The Stats page presents information and graphics, so you can check the results of your monitoring and actions taken upon digital threats.

The data regards all workspaces and, by default, you’ll see the last month's data (and not the previous 30 days), but you can use filters to choose other time frames. You can also filter by asset and ticket type:

Numbers presented on Stats correspond to the number of events in each category, and not the number of tickets (one ticket may contain multiple events of the same type).

Just so you know, events are accounted for by the date of their occurrence. For example, if a ticket is detected in July and becomes an incident in August, the event of the threat opening is accounted for in July, while the incident event takes part in the numbers regarding this category in August.

It is also important to notice that, for Deep & Dark Web, all tickets sent to Treatment are considered incidents (Open tickets are not accounted for).

The incident event also ceases to be accounted for if the incident is discarded or goes to Quarantine since, in these cases, they are not considered active threats anymore.

See below how the page works and how data is calculated to be shown to you.

Here you have a general view of your monitoring and actions on threats:

Notice that, not always, the left part of the graphic is the one with the largest amount of data, since the numbers are related to events, not tickets. (Let's say that on a particular month, you didn't have a lot of new coverage, but did indeed move many tickets you already had to Takedown or internal treatment).

Here, you can view the graph of Registered Incidents, which refers to all actual threats that need to be addressed. Note that if an incident is discarded or reversed to Open or sent to Quarantine, it will no longer be counted in this number.

The highlighted number of incidents also includes information on the variation in the number of incidents compared to the previous period.

This module also shows relevant data about your market segment (based on Axur's sample of clients in the same segment) and other Axur clients. So you can compare your incidents with what has been happening in the monitoring of other companies.

Here you can see the incidents distributed by threat type, ordered by volume of records. This allows you to identify the top offenders. You can also see the percentage variation in the records for each incident.

On the left side of the graph, you will find a summary of the most relevant insights about your incidents: the threat type with the highest volume (top offender) and the type that experienced the highest growth (in volume) compared to the previous period.

First, in this section, you can check general data about Takedowns and Internal Handling and their statuses. Note that these data may vary over the period (some Takedowns may be resolved, for example).

For Takedowns, the following information is displayed:

Below the highlighted numbers, a graph is presented showing the current status of tickets with Takedown requests in the period: Resolved, In progress, Interrupted, and Not Solved.

For Internal Treatment, the following information is recorded:

Below the highlighted numbers, a graph is also presented showing the current status of tickets with Internal Handling: Resolved, In progress, with Takedown requested, and Not Solved.

The success rate only considers takedowns that are solved and not solved. If the resolution is still undefined for an ongoing Takedown, it is not considered for this graphic and will be accounted for only after the process is completed.

Here you check the takedowns distributed by threat type, in order of volume, and also the status distribution for each of these types. On the left, we also show insights about what is most noticeable about this data, such as the indication of success rates and speed of removal, that might be valuable to share with your team.

This graphic shows the distribution of Takedown or Internal treatment events in tracks of the resolution uptimes, considering all that has been requested/initiated and closed within the selected period.

On our platform, you can easily export files with information about data and threat events detected within the selected period. Just click the "Export" button in the upper right corner and choose whether you prefer the .csv or .pdf format.

You can also export specific data from the Monitoring funnel, Incidents, and Handling by clicking directly on the presented numbers. You can obtain this data by clicking on the following areas:

In Stats, you can also access last month’s reports for Credentials, Operational, and Financial data. At the moment, only data from the previous month is available, and it is not possible to edit or filter by custom time periods.

If you have any questions, feel free to reach out at [email protected] 😊