Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.hackgate.io/llms.txt

Use this file to discover all available pages before exploring further.

A HackGATE is a dedicated reverse proxy instance that fronts one of your web applications. Instead of sharing your real URL with security researchers, you share the *.hackgate.net proxy URL — and HackGATE gives you full control over who accesses it, when, and what they can do.

How it works

When you create a HackGATE, it provisions a unique subdomain like example-yourorg.hackgate.net. Researchers send all requests through this URL; HackGATE forwards them to your origin transparently. You can stop, restart, and schedule the proxy without touching your origin.

HackGATE fields

FieldDescription
Origin URLYour real application URL. Never shared with researchers.
HackGATEd URLThe *.hackgate.net proxy URL shared with researchers.
ActiveWhether the proxy is currently forwarding traffic.
Deployment in progressTrue while the proxy is being provisioned.
Start dateScheduled time to automatically enable the proxy.
Stop dateScheduled time to automatically disable the proxy.
InstructionsTesting guidance visible to researchers.
CredentialsTest credentials provided to researchers.
Rate limitRate limiter policy applied to the proxy.
Block listPath-level block rules for out-of-scope endpoints.

Next steps

Create a HackGATE

Provision a new proxy for your web application.

Enable and disable

Manually activate or deactivate a HackGATE at any time.

Scheduling

Automatically start and stop testing windows on a schedule.
Last modified on May 9, 2026