Executive AI Monitoring
Fleet-wide oversight. Superuser credentials required.
Organization token is required
Demo mode · credentials pre-filled

Overview

Updated just now
—
Department risk heat mapRISK / 100
Scan volume · 7 daysPEAK
Regulatory exposureTRIGGERS
Highest-risk devicesPEAK / 100

Risk distribution

VIEW ALL →
TOTAL 0

7-day org-wide trend

Top regulations triggered

Top LLM endpoints

Most active devices

VIEW ALL →

Recent critical events

VIEW ALL →

Devices

Updated just now
—
DeviceUser · DepartmentOSCriticalLast seenScansPeakBlocked

macOS-1F0A

user-1f0a · Sales
← DEVICES  /  MACOS-LEO

macOS-1F0A

HIGH EXPOSURE dev-035 · user-1f0a · macOS 14.2 · last seen 4d ago
Total scans
611
on this device
Peak risk
79
/ 100
Critical
8
events
Blocked
8
PII denied
Redacted
82
PII stripped
Findings
183
PII instances

Risk distribution

TOTAL 0

Top LLM endpoints

Activity heatmap

Less More
MONDAY · 11:00–12:00
11scans
Blocked1
Redacted2
Warned2
Logged6
Top processSafari
Top domainapi.openai.com
Peak risk72 / 100
Pinned. Click the cell again to unpin.

Scan log

· —
TimeDomainProcessLLMFindingsRiskAction

Departments

Updated just now
PII exposure breakdown by team

Engineering detail

Scans
5,400
Critical
131
Blocked
117
Devices
18
Devices in this department

Scan Log

Updated just now
—
Time ↓UserDeptDomainLLMRiskActionRegulations

Monitoring

Updated just now
Outbound traffic, alert rules and notification settings
Monitoring Toggle
Network monitoring is active · 44 agents reporting
Events (24h)
44
outbound connections
Volume out
67.9 MB
across all agents
Categories
5
of 5 classified
Flagged
5
need review

Traffic by category

LLM API14
Telemetry12
Unknown SaaS8
Dev Tools7
File Upload3

Severity breakdown

CRITICAL3
WARN3
INFO38

Flagged events

5 OPEN
user-f18f → wetransfer.com2d ago
FILE UPLOAD · 12.1 MB · dev-019
user-291c → wetransfer.com3d ago
FILE UPLOAD · 21.9 MB · dev-028
user-8650 → cdn.synthhub.io3d ago
UNKNOWN SAAS · 296.1 KB · dev-046

Category legend

LLM API
Known LLM provider endpoints (OpenAI, Anthropic, Google)
File Upload
Multipart uploads to external hosts
Unknown SaaS
Unclassified third-party services
Telemetry
Analytics, crash reporting, update checks

Outbound traffic

TimeUserDeviceDomainCategorySeverityBytes out
2d agouser-8650dev-046github.comDEV TOOLSINFO308.7 KB
2d agouser-5d0edev-020sentry.ioTELEMETRYINFO282.0 KB
2d agouser-0aa1dev-017telemetry.vscode.devTELEMETRYINFO379.8 KB
2d agouser-28b9dev-003registry.npmjs.orgDEV TOOLSINFO262.8 KB
2d agouser-c668dev-022api.openai.comLLM APIINFO198.7 KB
2d agouser-2a4bdev-005generativelanguage.googleapis.comLLM APIINFO174.0 KB
2d agouser-7694dev-039api.anthropic.comLLM APIINFO71.4 KB
2d agouser-88fadev-018generativelanguage.googleapis.comLLM APIINFO114.5 KB
2d agouser-28b9dev-003pypi.orgDEV TOOLSINFO378.4 KB
2d agouser-38fcdev-010sentry.ioTELEMETRYINFO168.1 KB
2d agouser-4471dev-044pypi.orgDEV TOOLSINFO62.6 KB
2d agouser-0aa1dev-017segment.ioTELEMETRYINFO226.2 KB
2d agouser-dea0dev-042app.datalake.runUNKNOWN SAASINFO252.2 KB
2d agouser-4818dev-002sentry.ioTELEMETRYINFO197.8 KB

Alert rules

Critical block spikeCRITICAL×
risk_score ≥ 90
→ [email protected] · cooldown 30m · Any scan scoring 90 or above triggers immediately
Large outbound uploadHIGH×
bytes_out > 25000000
→ [email protected] · cooldown 1h · File-upload category exceeding 25 MB
Stale device check-inMEDIUM×
last_seen > 72h
→ [email protected] · cooldown 24h · Agent has not reported within three days
New rule
Name
Severity
Field
Op
Value
Notify email
Cooldown
Description

Triggered alerts

TimeRuleDeviceSeverityStatus
2d agoCritical block spikedev-007CRITICALOPEN
2d agoLarge outbound uploaddev-019HIGHOPEN

Email notifications (SMTP)

SMTP host
Port
Username
Password
From address

Security Report

Updated just now
Weekly summary · Apr 11–17, 2026

Executive Security Summary

Weekly summary · Apr 11–17, 2026 · Demo organisation · 47 devices
ELEVATED
ORG RISK POSTURE

Key findings

Recommendations

Department risk breakdown

Server Settings

Updated just now
Organization-level configuration

Organization

Organization name
Org token
Distribute this to agents via their config
Agent retention

Global policies

Block CRITICAL everywhere
Override agent enforcement
Require minimum k-anonymity
k ≥ 5 org-wide
Weekly email digest
To [email protected]

API endpoints

Ingest URL
Webhook (optional)
Fire on CRITICAL events

Superusers

[email protected]
Admin · you
OWNER
[email protected]
Admin · added Mar 12
[email protected]
Viewer · added Jan 15

Danger zone

Purge scan history
Delete all org scans older than retention
Rotate org token
Invalidates all agent connections