diff --git a/assets/screenshots/aws-tracker.png b/assets/screenshots/aws-tracker.png
index 017e3cc..4a378b4 100644
Binary files a/assets/screenshots/aws-tracker.png and b/assets/screenshots/aws-tracker.png differ
diff --git a/index.html b/index.html
index b2e0c5e..bfdd8a0 100644
--- a/index.html
+++ b/index.html
@@ -152,9 +152,10 @@
             <div class="body">
               <h3>AWS Cloud Study Tracker</h3>
               <p>
-                A serverless AWS application built with Amplify, API Gateway,
-                Lambda, DynamoDB, and IAM. The public portfolio view is read-only
-                while authenticated write access is the next backend hardening step.
+                A multi-user serverless AWS study tracker using Cognito, API Gateway,
+                Lambda, DynamoDB, and Amplify. Public demo topics remain readable
+                without an account, while signed-in users get private CRUD access
+                protected by JWT authorization and per-record ownership checks.
               </p>
               <a class="view-link" href="https://tracker.casko.dev" rel="noopener">View Live Site</a>
             </div>