diff --git a/apps/status/src/index.ts b/apps/status/src/index.ts
index 4f65fe1..4430a38 100644
--- a/apps/status/src/index.ts
+++ b/apps/status/src/index.ts
@@ -114,9 +114,9 @@ async function renderRssResp(slug: string): Promise<Response> {
 }
 
 const app = new Elysia()
-  .get("/", () => new Response("PingQL status service", {
-    headers: { "content-type": "text/plain" },
-  }))
+  // No status page lives at the root — show the same 404 visitors get for any
+  // unknown slug, so a stray hit on the apex doesn't leak service identity.
+  .get("/", () => notFound())
 
   // Static expand.js — cached aggressively, hash-busted via query string.
   .get("/_static/expand.js", () => new Response(Bun.file(expandJsPath), {