Launchpad Firewall: IP & Path Rules

Block IPs and CIDR ranges, create path rules, verify Googlebot traffic, and password-protect preview URLs to secure your Launchpad project.

Each project has a Firewall tab covering the traffic-protection features Launchpad supports today.

Traffic dashboard

See a real-time summary of the last 24 hours of traffic to your project: allowed, denied, and logged request counts, plus a bot-traffic breakdown -- known-good crawlers (Googlebot, Bingbot, GPTBot, and other recognized crawlers), verified Googlebot (confirmed via real reverse-DNS lookup against Google's own published verification method, not just a spoofable user-agent string), and other bot-like traffic. You can also see your top IPs, top user agents, and top request paths.

IP blocking

Block specific IP addresses or CIDR ranges from reaching your project entirely.

Path rules

Create rules to either log or deny requests matching a specific path pattern -- useful for blocking known attack paths (e.g. /wp-admin) or quietly monitoring suspicious activity without blocking it outright.

Deployment protection

Password-protect your preview and branch-deploy URLs so only people with the password can view them (see Environments & Branch Deploys). Production is never affected.

Plan limits

Firewall rule counts scale with your plan: Personal (3 IP / 3 path rules per project), Pro (20/20), Team/Agency (40/40).