Site lockdown
A lock-only circuit breaker for your own web server: an agent you install writes a flag file your reverse proxy reads, and every visitor but one allow-listed operator address gets a static 503 instead of your site.
What people come here for
Lock only, never auto-release
Engaged by your command or by a critical alert on that host, and released only by you — the Release command, or an rm of the flag file over SSH. Nothing reopens your site on its own.
Full definition →Your proxy does the serving
The agent's whole job is to write a flag file. Serving the read-only page is your own reverse proxy's work, which is why the lock survives the agent being killed.
Full definition →One address still gets in
The allow-listed operator address keeps reaching the server, so you can go and look at the machine you have just locked.
Full definition →What this does not do
This one is marked in observation until it has been rehearsed on a real customer server. Rehearsing it on ours does not count, and it is not billed as delivered until it has been.
Everything this product does not do →