDF engine cannot draw those scripts.

0.6.4: Upgrades and downgrades

30 September 2026

• Clients move their service to a bigger or smaller plan from the client area, and see the price for the days left before they choose.
• Upgrade: they pay only the difference for the days left; the plan and the server account change as soon as the invoice is paid.
• Downgrade: change now and add the unused amount to their wallet, or change on the next renewal date. You choose in Settings → General.
• You pick which plans each product can switch to. Staff can change any plan from the service page, with or without an invoice.

0.6.3: Browser tab icon and your own icon

30 September 2026

• A browser tab icon on every page: the store, client area, admin area and sign-in pages show the Nuvabill icon, with every theme and on Website Builder pages.
• Your own icon with a White-label License: upload a square PNG in Settings → General. It becomes the browser tab icon, the icon next to your company name in the admin area and client area, and the phone app icon.
• Phone app: the list of devices that get alerts shows a small phone icon instead of a big one.
• Aurora 1.3.1 shows your own icon in its menu too.

0.6.2: Settings home with cards

29 September 2026

• Settings opens as one page with grouped cards: Business, Payments with Sign-in and security, Messages, Growth, Team and System, each item with an icon and a short line on what it is for.
• Find a setting filters the cards as you type; press Enter to open the first match.
• Settings pages now use the full width, with Settings / group above the title to go back. General settings moved to /admin/settings/general.

0.6.1: A clearer Settings menu and your company website

29 September 2026

• A clearer Settings menu: settings are grouped into Business, Payments, Messages, Sign-in and security, Growth, Team and System, each with a one-line description. Type in Find a setting to jump to one. On phones, Settings opens as a list.
• Your company website: add-ons can now show pages to visitors and your home page. The store then moves to /store, and old store links keep working. The first add-on to use it is the new Website Builder.
• CAPTCHA for contact forms on your website, in Settings → Security.
• 10 languages: Nuvabill now focuses on the most used languages in the world, plus Kurdish: English, Arabic, Kurdish (Sorani), Chinese, Spanish, French, Portuguese (Brazil), Russian, German and Turkish, so every update arrives fully translated. Clients and staff who used one of the other 16 languages now see your default language.
• New on the marketplace: Website Builder ($49, then $19 a year for updates). Aurora 1.3, Paper 1.1 and Midnight 1.1 style it in their own look.

0.6.0: Automatic payments

29 September 2026

• Clients save a card or PayPal account and their renewal invoices are charged by themselves. They tick Save it and pay my renewals automatically when they pay (never ticked for them), or use the new Account → Payment methods page. Card numbers never reach your server.
• Wallet first, then the card. An email 3 days before each charge, and a reminder 30 days before a saved card expires.
• Retries: if a charge fails, the client gets an email, and a Telegram or WhatsApp message if they linked one, with a Pay now button. Nuvabill tries again after 3 and 7 days, then your usual reminders and suspension rules take over.
• Settings → Automatic payments with what will be charged tomorrow, and a Charge now button on each unpaid invoice.
• Works with Stripe as it is. For PayPal, turn on Save payment methods for your app at developer.paypal.com.

0.5.6: Phone app QR code

29 September 2026

• The QR code on Your profile → Phone app now fits inside its box instead of covering the text next to it. On a phone it is hidden, since you are already there.

0.5.5: Admin phone app

29 September 2026

• The admin area as an app on your phone: add it to the home screen from Safari or Chrome, no app store needed, on iPhone and Android.
• A Today screen with today’s orders, payments, open tickets and overdue invoices, and a Needs you list: tickets that waited longest, risky orders you can approve right there, and the dashboard’s warnings.
• Push alerts for new orders, payments (optionally from an amount you choose), new tickets and client replies. Each staff member picks their own, in their own language. Alerts are encrypted for each phone.
• A new tab bar on phones: Today, Support, Orders, Clients and More.

0.5.4: WhatsApp by QR code, ready for every site

29 September 2026

• The Nuvabill store that runs the QR signup now has the webhook address Meta needs for its app, and a switch to try the signup before it opens to every site.
• Meta only tells its own app when it approves a message template, so sites connected by QR code now ask Meta every hour until all their templates are decided.
• The guide now says to add a payment method in WhatsApp Manager, which Meta needs before it delivers template messages.

0.5.3: A clearer WhatsApp setup

29 September 2026

• Settings → Chat apps now says when connecting WhatsApp by QR code is not available yet, and opens the form for your own Meta app instead. Before, the button opened a window that did nothing.
• If the signup window is closed before WhatsApp is connected, the page says so.

0.5.2: Telegram and WhatsApp

29 September 2026

• Invoices, reminders and ticket replies on Telegram and WhatsApp, next to the email, in each client’s own language, with a button to the invoice or ticket. A table in Settings → Chat apps turns each message on or off per app.
• Telegram in two minutes: make a bot with @BotFather and paste its token. Add the bot to your team’s Telegram group to get new tickets, client replies and orders there too.
• WhatsApp by QR code: sign in with Facebook and scan the code with the WhatsApp Business app on your phone. Your number keeps working in the app. You can also use your own Meta app. Nuvabill sends its message templates to Meta for approval and shows their status.
• Clients link by QR code on the client area’s Account page, then send /invoices, /services or /tickets, or /stop to disconnect.
• Tickets from chats: anything else a linked client writes becomes a ticket, and your answer goes back to the chat.

0.5.1: AI help

29 September 2026

• AI help with your own Claude key. Add an Anthropic API key in Settings → AI and pick Claude Haiku 4.5 (fast and low cost), Claude Sonnet 5.5 (best answers) or Claude Opus 5.5 (most capable). You pay Anthropic for what you use; Nuvabill adds nothing.
• Reply drafts on the ticket page, from the whole ticket and the client’s account. Make them shorter, friendlier or more detailed, or tell the AI what to say. Staff always check and send; AI never replies by itself.
• Tickets in two languages. Client messages in another language are translated for your team, and your reply can go out in the client’s language after you check the translation.
• AI summary of a ticket with a suggested department and priority, and Write with AI for product and search descriptions.
• Private details stay on your server: email addresses, phone numbers, card and bank numbers, passwords and keys are taken out before anything goes to the AI.
• A monthly spending limit that pauses AI help, with a note to your company email at 80%.

0.5.0: Automations

29 September 2026

• Automations: when this happens, do that. A new Automations page in the admin area. No code, and every run is logged.
• 13 starting points: a client signs up, an order is placed, an invoice is paid, due soon or overdue, a service is set up, suspended, terminated or has been active for a while, a domain expires soon, a client opens or replies to a ticket, and a quote is not answered.
• Conditions, like “the invoice total is more than 10” or “the client does not have the tag VIP”, and 14 steps: email the client or staff, add a late fee, add wallet credit, tag the client, open, assign or prioritise a ticket, suspend or unsuspend a service, send the details to a web address, wait, and only go on if something is still true.
• A waiting run stops by itself when what started it is no longer true, for example when the late invoice was paid.
• 9 ready-made templates: late fee after 7 days, welcome new clients, thank you after the first payment, domain expires soon, ask for a review, chase quotes, win back clients who left, tell the team about big orders, and VIP tickets first.
• Try it on a real invoice or client before you switch it on: it shows what each step would do, and nothing is changed or sent. The Runs page shows every run and what each step did.
• Client tags like VIP or Reseller, and ticket assignment to a staff member.

0.4.11: Search engine tools

28 September 2026

• Search engines, built in. Every store page gets a title and description for search results, one address, and links to its other language versions. Product descriptions are made from their features and lowest price, for example “Starter: 1 website, 10 GB NVMe storage, Free SSL. From $3.99/mo.”
• sitemap.xml and robots.txt are made for you. The client area, cart, checkout, sign-in pages and admin area stay out of search results, and your admin address is never listed.
• Prices on Google: product pages carry product, price, stock and breadcrumb details, and the home page your company details.
• Link previews on WhatsApp, Facebook, X and LinkedIn show the title, description and your share image.
• Settings, Search engines for the home page, share image, Google and Bing codes and your own robots.txt lines, and a Search appearance box with a Google preview on every product and group.
• Changing a product or group web address forwards the old one, so links and search results keep working.
• Site health has a third tab, Search engines, with a score, checks and fixes.

0.4.10: Free CyberPanel, HestiaCP, VirtFusion and SolusVM modules

28 September 2026

• Four new server modules, free on the Marketplace. Install one with a click and it shows up next to the built-in modules. CyberPanel websites with one-click sign-in for clients; HestiaCP users with their website, DNS and email; VirtFusion virtual servers that clients start, stop and restart in your client area; and SolusVM servers with power, hostname, root password and VNC in your client area.
• The WHMCS import brings these panels along once the module is installed, and SolusVM servers keep their link to the VPS.
• Remove extensions that were added by hand. Setup, Extensions shows where each one came from: built in, the Marketplace, or copied onto the server by hand. An unused one added by hand moves to quarantine with one click; nothing is deleted.
• Site health moves unused themes added by hand to quarantine with one click.

0.4.9: Import from Blesta, FOSSBilling and Paymenter, with a dry run first

28 September 2026

• Import from Blesta, FOSSBilling and Paymenter, next to WHMCS. Choose the system you are leaving in Settings, Import: clients with their passwords, products and prices, services, domains, invoices, payments, wallet credit and tickets come across. The other system is only read, and you can run the import again before you switch.
• A dry run before every import. Save and check shows, without changing anything, how many records each step would add or update and the problems it would meet: clients without a valid email, passwords that will not work, server modules Nuvabill does not have, overdue services the first nightly run would suspend, and more.
• A stronger WHMCS import: passwords from WHMCS 4.2 to 6.2 work too, server and service passwords come across with WHMCS's encryption key, WHMCS credit becomes a wallet entry, and an unpaid renewal invoice from WHMCS is never billed a second time.
• One bad row no longer stops an import; it is skipped and listed with the reason.
• Extensions, a new page under Setup: every payment gateway, server module, registrar and add-on in one place, with its status, how much it is used, new versions and settings. The sidebar shows how many are switched on but missing settings.

0.4.8: Site health, and billing jobs that never bill twice

28 September 2026

• Site health, a new page under Setup. Every night and after every update, Nuvabill checks itself and gives your site a score: staff without two-factor sign-in, unused accounts and API tokens, a .env file other accounts can read, folders anyone can change, backups left in the public folder, private files strangers can open, debug mode, HTTPS, gateways and registrars left in test mode, updates, backups and email.
• Core files: every download now includes a signed list of Nuvabill's files, so Site health spots changed files and unknown program files where visitors can run them. Put back the original with one click, or move an unknown file to quarantine.
• Database health: who can reach the database, whether passwords and keys are stored encrypted, damaged tables and missing changes. Optimize now rebuilds tables after a backup, and Clean up removes old logs and history. Clients, invoices, payments, services and tickets are never removed.
• Many problems have a Fix it button, staff get an email about new urgent issues, and php artisan nuvabill:security-check exits with code 1 while something is urgent, for your own monitoring.
• Billing jobs never bill twice. Only one automation run works at a time, each renewal period can only be invoiced once (the database itself refuses a second invoice), reminders and notices go out once, and a wallet payment clicked twice takes the money once.
• On the Marketplace, the cPanel add-on has a new name: cPanel Integrated (1.1.1). Licenses, settings and features stay the same.

0.4.7: Faster, steadier and easier-to-read store pages

28 September 2026

• No more jumping while pages load. Order forms can put their first prices in the page, so nothing moves when it finishes loading and no extra request is needed.
• Easier to read. Light grey, green and teal texts are a little darker, so every label passes the contrast rule for readable text.
• Faster repeat visits. Browsers keep the site's design files for a year; their names change with every release, so visitors always get the newest ones.
• Works with Cloudflare Web Analytics. Sites behind Cloudflare no longer block the analytics script Cloudflare adds.
• On the Marketplace: Aurora 1.2.0 and Swift 1.1.0, with no layout jumps, prices from the first moment and better accessibility.

0.4.6: Marketplace updates show up right away

28 September 2026

• New versions show up right away. The Updates and Installed tabs of the Marketplace now ask the store for new versions every time you open them, so you no longer need to remove and reinstall an extension to get its new version.
• The daily license check also looks for new versions, so the Marketplace menu shows how many updates are waiting even if nobody opened the marketplace. When the store cannot be reached, the last list it sent is used.

0.4.5: Extensions with their own tables, and four new items

28 September 2026

• Marketplace extensions can bring their own database tables. When an extension that asks for the database permission is installed or updated, Nuvabill makes or updates its tables for you, so no command line is needed. A package that changes the database without asking is refused.
• New on the Marketplace: Discord Notifications (free), Crystal Mail, MikroTik VPN and cPanel Integrated.

0.4.4: 26 languages

28 September 2026

• 26 languages: the client area and admin area now also speak Azerbaijani, Catalan, Chinese (Simplified), Croatian, Czech, Danish, Dutch, Estonian, French, German, Hebrew, Hungarian, Italian, Macedonian, Norwegian, Portuguese (Brazil and Portugal), Romanian, Russian, Spanish, Swedish, Turkish and Ukrainian, next to English, Arabic and Kurdish. Hebrew pages read right to left, and form error messages are translated too.
• A new language menu in the top bar: every language by its own name, with a search box. On phones it opens from the bottom of the screen.
• New installs offer every language to clients. Sites that already saved their language list turn on more in Settings → General.

0.4.3: Fix for MySQL and MariaDB

28 September 2026

• Installing on MySQL or MariaDB (and the one-line server install) stopped while making the product add-on tables, because an index name was longer than MySQL allows. The name is now short, and sites where that step stopped halfway finish it on the next update.
• A new test builds every database change for MySQL, so this kind of problem is caught before a release.

0.4.2: Backups and Google Drive

28 September 2026

• Backups: php artisan nuvabill:backup backs up the whole site (every file and the database), or only the database with --database. Add --password to encrypt it with AES-256. Each backup explains how to restore it.
• Google Drive backup, free on the Marketplace: the whole site and the database only, each on its own schedule or switched off, kept in your own Google Drive.
• For developers: add-ons can run on a schedule, add admin pages, show a panel on their settings page and ship translations. Developer guide.

0.4.1: Install with a single command

28 September 2026

• One command: curl -fsSL https://nuvabill.com/install.sh | bash. On a fresh Ubuntu or Debian server it also sets up Nginx, PHP, MariaDB, a free SSL certificate and the cron job. On a server that already runs PHP, such as cPanel Terminal, it installs into a folder and adds the cron job. How it works.
• Install from the terminal: php artisan nuvabill:install runs the same steps as the web installer.

0.4.0: Taxes, wallet, quotes, affiliates, API, passkeys, Arabic and Kurdish

27 September 2026

Billing

• Taxes: VAT, GST or sales tax rules by country and state. Choose whether your prices already include tax, which products and domains are taxed, and mark clients as tax exempt. Invoices, PDFs and emails show the tax and both tax numbers.
• Client wallet: clients add funds and pay invoices from their wallet in one click. Overpayments and refunds of wallet payments go back to the wallet, and staff can add or remove credit.
• Quotes: send a price offer for custom work. The client accepts or declines it in their account, and accepting creates the invoice.
• Affiliates: clients share a link and earn a commission when the people they send pay. Commissions are held for the days you set, then move to the wallet.

For your team and your tools

• REST API at /api/v1 for clients, services, invoices, payments, products, orders and tickets, with read-only or read-write keys. Read the API guide.
• Passkeys: sign in with a fingerprint, face or phone. Fake sign-in pages cannot steal them.
• Arabic and Kurdish (Sorani): the client area and admin area are translated and read right to left. Everyone picks their own language in the top bar.
• The Updates page shows what changed in every version you are about to install.

0.3.3: Safer updates

27 September 2026

• Only one update can be installed at a time. A second click or the nightly run waits instead of unpacking over a running update.
• The marketplace store opens on the marketplace, with no hosting plans or domain links.

0.3.2: Clearer payment errors

27 September 2026

• When a payment gateway refuses to start a payment, staff now see the gateway's own reason in Activity, for example "Invalid authentication key". Clients still see a short, friendly message.
• Wayl: the details Wayl sends with an error are kept in that reason.

0.3.1: Installer fix

27 September 2026

• Installing with an SQLite database now continues to the last step. Before, it created the tables and then asked for the database again.
• Settings files saved with Windows line endings are read correctly.
• The public demo can show premium themes for live previews.

0.3.0: Marketplace, coupons and add-ons

27 September 2026

Marketplace

• A Marketplace page in the admin area: browse themes, order forms, gateways and extensions and install them in one click.
• Live preview of themes and order forms on your own site, only visible to you.
• Every package is reviewed by people and signed. Nuvabill refuses anything changed after signing, and shows what a package can do before you install it.
• Paid items use a license key for one site. Test sites are always free. Updates show on the Marketplace page.
• A developer program on my.nuvabill.com: developers sell their own items and keep 83%. Read the developer guide.
• New add-on extensions that react to orders, payments and tickets, or add a script such as a chat window.
• First items: the premium Aurora theme and Swift one-page order form, and the free Paper and Midnight themes, Team chat alerts and Live chat widget. See them.

Billing

• Coupons: percent or fixed, for the first payment, every payment or a number of payments, with limits by product, billing cycle, dates, uses and new clients. Share a link like ?coupon=WELCOME20.
• Product add-ons such as backups or a dedicated IP, billed and renewed with the service.
• Exchange rates: show prices in US dollars and charge in Iraqi dinar (or another currency) at the rate you set. Invoices stay in dollars and are marked paid in full.
• A one-page ordering API for order forms: live quotes, domain search, sign-up and payment in one step.

Security and fixes

• Links always use https when your site address does, also behind a proxy.
• Release zips never include packages or databases from the build machine.

0.2.3: New design

27 September 2026

• A new, more professional design for the client area and the admin area.

0.2.2

27 September 2026

• Updated demo data.

0.2.1

27 September 2026

• A setting for your privacy policy link, and terms and privacy links for clients.

0.2.0: Domains, control panels and WHMCS import

27 September 2026

• Domains: search, register, transfer and renew at ResellerClub, Namecheap, Enom or OpenSRS, with expiry reminders and nameserver changes.
• DirectAdmin and Plesk, next to cPanel.
• Proxmox VE and Virtualizor virtual servers, managed inside the client area.
• FIB, FastPay and Wayl payments, and refunds from the invoice page.
• WHMCS importer: clients with their passwords, products, services, domains, invoices and tickets.
• Fraud checks on new orders, sign in with Google, GitHub or Facebook, CAPTCHA, and two-factor sign-in for clients.

0.1.2

26 September 2026

• Faster demo resets and a safe root .htaccess.

0.1.1

26 September 2026

• Demo mode, security headers on every page and Cloudflare proxy support.

0.1.0: First release

26 September 2026

• Store and checkout, invoices with PDFs, renewals, reminders and suspensions.
• Stripe, PayPal and bank transfer. cPanel accounts created automatically.
• Support tickets, staff roles, two-factor sign-in for staff, and signed one-click updates.