All modules

Auto-protect

Killswitch

A hard cap, by project or by service

Killswitch is the hard budget cap GCP still leaves as opt-in plumbing. Auto-Protect enforces your threshold on any project — detach billing for a full project-wide stop, or surgically halt the high-cost services that cause runaway bills (BigQuery, Cloud Run, Vertex AI and more), resources left intact. Re-enable in one click after review. The single feature that could have prevented the $72,000 overnight invoice.

  • Per-project control
    Toggle Auto-Protect on per project. Mission-critical can stay off.
  • Configurable threshold
    120%, 150%, 200% of budget — choose the right buffer for the workload.
  • Automatic enforcement
    Cross the line and Pulse caps spend — a full billing detach or a surgical per-service stop. No human in the loop.
  • One-click re-enable
    After review, restore billing in one click. You stay in control.

Walkthrough

Inside Killswitch.

Per-project protection — and exactly what happens the moment a threshold is crossed.

The bills that blow up overnight
Two line items cause most surprise GCP invoices — and a budget alert stops neither.
Vertex AI runaway
$14,400

An 8×A100 training job left running over a single weekend — and forgotten endpoints bill 24/7.

BigQuery runaway
$6.25 / TiB

One un-partitioned query, re-run on every dashboard refresh, scans terabytes — thousands by lunch.

With Zenta, set Killswitch on both. Cap Vertex AI and BigQuery at a budget you choose — so unexpected spikes like these never reach your invoice.

Auto-Protect
Service-level protection lives inside each project
acme-mlops
budget $300.00 · cuts billing at 150% — $450.00
Service-level protection · resources intact
Vertex AI
stops at $250 service budget
BigQuery
stops at $150 service budget
Cloud Run
no budget — uses project threshold
acme-prod
budget $700.00 · cuts billing at 120% (default) — $840.00
How It Caps
Budgets alert. Pulse acts — two ways.
Project-levelHard stop

Cross the project threshold and Pulse calls the GCP Billing API to detach the billing account — every service in the project stops incurring cost at once.

Best for sandboxes and non-production.

Service-levelSurgical

Give a single service its own budget. Cross it and Pulse stops just that service — cancels BigQuery jobs, pauses Vertex AI endpoints — while the rest of the project keeps running.

Resources stay intact; nothing is deleted.

One-click re-enable after review
What Happens at the Threshold
01
Threshold crossed
Spend hits your cap, e.g. 150% of budget
02
Spend stopped
Billing detached, or the service halted
03
Team notified
Email + chat with full context
04
Reviewed & re-enabled
One click brings the project back

The full experience

The full Killswitch tour.

What you see below is a preview. Share your details and we'll email you a private link to the full interactive tour of Killswitch — every module, click-through, at your own pace.

Interactive product tour

Take the Killswitch tour yourself

An interactive, click-through tour of every Killswitch module — explore at your own pace. Drop your details and we'll email you a private link. No call required. (Prefer a live walkthrough with an engineer? Book a guided demo.)

We'll email you a private link to the interactive product tour.
  • No call required
  • Explore at your own pace
  • All the modules

Why this exists

Budgets do not automatically prevent the use or billing of your services.

Google Cloud Documentation, verbatim

/01
The gap

Budget alerts are postcards, not stop-signs.

GCP budget alerts are informational — emails after the fact. Native caps are arriving, but only in limited preview for a handful of services. A leaked API key, a runaway Cloud Run scaling event, a $7 budget test that compounds overnight to $72,000 — an alert stops none of them.

/02
The fix

Cap first. Notify second. Restore on review.

When threshold is crossed, Pulse detaches the project's billing account — or halts just the offending service, resources left intact — then fires an email + Slack notification and waits for a human to re-enable. The meter stops within seconds of the data reporting the breach.

/03
Never an outage

Per-project, with surgical precision.

Production stays unprotected if you want it to. Sandbox accounts get a hard cap. The toggle is yours — per project, per service, per threshold, decided by your team.

Live walkthrough

See Pulse in action,
today!

We walk you through every Pulse module — BillPulse, SecureMonitor, PulseArc, Ollie, Killswitch — on a representative GCP environment loaded with realistic data, together with a certified engineer from the D3V team. About 30 minutes.

No spam, no drip campaign — one reply within a business day.
Or explore all the modules

What you'll see in the demo

  • 01Daily cost intelligence — daily run-rate, monthly forecast, and gross-vs-net at the project grain.
  • 02Severity-ranked SCC findings with the matching AI remediation plan one click away.
  • 03An interactive PulseArc map of resources with security overlay — a live document, not a drawing.
  • 04Ollie answering plain-English questions about a realistic GCP environment, with sources.
hello@zenta.ai~24h reply
Free Cloud Security AssessmentSeparate offering

A one-off, no-charge audit that surfaces critical SCC findings in your GCP — a complimentary service from D3V to help teams understand their security gaps before adopting Pulse.

Get in touch