The Control Plane for Links
Programmable, trust-scored, policy-bound links for modern internet infrastructure.
Links as governed objects
A control plane treats links as first-class infrastructure—not just redirects.
- Lifecycle management. Create, update, pause, expire, and delete links through a consistent interface.
- Pre-click inspection. Analyze destination URLs before users click. Redirect chains are visible.
- Deterministic trust scores. Every link has a trust score from 0.0 to 1.0, computed from destination signals.
- Policy enforcement. Apply rules that govern when, where, and how links can be accessed.
- Full auditability. Every action is logged with actor, action, target, and timestamp.
Security properties
Specific, verifiable security controls. Not marketing claims.
Authentication
- Email and password
- OAuth (Google, GitHub, Microsoft)
- Two-factor authentication (TOTP)
Cryptography
- PBKDF2 password hashing
- AES-256-GCM secret encryption
- HMAC-SHA256 webhook signatures
Authorization
- Role-based access control
- Scoped API keys
- Resource-level ownership validation
Rate limiting
- Per-endpoint limits
- Per-IP limits
- Fail-closed enforcement
Policy engine
Define rules that govern link access. Enforce them consistently.
Access restrictions
- Time-based access windows
- Geographic restrictions
- Device-type restrictions
Domain controls
- Domain allowlists
- Domain blocklists
- Destination availability checks
Link protection
- Password protection
- Email allowlists
- CAPTCHA (Cloudflare Turnstile)
Immediate actions
- Kill switches
- Redirect chain analysis
- Session-based access cookies
Growth tools
Experimentation without compromising control.
A/B testing
- Traffic splitting
- Multiple variants per link
- Share-level analytics
Bio pages
- Custom domains
- Link collections
- Theme customization
Attribution
- UTM parameter support
- QR code generation
- Native share API support
Distribution
- Social sharing
- SVG and PNG export
- Bulk link creation
Platform and APIs
Build on LnkApp. Integrate with existing systems.
REST API
- Versioned endpoints (/v1)
- Scoped API key authentication
- Bulk creation and export
Webhooks
- Event-driven triggers
- Signature verification
- Retry with exponential backoff
- Dead-letter handling
Organizations
- Team management
- Role-based permissions
- Organization settings
Custom domains
- Bring your own domain
- Automated SSL provisioning
- DNS verification (CNAME, TXT)
Operational readiness
Infrastructure properties for production workloads.
Audit
- Append-only audit logs
- Full event attribution
- Exportable records
Data management
- Data retention policies
- Soft delete with recovery
- Encrypted secret storage
Reliability
- Multi-region redundancy
- Automatic failover
- Zero-downtime deployments
Administration
- Admin approval workflows
- Request ID correlation