Origins

Some apps serve hundreds of sites: a website builder, an auction platform, a white-label product. Adding each domain by hand doesn't scale.

One backend, many sites

An origin is one backend. Point any number of hostnames at it, and they're all protected with the same rules and gym. The origin's settings (timeout, host header, forwarded-host headers, protection mode) are copied to every site, and a site can still keep a protection mode of its own.

Your app vouches for new domains

When a new hostname turns up, the edge asks your app whether it's yours. If it is, the site is added and its certificate issued on the spot. If not, nothing happens, and the name never gets a certificate.

Sites grouped by parent domain

Sites are grouped by the domain they sit under, so you can turn www off for one group and leave it on for the rest. A www name is folded into its bare name, history and all, by hand or every hour.

Works with Lockdown

With the free Lockdown add-on you can lock an origin's whole pool at once, including sites that join it later.