The console, recorded on a demo company.

NIS2 incident1:43

A case and a NIS2 incident referencing the same alert.

A critical alert becomes an assigned case. The NIS2 incident is declared separately, referencing the source alert and tracking deadlines. The manual filing record and audit log export are demonstrations. The platform sends no notifications to authorities.

The audit log PDF shown in this recording is in Romanian.

CRA reporting1:09

From SBOM to CRA deadlines and export.

An SBOM identifies a vulnerable component. In this synthetic example, a person declares active exploitation. The platform tracks deadlines and exports the JSON report. Early warning filing is recorded manually, without transmitting anything to authorities.

External scans2:31

The company’s sites, scanned from outside.

Classifying a site as internal changes the company score. The recording shows demonstration site findings, remediation guidance and partial subdomain discovery results. An on-demand full scan ends with the actual PDF report.

ISO 27001 policies1:39

A proposed policy, reviewed in the editor.

The interview produces a Romanian incident management draft. A person reads the AI text, corrects unsupported claims in the editor and saves the revision. The DOCX export contains the reviewed proposal. The policy remains unapproved.

Romanian captions. The platform writes policies in Romanian, so this recording has no English version.

For providers1:14

A possible web shell, investigated by the provider.

The operator sees ten servers and aggregated alerts. A PHP-file alert becomes an assigned case with an investigation note. The customer sees only their own alerts and ISO 27001 controls; the provider’s case stays separate.