Context
Path.net is a DDoS-mitigation provider that resellers buy and pass on to their own customers. The catch: Path gives each reseller a single superadmin panel, where everyone who logs in sees and controls everything: there is no separation between customers.
Blinkoh, LLC, a Path.net reseller, wanted to hand their VPS and bare metalcustomers real control over their own protection without exposing every other customer's configuration in the process.
Problem
A single all-or-nothing login cannot safely be handed to customers. Blinkoh needed per-customer scoping, role-based permissions, and an audit trail layered on top of Path's API, and it had to fit how they already provisioned and billed services.
Approach
Soteria sits on top of Path.net's API as a multi-tenant control panel. A customer manages only their own firewall rules, Layer 7 application filters, and rate limiters (network-wide or per service), and never sees anyone else's setup.
A VirtFusion integration fetches and manages each customer's provisioned services automatically, so nothing has to be wired up by hand. Customers sign in through WHMCS single sign-on; admins sign in through Google Workspace. Granular permissions decide who can touch what, and every action is written to an audit log for accountability.
A real-time dashboard surfaces service status, active protections, and traffic patterns, with email alerts when something looks abnormal.
Outcome
Soteria gave Blinkoh's customers the agency Path's own panel never allowed: self-service DDoS mitigation with tenant isolation and a permanent audit trail. The panel ran for Blinkoh until the company wound down.