feature advisor
Overview The Advisor is your central security command center with two subtabs: Overview and Score. The Overview shows your Security Score as stars, category summary cards (Policies, Threats, Network, Identity breaches, Traffic) with todo counts, and a Recommendations list with priority badges (High/Medium/Low) and type filters. The Score subtab displays a radar chart visualization of your security posture across five domains (Credentials, Network, System services, System integrity, Applications) with an overall star rating. The Advisor aggregates threats from system security, network anomalies, identity breaches, policy violations, and suspicious traffic into a single actionable dashboard.
Description: The Advisor dashboard opens with a prominent header showing your Security Score as a star rating (e.g., 3.0 stars) alongside a 'Security Advisor' banner that displays the total count of issues needing attention (e.g., 'Critical: 34 security issues need attention'). Below, five colorful summary cards display todo counts for each category: Policies (pink), Threats (orange warning triangle), Network (purple wifi icon), Identity breaches (fingerprint icon), and Traffic (connection icon). Click any card to filter the recommendations below. The 'Recommendations/Advices' section shows a scrollable list of action items, each with a colored priority badge (High in red, Medium in yellow, Low in green) and a type tag. Filter by priority to focus on the most critical items first, or by type to see specific categories like network sessions or identity breaches.
| List View | Detail View |
|---|---|
 |
 |
Screenshot of Dashboard – Real-Time Security Overview - Multi-pane layout showing list and detail views
-
Security Score – Risk Assessment at a Glance
- A continuously updated score (0-5 stars) summarizing your overall device security risk. Factors in live threat data, policy compliance, network exposure, and system configuration. The score uses the EDAMAME threat model with category-specific weightings for Network, System Integrity, Services, Applications, and Credentials.
-
Action Items – Tasks Remaining
- Shows how many security tasks remain to improve your score. Each todo represents a specific action—remediate a threat, review a network anomaly, address a credential breach, or fix a policy violation. Click any item to see detailed guidance.
-
Active Threats – Issues Requiring Attention
- Real-time count of unresolved threats categorized by severity (Critical, High, Medium, Low). Each threat maps to industry frameworks like CIS Benchmarks, SOC 2, and ISO 27001. Click to navigate directly to the threat details.
-
Non-Compliant Policies
- Quick list of organizational policies your device currently fails to meet. Policies are defined by your organization via EDAMAME Hub and can include minimum score thresholds, required security checks, and compliance tags.
-
Network Devices – Open Ports Detected
- Highlights devices on your local network exposing services that may require hardening. Includes CVE vulnerability lookup for discovered ports and services. Click to view detailed device information.
-
Identity Breaches – Credential Leaks
- Displays the number of data breaches affecting your monitored email addresses (via HaveIBeenPwned.com integration). Shows breach severity based on exposed data types—passwords, tokens, personal information.
-
Suspicious Sessions – Network Anomalies
- Counts network sessions flagged as suspicious or anomalous by the ML-based Extended Isolation Forest algorithm. Includes sessions matching blacklist rules. Desktop only—requires traffic capture enabled.
Description: The Recommendations/Advices section (scrollable list below the dashboard) shows all actionable security items. Each card displays: a category icon (fingerprint for Identity breaches, traffic icon for suspicious sessions, shield for threats), type badge (colored label like 'Traffic', 'Identity breaches'), priority badge ('High' in red, 'Medium' in yellow, 'Low' in green), action description (e.g., 'Review suspicious network sessions and mark as safe if legitimate', 'Data breach detected for your email - review details and mark as handled if you've changed passwords'), source details (domain, email, or device), and timestamp. Click any card to open a detail pane on the right showing full context - for traffic sessions: process name, path, memory usage, session count, destination details with port/service, source IP, and action buttons ('Mark process as safe', 'Close'). The multi-pane layout lets you review details without losing your place in the list.
Screenshot of Recommendations – Prioritized Action Steps
Description: The Score tab displays a radar/spider chart visualization centered on the screen, with five axes representing security domains: Credentials (top), Network (right), System services (bottom-right), System integrity (bottom-left), and Applications (left). The purple filled area shows your current score in each domain - areas that extend further toward the outer ring indicate stronger security. Concentric circles mark the 25, 50, and 75 percentile levels. Below the chart, your overall star rating is displayed (0-5 stars, with partial stars for fractional scores). A prominent green 'Show me how to improve!' button links directly to the Threats view where you can remediate issues to raise your score.
Screenshot of Score – Multi-Dimensional Security Assessment
-
Overall Score – 0 to 5 Stars
- Your combined security score as a star rating (0-5). Based on weighted averages of all security domains using the EDAMAME threat model. A score of 4+ stars indicates strong security posture; below 3 stars requires attention.
-
Network Security Score
- Evaluates firewall configuration, response to ping, open ports exposure, VPN usage, and network-level attack surface. Includes checks for Wi-Fi security and network isolation.
-
System Integrity Score
- Assesses OS hardening (SIP, Secure Boot), disk encryption (FileVault, BitLocker), security software status (XProtect, Windows Defender), automatic updates, and critical system configuration. Platform-specific checks for macOS, Windows, and Linux.
-
System Services Score
- Analyzes privileged and background services running on your system. Checks for unnecessary services, proper service isolation, and potential security implications of running processes.
-
Applications Security Score
- Verifies application patch status, code signing, sandbox restrictions, and browser security settings. Checks for known vulnerable software versions and recommends updates.
-
Credentials Security Score
- Evaluates password manager usage, MFA/2FA configuration, credential storage security, and breach exposure status. Integrates with identity breach monitoring to detect compromised credentials.
This page was automatically generated from feature definitions.