Threat posture overview
Latest 250 incidents · auto-refreshes every 30s
Threat posture at a glance
Risk concentration
Critical incident share from the last seven days.
Channel pressure
Busiest attack path surfaces here.
7-day trend
Recent incidents
Threat investigation workspace
Scan suspicious content · Standard or AI pipeline
Executive summary
Run an assessment to generate an incident summary.
Recommended response
Response guidance will appear here after a scan.
Threat story
Threat narrative is built from evidence after each scan.
Investigation timeline
Evidence signals
Indicators
AI trace
AI explanation
Enable AI mode for deeper narrative context.
AI pipeline
standard-only · N/A
Case controls
AI settings
No provider settings saved.
Analytics
Signal breakdown, channel mix, and feedback quality
Incident mix
Validates once analysts mark incident outcomes.
Threat categories & patterns
Feedback quality
Channel summary
Recent threat cards
Repeated signals & channels
Most repeated detection reasons.
Channel concentration.
Rule manager
Govern live detection logic without redeployment
Access
Create rule
Rule guidance
Extensions
Client integrations for Gmail, Outlook, and Thunderbird
Scans open Gmail and Outlook Web messages. Shows an inline verdict badge and keeps the latest result available from the popup.
Install the Thunderbird XPI add-on to scan displayed messages and inject a verdict banner in the message view.
Direct API access
curl -X POST ${location.origin}/api/v1/scan \
-H "X-API-Key: <your-key>" \
-H "Content-Type: application/json" \
-d '{"subject":"Urgent: verify your account","body":"Click here...","mode":"ai"}'