demo.example.net

Grade C Agent online Silent N/A Scanned 6h ago (sim)
Live Deck · metrics · timeline · preflight · outbound heartbeats only · not DPI
Failed units — Listen — Reboot —
2 High · 3 Med Open admin path Database port present Missing security headers SSH banner exposed TLS chain warning
Last heartbeat: — (sim)
NOMINAL All clear on sample thresholds Uptime — · boot —

Pay moments · D

Safe enough Surface + metrics snapshot · no remote exec
Change radar · No material change yet

CPU last known

—%
load — · — cores

Memory last known

—
—

Swap last known

—
—

Disk last known

—
—

Inbound / Outbound history only

IN (RX) OUT (TX) ~1h window · bit rates from byte counters not packet inspection
Signal lost — chart is frozen history, not live traffic

IN now

—

OUT now

—

IN peak (win)

—

OUT peak (win)

—
Avg IN — · Avg OUT —

Timeline

Scans · heartbeats · alerts · enroll/revoke

Free never requires an agent. Live Deck is optional on Pro: readable agent, non-root friendly, revoke anytime. Surface Guard grade + open High/Med findings merge with live gauges — not a threat score. C adds timeline scrubber + fleet lights on /app. D adds before-you-deploy, change radar, and a four-line box brief. SAMPLE: agent silence is N/A (paid deck uses signal-drop after ~90s without heartbeat). Install steps appear only after Enroll in /app. See Does / Does not for trust boundaries.

Free surface scan first App · enroll Does / Does not Start Pro