Overview
The Overview page is the entry point for a connected server. It gives you a fast summary of current security state and quick access into Threats, Traffic, Logins, Firewall, Hardening, and Settings.
Threats
The Threats section shows active, resolved, and blocked incidents, the threat overview timeline, explainability, scoring output, and action visibility. Each incident has its own report page and downloadable PDF.
Logins and Traffic
The Logins page tracks successful access, failed attempts, active sessions, and blocked IPs. The Traffic page highlights connection spikes, top IPs, and ports so you can see unusual network behaviour quickly.
Firewall and Hardening
The Firewall page manages blocked IPs, rules, and protection settings. The Hardening page lets you review and apply SSH and Fail2Ban changes while keeping server safety checks in place.