Portal access

Your teams follow the service in AarView, the orchestration software AarSOC runs on: what we see, what we do, and why.

How to reach it

• The portal is reachable over VPN only. Your machines reach it through your organisation’s tunnel (see Onboarding).
• Every account is protected by two-factor authentication.
• Every action in the portal is logged.
• The interface exists in French and English.

What you see

• Your dashboard: score, detection and handling times (MTTD, MTTR), trends.
• Incidents and alerts, with their timeline.
• Event search.
• Your machines and their posture, vulnerabilities.
• Tickets and messaging with your analyst.
• Your reports.

Depending on the offer: threat intelligence, hunting, lookalike domain and leaked account monitoring, and automations. See Offers.

Search your logs

The Events page searches your alerts over the last 30 days at most, by free text or by rule, machine and address. The server restricts every query to your organisation.

Reports

A period report (monthly by default) as a PDF, compared with the previous period, plus per-incident and per-machine reports, in French or English. Exported PDFs are encrypted with AES-256 using a random password unique to each export. There is no weekly report.

Notifications

In the portal and by e-mail. Each user chooses: critical alerts only, all incidents, tickets assigned to them, daily summary.

API

An API with limited-scope keys gives access to your incidents and statistics and, with Citadelle and Souveraine, to the archive of your events. How it works is described in the AarView API documentation.