Donutwork Docs
Sentinel

Sentinel Dashboard

Real-time threat monitoring and geographic analysis of authentication attempts.

Security Command Center

The Sentinel Dashboard is the operational heart of your security infrastructure. It provides an immediate, high-impact visual overview of your authentication ecosystem's health.

Real-Time Metrics

The dashboard monitors four critical KPIs:

  • Threats Detected: Number of threats actively blocked by the system.
  • Failed Logins: Unsuccessful access attempts (potential brute-force or credential stuffing).
  • Active Sessions: Number of users currently authenticated globally.
  • Avg Response: Average response time of the security engine (in milliseconds).

Global Login Activity

Powered by MapLibre GL, Sentinel visualizes login density on a global map.

  • Blue points indicate regular activity.
  • Red points signal high-density attempts, helping you quickly identify geographically targeted attacks.

Security Alerts & Decisions

This section lists recent anomalies. For every alert, Sentinel displays:

  1. Severity: From Low to Critical.
  2. Decision Taken: - Allow: Access granted.
    • Challenge MFA: Two-factor authentication required.
    • Deny: Access blocked immediately.
    • Monitor: Suspicious activity recorded but below the intervention threshold.
  3. Triggers: Specific reasons that raised the risk (e.g., New User Agent, TOR/VPN Flag).

You can click on any IP or User ID within the alerts to view the full activity history for that specific profile.

On this page