Devices online9
286
of 320 enrolled
Blocked flows0.6pp
21.6%
of 380 sample
High lateral risk4
57
paths · score ≥ 55
High-risk devices2
52
posture / unmanaged
Gateways healthy1pp
31%
48 edges
DNS block rate0.3pp
8.1%
malicious categories
Allowed vs blocked flows
Northline Systems · daily
AllowedBlocked
Mon Posture floor → 70Wed Shadow route ot-plc-gwThu Edge cert rotate SFSat DNS malware spike
Devices by segment
320 enrolled
33
Corp LAN
19
Prod VPC
31
Staging VPC
102
Remote
30
Guest
67
OT
38
DMZ
Lowest posture
risk devices
| Device | Site | Posture |
|---|---|---|
| ava-phone-88 | EU DC | 22 |
| rita-vm-62 | EU DC | 24 |
| priya-xps-23 | SF HQ | 25 |
| diego-desk-81 | Remote EU | 26 |
| elena-desk-84 | Remote US | 26 |
| marcus-mbp-1 | NYC office | 26 |
| tom-pro-11 | NYC office | 28 |
Top lateral-risk paths
score ≥ ranked
| Device | Target | Path | Drift | Top signal |
|---|---|---|---|---|
| jordan-personal | ledger-db.prod | 95 | 75 | Open east-west path |
| jordan-personal | siem.northline.internal | 95 | 75 | Open east-west path |
| ot-plc-gw | deploy.northline.internal | 95 | 91 | Open east-west path |
| ot-plc-gw | siem.northline.internal | 95 | 91 | Open east-west path |
| ava-iphone | deploy.northline.internal | 95 | 74 | Open east-west path |
| ava-iphone | siem.northline.internal | 95 | 74 | Open east-west path |
| ava-air-34 | deploy.northline.internal | 95 | 74 | Open east-west path |
| diego-phone-10 | ledger-db.prod | 95 | 74 | Open east-west path |
Network health
online × lateral × edges
56
score
Online devices286
High lateral paths57
Block rate21.6%
Healthy gateways15/48
Flow actions (sample)
380 flows
234
Allow
82
Block
64
Inspect
AI traffic share
destination classes · flows
11
Assistant chat
21
Model API
24
Agent framework
324
Non-AI traffic
Governed by the AI governance policy — see Policies for the allow / log / coach / block rule stack.
Root-caused alerts
symptom → cause → fix
Do this next
scored from lateral path · risk × drift
#194
Withdraw OT shadow route
ot-plc-gw → prod CIDR
path −18
#291
Revoke stale eng allow
contractor → deploy
path −14
#386
Raise posture floor to 70
isolate weak hops
path −10
#478
Disable idle helpdesk RDP
unused allow 50d+
drift −12