Break-Glass Controls

Freeze all SSH access across your team in an emergency.

Break-Glass Controls

Break-glass is an emergency mechanism that immediately freezes all SSH key deployments for your team.

Activating Break-Glass

  1. Navigate to Security → Break-Glass
  2. Enter a reason for activation
  3. Confirm activation

What Happens

  • All authorized_keys files across all hosts are emptied on the next sync cycle
  • No new key assignments can be created
  • Existing assignments are preserved but not enforced

Deactivating

Only team Owners and Admins can deactivate break-glass. Normal key enforcement resumes immediately after deactivation.

Audit Trail

Every break-glass activation and deactivation is recorded in the audit log with the actor, timestamp, and reason.