Estate Brain
Read-only. Which sites need a human now, which attack classes are hitting more than one site, and which virtual patch groups are still off. You still click once on the site.
Read-only
Read-only. Open Tuning on a site to promote, allowlist, or add a group in count. This page does not change WAF mode.
The window is the shared Last 24 hours rollup. An unpublished series says not confirmed, not zero.
What needs a human
The dashboard also has a “What needs you” queue for the sites on the account. It sorts broken setup and DNS first, then rules you can promote, then sites that need an allowlist, then quiet sites. Estate Brain groups the same kind of decision into Ready to Promote, Needs allowlist, and Setup stuck.
Setup stuck includes error, not started, waiting for DNS, certificate pending, and provisioning. Opening a row goes to that site’s Tuning page. This page does not promote.
Shared classes and missing groups
Attack classes from each site's shared 24-hour rollup. A class is shared when it counted or blocked on two or more sites. An unpublished series says not confirmed, not zero.
Managed groups from the virtual patch catalog that are not on for a protected site. This does not say the site is vulnerable. Adding a group stays on that site's Tuning page.