I’m already happy with the current set of features, and I don’t expect to add many new ones. I want Checkpost to be something you can host once and spend very little time managing.

One of my goals while building it was to use it for device posture checks. Currently, alerts can be integrated with VPNs and proxies to allow or deny requests from devices that fail certain checks, but this requires manually parsing the webhooks. Over the next couple of years, I plan to focus on making those integrations easier and more seamless.

Edit: One major feature I’d like to explore is device identity and attestation using TPMs or secure enclaves. This could allow Checkpost to verify that requests are only coming from enrolled devices.