Lock compromised endpoints and notify on-call before SLAs lapse

Your device lock requests arrive as webhooks, causing delayed containment and increased security exposure. IT on-call gets lock confirmation and passcode so incidents close before SLAs lapse.