Find your way around Shield360
Shield360’s menu is one list under headings, ordered by what you do. Every page has one home, so there is one place to look for it.
| Heading | What it is for | What is in it |
|---|---|---|
| Overview | Where you start | Home, Dashboards, Setup |
| Monitor | See and verify what is happening | Command center, Logs, Detections, Alerts & cases |
| Protect | Act on it | Application security, WAF & RASP, Agents & access, Policies |
| Build | Engineering | Telemetry, Releases, Feature flags, MCP, Testing, Prompts, Vault, Memory |
| Govern | Compliance, risk and audit | AI inventory, AI usage, Data scans, Frameworks, Risk, Audit, Records |
| Spend | Finance | Finance, Adoption & ROI, AI code, Reports |
| Manage | Configuration | Settings |
Headings
Section titled “Headings”Select a heading to fold or unfold it. Shield360 remembers your choice for you, in this browser.
Monitor and Protect start open. Build, Govern and Spend start folded, and a folded heading opens when you go to a page inside it.
A row with a lock is not in your plan (hosted) or your license (self-hosted). You can still open it, and the page shows what it adds.
The collapsed sidebar shows each heading as an icon. Select one to see its pages.
Hubs and tabs
Section titled “Hubs and tabs”A row in the sidebar can be a hub: a group of related pages shown as tabs across the top of the page. A gear beside the tabs opens that hub’s settings.
| Hub | Tabs |
|---|---|
| Logs | Application logs, Traces, Live traffic, Agent activity, AI interactions, Audit log |
| Detections | All detections, AI analyst findings, Guard events, Prompt injection, Sandbox decisions, Runtime events |
| Alerts & cases | Inbox, Incidents, On-call, Monitoring provider findings, Cases, Review queue, Insider risk, Alert rules, Channels, Maintenance, Routing |
| Application security | Apps, Vulnerabilities, Code security |
| WAF & RASP | Manage (the page’s own tabs: Apps, WAF, Edge instances, RASP), RASP decisions |
| Agents & access | Agent access, Applications & agents, Agent authorization, Data dictionary, Documents |
| Records | Legal holds, eDiscovery, Data lineage, Datasets |
Three kinds of findings
Section titled “Three kinds of findings”Three pages list findings, and each one comes from a different place:
- AI analyst findings (Monitor → Detections): what Shield360’s AI analyst worked out from your data.
- Audit findings (Govern → Audit): nonconformities your own audits raised, with their corrective actions.
- Monitoring provider findings (Monitor → Alerts & cases): what a managed monitoring provider reported to you.
Numbers lead somewhere
Section titled “Numbers lead somewhere”Select a number on a page to see what it counts:
- On a summary page, such as the compliance overview or AI usage, a number opens the list behind it.
- On a list page, such as the AI inventory or the audit log, a number filters the list to what it counts, and is outlined while the filter is on. Select the total to see everything again.
A number that can’t be broken down further, or has no list of its own yet, isn’t selectable.
Settings
Section titled “Settings”Everything that configures Shield360 is under Settings, grouped as Organization, Data collection, Integrations, Developer and Personal. Shield360 Bot Check is under Data collection.
Alert rules, channels, maintenance windows and alert routing are tabs of Alerts & cases, next to the alerts they raise. Shield360 Edge is managed from WAF & RASP → Edge instances.
Search and pins
Section titled “Search and pins”- Press ⌘K (Ctrl+K on Windows and Linux) to search every page, including the tabs inside hubs and the tabs of pages such as Costs and WAF & RASP, with your recent pages first.
- Hover over a sidebar row and select the pin to keep it at the top of the sidebar.
What your role sees
Section titled “What your role sees”Your role decides which pages you can open, and the server enforces it. Hiding a page from the menu is only presentation: the server also refuses the request.
| Role | Menu | Starts on |
|---|---|---|
| Finance | Overview, Spend and your own settings. | Finance |
| Auditor | Overview, Govern, the audit log and your own settings. | Compliance overview |
| Everyone else | The whole menu, with the pages your role can open. | Home |
A person with the Finance role is refused every Security and Compliance page and API, whatever else the organization holds. That includes a project role: giving someone with the Finance role a wider role in one project does not open Security or Compliance to them. The Finance role reads no alerts, analyst findings, AI inventory, risk register or AI requests.
An Auditor’s Compliance overview shows totals only: it names no people and leaves out coding agent activity.
Where pages moved
Section titled “Where pages moved”Every page kept its address. If you are looking for a page by its old place:
| Was | Now |
|---|---|
| Security → Command center | Monitor → Command center |
| Security → Detections | Monitor → Detections |
| Security → Detections → Vulnerabilities | Protect → Application security → Vulnerabilities |
| Security → Detections → RASP decisions | Protect → WAF & RASP → RASP decisions |
| Security → Code security | Protect → Application security → Code security |
| Security → Alerts, Cases | Monitor → Alerts & cases |
| Security → Applications & agents | Protect → Agents & access → Applications & agents |
| Security → Applications & agents → Live traffic, Agent activity | Monitor → Logs |
| Security → Policies & rules | Protect → Policies |
| Security → Agent access | Protect → Agents & access |
| Discovery & Compliance | Govern |
| Discovery & Compliance → Records → AI interactions, Audit log | Monitor → Logs |
| Cost | Spend |
| Cost → Compute cost, Cost of code | Spend → Finance → Costs (search for them with ⌘K) |
| Development | Build |
| Settings → Alerting | Monitor → Alerts & cases |
| Settings → Shield360 Edge | Protect → WAF & RASP → Edge instances |
| Settings → Developer → Setup guides | Overview → Setup |