Security Overview
Verified signals, incidents and policy controls in one place.
Demo Viewer Access
Akses publik hanya menampilkan data sintetis. Tidak ada akses ke tindakan atau catatan produksi.
Memuat status...
LIVE DEFENSE INTELLIGENCE
Data is sourced from verified assets and authenticated sensors only.
NSLIVE CYBERWAR · PERTAHANAN SIBER
Pengamatan serangan pada aset yang diotorisasi. Data hanya dari Wazuh dan agent terautentikasi.
Animasi pemindaian selalu bergerak. Titik hanya muncul dari alert terverifikasi; posisi bersifat skematis, BUKAN geolokasi.
ZERO-CLICK THREAT OBSERVATORY
Autentikasi sensor · korelasi indikator · investigasi forensik terotorisasi. Bukan klaim deteksi seluruh eksploit zero-click.
Hubungkan sumber Wazuh, EDR/MDM atau hasil forensik yang disetujui untuk melihat indikator sebenarnya.
Zero-click attacks may leave no publicly known traces. “No findings” does not mean “device clean”. Collect device evidence only with explicit consent, and keep raw forensic artifacts outside the public website.
Behavior Learning Engine
Incremental EWMA baselines for authenticated agent traffic windows. Detection is rule-based and auditable, not a claim of trained AI.
Post-Quantum Security Inventory
Crypto posture and migration planning. Hybrid TLS key exchange and ML-DSA signatures are not presented as active unless separately proven in a compatible runtime and endpoint.
NGFW Observation Layer
Authorized source telemetry and controls inventory. This web application does NOT intercept or enforce packets. Attach a privileged firewall/WAF to implement actual enforcement.
Wazuh Active Defense Intelligence
Authenticated Wazuh alert ingestion, incident correlation and optional temporary Cloudflare zone IP blocking. Endpoint firewall blocking runs through Wazuh Active Response on installed agents; no universal packet interception is claimed.
IR Playbook Library
Human-led runbooks mapped to recorded incidents; SOAR approvals remain non-executing unless separately integrated and validated.
Asset Protection Center
Register a public IP or domain you administer, prove control, and run non-invasive DNS, HTTPS, TLS and security-header reviews.
Protection deployment model
Use this module for monitoring, certificate expiry and incident detection. Enable WAF/DDoS filtering at your DNS, Cloudflare or infrastructure provider separately. Approvals on this dashboard do not enact firewall changes.
Enrolling a field agent
Use the server terminal to generate an individual agent token. The token is displayed once and stored only as a hash by the server. Send telemetry from Termux or Linux through HTTPS, never an inbound phone port.
node agent/node-agent.js --onceLocal SHA-256 hash-linked activity history. This is not an externally anchored immutable ledger.
Safety boundary
Network-level packet inspection and trained AI inference still require external sensors and independent validation. Zone WAF enforcement may be configured through an explicit Cloudflare API token; Wazuh endpoint blocking requires separately installed Active Response. SOAR in this package logs approvals without executing system changes.
Kesiapan Integrasi PnP / Plug-and-Play Readiness
Hasil di bawah berbasis konfigurasi dan data sensor yang tersedia. "Terkonfigurasi" tidak berarti koneksi eksternal telah berhasil diuji. Tidak ada pemindaian jaringan tersembunyi.
- Daftarkan IP/domain publik yang kamu kelola di Asset Protection dan verifikasi kepemilikan.
- Pasang Wazuh Manager di VPS terpisah, agent pada server terotorisasi, lalu konfigurasi token webhook kuat.
- Atur scheduler dan pastikan bukti telemetry segar serta alert benar-benar diterima.
- Konfigurasikan WAF/firewall yang sesuai, uji blokir terbatas, pengecualian IP admin dan auto-unblock sebelum mengaktifkan kebijakan.
- Validasi hasil menggunakan ekspor PDF/JSON, audit trail, serta uji penerimaan dari infrastruktur nyata.
PANCAINDERA ECOSYSTEM
Hub KHODAM untuk kembali ke website resmi dan membuka semua modul tanpa kehilangan navigasi.
Tautan membuka tab baru. Ketersediaan website eksternal bergantung pada hosting dan DNS masing-masing.