Live
Authentication and sessions
HttpOnly session cookies, CSRF protection and session expiry protect Command Center access.
Security
Protect the control plane while operations stay honest
OpsWatch secures sign-in, secrets, roles and remediation boundaries. Broader threat detection analytics are foundation work and are not sold as a finished security operations centre.
Live
Encrypted credentials
Webhook, OpenTelemetry and connection secrets use managed encrypted storage with rotation paths.
Live
Roles and membership
Organization roles control who can administer projects, members, billing and automation policy.
Live
Governed remediation
Approvals, auto-run policy, maintenance windows and registered executors bound what can run.
Live
Audit and evidence
Operational actions and security-relevant changes leave persisted evidence for review.
Foundation
Threat analytics workspace
Deterministic findings foundations exist. Do not treat the security workspace as complete SOC analytics.