Operate OrthalonDiscovery, Catalog, and Violations
Discovery, Catalog, and Violations
Monitor organization security posture, AI app inventory, vendor risk catalog, and real-time violation events.
Plan requirement: Discovery and inventory are included in all plans. Active violation enforcement and audit export require Protect or higher.
Orthalon tracks AI app usage and sensitive-data exposure through metadata-only violation records. Optional Enterprise redacted prompt evidence is stored separately and never appears in this feed.
1. Security Overview & AI App Discovery
Navigate to Posture → AI Discovery & Governance to monitor:
- Discovered AI Applications: Real-time inventory of web services, desktop clients, IDE plugins, and MCP servers.
- Sanction States: Categorize apps as
SANCTIONED,UNSANCTIONED,UNDER_REVIEW, orBLOCKED. - Adoption & Risk Metrics: Unique user counts, prompt volumes, detected secret types, and vendor risk scores.
- Vendor Facts & Trust Catalog: Data retention policies, model training behavior, and subprocessors.
2. Violation Event Feed
Open Discovery → Violations to triage policy violations and DLP triggers:
| Event Field | Description | Data Privacy Guarantee |
|---|---|---|
| Timestamp | Exact time the policy was evaluated | UTC formatted |
| Requester | Employee identity or sensor identifier | Correlated via SSO or managed profile |
| AI Application | Destination service (e.g. ChatGPT, Claude, GitHub Copilot) | Domain / URL endpoint |
| Matched Detectors | Sensitive categories triggered (e.g. AWS Key, PII, Source Code) | Counts and detector types only |
| Decision | Action taken (BLOCKED, REDACTED, COACHED, APPROVAL_REQUIRED) | Enforced in real time |
| Sanitized Excerpt | Redacted preview showing matched placeholder tokens | Zero raw secrets stored |
3. Incident Triage Workflow
- Filter violations by Application, Decision, User, or Detector Type.
- Click any event to inspect the triggered policy rule and matching criteria.
- Export audit logs via CSV / JSON for SIEM integration or compliance reporting (Business & Enterprise).