Synthetic data & simulated integrations. Every incident, host, identity, indicator and detection source on this page is fabricated for portfolio demonstration. There is no live ServiceNow instance, SIEM, EDR or identity provider connected, and this project is not affiliated with or endorsed by ServiceNow.
Metrics & Reporting
Program reporting
All figures are recomputed from the fixture set on every render, so the numbers here always agree with the incident pages.
Incidents
8
8 open
Mean confidence
80%
Mean age
4h 30m
Automation coverage
63%
Priority mix
- P12
- P21
- P35
- P40
Category distribution
- credential abuse1
- data exfiltration1
- insider risk1
- cloud misconfiguration1
- malware1
- vulnerable asset1
- phishing1
- denial of service1
SLA attainment
Counts across all incidents in the fixture set.
| Stage | On track | At risk | Breached |
|---|---|---|---|
| ack | 1 | 0 | 7 |
| contain | 4 | 1 | 3 |
| resolve | 6 | 1 | 1 |
Human-in-the-loop
Automation is measured against approval activity, not in isolation.
Simulated automated actions
7
Recorded human approvals
3
Tasks awaiting approval
5