How Onyx works, and what changed lately.
Every machine in the fleet sends its logs to Sentinel. When an address keeps failing to sign in, or probes for known weaknesses, Sentinel decides to block it.
That decision goes out to every machine at once, so the address is blocked everywhere, not just where it was first seen. Shared threat lists add addresses that other networks have already caught.
Critical: something is down or exposed now. Look at it first.
Warning: something will break or is getting worse. Look at it today.
Caution: something is off but holding. Look at it this week.
Notice: for the record. Nothing to do.
Onyx gets a new look: one Home screen with fleet health, a live bar of what changed, and every app a click away.
Every app image running in our fleet is now scanned for known flaws before it runs.
