Nginx Control Plane

A look inside the platform

Real product UI with demo data — dark theme shown, a light theme is built in. Click any screenshot to enlarge it. Want to see it live? Book a demo.

Company overview
Company overview — one tile per customer with a live gateway and on-prem node status dot. The morning health check for your whole book of business, at a glance.
Per-company dashboard
Per-company dashboard you arrange yourself — counters, TLS/certificate-status donuts, certificate-expiry timelines and live host metrics (CPU, memory, disk, network), as drag-and-drop widgets across multiple boards.
Proxy hosts
Proxy hosts — domain(s) → upstream with forced TLS, HSTS, HTTP/2, WebSockets and caching. Add a per-host nginx snippet or switch to full manual mode.
Websites health check
Websites — every proxy host as a tile with a live health check: status, response time and HTTP code, with a configurable check (method, path, expected codes/text/headers, TLS verify) per host.
Per-host access-log statistics
Website statistics — per-host analysis of the nginx access log over any period: requests, visitors, bytes, top paths and IPs, status codes, browsers/OS, referrers and bots, exportable to CSV, JSON or PDF.
TLS certificates
Certificates — Let's Encrypt / ACME issued automatically and renewed before expiry, or your own uploaded PEM. Status, issuer and expiry at a glance, with the full issuance log per certificate.
ACME accounts
ACME accounts — Let's Encrypt, ZeroSSL, Google Trust Services or Buypass, with a contact e-mail, CA directory, optional proxy and External Account Binding (EAB).
DNS credentials
DNS credentials — per-provider API credentials for DNS-01 (200+ providers via lego), encrypted at rest, for wildcard certificates and closed-port-80 setups.
Access lists
Access lists — protect any proxy host with Basic-Auth (htpasswd), real LDAP / Active Directory login (optional group DN) or IP allow/deny rules.
TCP/UDP streams
Streams — raw TCP/UDP forwarding: an ingress port to a target host:port, for everything that isn't HTTP.
Redirects
Redirects — domain(s) to a target URL with any HTTP status (301/302/…) and optional path preservation.
Maintenance pages
Maintenance & error pages — a branded page served when an upstream is down (502/503/504) or a host is in maintenance, with built-in animated templates and a live HTML preview.
nginx access & error logs
Logs — the per-host nginx access and error logs, one click away, so a 502 gets an answer instead of guesswork.
Audit log
Audit log — every security-relevant action recorded: certificate key reveals, host and access-list changes, user changes, sign-ins.
User management
User management — per-company roles (admin / operator / viewer), LDAP-provisioned accounts, MFA status and e-mail invitations.
Sign-in
Sign-in with your white-label branding — MFA (TOTP), passkeys and LDAP / Active Directory included.

Book a demo