Your agents deploy, move money, touch production. Every call that routes through OwnerSwitch is checked against live policy and kill state, fail-closed, held by the real owner.
One press to stop. Two GOs to start.
Kill signal to the gateway's next policy check: ~1 ms, measured locally. Fail-closed by default.
Tripwires and the red button. Honeytoken touched or switch pressed — sessions frozen, every call denied at the gate. Seconds, not meetings.
Risky moves wait for you. Medium-risk actions hold for a few minutes. One tap on your phone stops them. Silence lets them through.
Critical ops never run alone. Money, deletion, production keys — default deny until your passkey says yes. No passkey, no action.
The red button, the tripwires, fail-closed kill on every routed call. The safety layer is free — for everyone, always. No card, no seat limit.
The 2GO restore ceremony — two GOs, a passkey and a cooldown to turn a stopped fleet back on — plus owner approvals, veto windows, and a shared audit trail. Stopping stays free even if you never pay us; restarting is the product. Priced per owner when we open it up.
SSO, on-prem control plane, custom policy, incident support, and hardware kill switches on the desk. Built with design partners.
The private beta opens in waves. Leave your email — we'll send an invite.
Restoring takes the owner. Only the owner.