Threat posture · last 24h
—
/ 100
Composite threat score · 0–100
Portfolio-wide threat rollup across all monitored events. Lower is calmer.
- Criticalcontributes 30 pts each
- Highcontributes 18 pts each
- Mediumcontributes 8 pts each
- Lowcontributes 2 pts each
Each event's max-severity signal feeds the rollup. Capped at 100 — one critical event saturates without drowning out the others.
Normal
No elevated signals across your portfolio.
Operational state · portfolio
Same five states as the Live Monitor — applied across your entire monitored fleet. Operators don't translate between surfaces.
- Normalno elevated events
- Watch≥1 event at medium
- Warning≥1 event at high
- Active Incident≥1 event at critical
- Recoveryincident cleared by operator
State is derived from the worst monitored event. Click a card to drill into its Live Monitor.
Chatter
0 /8
Environment
0 /5
Movement
0 /5
Context
0 /5
0
Events elevated
0
Alerts fired
—
Next watch
0
Stale scans
Event monitors · risk-ranked
Risk-ranking · how cards sort
Events that need your attention land at the top. Two-key sort:
- 1. Severitycritical → high → medium → low
- 2. Alerts firedmore recent activity wins ties
No manual sort — this view answers "which event do I open next?" Click any card to drill into its Live Monitor.
No saved events yet.
Run a scan to add one
Recent scans
View /scan →
No scans in the last 7 days.