Stats cards
At the top of the page you’ll find three live counters:
These counters update in the background. A spike in “Alerts today” is the fastest signal that something unusual is happening.
Recent incidents
Below the stats you’ll see a Recent Incidents card listing the latest security incidents across your connections. Each row shows:- The attack category (e.g., rate spike, WAF rule cluster, auth abuse)
- Severity level
- Status (open, acknowledged, or resolved)
- Which connection the incident was detected on
- When the most recent alert in the incident was fired
Connections
The Connections card shows every asset you have linked to Flarehawk. For each connection you can see:- The connection name and identifier (your domain or zone)
- Whether the connection is verified and actively ingesting logs
- Total requests ingested
- Requests in the last 5 minutes — a useful real-time heartbeat
- When logs were last received
Navigating the dashboard
The left sidebar gives you access to every section of the dashboard:If you are on a plan that includes multiple team members, every member of your organization sees the same dashboard data. There is no per-user data scope within an organization.
Quick links
From the dashboard home page you can jump directly to the areas most relevant after spotting something unusual:- Select an incident row to open the full incident detail view, including the timeline, evidence, and triage actions.
- Select View all in the Recent Incidents card to open the full incident list pre-filtered to open incidents.
- Select View all in the Connections card to check whether a specific asset is actively sending logs.
- Use the Analytics link in the sidebar to explore traffic trends and understand what normal looks like for your assets.

