Tipos de acción
Each finding can include a human runbook, a ticket template, a PR suggestion, and a safe automated plan when the finding context supports it.
Política de aprobación
Tenant admins control whether automated actions are blocked, require approval, or can complete immediately for low-risk workflows.
Seguimiento de actividad
Every workflow step is linked back to the originating finding so teams can see recommendation creation, approval, status sync, and completion in one place.
54 runbooks mantenidos
Every workspace automatically receives BlackShield's immutable response library. Platform procedures stay current, while your custom runbooks remain separately editable.
Flujo de operador recomendado
1. Elija la ruta de remediación correcta
Start from surface status or the alert queue, drill into the exact open findings for that repository, cluster, host, or cloud account, then choose the runbook, ticket, PR, or automated plan that matches the change risk.
2. Establezca expectativas de aprobación desde el principio
Use `manual only` for sensitive environments, `approval required` when automation is allowed but must be reviewed, and `auto approve` for lower-risk safe plans.
3. Sincronizar el estado con la evidencia
Update the remediation action with completion, failure, and external reference data so the workflow remains useful to engineering, audit, and leadership reporting.
4. Mantenga clara la propiedad
Link a finding to a locked BlackShield runbook or a tenant-owned custom runbook. Saving action steps and AI generation always produce custom content; managed procedures are never overwritten.
que bien se ve
- Cada hallazgo abierto tiene un propietario visible y una siguiente acción recomendada.
- La corrección automatizada sigue la política del inquilino en lugar de pasar por alto la aprobación.
- El historial del flujo de trabajo explica quién activó, aprobó o sincronizó cada acción.
- Los runbooks de BlackShield aparecen automáticamente y un inquilino no puede editarlos ni ocultarlos.