Skip to content

Intelligence

See what your protection layer is doing

ArxLayer Security Analytics turns edge enforcement into dashboards you can read: traffic, detections, blocks, and outcomes across every domain, tenant, and time window. Review what's actually blocking, and what would block, before you change a single rule.

SignalsVisibilityArxLayerSecurityAnalyticsTrafficDetectionsOutcomesDashboardsTrendsAlerts

The problem

Enforcement without visibility is a guess

If you can't see what your defenses are doing, every policy change is a leap of faith and every incident is a scramble.

Blind to your own blocks

Without a clear view of detections and blocks, you can't tell a real attack from a noisy rule.

Tuning by trial and error

Changing a policy without seeing its impact first risks blocking real users or letting attacks through.

Fragmented across domains

Traffic and threats spread over many domains and tenants are impossible to reason about one log at a time.

What you get

Dashboards that explain every decision

Analytics are built from the same edge enforcement that protects you, so what you see is what actually happened at the request boundary.

Traffic and detections

Track requests, detections, and blocks over time, broken down by domain and threat category.

Would-block analysis

See what detect mode would have blocked on live traffic, so you can enforce a policy with confidence.

Across domains and tenants

Roll up activity for one app or your whole estate, with multi-tenant isolation kept intact.

Time-range and trends

Compare windows to spot a spike, a new attack pattern, or the effect of a recent policy change.

Privacy-aware events

Events are sampled and client IPs are hashed (HMAC), so you get signal without holding raw identifiers.

Evidence per detection

Drill from a chart into the detail behind a block: the matched category, the rule, and the outcome.

How it works

From edge events to clear answers

Your enforcement produces the data; analytics make it legible and safe to act on.

Edge records outcomes

Every request decision at the edge becomes a sampled, privacy-aware event with the reasoning behind it.

Explore the dashboards

Filter by domain, tenant, category, and time to find what's blocking and what's trending.

Tune from evidence

Use would-block analysis to validate a policy change, then enforce and watch the impact land.

FAQ

Questions, answered

Do analytics store my visitors' IP addresses?
No. Events are privacy-aware: client IPs are hashed with an HMAC for reputation, and raw IPs never leave the edge.
What is would-block analysis?
It shows what a detect-mode policy would have blocked on your real traffic, so you can confirm a change is safe before you switch on enforcement.
Can I see across multiple domains and tenants?
Yes. You can roll up traffic, detections, and blocks for a single app or your whole estate, with tenant isolation preserved.
Are all requests recorded?
Events are sampled rather than capturing every request verbatim, which keeps analytics efficient while preserving representative signal and the evidence behind detections.

Make your protection layer legible

See traffic, detections, and would-block analysis across your domains, then tune with evidence instead of guesswork.