📊 How Alerts Work
Our AI engine analyzes each security event using pattern matching, AI analysis, and threat intelligence from IPQS and VirusTotal.
Severity Levels
| Level | Meaning | Response |
|---|---|---|
| 🔴 CRITICAL | Active attack in progress | Immediate |
| 🟠HIGH | Suspicious activity | Within 1 hour |
| 🟡 MEDIUM | Unusual but not threatening | Within 4 hours |
| 🔵 LOW | Minor anomalies | Within 24 hours |
What to Do When You Get an Alert
- Check severity — CRITICAL alerts need immediate attention
- Read the description — Understand what triggered the alert
- Ask the AI — Type in chat: "Investigate this alert"
- Take action — Follow AI-recommended remediation steps
- Update status — Mark as investigating, contained, or resolved