Demo sandbox - explore freely. Changes are local and reset on refresh. Vault and AI are disabled.Start your own workspace →
Security Operations
SIEM dashboard: alerts, anomaly detection, sessions, API keys, and audit trail.
Security
Open Alerts
0
Events (24h)
0
Admins
0
Locked Accounts
0
Must Reset
0
Search & Investigate
10 indexed events (activity + sessions)search>
-7d9 eventsnow
Severity
Entity
| _time | sev | actor | action |
|---|---|---|---|
| info | guest@demo.vaultpoint.systems | session logout | |
| none | system | document document_exported | |
| critical | system | user login_fail | |
| warning | unknown@example.com | session login fail | |
| none | system | settings module_entitlement_changed | |
| info | guest@demo.vaultpoint.systems | session login success | |
| none | system | task status:review_to_deployed | |
| warning | system | vault secret_access_review_started | |
| none | system | finance runway_snapshot_updated |
Notable Events
0 active alertsNo anomalies detected. Alerts appear here as rules match activity.
Detection Rules
correlation searches3 detection rules
Always-on behavioral detections
- Impossible travelcriticalbuilt-in
Same user logged in from two different countries within 2 hours.
2× in 120min
- Many source IPswarningbuilt-in
Same user logged in from 3 or more distinct IP addresses within 24 hours.
3× in 1440min
- Locked accountwarningbuilt-in
A user account has been locked, likely from repeated failed sign-in attempts.
1× in 1440min · user
- Forced password resetinfobuilt-in
One or more accounts are flagged to rotate their password on next sign-in.
1× in 1440min · user
Pattern rules
- Demo access-control failurescritical
Locks, denials, and unauthorized attempts.
/(lock|fail|denied|unauthor)/i · 1× in 1440min
- Demo destructive actionswarning
Deletes, removals, revocations, and purges.
/(delete|remove|revoke|purge)/i · 1× in 1440min
- Demo credential changeswarning
API keys, tokens, and secrets.
/(api.?key|token|secret)/i · 1× in 1440min
Active Sessions
force logout users| User | Role | Action |
|---|
Login History
last 100 events · IP, country, browser| Time | User | Event | IP | Country | Browser |
|---|---|---|---|---|---|
| Jun 25, 7:23 AM | guest@demo.vaultpoint.systems | Logout | 198.51.100.10 | US | Other |
| Jun 25, 6:13 AM | unknown@example.com | Fail | 203.0.113.42 | US | Other |
| Jun 25, 1:43 AM | guest@demo.vaultpoint.systems | Login | 198.51.100.10 | US | Other |