Perimeter

The identity of Perimeter.

A cool night-slate surface, watched over by a single amber beacon. Built to feel like an instrument for people who run their own infrastructure — precise, calm, and honest about what it can see.

02

Colour

Two scales carry the brand: a cool ink slate for surfaces and text, and an amber beacon for the single point of attention. Every text pairing below is verified to WCAG AA.

Ink — neutral / night slate

ink-50#F7F8FA
ink-100#E7EBEF
ink-200#CDD5DD
ink-300#A9B6C2
ink-400#8494A2
ink-500#5C6B79
ink-600#47535F
ink-700#37414B
ink-800#262D35
ink-900#151A20
ink-950#0E1216

Amber — beacon / primary

amber-50#FDF6EC
amber-100#FAE9CC
amber-200#F5D399
amber-300#F0B85C
amber-400#E79E36
amber-500#D9861C
amber-600#B96E12
amber-700#9A5A0E
amber-800#7A4712
amber-900#653C14
amber-950#3A2009

Semantic status — the four alert registers

New subdomainstaging.acme.dev · info
Domain verifiedacme.dev · ok
Certificate expiringexpires in 6 days · warn
Lookalike registeredacme-support.com · critical
03

Type

Space Grotesk gives the brand its engineered voice; General Sans is the neutral reading surface; JetBrains Mono is the instrument readout for every hostname, serial and DNS record.

DISPLAY · Space Grotesk 600headlines, wordmark
Everything the internet already knows.

Perimeter Aa

Watching the edge

Passive, public, precise

BODY · General Sans 400paragraphs, UI
A forgotten staging. subdomain quietly gets a certificate and becomes discoverable. A cert lapses at 3am. Someone registers a lookalike to phish your customers. Perimeter tells you the hour it happens — nothing more, nothing you have to babysit.
AaBbCc 0123456789 & @ % — “quote” →
MONO · JetBrains Monodata, labels, code
acme.dev verified api.acme.dev A 203.0.113.42 staging.acme.dev CT-logged NEW _perimeter.acme.dev TXT perimeter-verify=8f3a… cert not_after 2026-09-03 (6d)
04

Icons

One stroke language across the set — 1.75px, rounded, drawn on the same grid as the mark. Each maps to a real signal or delivery channel in the product.

Passive sweep
Passive sweep
radar
New subdomain
New subdomain
subdomain
TLS certificate
TLS certificate
certificate
Cert expiry
Cert expiry
clock
DNS baseline
DNS baseline
dns
DNS drift
DNS drift
drift
Lookalike domain
Lookalike domain
lookalike
Verified domain
Verified domain
shield-check
Alert fired
Alert fired
bell
Apex domain
Apex domain
globe
Email delivery
Email delivery
mail
Webhook delivery
Webhook delivery
webhook
05

Voice

How Perimeter talks: like a competent peer who runs their own box, not a vendor selling fear.

  • Plain-spoken
  • Vigilant
  • Unshowy

Say exactly what changed and what to do about it: “A new certificate for staging.acme.dev appeared 20 minutes ago. If that isn't yours, here's how to check.”

Manufacture panic, pad with security theatre, or imply we scan or attack anything — every signal is public data.

Who we're talking to

A technical solo founder or a 2–5 person dev shop running their product on a single Caddy + systemd VPS — sharp enough to worry about exposure, without a security team or an enterprise budget to do anything about it.

06

Components

The primitives every later screen is built from, rendered from the tokens above.

Buttons & input

Signal chips

staging.acme.dev NEW acme-support.com LOOKALIKE TLS expires in 6d
07

Social card

The 1200×630 share image — composed entirely in SVG and rasterised locally from the self-hosted fonts.

Perimeter social card