Facility
Gateway: --
Engine: --
Mode: --
A analyst

Live Operations

Security Overview

Waiting for data

Global Risk

Cyber-physical exposure

--
-- / 100
Assets in scope--
Critical assets--
High-risk assets--
Learning state--

Traffic

collector
Packets --
Events --

Assets

-- zones
Total --
PLC/RTU --
HMI --

Detection

Alert pressure

0 alerts
Critical0
High0
Medium0
Low0

Topology

Industrial network map

Protocol DPI

Parser coverage

Inventory

OT Assets

Asset Type Zone Protocols Risk Last Seen Actions

Detection Queue

Alerts

OT Security Operations

Detections

Open Incidents

--

Investigating--

Critical

--

Multi-stage--

Rules

--

Enabled--

MITRE ICS

--

Active--

Incident Queue

Correlated cases

loading

Response

Incident detail

case

Detection Rules

Custom logic

runtime
Rule Severity Condition MITRE Status Actions

Rule Builder

New detection rule

operator

MITRE ATT&CK for ICS

Observed coverage

coverage

Threat Intelligence

Intel & Integrations

IOCs

--

Matches--

Adversaries

--

Active--

YARA

--

Matches--

SOAR

--

Sent--

IOC Store

Indicators

Indicator Type Severity Source Hits Expires Actions

Manual Intel

Add IOC

operator

Adversary Tracker

ICS groups

tracker

TTP Match

Activity correlation

ready

Payload Scanning

YARA

scanner

Response

Playbooks

runtime

Integrations

SIEM & Notifications

SOAR Webhooks

Targets

webhooks

Network Graph

Topology

Controller HMI Server Observed flow
SourceTargetProtocolPacketsBaseline

Deep Packet Inspection

Protocols

Controlled Discovery

Active Query

Mode

--

Role--

Rate Limit

--

Allowed--

Sent

--

Responded--

Response Rate

--

Updated--

Query Builder

Device identification

guarded

Result

Latest response

idle
Target Protocol Query Latency Response Time

Ingestion Pipeline

Collectors

Active Local capture Silent

Local Sensor

Engine capture status

--

Remote Collectors

Heartbeat summary

--

Provisioning

New collector profile

operator

One-time Bundle

Latest provisioning result

idle
Collector Status Source IP Events Batches Idle Last Seen
Provisioned Profile Platform Interface Key Status Provisioned Actions

SaaS Control

Organizations

Tenants

--

Top level--

Active

--

Access--

Sites

--

My org--

Probes

--

Updated--

Tenant Tree

Customer organizations

loading

Admin Onboarding

New customer tenant

admin

Scoped View

My organization

tenant

Site Onboarding

New sub-tenant

admin

One-time Secret

Latest onboarding result

idle

Compliance & Reporting

Reports

Executive Summary

Current risk is stabilizing

Waiting for live telemetry.

Asset Exposure

Asset inventory pending

Connect collector traffic to populate this panel.

Response Notes

Recommended next actions

    NIST CSF

    --

    Controls--

    IEC 62443

    --

    Controls--

    NERC CIP

    --

    Controls--

    Framework Coverage

    Controls

    Framework Control Description Capability Status

    Exports

    Executive pack

    ready
    Period--
    Generated--
    High/Critical--
    IEC Gaps--

    Industry Fit

    Vertical assessments

    profiles

    Governance

    Audit Trail

    Integrity

    Not checked

    Entries--
    Broken at--

    Activity

    No events

    Latest actor--
    Latest action--

    Access

    Gateway audit

    Viewer role--
    Last refresh--
    Time User Role Action Path IP Hash

    Local Configuration

    Settings

    API Gateway

    Used by this browser only. Default is http://localhost:3001.

    Session

    User--
    Role--
    Tokenactive