🚨 Break glass
Emergency privileged access — for when an incident can't wait for a normal access review. You can break the glass. You cannot do it quietly, and it reseals itself.
Five controls, every one enforced server-side: a mandatory written justification, a fresh second-factor proof (if you have TOTP enrolled), a strict time box that auto-expires, a high-severity SOC alert the instant you activate, and an audit row for every privileged read while the glass is broken. Production systems often also require a second human approver (dual control) — this sandbox simplifies that to self-service-with-a-loud-alert.
Break the glass
0/500
Privileged vault
glass intact
No active grant — this data stays locked until you break the glass above.