Live defense panel
One color-coded screen — green calm, amber stress, red under attack. Watch a metric spike and the containment ladder drop it back down in real time.
Every attack, however clever, eventually has to burn CPU, fill a disk, or move bytes out. Cordon watches for exactly that — and contains it in seconds.
Cordon is a reflex, not a brain. It doesn't out-think the attacker at the door — it assumes the door is already open, and reads the one thing no attacker can hide: the load they put on real hardware.
A dependency-free agent snapshots CPU, memory, disk, I/O, processes and network every few seconds — plus file entropy, auth failures and kernel surface — and evaluates your thresholds on the box itself.
Containment never waits on a round-trip.On red, reversible containment fires automatically: snapshot the evidence, freeze the process, sever its network, lock the data it's rewriting, and camouflage your crown jewels behind decoys.
Nothing destroyed — every step is reversible.Killing a process or taking a box down is held for a one-click approval down your escalation path. Every signal and action lands in a hash-chained, off-host black box.
Tampering is detectable — even from inside the DB.One color-coded screen — green calm, amber stress, red under attack. Watch a metric spike and the containment ladder drop it back down in real time.
Rehearse the real thing without risk. Six scenarios drive the real engine — real incident, real audit, exact commands — and nothing is actually killed.
Author a protection script once; drop its installer on any number of servers. Each one self-registers, reporting hostname, IP, OS and kernel.
Company → teams → members. Only responders and up can approve. Incidents climb an escalation path until someone acknowledges.
Append-only, hash-chained, off-host. Verify integrity in one click — because the first thing a real attacker does is erase the logs.
Static thresholds out of the box; switch on learned baselines to catch the low-and-slow — and it refuses to be taught the attack.
Cordon meets each one where it lands — on the hardware — with a playbook of reversible moves and a gated last resort.
A false positive costs you a frozen process, not an outage.
Local evaluation works when the network is cut; the record lives off-host.
If the control plane goes dark — which may be the attack — the agent alerts a human directly.
Hide what the attacker came for, and turn their next move into a tripwire.
One script per server, or a DaemonSet for your cluster.
Static thresholds you can read, and exact commands in every log line.
Four minutes of encryption, or four seconds and a frozen process. A quiet overnight miner, or a page at 2:03 a.m. with the offender already contained. A cover-up, or a signed, unbroken record of exactly what happened.