Console tour

The menu

Group	Page	What it is for
	Garry	Ask questions and request changes in plain language
	Overview	The estate and its security posture at a glance
	Approvals	Every proposed change, waiting for a person
Estate	Systems	Machines with the Garrison agent: health, tags, roles, terminal
	Cloud & Kubernetes	Inventory of connected cloud accounts and clusters
	Observe	Logs, metrics and dashboards
	AI Audit	Every model call, for admins
Security	Cases	SIEM alerts grouped into cases to triage
	Findings	What hunts, scans and audits turned up
	Hunts	Hypothesis-driven threat hunts
	Attack surface	Targets you authorize, their certificates and scans
	Firewalls & WAFs	Device policy, configuration history and drift
Platform	AI Gateway	Models, routing, guardrails and keys (admins)
	Cluster	The appliance boxes and what runs on them (admins)
Operate	Scheduled jobs	Recurring checks and agent goals
	Reports	Estate overviews, asset, case and SOC reports
	Connections	Cloud accounts, clusters, SIEMs and security devices
	Settings	Your account and preferences; appliance settings for admins

Click Collapse at the foot of the menu to shrink it to icons.

The header

• Connection chips (left): each connected SIEM and security device, and how many agents are online, each with a health dot. Click one to open it.
• AUTO (right): the model your chats use. AUTO means the gateway picks the model for each question. Click it to change the model under Settings → Model.
• The bell: notifications for escalations, approvals and finished jobs.
• Your account: sign out from here.

Keyboard

Where	Keys
Garry	Ctrl+K search systems · Enter send · Shift+Enter new line
Cases	j/k move · Enter open · x select · 1–5 verdict · a assign to me · e escalate · c close · / search
Findings	j/k move · Enter open