Home
Overview → Home is the page Shield360 opens after sign-in. It shows what AI costs and who is using it, then a card for every other area of Shield360 for the current project and environment, each with its headline numbers, what needs a person, and links into its screens. The time-range picker at the top right sets the period for everything on the page.
Home has three more tabs: Executive summary, Adoption & ROI and Reports. See Executive summary and Adoption and ROI. The dashboards people build themselves are under Overview → Dashboards.
Until the project has a database configuration, Home shows Finish setting up this project to see what AI costs and who is using it. An Auditor who opens Home is taken to Govern → Compliance program → Framework controls instead.
What AI costs
Section titled “What AI costs”When your organisation has the Finance module, Home starts with the cost picture. Without it, Home shows the area cards only.
- Worth a look: the problems behind the numbers, each linking to where it is fixed: coding agents not checked for sensitive data, seats paid for but assigned to nobody, seats unused for 30 days, responses on models with no price, and AI tools in use that no tracked subscription covers.
- Tiles: AI cost (seats, API use and, when connected, cloud AI services), Per person (seats and API over the people using AI, excluding cloud AI), Responses and Hours with AI, each with the change on the period before.
- AI usage over time: usage charged by the token, with usage covered by a seat and usage on an untracked plan drawn at API rates for comparison (neither is billed).
- Billed by vendors: what the vendors invoiced in the period. Until a bill is connected, it links to connecting OpenAI, Anthropic, Copilot or Cursor.
- Teams, Tools and Models: where the money goes.
- People: everyone in the period with their team, cost, usage at list rates, hours, responses, tokens, tools and when they were last seen. Search by person, team or tool; Show more pages through the rest.
- AI nobody is paying for: tools in use with no subscription, with how many people use each and its value at list rates.
Across Shield360
Section titled “Across Shield360”The area cards sit beneath the cost tiles, or at the top of the page without the Finance module. Each card shows its headline numbers, an attention list (or Nothing needs attention.), and shortcuts to its screens. Selecting a card opens its area.
| Card | Numbers | Attention | Shortcuts |
|---|---|---|---|
| Cost & coverage | AI cost, saved by plans, untracked; budgets over or forecast to exceed | AI tools with no tracked subscription, seats assigned to nobody, responses with no price, budgets over or forecast to exceed | Costs, Executive summary, API keys, Subscriptions, Budgets |
| Visibility & adoption | People using AI, computers (of the number enrolled), AI hours, each against the period before | Computers that stopped reporting | People, Computers, Websites |
| Compliance | Blocked, redacted and warned; the guard’s mode (Off, Warn or Block); legal holds, prompt-injection attempts, policy violations, failed sign-ins and AI inventory approvals | Prompts blocked, legal holds active, failed sign-ins, the guard off, AI assets not on the approved list | Overview, Data protection, Prompt injection, Policies, Audit log, Legal holds, AI inventory |
| Apps & telemetry | Requests, errors, applications, evaluations run, agent tests passing | Requests that ended in an error, failed evaluations, regressed agent test suites | Telemetry, Dashboards, Evaluations, Agent tests |
| Agents & MCP access | Registered agents (with how many are active or discovered in telemetry), gateway calls, denied calls | Denied gateway calls | Agent access, Agents, Activity |
| Build | Prompts, your secrets, contexts; document sources and memory connectors | — | Prompt Hub, Vault, Contexts, Memory, Openground |
| Fleet & setup | Installs reporting (desktop collectors and browser extensions, of those enrolled), install keys, connectors, SIEM exports (and how many are failing) | No collector enrolled yet, computers that stopped reporting, no connectors set up | Fleet Hub, Connectors, Settings |
| Alerts | Open and critical alerts, and the latest few | Critical alerts open | Inbox, Rules, Channels |
A computer counts as stopped reporting when it has not reported for 24 hours.
Setup checklist
Section titled “Setup checklist”Until every step is done, the Fleet & setup card shows a Setup list. A finished step is struck through; an open one links to where it is done.
| Step | Done when | Opens |
|---|---|---|
| Enrol a computer with the collector | At least one computer or browser is enrolled | Settings → Data collection → Deployment |
| Connect a vendor account | At least one connector is set up | Settings → Integrations → Connectors |
| Turn on the guard for coding agents | Sensitive data in coding agents is set to warn or block | The sensitive-data section of Govern → Policies & rules |
The connector step is shown only to people who can see connectors. The list disappears once every step is done.
When a card cannot show its numbers
Section titled “When a card cannot show its numbers”Each card loads on its own, so one slow or failing area does not hold up the rest.
| The card says | Why |
|---|---|
| This area could not be loaded. | The area failed or took longer than 12 seconds. Try again reloads that card only. |
| Your role does not include this area. Ask an administrator for access. | Your role does not include the permission the area’s own pages need. |
| A description of the module | Your organisation does not have the module the area belongs to. |
| Nothing to read from yet in this project. | The area has no data source in this project yet. |
Inside a card, a number your role cannot see is left out (Not included in your role), and a number that could not be read for the range says Couldn’t load for this range.
Permissions
Section titled “Permissions”There is no single permission for Home. Each part is shown when your role reaches that area’s own pages:
| Part | Permission |
|---|---|
| What AI costs (with the Finance module) | View dashboards and reports (metrics.read) |
| Cost & coverage | View costs (costs.read) |
| Visibility & adoption | View dashboards and reports (metrics.read) |
| Compliance | View the compliance overview (compliance.read) |
| Apps & telemetry | View telemetry (observability.read) |
| Agents & MCP access | View agent access (agent_access.read) |
| Build | Any of View prompts (prompt.read), Use stored secrets (vault.read), View contexts (context.read) or View agent access (agent_access.read) |
| Fleet & setup | View computers and people (collector.read) |
| Alerts | View alerts (alerts.read) |
Some numbers inside a card need their own permission too, for example budgets (View budgets), connectors (View connectors), AI inventory approvals (View the AI inventory) and failed sign-ins (Read the audit log).