diff --git a/package.json b/package.json
index f2f3249..307b940 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "libredb-studio-website",
   "type": "module",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "scripts": {
     "dev": "astro dev",
     "build": "node scripts/sync-docker-compose.mjs && astro build",
diff --git a/public/video/connect-poster.jpg b/public/video/connect-poster.jpg
new file mode 100644
index 0000000..696aa58
Binary files /dev/null and b/public/video/connect-poster.jpg differ
diff --git a/src/components/sections/CompareSection.astro b/src/components/sections/CompareSection.astro
index 32f0ea0..9f039d8 100644
--- a/src/components/sections/CompareSection.astro
+++ b/src/components/sections/CompareSection.astro
@@ -122,6 +122,19 @@ const exportRows = rows.map((r) => ({
       ))
     }
   </div>
+
+  <p class="mt-6 text-[13px] leading-relaxed">
+    <span class="sql-com">
+      -- methodology: scored by the LibreDB team from each tool's public docs and pricing pages (last check:
+      2026-07-15). spotted an error?
+    </span>
+    <a
+      href="https://github.com/libredb/libredb-studio/issues"
+      target="_blank"
+      rel="noopener noreferrer"
+      class="text-muted hover:text-fg">file an issue →</a
+    >
+  </p>
 </div>
 <script
   type="application/json"
diff --git a/src/components/sections/FaqSection.astro b/src/components/sections/FaqSection.astro
index 3eebdb2..8bc2ded 100644
--- a/src/components/sections/FaqSection.astro
+++ b/src/components/sections/FaqSection.astro
@@ -45,6 +45,14 @@ const faqs: QA[] = [
     q: 'How does it compare to pgAdmin or DBeaver?',
     a: 'Unlike pgAdmin (PostgreSQL only) or DBeaver (desktop app), LibreDB Studio is web-based, mobile-ready, and deeply AI-powered. Beyond NL2SQL, we offer AI Query Safety Analysis, AI Query Explainer, AI Query Autopilot, AI Data Profiler, ORM Code Generator, Test Data Generator, Interactive Pivot Tables, ER Diagrams, Database Documentation, and automatic Data Masking with RBAC enforcement - features no desktop IDE provides. Zero installation, works on any device.',
   },
+  {
+    q: 'How is LibreDB Platform licensed?',
+    a: 'Platform is the closed-source enterprise layer of the open-core model, currently in beta. It is licensed per organization and self-hosted on your own infrastructure — there is no online purchase or hosted subscription yet. Licensing conversations happen directly with the team (reach us on LinkedIn), and Platform revenue funds the open-source work on Studio and the LibreDB engine. Studio itself stays MIT and free forever, regardless.',
+  },
+  {
+    q: 'Why sponsor LibreDB?',
+    a: 'Studio is MIT-licensed and free forever — no premium tier is coming to paywall it. Sponsorship (github.com/sponsors/libredb) directly funds what you already use: maintenance across seven database engines, security reviews, the release pipeline that ships Docker, Helm, npm, Homebrew and Snap packages on every release, and development of the open-source LibreDB engine. If Studio saves your team an hour a month, a sponsorship is the cheapest way to keep it alive and independent.',
+  },
 ];
 ---
 
diff --git a/src/components/sections/FeaturesSection.astro b/src/components/sections/FeaturesSection.astro
index 9e50d73..d7ab7f1 100644
--- a/src/components/sections/FeaturesSection.astro
+++ b/src/components/sections/FeaturesSection.astro
@@ -135,6 +135,23 @@ const features: Feature[] = [
       ))
     }
   </div>
+
+  <!-- Closing CTA — long result sets shouldn't end in a dead end -->
+  <section class="mt-10 flex flex-wrap gap-3">
+    <a
+      href="https://app.libredb.org"
+      target="_blank"
+      rel="noopener noreferrer"
+      class="inline-flex items-center gap-2 rounded-md bg-primary px-5 py-2.5 text-sm font-medium text-white transition-colors hover:bg-primary-bright"
+    >
+      <span aria-hidden="true">▶</span> Try them live
+    </a>
+    <a
+      href="/get-started"
+      class="inline-flex items-center gap-2 rounded-md border border-edge-strong px-5 py-2.5 text-sm font-medium text-fg transition-colors hover:bg-raised"
+      >Get started <span aria-hidden="true">→</span></a
+    >
+  </section>
 </div>
 <script
   type="application/json"
diff --git a/src/components/sections/GetStartedSection.astro b/src/components/sections/GetStartedSection.astro
index 671aa13..596291a 100644
--- a/src/components/sections/GetStartedSection.astro
+++ b/src/components/sections/GetStartedSection.astro
@@ -1,5 +1,9 @@
 ---
 import SectionHeader from './SectionHeader.astro';
+import PromoVideo from './PromoVideo.astro';
+import { ENGINES } from '../../data/engines';
+
+const engineList = `${ENGINES.slice(0, -1).join(', ')}, or ${ENGINES.at(-1)}`;
 
 interface Line {
   kind: 'cmd' | 'comment' | 'out';
@@ -55,6 +59,18 @@ const copyText = (s: Step) =>
 <div class="mx-auto max-w-6xl">
   <SectionHeader title="Get started in minutes" subtitle="Up and running with three simple steps." />
 
+  <!-- The whole journey in motion, before the steps (click-to-load facade) -->
+  <div class="mb-8 max-w-3xl">
+    <PromoVideo
+      videoId="KazHTclbiSQ"
+      title="Connect Your Own Database in LibreDB Studio"
+      poster="/video/connect-poster.jpg"
+    />
+    <p class="mt-2 text-[13px] leading-relaxed">
+      <span class="sql-com">-- 70s: install → connect your database → first query. the steps below, in motion.</span>
+    </p>
+  </div>
+
   <div class="grid grid-cols-1 gap-4 lg:grid-cols-3">
     {
       steps.map((s) => (
@@ -141,6 +157,38 @@ const copyText = (s: Step) =>
       <a href="/deploy" class="text-[13px] text-primary hover:underline">Explore all deploy options →</a>
     </div>
   </div>
+
+  <!-- The first real step AFTER the app is running -->
+  <section class="mt-10 border border-edge bg-panel p-6">
+    <h3 class="text-[15px] font-semibold text-bright">Next: connect your first database</h3>
+    <ol class="mt-4 flex list-none flex-col gap-3 text-[13px] leading-relaxed text-muted">
+      <li>
+        <span class="text-faint select-none">1&nbsp;</span> Log in and open{' '}
+        <span class="font-semibold text-fg">Connections → New connection</span>.
+      </li>
+      <li><span class="text-faint select-none">2&nbsp;</span> Pick your engine — {engineList}.</li>
+      <li>
+        <span class="text-faint select-none">3&nbsp;</span> Enter host and credentials.{' '}
+        <span class="text-dim">Start with a dedicated read-only database account</span> — least privilege first, write access
+        when you actually need it. Databases behind a firewall connect over an SSH tunnel.
+      </li>
+      <li>
+        <span class="text-faint select-none">4&nbsp;</span> Deploying for a team? Define{' '}
+        <span class="font-semibold text-fg">seed connections</span> whose credentials resolve from environment variables at
+        runtime — secrets stay in your secret manager, never in a config file.
+      </li>
+    </ol>
+
+    <div class="mt-5 flex flex-wrap gap-4 text-[13px]">
+      <a
+        href="https://github.com/libredb/libredb-studio/blob/main/docs/SEED_CONNECTIONS.md"
+        target="_blank"
+        rel="noopener noreferrer"
+        class="text-primary hover:underline">Seed connections guide →</a
+      >
+      <a href="/security" class="text-primary hover:underline">How credentials are handled →</a>
+    </div>
+  </section>
 </div>
 <script
   type="application/json"
diff --git a/src/components/sections/HomeSection.astro b/src/components/sections/HomeSection.astro
index f9c0bc8..b25ddc4 100644
--- a/src/components/sections/HomeSection.astro
+++ b/src/components/sections/HomeSection.astro
@@ -1,9 +1,20 @@
 ---
 import PromoVideo from './PromoVideo.astro';
+import { ENGINES } from '../../data/engines';
+import { sectionById } from '../../data/sections';
 
 const DEMO = 'https://app.libredb.org';
 
-const databases = ['PostgreSQL', 'MySQL', 'Oracle', 'SQL Server', 'SQLite', 'MongoDB', 'Redis'];
+const databases = ENGINES;
+const featureRows = sectionById['features'].rows;
+
+// Info-scent bridge to /features: four flagship rows of the full result set.
+const flagship = [
+  { name: 'NL2SQL Copilot', line: 'Plain English in, executable SQL out.' },
+  { name: 'AI Query Safety', line: 'Risk analysis before destructive queries run.' },
+  { name: 'Visual EXPLAIN', line: 'Graphical plans with plain-language notes.' },
+  { name: 'Data Masking', line: 'Sensitive columns masked in grid and exports.' },
+];
 ---
 
 <div class="mx-auto max-w-5xl px-1">
@@ -62,6 +73,27 @@ const databases = ['PostgreSQL', 'MySQL', 'Oracle', 'SQL Server', 'SQLite', 'Mon
     </p>
   </div>
 
+  <!-- Feature bridge: a taste of the result set behind /features -->
+  <div class="mt-12 border-t border-edge pt-8">
+    <p class="text-[13px]">
+      <span class="sql-kw">SELECT</span> name, summary <span class="sql-kw">FROM</span> features{' '}
+      <span class="sql-kw">LIMIT</span>{' '}<span class="sql-num">4</span>;
+    </p>
+    <div class="mt-4 grid grid-cols-1 gap-px overflow-hidden border border-edge bg-edge sm:grid-cols-2 lg:grid-cols-4">
+      {
+        flagship.map((f) => (
+          <div class="bg-panel p-4">
+            <h3 class="text-[13px] font-semibold text-bright">{f.name}</h3>
+            <p class="mt-1.5 text-[12px] leading-relaxed text-dim">{f.line}</p>
+          </div>
+        ))
+      }
+    </div>
+    <a href="/features" class="mt-3 inline-block text-[13px] text-muted hover:text-fg">
+      … {featureRows - flagship.length} more rows — see all {featureRows} features <span aria-hidden="true">→</span>
+    </a>
+  </div>
+
   <!-- The LibreDB family / open-core (secondary; Studio stays the hero above) -->
   <div class="mt-14 border-t border-edge pt-8">
     <p class="text-[11px] tracking-wider text-faint uppercase">The LibreDB family — one core, three products</p>
@@ -90,7 +122,7 @@ const databases = ['PostgreSQL', 'MySQL', 'Oracle', 'SQL Server', 'SQLite', 'Mon
           <span class="text-[11px] text-dim">beta</span>
         </div>
         <p class="mt-2 text-[12px] leading-relaxed text-dim">
-          Managed for teams — Database Access Governance: authorized, audited, multi-tenant.
+          Self-hosted for enterprises — Database Access Governance: authorized, audited, multi-tenant.
         </p>
       </a>
     </div>
diff --git a/src/components/sections/PlatformSection.astro b/src/components/sections/PlatformSection.astro
index 9a1433b..7398258 100644
--- a/src/components/sections/PlatformSection.astro
+++ b/src/components/sections/PlatformSection.astro
@@ -20,7 +20,11 @@ const capabilities = [
     name: 'Query audit log',
     detail: 'Every query logged with user, timing, and status — full accountability.',
   },
-  { name: 'Plans', detail: 'Free, Team, Business, and Enterprise tiers — runtime-configurable.' },
+  {
+    name: 'Enterprise licensing',
+    detail:
+      'Self-hosted, per-organization licenses during beta — tiers are runtime-configurable per license. No online sales yet.',
+  },
   {
     name: 'SSO / OIDC',
     detail: 'Vendor-agnostic single sign-on (Auth0, Keycloak, Okta, Azure AD).',
@@ -29,8 +33,10 @@ const capabilities = [
 
 const openCore = [
   { tier: 'Studio', line: 'OSS · free · self-hosted · community', cls: 'text-primary' },
-  { tier: 'Platform', line: 'closed · paid · cloud · enterprise', cls: 'text-ai' },
+  { tier: 'Platform', line: 'closed source · beta · self-hosted · enterprise license', cls: 'text-ai' },
 ];
+
+const LINKEDIN = 'https://www.linkedin.com/company/libredb';
 ---
 
 <div class="mx-auto max-w-5xl">
@@ -45,7 +51,8 @@ const openCore = [
     <span class="text-ai">Governance</span> Platform
   </h1>
   <p class="mt-5 max-w-2xl text-[15px] leading-relaxed text-muted">
-    Centralized, authorized, audited database access for teams and enterprises — the managed, team form of LibreDB.
+    Centralized, authorized, audited database access for teams and enterprises — the governed, team form of LibreDB,
+    self-hosted on your infrastructure.
   </p>
 
   <!-- Problem callout -->
@@ -79,7 +86,7 @@ const openCore = [
   <div class="mt-10">
     <SectionHeader
       title="Open core"
-      subtitle="Studio is free & open; Platform is the managed layer that funds the open-source work."
+      subtitle="Studio is free & open; Platform is the commercial layer that funds the open-source work."
     />
     <div class="grid grid-cols-1 gap-px overflow-hidden border border-edge bg-edge sm:grid-cols-2">
       {
@@ -98,9 +105,28 @@ const openCore = [
     </p>
   </div>
 
+  <!-- How to get it: honest licensing model, with a human contact path -->
+  <div class="mt-10 border-l-2 border-ai/60 bg-panel p-5">
+    <h3 class="text-[15px] font-semibold text-bright">How Platform is sold today</h3>
+    <p class="mt-2 max-w-2xl text-[13.5px] leading-relaxed text-dim">
+      Platform is in beta and is licensed <span class="text-fg"
+        >per organization, self-hosted on your infrastructure</span
+      > — there is no online purchase or hosted subscription yet. Licensing conversations happen directly with the team, and
+      beta partners shape the roadmap.
+    </p>
+    <a
+      href={LINKEDIN}
+      target="_blank"
+      rel="noopener noreferrer"
+      class="mt-4 inline-flex items-center gap-2 rounded-md border border-edge-strong px-4 py-2 text-[13px] font-medium text-fg transition-colors hover:bg-raised"
+    >
+      Talk to us about licensing <span aria-hidden="true">→</span>
+    </a>
+  </div>
+
   <!-- CTA (the only external link) -->
   <div
-    class="mt-10 flex flex-col items-start justify-between gap-4 border border-edge bg-panel p-6 sm:flex-row sm:items-center"
+    class="mt-8 flex flex-col items-start justify-between gap-4 border border-edge bg-panel p-6 sm:flex-row sm:items-center"
   >
     <div>
       <h3 class="text-[16px] font-bold text-bright">Try the beta</h3>
diff --git a/src/components/sections/SecuritySection.astro b/src/components/sections/SecuritySection.astro
new file mode 100644
index 0000000..10667a8
--- /dev/null
+++ b/src/components/sections/SecuritySection.astro
@@ -0,0 +1,110 @@
+---
+// The consolidated security page a DBA or security reviewer looks for before
+// letting a tool near production. Deliberately honest: it states what is
+// enforced where (and display-level vs server-side), never more.
+import SectionHeader from './SectionHeader.astro';
+
+const SECURITY_MD = 'https://github.com/libredb/libredb-studio/blob/main/SECURITY.md';
+const SEED_DOCS = 'https://github.com/libredb/libredb-studio/blob/main/docs/SEED_CONNECTIONS.md';
+const OIDC_DOCS = 'https://github.com/libredb/libredb-studio/blob/main/docs/OIDC.md';
+
+const controls = [
+  {
+    control: 'Authentication',
+    detail:
+      'OpenID Connect SSO (Auth0, Keycloak, Okta, Azure AD or any OIDC provider) using Authorization Code Flow with PKCE. Sessions ride JWTs in httpOnly cookies — no tokens in localStorage.',
+    href: OIDC_DOCS,
+    linkLabel: 'OIDC guide',
+  },
+  {
+    control: 'Authorization',
+    detail:
+      'Role-based access control with per-connection visibility scoping — a connection can be exposed to admins only, to users, or to everyone. Roles map from your identity provider claims.',
+  },
+  {
+    control: 'Database credentials',
+    detail:
+      'Seed connections resolve ${ENV_VAR} placeholders at runtime, so secrets live in your environment or secret manager — never in a config file. Pair each connection with a dedicated least-privilege database account (read-only to start).',
+    href: SEED_DOCS,
+    linkLabel: 'Seed connections',
+  },
+  {
+    control: 'Transport',
+    detail:
+      'TLS between browser and app; TLS and SSH tunnels from the app to your databases — including databases behind firewalls that never get public exposure.',
+  },
+  {
+    control: 'Data masking',
+    detail:
+      'Sensitive columns (email, phone, SSN, financial data) are detected and masked across the grid, exports, and clipboard with RBAC enforcement. Masking is display-level — combine it with database-side grants for hard guarantees.',
+  },
+  {
+    control: 'Self-hosting & isolation',
+    detail:
+      'Self-hosting is a first-class citizen: run it on your infrastructure, inside your network, behind your VPN. Nothing needs to leave your perimeter — including AI, which can run fully local via Ollama or LM Studio.',
+  },
+  {
+    control: 'Supply chain',
+    detail:
+      'MIT-licensed source you can audit line by line. Every release ships SHA256 checksums; CI runs CodeQL and SonarCloud. Images are published to GHCR with immutable version tags.',
+  },
+];
+---
+
+<div class="mx-auto max-w-5xl">
+  <SectionHeader
+    title="Security model"
+    subtitle="What is enforced, where it is enforced, and how to reach us when something isn't."
+  />
+
+  <div class="flex flex-col gap-px overflow-hidden border border-edge bg-edge">
+    {
+      controls.map((c) => (
+        <article class="grid grid-cols-1 gap-2 bg-panel p-5 sm:grid-cols-[180px_1fr] sm:gap-6">
+          <h3 class="text-[13px] font-semibold tracking-wide text-bright uppercase">{c.control}</h3>
+          <div>
+            <p class="text-[13px] leading-relaxed text-muted">{c.detail}</p>
+            {c.href && (
+              <a
+                href={c.href}
+                target="_blank"
+                rel="noopener noreferrer"
+                class="mt-1.5 inline-block text-[12px] text-primary hover:text-primary-bright"
+              >
+                {c.linkLabel} <span aria-hidden="true">→</span>
+              </a>
+            )}
+          </div>
+        </article>
+      ))
+    }
+  </div>
+
+  <!-- Responsible disclosure -->
+  <section class="mt-10 border-l-2 border-warn/60 bg-panel p-5">
+    <h3 class="text-[15px] font-semibold text-bright">Found a vulnerability?</h3>
+    <p class="mt-2 max-w-2xl text-[13px] leading-relaxed text-dim">
+      Please report it privately — not in a public issue. The disclosure process, supported versions, and response
+      commitments live in the repository's security policy.
+    </p>
+    <a
+      href={SECURITY_MD}
+      target="_blank"
+      rel="noopener noreferrer"
+      class="mt-4 inline-flex items-center gap-2 rounded-md border border-edge-strong px-4 py-2 text-[13px] font-medium text-fg transition-colors hover:bg-raised"
+    >
+      Read SECURITY.md <span aria-hidden="true">→</span>
+    </a>
+  </section>
+
+  <p class="mt-6 text-[13px] leading-relaxed">
+    <span class="sql-com">-- honest by default: if a control is display-level, this page says so.</span>
+  </p>
+</div>
+<script
+  type="application/json"
+  data-export-payload="security"
+  data-export-filename="security.json"
+  data-export-format="json"
+  set:html={JSON.stringify(controls.map(({ control, detail }) => ({ control, detail })))}
+/>
diff --git a/src/components/studio/StatusBar.astro b/src/components/studio/StatusBar.astro
index 7f4e464..d03fedb 100644
--- a/src/components/studio/StatusBar.astro
+++ b/src/components/studio/StatusBar.astro
@@ -1,6 +1,11 @@
 ---
 // Bottom status bar: one connection signal, the real footer links, and a
 // single faint IDE identity cluster. Every datum here appears nowhere else.
+// The studio version is fetched from GitHub releases at build time so the
+// site never advertises a stale number.
+import { getStudioVersion } from '../../lib/studio-version';
+
+const studioVersion = await getStudioVersion();
 ---
 
 <footer
@@ -66,7 +71,7 @@
       <span>Ln 1, Col 1</span>
       <span>UTF-8</span>
       <span>SQL</span>
-      <span><span aria-hidden="true">◆</span> v0.9.29</span>
+      <span><span aria-hidden="true">◆</span> studio:{studioVersion}</span>
     </span>
   </div>
 </footer>
diff --git a/src/data/engines.ts b/src/data/engines.ts
new file mode 100644
index 0000000..5cffdc7
--- /dev/null
+++ b/src/data/engines.ts
@@ -0,0 +1,4 @@
+// Single source of truth for the supported engine list. Every surface that
+// names or counts the engines (hero subtitle, JSON-LD, SEO copy) must derive
+// from this array — the 7/5/4 count drift across surfaces is what this fixes.
+export const ENGINES = ['PostgreSQL', 'MySQL', 'Oracle', 'SQL Server', 'SQLite', 'MongoDB', 'Redis'] as const;
diff --git a/src/data/sections.ts b/src/data/sections.ts
index fa00a26..fcc3c9b 100644
--- a/src/data/sections.ts
+++ b/src/data/sections.ts
@@ -226,7 +226,7 @@ export const sections: SectionMeta[] = [
     id: 'faq',
     table: 'faq',
     query: 'SELECT question, answer FROM faq;',
-    rows: 9,
+    rows: 11,
     cols: 2,
     execMs: 2,
     columns: [
@@ -234,11 +234,30 @@ export const sections: SectionMeta[] = [
       { name: 'answer', type: 'TEXT' },
     ],
     explain:
-      'The nine most common questions: pricing, self-hosting, AI providers, security & SSO, supported databases, and how it compares to legacy tools.',
+      'The eleven most common questions: pricing and licensing, self-hosting, AI providers, security & SSO, supported databases, sponsorship, and how it compares to legacy tools.',
     slug: 'faq',
     pageTitle: 'FAQ — LibreDB Studio',
     pageDescription:
-      'Frequently asked questions about LibreDB Studio: pricing, self-hosting, AI providers, security & SSO, supported databases, and how it compares to legacy tools.',
+      'Frequently asked questions about LibreDB Studio: pricing and Platform licensing, self-hosting, AI providers, security & SSO, supported databases, sponsorship, and how it compares to legacy tools.',
+    schema: 'studio',
+  },
+  {
+    id: 'security',
+    table: 'security',
+    query: 'SELECT control, detail FROM security_controls;',
+    rows: 7,
+    cols: 2,
+    execMs: 3,
+    columns: [
+      { name: 'control', type: 'TEXT' },
+      { name: 'detail', type: 'TEXT' },
+    ],
+    explain:
+      'The security model in one place: OIDC SSO with PKCE, JWT in httpOnly cookies, RBAC, env-var seed credentials, TLS and SSH tunnels, display-level data masking, checksummed releases — and how to report a vulnerability.',
+    slug: 'security',
+    pageTitle: 'Security — LibreDB Studio',
+    pageDescription:
+      'How LibreDB Studio handles security: OIDC Single Sign-On with PKCE, JWT in httpOnly cookies, role-based access control, environment-variable seed credentials, TLS/SSH tunnels to databases, data masking, audited open source, and responsible vulnerability disclosure.',
     schema: 'studio',
   },
   {
diff --git a/src/layouts/Layout.astro b/src/layouts/Layout.astro
index 0578ad6..ccc8455 100644
--- a/src/layouts/Layout.astro
+++ b/src/layouts/Layout.astro
@@ -2,6 +2,8 @@
 import '../styles/global.css';
 import CookieConsent from '../components/CookieConsent.astro';
 import { ClientRouter } from 'astro:transitions';
+import { getStudioVersion } from '../lib/studio-version';
+import { ENGINES } from '../data/engines';
 
 interface Props {
   title: string;
@@ -12,6 +14,7 @@ const { title, description = 'LibreDB Studio - The Modern, AI-Powered Open-Sourc
   Astro.props;
 const canonicalURL = new URL(Astro.url.pathname, Astro.site);
 const siteURL = 'https://libredb.org';
+const studioVersion = await getStudioVersion();
 
 // Structured Data for SEO — WebApplication
 const webAppSchema = {
@@ -26,7 +29,7 @@ const webAppSchema = {
   browserRequirements: 'Requires a modern web browser (Chrome, Firefox, Safari, Edge)',
   description: description,
   url: siteURL,
-  softwareVersion: '0.8.2',
+  softwareVersion: studioVersion,
   isAccessibleForFree: true,
   offers: {
     '@type': 'Offer',
@@ -38,7 +41,7 @@ const webAppSchema = {
   license: 'https://opensource.org/licenses/MIT',
   featureList: [
     'AI-Powered NL2SQL',
-    'Multi-Database Support (PostgreSQL, MySQL, Oracle, SQL Server, SQLite, MongoDB, Redis)',
+    `Multi-Database Support (${ENGINES.join(', ')})`,
     'Visual EXPLAIN Plans',
     'Interactive ER Diagrams',
     'Data Masking & Privacy',
@@ -49,8 +52,7 @@ const webAppSchema = {
     'Mobile-First Responsive Design',
   ],
   screenshot: 'https://libredb.org/og-image.png',
-  keywords:
-    'SQL IDE, database editor, PostgreSQL, MySQL, Oracle, SQL Server, SQLite, MongoDB, Redis, AI SQL, open source, web-based database tool',
+  keywords: ['SQL IDE', 'database editor', ...ENGINES, 'AI SQL', 'open source', 'web-based database tool'].join(', '),
 };
 
 // Organization Schema
@@ -61,7 +63,14 @@ const organizationSchema = {
   name: 'LibreDB',
   url: siteURL,
   logo: 'https://libredb.org/logo.svg',
-  sameAs: ['https://github.com/libredb/libredb-studio', 'https://www.linkedin.com/company/libredb'],
+  sameAs: [
+    'https://github.com/libredb/libredb-studio',
+    'https://www.linkedin.com/company/libredb',
+    'https://x.com/libredb',
+    'https://www.youtube.com/@libredb',
+    'https://www.instagram.com/libredb/',
+    'https://www.reddit.com/r/libredb/',
+  ],
 };
 
 // WebSite Schema (for Google Sitelinks)
diff --git a/src/lib/studio-version.test.ts b/src/lib/studio-version.test.ts
new file mode 100644
index 0000000..88cf7d6
--- /dev/null
+++ b/src/lib/studio-version.test.ts
@@ -0,0 +1,30 @@
+import { test, expect } from 'bun:test';
+import { pickLatestStudioVersion, FALLBACK_STUDIO_VERSION } from './studio-version';
+
+test('picks the newest bare-semver app release', () => {
+  const releases = [
+    { tag_name: '0.9.57', draft: false, prerelease: false },
+    { tag_name: '0.9.56', draft: false, prerelease: false },
+  ];
+  expect(pickLatestStudioVersion(releases)).toBe('0.9.57');
+});
+
+test('skips chart releases, drafts, prereleases, and moving tags', () => {
+  const releases = [
+    { tag_name: 'libredb-studio-chart-0.1.16', draft: false, prerelease: false },
+    { tag_name: '1.0.0', draft: true, prerelease: false },
+    { tag_name: '0.10.0-rc.1', draft: false, prerelease: false },
+    { tag_name: 'main', draft: false, prerelease: true },
+    { tag_name: '0.9.56', draft: false, prerelease: false },
+  ];
+  expect(pickLatestStudioVersion(releases)).toBe('0.9.56');
+});
+
+test('returns null when no bare-semver release exists', () => {
+  expect(pickLatestStudioVersion([{ tag_name: 'libredb-studio-chart-0.1.16' }])).toBeNull();
+  expect(pickLatestStudioVersion([])).toBeNull();
+});
+
+test('fallback version is itself bare semver', () => {
+  expect(FALLBACK_STUDIO_VERSION).toMatch(/^\d+\.\d+\.\d+$/);
+});
diff --git a/src/lib/studio-version.ts b/src/lib/studio-version.ts
new file mode 100644
index 0000000..fa642cb
--- /dev/null
+++ b/src/lib/studio-version.ts
@@ -0,0 +1,48 @@
+/**
+ * Latest LibreDB Studio version, fetched from GitHub releases at build time.
+ * The studio repo cuts two release tracks: app releases tagged as bare semver
+ * ("0.9.56") and Helm chart releases with prefixed tags — only bare-semver
+ * tags count. Any failure falls back to FALLBACK_STUDIO_VERSION so an
+ * offline/rate-limited build still renders a plausible number.
+ */
+export const FALLBACK_STUDIO_VERSION = '0.9.56';
+
+interface ReleaseLike {
+  tag_name?: string;
+  draft?: boolean;
+  prerelease?: boolean;
+}
+
+/** First published bare-semver tag wins (the releases API returns newest first). */
+export function pickLatestStudioVersion(releases: ReleaseLike[]): string | null {
+  for (const r of releases) {
+    if (r.draft || r.prerelease) continue;
+    const tag = r.tag_name ?? '';
+    if (/^\d+\.\d+\.\d+$/.test(tag)) return tag;
+  }
+  return null;
+}
+
+async function fetchStudioVersion(): Promise<string> {
+  try {
+    // per_page=30 comfortably covers interleaved chart releases; the timeout
+    // keeps a slow/blocked network from hanging the static build.
+    const res = await fetch('https://api.github.com/repos/libredb/libredb-studio/releases?per_page=30', {
+      headers: { Accept: 'application/vnd.github+json', 'User-Agent': 'libredb-website' },
+      signal: AbortSignal.timeout(10_000),
+    });
+    if (!res.ok) throw new Error(`status ${res.status}`);
+    const releases = (await res.json()) as ReleaseLike[];
+    return pickLatestStudioVersion(releases) ?? FALLBACK_STUDIO_VERSION;
+  } catch {
+    return FALLBACK_STUDIO_VERSION;
+  }
+}
+
+let cached: Promise<string> | null = null;
+
+/** Memoized per build — every component shares one API call. */
+export function getStudioVersion(): Promise<string> {
+  cached ??= fetchStudioVersion();
+  return cached;
+}
diff --git a/src/pages/[section].astro b/src/pages/[section].astro
index c507d04..2eff7c4 100644
--- a/src/pages/[section].astro
+++ b/src/pages/[section].astro
@@ -12,6 +12,7 @@ import CompareSection from '../components/sections/CompareSection.astro';
 import TechStackSection from '../components/sections/TechStackSection.astro';
 import GetStartedSection from '../components/sections/GetStartedSection.astro';
 import FaqSection from '../components/sections/FaqSection.astro';
+import SecuritySection from '../components/sections/SecuritySection.astro';
 import DeploySection from '../components/sections/DeploySection.astro';
 import DockerComposeSection from '../components/sections/DockerComposeSection.astro';
 import DatabaseSection from '../components/sections/DatabaseSection.astro';
@@ -33,6 +34,7 @@ const COMPONENTS: Record<string, any> = {
   tech_stack: TechStackSection,
   get_started: GetStartedSection,
   faq: FaqSection,
+  security: SecuritySection,
   deploy: DeploySection,
   docker_compose: DockerComposeSection,
   database: DatabaseSection,