Every site has one link and a set of controls that decide who gets in. Change them any time from the site's settings, without republishing or breaking the link.
On a private site you keep an allowlist. Add exact addresses like jane@acme.com, or allow a whole company at once with a wildcard like *@acme.com. Add and remove people at any time.
Protect any site with a password. It is stored securely and never shown back to you. A password can gate a public site on its own, or add a second check on top of an allowlist.
Give a link a deadline. After the date you set, the link stops working. Clear the deadline to make it permanent again. Sites show whether a link is active, expiring soon, or expired, so nothing lingers longer than you intended.
When someone who is not on the allowlist opens a private site, they can ask for access. The request shows up for you, and you can approve it (which adds them to the allowlist) or turn it down.
You can take a site offline without deleting it, then bring it back later. The site, its content, and all its settings are kept. Only the link is switched off while it is offline.
Every request, verification, view, and denial is recorded, so you always have a history of who reached a site and when. See how Thryvate keeps sites private for how delivery is protected. Everything on this page can also be done by your AI assistant or over the API.