CONTROL PLANE /
Command center_
Run a controlled request. Inspect the outcome.
Request pipeline
- 01Verify identityValidate the signed token
- 02Evaluate policyRole, device posture & revocation
- 03Inspect & recordScan uploads, commit the audit
- 04Forward if allowedOnly then contact the application
A failed check stops the protected request.
Event stream
Requests from this browser session.
- Waiting for first requestConnect an identity, then execute an access check.
Test your access
Real requests. Real policy decisions.
Explore category-based access using inert local fixtures. These tests do not visit external websites.
Sensitive text is blocked before it reaches storage. Choose a sample or write your own.
View active DLP rules
Regex checks on UTF-8 text only. Encoded, encrypted, binary, and image content are not inspected.
Device registry
Change posture. See the next request respond.
Connect the administrator identity to inspect and manage demo devices.
| Device | Owner | Managed | Compliant | Risk | Age | Actions |
|---|---|---|---|---|---|---|
| Device records appear here after an administrator refreshes. | ||||||
Posture is asserted by an administrator, not measured by an endpoint agent. Authorization is always enforced by the server.
Audit decisions
The recorded reason behind every access decision.
Connect the administrator identity to read the audit trail.
| Time | Subject | Resource | Action | Result | Reason | DLP | ms |
|---|---|---|---|---|---|---|---|
| Audit events appear here after an administrator refreshes. | |||||||
Tokens, passwords, payloads, and matched sensitive values are excluded from audit records.