Enhanced API security, in-chat credit purchase and ATS optimizations

Rate limiting, prompt injection prevention, Stripe checkout integrated in chat, FR/EN language guard and PDF preview in documents panel.

VitamCV strengthens its chat API security, integrates credit purchases directly in the conversation and refines its ATS optimization algorithm. This update combines security, user experience and scoring precision for a more reliable AI resume builder.

API security: rate limiting and anti-injection

The chat API benefits from new protection layers:

  • Per-user rate limiting: limits request count per interval to prevent abuse
  • Prompt injection detection: filters attempts to manipulate the AI coach with malicious instructions
  • Enhanced validation: each request is validated before processing with strict schemas

These protections ensure a stable and fair service for all users.

In-chat credit purchase

No need to leave the conversation to buy credits. A purchase popup with Stripe Embedded Checkout opens directly in the chat when your balance is insufficient. Select a pack, pay, and immediately pick up where you left off.

The purchase flow has been simplified: the intermediate confirmation has been removed, and credit deduction is secured server-side to prevent any manipulation.

Advanced ATS optimizations

The ATS scoring and generation algorithm has been refined:

  • Better match rate: keyword analysis now takes into account highlights, summary and profile keywords in the snapshot sent to the LLM
  • Language guard: automatic detection of inconsistency between the resume language and target market conventions (a CV for France must follow French conventions, a resume for the US must follow American conventions)

Improved documents panel

The documents tab now displays stored file names and a PDF preview directly in the panel. No need to download to check the output.

Purchase history and account management

Purchase history is accessible from a dedicated page with pagination. The header and menu have been simplified, and account deletion is now unified in a single section.

Animated authentication pages

Login and signup pages have been enriched with animated decorative elements and centered titles for a more engaging experience.

Optimized performance

Landing page sections are now lazy-loaded, reducing initial load time and improving Core Web Vitals.

What this means for you

Your experience is smoother (purchase without leaving the chat), more secure (anti-abuse protection) and more precise (language guard and improved scoring). All with optimized performance.