API keys that are yours, and account keys for CI
Your API keys are now yours and work in all your accounts. Account keys belong to the account, act with the role you pick and keep working when people leave.
-
-
Custom domains behind Cloudflare, including the root of your domain
Add a single hostname, even your bare domain, at any DNS host. Point it to ngris with one record, keep Cloudflare's proxy on, and ngris handles its HTTPS.
-
Git deploys: deploy hooks, cancel a build, skip rules, GitHub statuses
Rebuild from your CMS with a deploy hook, cancel a build you don't want, skip pushes by commit message or changed files, and see every build on its commit.
-
Connections per visitor IP: one address can't take a whole tunnel
Every visitor IP gets its own share of a tunnel's connections, so one client opening connection after connection can't lock everyone else out.
-
Client certificates for mTLS, without running your own CA
Create a certificate authority in ngris, issue a certificate for each device and revoke a lost one. Endpoints let in only the devices you trust.
-
Sign-in protection: known devices and sign-in methods in your log
Password guessing against your account no longer stops the browser you use. And each sign-in in your Activity log says how it was made: password, SSO and MFA.
-
Check webhook signatures at the edge, before deliveries reach you
The Verify webhook rule refuses deliveries without a valid signature at the edge, so forged events never reach your server. Its secret is never shown again.
-
Signed visitor identity for endpoints behind single sign-on
After someone signs in at the edge, each request your app gets carries a token signed by ngris that names them and their roles. Your app can verify it.
-
Iris chips: one click from a finding to an answer
Dashboard pages now point out what stands out in your data, like one IP making most requests. One click sends Iris the facts and gets you an answer.
-
Challenge bots without dropping out of search
Under attack mode checks each visitor's browser and stops scripts, while verified search engines and AI crawlers keep reaching your site.
