Nouveautés

Six months of work. Kit went from a hiring tool to four more products, and hiring itself got rebuilt.

Four new modules

• Security: run a vulnerability disclosure programme. Public branded portal and security.txt, researcher intake, triage board, CVSS assessment with a plain-English explainer, on-call rotation with SLA escalation to Slack and PagerDuty, bounty proposals with team voting, a disbursement queue, consent-first Hall of Fame, postmortems, and evidence dossiers as PDF. Push reports to Jira, Linear or Vanta. Includes a separate takedown-notice intake channel.
• Outreach: AI cold email that runs itself. Import or discover prospects, research each one, draft personalised sequences with follow-ups, and hold every send behind approval. Replies are sentiment-classified and triaged, positive ones get one-click responses from the notification email, and the AI can offer a bookable meeting slot. Sends over your own SMTP, tracks opens and clicks, runs A/B experiments, and reports deliverability posture for your sending domain.
• Performance: review cycles that produce audit evidence. Build a cycle from a template, assign manager, peer and self reviewers, freeze the questions on activation, then finalise into append-only SOC 2 evaluation records with a nightly integrity sweep. Reviewers write against role expectations and can start from an AI draft grounded in goals and merged GitLab work. Exports as branded CSV or PDF.
• Training: security awareness training and device evidence. Authors build slide decks with video, knowledge checks and attestations; participants sign in by magic link with no Kit account and finish with an immutable completion record. Checklist programmes collect what no MDM can: per-platform steps, screenshot uploads with device label and capture date, and an admin review queue. Start from a SOC 2, GDPR, ISO 27001 or HIPAA deck.

Hiring, rebuilt

• Command centre and live pipeline board: a dashboard with your worklist, active roles and inflow, plus a drag-and-drop kanban that updates for every recruiter watching it.
• Candidate email inside the application: read and reply to the whole thread without leaving Kit, with AI-drafted replies and open and click tracking.
• Catch-all inbox: point an address at Kit and an AI agent parses emailed applications, routes them to the right posting, and chases thin ones for missing detail.
• Semantic candidate search: CVs are extracted into structured fields and embeddings, so you search the talent pool by meaning. Video interview transcripts are searchable too. Define your own AI-filled metafields.
• Interviews that actually book: Calendly and Google Meet stages, RFC 5545 calendar invites, and candidate re-notification when slots open.
• Offers, references and payouts: extend an offer the candidate can accept, decline or counter; collect references by one-tap email, form, or 60-second video with transcription; pay for assignment work with PDF receipts.
• Distribution and analytics: publish to OLX with category and city mapping, plus Adzuna, Jooble, Jobrapido, Uitzendbureau and Atom feeds, Google Indexing on publish, and per-posting analytics with a real view to apply funnel.
• Public Jobs API: pk_ and sk_ keys for listings, applications with presigned CV upload, and talent-pool intake. Ships with an SDK and a Next.js starter.
• Compensation Research: scheduled scraping of seven job boards, LLM salary extraction from job text, multi-currency normalisation, and quartile benchmarks per role and city.
• Hiring process templates: 20 ready-made processes that build a configured posting in one click, each with its own public page.

AI

• 162 MCP tools, up from 15: connect Claude, ChatGPT or Cursor to Kit and drive hiring, security, outreach, training, performance and compensation research.
• Connect it yourself: any member with module access connects over OAuth from their own AI client, on your subdomain, with per-module read or write scopes and revocation from settings.
• AI sidebar everywhere: a streaming chat panel that picks the right agent for the page you are on, keeps conversation history, and is open to every member.
• Bring your own key: Gemini, Anthropic or OpenRouter, configured per account.
• Spend caps you can see: daily and monthly credit limits per provider, a usage bar, threshold alerts, and work that resumes on its own once the limit resets.
• @KitBot in Slack: mention it in a candidate channel or a report thread and it answers from the record with read-only tools.

Access and identity

• SAML SSO and Google Workspace provisioning: connect your IdP, verify your domain by DNS record, then require SSO for everyone on it.
• Passkeys: passwordless sign-in and 2FA, and owners can require passkeys account-wide.
• Account security you can inspect: sign-in history with device, IP and country, trusted devices, a live session list with remote sign-out, and re-auth before anything that weakens a credential.
• Per-module roles: give each member none, member or admin per product, and restrict an individual report, posting or campaign to named people.
• Breach monitoring: daily Have I Been Pwned checks on member emails and addresses you nominate.
• Billing: one $8 per seat plan with modules as add-ons, a 30-day trial, annual option, and Stripe Tax with VAT ID capture.

Your brand, your domain

• Custom domains: point your own hostname at your job board or security portal, with automatic SSL, activation email and health monitoring.
• One branding page, four portals: light and dark logos, brand and background colours, and a custom font, applied across careers, security, training and the candidate portal, down to the browser tab, favicon and share cards.
• Send as your own domain: candidate and researcher email leaves from your address with per-domain DKIM, and inbound mail lands in your Kit inbox.
• Embeddable security pages: iframe the report and takedown forms into your own site, with your Turnstile keys.

Everything else

• Five languages: the whole app in English, German, French, Spanish and Polish, with locale-prefixed public URLs.
• Documentation: 130 pages, 120 of them translated into each of the four other languages, with semantic search and a plain-markdown view for LLMs.
• Blog: 150 articles, every one translated into all four languages.
• One morning email: a single daily digest across hiring, security, outreach and performance, plus Slack DMs you opt into and can pause per category.
• Command palette that does things: Cmd+K now runs 18 actions, not just navigation.

Five weeks since the last update. Here's everything that shipped.

VDP, now self-serve

Billed accounts can start a VDP add-on free trial without talking to sales — claim it by email and watch the countdown in your sidebar. There's a free premium month promo running too. The new Vanta integration pushes your VDP reports into Vanta as compliance evidence, and a configurable public security portal (status, scope, draft preview) gives researchers a front door. On-call admins now get alerted when the whole VDP rotation is on holiday.

Hiring

• Calendly scheduling: connect Calendly, grant the scopes you want, and book interviews from Kit. A health & usage dashboard tracks each connection, with alerts when one degrades or hits a plan limit.
• Needs decision: team reviews that reach no consensus surface as needing a decision (also exposed to AI agents).
• Submission guards: stage advance is blocked when a required submission is missing; completed-without-submission is flagged.
• Unreject: bring a rejected candidate back, with a full audit trail and consent guards.
• Thin email applications are flagged and nudged, so candidates can fill the gaps themselves.
• Candidate emails rewritten to read like a human, with DKIM/SPF/DMARC for deliverability. Hiring Slack notifications are cleaner.

New tool: PDF Sanitizer

Upload a PDF, get a safe flattened copy back — processed in an isolated sidecar, with retention controls and an auto-delete countdown. Find it under Tools.

Outreach

The trial is now 30 days at $10/mo, up from 24 hours at $5/mo.

Platform

• Custom domain health monitoring with warning emails, plus clearer Cloudflare DNS errors during setup.
• Team Members consolidates the colleague directory — profiles, activity timelines, searchable from OmniSearch (⌘K), which now also covers custom domains, the talent pool, and 14 more nav items.
• Refined billing page and consistent "Learn more" help links across the app.

Major Features

• AI Chat Assistant — Ask questions about candidates, get summaries, and streamline your workflow with conversational AI built right into the platform.
• Webhooks — Connect Kit to your existing tools with real-time event notifications for applications, stage changes, and more.
• Data Export — Export your hiring data anytime in CSV format for reporting, compliance, or migration.
• Documentation Portal — Comprehensive guides and API docs available at /docs to help your team get the most out of Kit.
• Ideas Widget — Submit feature requests and vote on ideas directly from the app. Your feedback shapes our roadmap.
• OmniSearch — Find anything instantly with Cmd+K — candidates, job postings, settings, and more.

Hiring Enhancements

• GitHub Code Assignments — Automatically provision private repos from templates, track candidate progress, manage deadlines with extensions, and grant reviewer access.
• Video Interview Scheduling — Built-in interview stage with calendar integration and automated candidate notifications.
• Career Site Analytics — Track views, applications, and conversion rates for every job posting.
• LinkedIn Profile Prefill — Candidates can auto-fill applications with their LinkedIn profile data for a frictionless experience.

Integration Ecosystem

• Slack Notifications — Get real-time hiring updates in your team's Slack channels.
• Google Calendar Sync — Interview events automatically sync to your calendar.
• MCP Server — Connect Kit to AI assistants and custom tooling via the Model Context Protocol.

Platform Improvements

• Per-Seat Billing — Fair pricing that scales with your team size.
• Dark Mode — Full dark mode support across the entire application.
• Real-Time Updates — Live notifications and UI updates powered by ActionCable.