YOUR SECURITY WORKSPACE
Data protection overview
Review your company’s endpoint reports, draft policies and protection evidence.
Welcome to Interceptur
Preparing secure sign-in…
Your company workspace
Company verification
Platform team: record completed company verification before activating a workspace. Use a non-secret record reference.
Company access management
Interceptur platform team only. Review company access and suspend an active workspace when necessary.
Data protection status
Protection inactive
A connected computer or a received snapshot does not confirm that file access is being blocked. Draft policies do not activate protection.
CHANGE APPROVALS
Approval setup and pilot requests
Review existing pilot requests and configure approval verification. These controls do not activate general data protection.
Approval passkey setup
Register using a private, one-use setup code issued from your server. Enter your PIN or biometrics only in your browser or device's passkey prompt.
Approval verification setup
Test the Microsoft approval sign-in connection. This test does not approve requests or confirm that the MFA policy is enabled.
Approved network test
Each approval permits one thirty-second outbound TCP 443 block for IntercepturNetworkProbe.exe only. It does not enable general protection. Completion is reported by the device.
No network test requests.
Email protection & data loss
Mailbox not connected · Protection inactive
Import email metadata for local assessment. No mailbox is accessed, attachments are not scanned, and messages are not blocked or quarantined. Imported records stay in this page until cleared, access is rechecked, or you sign out.
No email events loaded.
Import format
Use an object with an emails array (up to 500 records). Each record requires id, timestamp with timezone, endpoint, subject, sender, attachments and urls arrays, and authentication (pass, fail or unknown). replyTo is optional. Only metadata is supported.
Authorization policy simulator
Explore the original proposed change window and narrow service-role exceptions. Simulation only: no policy is saved, no approval is sent, and no endpoint changes.
No simulation evaluated.
Flagged email and bulk encryption deny first. Verified backup/database service exceptions apply only to their matching operation. Other requests outside 06:00–18:00 deny; daytime requests require authorization. These rules are illustrative and are not enforced.
Related data-protection findings
Email-to-endpoint correlation is not connected in this portal. Snapshot receipts alone cannot establish a relationship to an email. Review trusted gateway and endpoint evidence before responding.
Endpoint deployment
Windows pilot · Managed installer not available
Prepare a test computer with the Interceptur team, enroll it, and verify its reporting evidence. Enrollment and reporting do not install or activate kernel protection.
- Use the team-supplied Windows enrollment tools on the intended test computer.
- Open Endpoints to create a private, one-use enrollment code. Enter it only in the computer’s enrollment prompt.
- Verify the device name and enrollment record, then confirm a fresh snapshot appears.
- Review access expiration and arrange renewal. Enrollment is temporary and renewal is not automatic.
Protection readiness
Kernel driver signing, compatibility, recovery and enforcement validation remain separate lab work. This portal cannot verify that a driver is loaded or protecting files.
Windows Server and Linux protection have not been validated here. No installation or security-setting changes can be started from this page.
Findings to investigate
Endpoint reporting issues and reported file-inspection rule matches. These are review signals, not confirmed attacks or evidence of active blocking.
No findings available.
Outbound protection
Automatic transfer interception is not active.
Review the existing endpoint-reported preparation requests below. File-review verification alone does not authorize encryption. Where configured, a separate authenticated action can authorize one synthetic encrypted copy; it does not authorize delivery or protect every outbound transfer.
Country restrictions and authorized-IP exceptions are not connected to endpoint enforcement in this workspace. No automatic encryption or release policy can be activated here.
Encryption preparation requests
Requests refer to recent device inspection reports and expire after ten minutes. They do not authorize encryption or block a transfer. Approval verification and recipient setup must be completed before requests can be approved. Existing preparation requests will not become approvals automatically.
No encryption preparation requests received.
Recent workspace activity
Latest snapshot receipts, reported inspections and administrator API access. This is a limited view of retained records, not a complete security audit or a feed of blocked attacks. Times use your browser's local timezone.
No recorded activity available.
AGENT & POLICIES
Data access policies
Define the data and application access your company wants protected.
Draft policies
0Saved for review
Selected folders
0Folder entries across drafts
Application grants
0Proposed access entries
Enforcement
Not activeSaving does not deploy a policy
Choose data for zero-trust protection
Select the folders and access rules your company wants enforced. Saved policies are drafts: kernel enforcement is not available in this build, and saving does not protect files or block transfers.
Intended behavior: deny access unless explicitly authorized, including when authorization is unavailable. Additional MFA approval and emergency access are not implemented here.
No data-protection policies saved.
Workspace overview
APPLICATIONS & PORTS
Reported connections
Review the addresses, ports and process identifiers reported by your endpoints.
TCP connection inventory
Manual, device-reported snapshots of TCP addresses, ports and process IDs. At most 128 rows per device are shown. Snapshots become stale after three minutes and expire after fifteen minutes. Process IDs can be reused. This is not traffic history; traffic blocking is inactive.
No recent TCP inventory received.
Enrolled records
0Records in this company workspace
Need attention
0Revoked, expired, stale or unknown
Draft policies
0Saved proposals, not enforced rules
Protection
InactiveKernel enforcement not verified
Workspace access
Microsoft sign-in and the Interceptur administrator role were verified by the API.
This overview was retrieved from the authenticated server.
DEVICE MANAGEMENT
Endpoints
Manage enrollment and review the latest reporting evidence.
Enrolled records
0Current company view
Snapshots received
0Reporting evidence only
Need attention
0Revoked, expired, stale or unknown
Protection
InactiveKernel enforcement not verified
Windows test endpoints
One-use enrollment codes last ten minutes. Device access lasts 24 hours and can be revoked here. Each device shows its access expiration below. Renewal is not automatic; contact your administrator to arrange fresh enrollment after expiry. Snapshot receipt does not prove device health or active protection.
- On the Windows computer, open Settings → System → About and find its device name.
- Enter that name below and create a private enrollment code.
- Use the code in the local Interceptur enrollment prompt on that computer, then refresh the device list here.
Use the enrollment tools supplied by the Interceptur team. An agent installer is not available from this portal yet. Contact the team if the computer has not been prepared.
No test endpoints enrolled.
File inspection pilot
Endpoint-reported results from selected synthetic UTF-8 text files. Only filenames, hashes, sizes and rule identifiers are uploaded. No file contents are uploaded. A missing match does not establish that a file is safe. Enforcement is inactive.
No inspection reports received.
Recent administrator access
Server-recorded API access checks for your organization. Account identifiers are shown; these are not the full Microsoft sign-in logs.
No access events recorded.
Pilot environment · Endpoint protection is not activated by signing in.