All modules

Auto-protect

Killswitch

  • Works with
  • GCP

A hard cap, by project or by service

Killswitch is the hard budget cap GCP still leaves as opt-in plumbing. Auto-Protect enforces your threshold on any project: detach billing for a full project-wide stop, or surgically halt the high-cost services that cause runaway bills (BigQuery, Cloud Run, Gemini Enterprise Agent Platform and more), resources left intact. Re-enable in one click after review. The single feature that could have prevented the $72,000 overnight invoice.

  • Per-project control
    Toggle Auto-Protect on per project. Mission-critical can stay off.
  • Configurable threshold
    120%, 150%, 200% of budget. Choose the right buffer for the workload.
  • Automatic enforcement
    Cross the line and Pulse caps spend: a full billing detach or a surgical per-service stop. No human in the loop.
  • One-click re-enable
    After review, restore billing in one click. You stay in control.

Walkthrough

Inside Killswitch.

Per-project protection, and exactly what happens the moment a threshold is crossed.

The bills that blow up overnight
Two line items cause most surprise GCP invoices, and a budget alert stops neither.
Agent Platform runaway
$14,400

An 8×A100 training job left running over a single weekend, and forgotten endpoints bill 24/7.

BigQuery runaway
$6.25 / TiB

One un-partitioned query, re-run on every dashboard refresh, scans terabytes. Thousands by lunch.

With Zenta, set Killswitch on both. Cap Agent Platform and BigQuery at a budget you choose, so unexpected spikes like these never reach your invoice.

Auto-Protect
Service-level protection lives inside each project
acme-mlops
budget $300.00 · cuts billing at 150% ($450.00)
Service-level protection · resources intact
Agent Platform
stops at $250 service budget
BigQuery
stops at $150 service budget
Cloud Run
no budget, uses project threshold
acme-prod
budget $700.00 · cuts billing at 120% default ($840.00)
How It Caps
Budgets alert. Pulse acts in two ways.
Project-levelHard stop

Cross the project threshold and Pulse calls the GCP Billing API to detach the billing account, and every service in the project stops incurring cost at once.

Best for sandboxes and non-production.

Service-levelSurgical

Give a single service its own budget. Cross it and Pulse stops just that service (cancels BigQuery jobs, pauses Agent Platform endpoints) while the rest of the project keeps running.

Resources stay intact; nothing is deleted.

One-click re-enable after review
What Happens at the Threshold
01
Threshold crossed
Spend hits your cap, e.g. 150% of budget
02
Spend stopped
Billing detached, or the service halted
03
Team notified
Email + chat with full context
04
Reviewed & re-enabled
One click brings the project back

The full experience

The full Killswitch tour.

What you see below is a preview. Share your details and we'll email you a private link to the full interactive tour of Killswitch: every module, click-through, at your own pace.

Interactive product tour

Take the Killswitch tour yourself

An interactive, click-through tour of every Killswitch module. Explore at your own pace. Drop your details and we'll email you a private link. No call required. (Prefer a live walkthrough with an engineer? Book a guided demo.)

We'll email you a private link to the interactive product tour.
  • No call required
  • Explore at your own pace
  • All the modules

Why this exists

“Budgets do not automatically prevent the use or billing of your services.”

Google Cloud Documentation, verbatim

/01
The gap

Budget alerts are postcards, not stop-signs.

GCP budget alerts are informational: emails after the fact. Native caps are arriving, but only in limited preview for a handful of services. A leaked API key, a runaway Cloud Run scaling event, a $7 budget test that compounds overnight to $72,000. An alert stops none of them.

/02
The fix

Cap first. Notify second. Restore on review.

When threshold is crossed, Pulse detaches the project's billing account, or halts just the offending service with resources left intact, then fires an email + Slack notification and waits for a human to re-enable. The meter stops within seconds of the data reporting the breach.

/03
Never an outage

Per-project, with surgical precision.

Production stays unprotected if you want it to. Sandbox accounts get a hard cap. The toggle is yours: per project, per service, per threshold, decided by your team.

Live walkthrough

See Pulse in action,
today!

We walk you through every Pulse module (BillPulse, AIPulse, SecureMonitor, Ollie, Killswitch) on a representative cloud and AI environment loaded with realistic data, together with one of our cloud experts. About 30 minutes.

No spam, no drip campaign. One reply within a business day.
Or explore all the modules

What you'll see in the demo

  • 01Daily cost intelligence for GCP, AWS, and Azure, with OpenAI and Claude API spend by model and workspace alongside.
  • 02Severity-ranked GCP security findings with the matching AI remediation plan one click away.
  • 03Ollie answering plain-English questions about a realistic multi-cloud environment, with sources.
hello@zenta.ai~24h reply
Free Cloud Security AssessmentSeparate offering

A one-off, no-charge audit that surfaces critical SCC findings in your GCP, a complimentary service to help teams understand their security gaps before adopting Pulse.

Request your free assessment